Commit Graph

51 Commits

Author SHA1 Message Date
Mark Andrews
33bcefcf23 copyright 2004-08-19 04:41:13 +00:00
Mark Andrews
44058ba2e1 1625. [bug] named failed to load/transfer RFC2535 signed zones
which contained CNAMES. [RT# 11237]
2004-05-05 01:32:17 +00:00
Mark Andrews
69b34284dc 1600. [bug] Duplicate zone pre-load checks were not case
insensitive.

1599.   [bug]           Fix memory leak on error path when checking named.conf.

1598.   [func]          Specify that certain parts of the namespace must
                        be secure (dnssec-must-be-secure).
2004-04-15 23:56:34 +00:00
Mark Andrews
5c798d7ba3 add 2004-03-15 02:56:04 +00:00
Mark Andrews
6790f1d962 1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable
2004-03-10 02:55:59 +00:00
Mark Andrews
c3138c6928 doc regen / copyrights 2004-03-08 04:04:47 +00:00
Mark Andrews
a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews
a09e55f624 update copyrights 2004-03-06 10:22:54 +00:00
cvs2git
a42d030f09 This commit was manufactured by cvs2git to create branch 'v9_3'. 2004-03-05 05:14:22 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
821644d49b 1574. [bug] Don't attempt to open the controls socket(s) when
running tests. [RT #9091]
2004-03-02 02:01:41 +00:00
Mark Andrews
6bd0e050ee 1574. [bug] Don't attempt to open the controls socket(s) when
running tests. [RT #9091]
2004-03-02 01:59:49 +00:00
Mark Andrews
89783da064 1581. [func] Disable DNSSEC support by default. To enable
DNSSEC specify "enable-dnssec yes;" in named.conf.
2004-02-17 03:40:23 +00:00
Mark Andrews
841ed46de5 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.
2004-01-15 04:09:17 +00:00
Mark Andrews
35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
2004-01-14 02:06:51 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews
0f042c7c44 - improves tests of negative insecurity proofs, including tests for the
SOA TTL 0 hack.
- adds +noauth to a few invocations of dig where the authority section is
  not important.
- removes the bogus first half of the dynamic zone test, which didn't
  do anything other than make the test suite fail if run twice.
- fixed the fact that the keyless.example zone wasn't being securely
  delegated.
bwelling
2002-07-19 06:20:24 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Brian Wellington
64ea670052 the dynamic zone test wasn't working as expected since the child zone wasn't
securely delegated.
2002-02-06 03:28:59 +00:00
Andreas Gustafsson
473ca0bf8c Added RT #2399 regression test 2002-01-22 22:27:29 +00:00
Andreas Gustafsson
e4b5f088ca Added RT #1763 regression test 2001-09-19 21:19:52 +00:00
Brian Wellington
81b172466c *** empty log message *** 2001-09-17 17:47:20 +00:00
Brian Wellington
a41ab607a4 Test that validation of ANY queries works. Also add data to be used for
CNAME/DNAME tests, but not the tests yet since they fail.
2001-02-20 18:33:50 +00:00
Andreas Gustafsson
1988fd60fa share the root.hint file among most of the system tests instead of having multiple identical copies 2001-01-11 20:44:21 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Andreas Gustafsson
f333ea9bdd added notify-source options 2000-11-28 19:07:00 +00:00
Brian Wellington
2c46670fb4 ignore stdout from the dnssec tools 2000-11-22 20:37:50 +00:00
Andreas Gustafsson
4f37905cc3 added 'transfer-source' directives to all system test named.conf
files, so that tests succeed while transfer-source is still being (ab)used as
the notify source address
2000-11-22 01:34:19 +00:00
Andreas Gustafsson
5a77e9620a make spacing in listen-on-v6 option consistent with other options 2000-11-21 23:50:10 +00:00
David Lawrence
40f53fa8d9 Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts.  Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
Brian Wellington
529a6b5224 358. [cleanup] Rename the intermediate files used by the dnssec
programs.
2000-07-31 15:28:21 +00:00
David Lawrence
15a4474541 word wrap copyright notice at column 70 2000-07-27 09:55:03 +00:00
David Lawrence
9c3531d72a add RCS id string 2000-06-22 22:00:42 +00:00
David Lawrence
d0be1e954b update_copyrights 2000-06-22 01:01:45 +00:00
Michael Sawyer
5a5c480994 .cvsignore files 2000-06-21 01:31:54 +00:00
Brian Wellington
126c8d0c08 Add listen-on-v6 {none;}; , since without it, v6 was binding v4 mapped
sockets and causing failures on some platforms
2000-06-13 22:45:20 +00:00
Michael Sawyer
ee6fe1d197 Remove port option from query-sources 2000-06-13 21:49:56 +00:00
Michael Sawyer
5458e9245c Add query-source everywhere
Fix out output
2000-06-13 00:54:53 +00:00
Brian Wellington
8f239354a0 Added missing zone files 2000-06-12 22:55:52 +00:00
Michael Sawyer
e6e0dadd30 Match output format to what scripts expect 2000-06-12 20:32:47 +00:00
Brian Wellington
5006de6531 - Added query-source to each server.
- Added an insecure child of a secure parent (insecure.secure.example)
- Added a privately secure child of a secure parent (private.secure.example)
2000-06-10 01:45:32 +00:00
Andreas Gustafsson
ca793cbfcf run test DNS on port 5300 2000-06-06 23:41:55 +00:00
Andreas Gustafsson
813d6c9781 make conf.sh usable from subdirectory test scripts;
use conf.sh from subdirectory test scripts
2000-06-05 19:36:44 +00:00
Michael Sawyer
d349843282 Add copyright entries 2000-05-19 22:45:47 +00:00
Michael Sawyer
a92428ecb8 Sweeping changes to system test suite 2000-05-18 22:49:29 +00:00
Michael Sawyer
78ad076390 Fix typo in ifconfig script and add dnssec clean script 2000-05-17 23:15:32 +00:00
Michael Sawyer
d98372394f Addition of test suite. 2000-05-17 22:10:42 +00:00
Andreas Gustafsson
b04adaa782 simplified 2000-05-16 01:24:50 +00:00
Andreas Gustafsson
02b4e9aef2 be compatible with new dnssec tool command line argument
usage; bug fixes
2000-05-16 01:22:45 +00:00