Commit Graph

812 Commits

Author SHA1 Message Date
Mark Andrews
ff5f5adff4 3014. [bug] Fix the zonechecks system test to match expected
behaviour for 9.6 and to fail on error. [RT #22905]
2011-02-03 07:50:56 +00:00
Mark Andrews
208360cc77 3012. [bug] Remove DNSKEY TTL change pairs before generating
signing records for any remaining DNSKEY changes.
                        [RT #22590]
2011-02-03 07:20:54 +00:00
Automatic Updater
90ba68da1c update copyright notice 2010-12-18 23:46:09 +00:00
Evan Hunt
995d8d0bcc Added files to clean.sh scripts that have been left around after tests run.
Skipping the ticket/review steps because the change is trivial.
2010-12-18 02:23:31 +00:00
Mark Andrews
12fd7da162 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 01:12:55 +00:00
Automatic Updater
611c670c11 update copyright notice 2010-12-03 23:45:47 +00:00
Mark Andrews
4df431ecde 2976. [bug] named could die on exit after negotiating a GSS-TSIG
key.  [RT #3415]
2010-12-02 23:40:28 +00:00
Automatic Updater
fff1bf76bd update copyright notice 2010-11-17 23:45:46 +00:00
Mark Andrews
981fd91347 convert to 9.6 syntax 2010-11-17 10:43:14 +00:00
Mark Andrews
d55c88b826 covert to 9.6 syntax 2010-11-17 10:31:32 +00:00
Mark Andrews
7e3fa21d40 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 07:35:03 +00:00
Shawn Routhier
06f96028a5 Fix acl type processing so that allow-query works in options and view
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
2010-11-16 02:43:35 +00:00
Mark Andrews
c1e4f06f90 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 02:23:44 +00:00
Mark Andrews
aef0c1f8ee simplify grep 2010-09-15 23:25:42 +00:00
Evan Hunt
06bf7065a9 The "resolver" test was failing on systems with old versions of "grep". 2010-09-15 15:45:41 +00:00
Automatic Updater
ce26def095 update copyright notice 2010-09-15 12:37:35 +00:00
Mark Andrews
af6b256444 2960. [func] Check that named accepts non-authoritative answers.
[RT #21594]
2010-09-15 12:16:51 +00:00
Mark Andrews
3f816cf4dd 2959. [func] Check that named starts with a missing masterfile.
[RT #22076]
2010-09-15 03:47:08 +00:00
Mark Andrews
79575d8694 dnssec-keygen doesn't support -q in 9.6.x 2010-09-07 02:04:44 +00:00
Mark Andrews
5122ec7d9e 2951. [bug] named failed to generate a correct signed response
in a optout, delegation only zone with no secure
                        delegations. [RT #22007]
2010-09-07 01:12:24 +00:00
Automatic Updater
c529809be6 update copyright notice 2010-08-17 23:45:47 +00:00
Mark Andrews
e78a476f63 update default id range to match that used (1..7) 2010-08-17 04:09:44 +00:00
Mark Andrews
f2d91bd3e5 2941. [bug] sdb and sdlz (dlz's zone database) failed to support
DNAME at the zone apex.  [RT #21610]
2010-08-16 05:22:12 +00:00
Automatic Updater
a5c217ded6 update copyright notice 2010-08-13 23:45:52 +00:00
Mark Andrews
3a3a245419 2940. [func] Check that named successfully skips NSEC3 records
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
2010-08-13 07:21:39 +00:00
Evan Hunt
54b4dd1a76 2932. [cleanup] Corrected a numbering error in the "dnssec" test.
[RT #21597]
2010-08-09 22:35:18 +00:00
Tatuya JINMEI 神明達哉
e9f69b0324 2931. [bug] Temporarily and partially disable change 2864
because it would cause inifinite attempts of RRSIG
			queries.  This is an urgent care fix; we'll
			revisit the issue and complete the fix later.
			[RT #21710]
2010-07-15 01:30:33 +00:00
Mark Andrews
040a2526e7 check that we have non-cachable answers to test against
match the dig.out.ns#.$n to the nameserver
2010-06-28 01:38:44 +00:00
Automatic Updater
a4d4e19af8 update copyright notice 2010-06-26 23:45:54 +00:00
Mark Andrews
bc3343cc10 2925. [bug] Named failed to accept uncachable negative responses
from insecure zones. [RT# 21555]
2010-06-25 23:57:04 +00:00
Automatic Updater
b937be4f23 update copyright notice 2010-06-11 23:45:49 +00:00
Mark Andrews
ee9ef9347d 2916. [func] Add framework to use IPv6 in tests.
fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
2010-06-10 06:22:02 +00:00
cvs2git
c06cf1fd88 This commit was manufactured by cvs2git to create branch 'v9_6'. 2010-06-10 06:19:54 +00:00
Mark Andrews
9a56f03c4c 2916. [func] Add framework to use IPv6 in tests.
fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
2010-06-10 06:19:52 +00:00
Automatic Updater
ad0471f93b update copyright notice 2010-06-08 23:50:24 +00:00
Mark Andrews
e24ccb512c 2914. [bug] Make the "autosign" system test more portable.
[RT #20997]
2010-06-07 04:45:43 +00:00
Mark Andrews
63af1a646a 2913. [func] Add pkcs#11 system tests. [RT #20784] 2010-06-07 03:42:37 +00:00
Mark Andrews
5ee4d3f2ee iterations is -H 2010-06-04 00:04:39 +00:00
Mark Andrews
cc8df25ebb iterations is -H 2010-06-04 00:03:12 +00:00
Automatic Updater
6e13ffa218 update copyright notice 2010-06-03 23:51:05 +00:00
Mark Andrews
81d22a38f0 specify NSEC3 iterations 2010-06-03 21:45:31 +00:00
Mark Andrews
e74c3a0f59 specify NSEC3 iterations 2010-06-03 21:44:49 +00:00
Mark Andrews
777b9cd0b7 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 06:32:19 +00:00
cvs2git
8dea42c089 This commit was manufactured by cvs2git to create branch 'v9_6'. 2010-06-03 06:29:05 +00:00
Mark Andrews
10acc63770 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 06:29:03 +00:00
Mark Andrews
463e599d1e 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 03:38:53 +00:00
Mark Andrews
675cc80975 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 03:13:32 +00:00
Automatic Updater
a2d2fc17b0 update copyright notice 2010-06-02 01:28:40 +00:00
Mark Andrews
a27bbd21cf 2909. [bug] named-checkzone -p could die if "update-policy local;"
was specified in named.conf. [RT #21416]
2010-06-02 01:07:47 +00:00
Automatic Updater
248b9ab0b0 update copyright notice 2010-05-27 23:51:08 +00:00