Commit Graph

4948 Commits

Author SHA1 Message Date
Automatic Updater
0da8837d0e update copyright notice 2009-07-11 23:47:17 +00:00
Mark Andrews
a416993543 2920. [bug] Delay thawing the zone until the reload of it has
completed successfully.  [RT #19750]
2009-07-11 04:23:54 +00:00
Mark Andrews
be30c7f74e 2618. [bug] The sdb and sdlz db_interator_seek() methods could
loop infinitely. [RT #19847]
2009-06-26 06:25:44 +00:00
Automatic Updater
d84b71a0a9 update copyright notice 2009-06-23 00:19:34 +00:00
Automatic Updater
6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews
e6be77a26c 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-22 05:05:01 +00:00
Mark Andrews
fb1c018ecc 2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
[RT #19626]
2009-06-22 03:53:05 +00:00
Mark Andrews
8286a91388 missing line breaks 2009-06-17 04:53:57 +00:00
Automatic Updater
4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt
4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Mark Andrews
22b2741ede dns_dnssec_selfsigns 2009-06-04 04:58:54 +00:00
Mark Andrews
a42b13d33c 9.6.0 2009-06-04 04:02:41 +00:00
Mark Andrews
442d6ced85 9.6.0 2009-06-04 04:00:44 +00:00
Automatic Updater
c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews
5fa0c17a78 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:41:54 +00:00
Mark Andrews
64b01fda14 2607. [bug] named could incorrectly delete NSEC3 records for
empty nodes when processing a update request.
                        [RT #19749]
2009-06-04 01:47:41 +00:00
Automatic Updater
2c0dd6a4a0 update copyright notice 2009-06-02 23:47:13 +00:00
Mark Andrews
ba58299f9f 2605. [bug] Accept DS responses from delegation only zones.
[RT # 19296]
2009-06-02 05:56:27 +00:00
Automatic Updater
cb1aa919c6 update copyright notice 2009-05-11 02:38:03 +00:00
Mark Andrews
d6b57bc73c spelling 2009-05-11 02:29:12 +00:00
Mark Andrews
a6ddec4212 2599. [bug] Address rapid memory growth when validation fails.
[RT #19654]
2009-05-11 02:25:11 +00:00
Automatic Updater
846e500945 update copyright notice 2009-05-07 23:47:12 +00:00
Mark Andrews
568a4d27a5 2597. [bug] Handle a validation failure with a insecure delegation
from a NSEC3 signed master/slave zone.  [RT #19464]
2009-05-07 02:39:42 +00:00
Tatuya JINMEI 神明達哉
0e8a52d67d 2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
long, leading to inefficient memory usage or rejecting
			newer cache entries in the worst case. [RT #19563]
2009-05-06 23:34:30 +00:00
Tatuya JINMEI 神明達哉
be63967070 2588. [bug] SO_REUSEADDR could be set unconditionally after failure
of bind(2) call.  This should be rare and mostly
			harmless, but may cause interference with other
			processes that happen to use the same port. [RT #19642]
2009-04-28 21:39:45 +00:00
Automatic Updater
4f732afd9f update copyright notice 2009-04-21 23:47:18 +00:00
Tatuya JINMEI 神明達哉
12e4b8f53f 2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
or SDB. [RT #19577]
2009-04-21 00:42:21 +00:00
Mark Andrews
92d603dee6 9.6.1rc1 2009-04-08 06:55:37 +00:00
Tatuya JINMEI 神明達哉
3e132fc2dd wording fix for cpp error message (rt #19569) 2009-04-07 02:50:11 +00:00
Mark Andrews
83a781a5cb 2582. [bug] Don't emit warning log message when we attempt to
remove non-existant journal. [RT #19516]
2009-03-26 22:57:07 +00:00
Automatic Updater
bf02e7fc0e update copyright notice 2009-03-17 23:47:29 +00:00
Mark Andrews
906e5d9a44 2579. [bug] DNSSEC lookaside validation failed to handle unknown
algorithms. [RT #19479]
2009-03-17 01:37:07 +00:00
Mark Andrews
caf3ffe905 9.6.1b1 2009-03-13 05:23:35 +00:00
Mark Andrews
50b107e596 2576. [bug] NSEC record were not being correctly signed when
a zone transitions from insecure to secure.
                        Handle such incorrectly signed zones. [RT #19114]
2009-03-13 01:38:51 +00:00
Mark Andrews
7808280b34 2573. [bug] Replacing a non-CNAME record with a CNAME record in a
single transaction in a signed zone failed. [RT #19397]
2009-03-05 04:57:40 +00:00
Automatic Updater
d76a60502e update copyright notice 2009-03-02 23:47:11 +00:00
Mark Andrews
c5daf291bc 2567. [bug] dst__privstruct_writefile() could miss write errors.
write_public_key() could miss write errors.
                        dnssec-dsfromkey could miss write errors.
                        [RT #19360]
2009-03-02 02:56:13 +00:00
Mark Andrews
b7e19163d0 2566. [bug] dst__privstruct_writefile() could miss write errors.
[RT #19360]
2009-03-02 02:00:34 +00:00
Mark Andrews
76ff26a403 2564. [bug] Only take EDNS fallback steps when processing timeouts.
[RT #19405]
2009-02-27 23:05:22 +00:00
Mark Andrews
8e7dd3dc3b 2564. [bug] 'named' was treating a TCP retry as a timeout when
deciding whether to perform a EDNS fallback step.
                        [RT #19393]
2009-02-25 22:47:12 +00:00
Automatic Updater
8f2f39c7de update copyright notice 2009-02-18 23:47:12 +00:00
Mark Andrews
3ce45a6410 2660. [bug] Add #include <config.h> to iptable.c. [RT #18258] 2009-02-18 05:41:32 +00:00
Mark Andrews
9c19f7fb52 silence 'Different types treated as unsigned for <=.' warning 2009-02-17 05:54:12 +00:00
Automatic Updater
b996c77e49 update copyright notice 2009-02-16 23:47:15 +00:00
Mark Andrews
5c4a9f33ca 2556. [cleanup] PCI compliance:
* new libisc log module file
                        * isc_dir_chroot() now also changes the working
                          directory to "/".
                        * additional INSISTs
                        * additional logging when files can't be removed.
2009-02-16 02:04:06 +00:00
Mark Andrews
19f6ed9078 2503. [port] linux: improve compatibility with Linux Standard
Base. [RT #18793]
2009-02-16 01:03:53 +00:00
Mark Andrews
1f67b99159 2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
[RT #18885]
2009-02-16 00:29:27 +00:00
Mark Andrews
d68222d82d 2554. [bug] Validation of uppercase queries from NSEC3 zones could
fail. [RT #19297]
2009-02-15 23:47:49 +00:00
Mark Andrews
76da0b0d88 2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291] 2009-02-15 23:38:31 +00:00
Mark Andrews
5afab04e30 2552. [bug] zero-no-soa-ttl-cache was not being honoured.
[RT #19340]
2009-02-15 23:16:42 +00:00