Commit Graph

5523 Commits

Author SHA1 Message Date
Evan Hunt
f662d5484e [v9_12] automatically generate named.conf grammars for the ARM
4873.	[doc]		Grammars for named.conf included in the ARM are now
			automatically generated by the configuration parser
			itself.  As a side effect of the work needed to
			separate zone type grammars from each other, this
			also makes checking of zone statements in
			named-checkconf more correct and consistent.
			[RT #36957]

(cherry picked from commit 129c4414cb)
2018-01-22 11:08:49 -08:00
Evan Hunt
2aa30a80b1 [v9_12] remove dangling doc reference to the lightweight resolver
(cherry picked from commit 4d6800942c)
2018-01-22 10:58:43 -08:00
Tinderbox User
747bceba00 regen v9_12 2018-01-19 01:14:38 +00:00
Tinderbox User
7e3fc6aa03 update copyright notice / whitespace 2018-01-11 23:46:21 +00:00
Evan Hunt
a847e6d035 [v9_12] go three section levels deep in the ARM table of contents
(cherry picked from commit 0c061ce614)
2018-01-11 13:41:59 -08:00
Tinderbox User
53a5106d21 regen v9_12 2018-01-06 01:16:38 +00:00
Tinderbox User
77caf49c98 update copyright notice / whitespace 2018-01-04 23:45:53 +00:00
Evan Hunt
1da3a1fc67 [v9_12] typo 2018-01-03 19:30:05 -08:00
Evan Hunt
2b51d5874c [v9_12] block validator deadlock and prevent use-after-free
4859.	[bug]		A loop was possible when attempting to validate
			unsigned CNAME responses from secure zones;
			this caused a delay in returning SERVFAIL and
			also increased the chances of encountering
			CVE-2017-3145. [RT #46839]

4858.	[security]	Addresses could be referenced after being freed
			in resolver.c, causing an assertion failure.
			(CVE-2017-3145) [RT #46839]
2018-01-03 19:18:29 -08:00
Tinderbox User
67b7334b62 regen v9_12 2017-12-20 01:15:42 +00:00
Tinderbox User
bfb76ec3a4 regen v9_12 2017-12-16 01:18:48 +00:00
Evan Hunt
ef2bfc219c [v9_12] clear release notes so they can be repopulated for 9.12.1 2017-12-15 01:36:26 -08:00
Tinderbox User
67df162ebd regen v9_12 2017-12-15 01:15:23 +00:00
Tinderbox User
e5ac12b76d regen master 2017-12-13 01:08:15 +00:00
Michał Kępień
e8bbb76620 [master] Correct the default value of print-time in ARM 2017-12-12 11:47:18 +01:00
Tinderbox User
71eec55e0d regen master 2017-12-09 01:09:51 +00:00
Evan Hunt
5ea0100639 [master] document "fixedpoint" 2017-12-07 18:59:52 -08:00
Tinderbox User
f9c3aba9b3 regen master 2017-12-06 17:32:49 +00:00
Tinderbox User
7308316d92 regen master 2017-12-06 01:09:54 +00:00
Mark Andrews
77f9623439 add [RT #46774] 2017-12-05 16:14:15 +11:00
Tinderbox User
6074bd498f regen master 2017-12-05 01:08:12 +00:00
Evan Hunt
b695f77533 [master] revised release note 2017-12-04 15:37:09 -08:00
Mark Andrews
9ff34db455 add note for [RT #46743] and [RT #46754] 2017-12-05 09:52:12 +11:00
Tinderbox User
a30f8d214d regenerate 2017-11-30 22:51:12 +00:00
Tinderbox User
0b315a0b25 regen master 2017-11-30 22:46:39 +00:00
Evan Hunt
e197a2bd15 [master] fix "allow-transfer" inheritance and clean up ACL configuration
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]
2017-11-30 12:37:08 -08:00
Tinderbox User
0cba7ca6af regen master 2017-11-09 01:07:39 +00:00
Evan Hunt
f4b2356359 [master] remove extra comma 2017-11-08 09:31:25 -08:00
Tinderbox User
a1aa42b9cd regenerate 2017-11-08 17:28:38 +00:00
Tinderbox User
c999531fa4 regen master 2017-11-08 17:26:53 +00:00
Evan Hunt
00827f59d2 [master] revise incorrect release note 2017-11-08 09:18:29 -08:00
Tinderbox User
a41e41d6a4 regenerate 2017-11-07 21:48:23 +00:00
Tinderbox User
0e29543a3d regen master 2017-11-07 21:42:32 +00:00
Tinderbox User
72ddd51e74 regen master 2017-11-03 01:08:09 +00:00
Evan Hunt
c3d0ccdc8f [master] update logging categories in doc 2017-11-02 12:53:33 -07:00
Tinderbox User
f305a705c4 regenerate 2017-11-02 18:59:07 +00:00
Tinderbox User
490c321e25 regen master 2017-11-02 18:58:45 +00:00
Evan Hunt
e7b53943fe [master] copyrights 2017-11-02 11:50:43 -07:00
Evan Hunt
95dce4e68c [master] clarify doc on zone refresh and expiry 2017-11-01 23:06:20 -07:00
Evan Hunt
3b5718a8c9 [master] removed references to obsolete versions in documentation 2017-11-01 22:19:11 -07:00
Tinderbox User
40298d8bee regen master 2017-11-02 01:09:26 +00:00
Tinderbox User
9b3fc207df regen master 2017-11-01 01:09:07 +00:00
Tinderbox User
4ae8f28711 regen master 2017-10-30 01:08:21 +00:00
Mark Andrews
f5e1b555c5 4801. [func] 'dnssec-lookaside auto;' and 'dnssec-lookaside .
trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]
2017-10-30 07:40:59 +11:00
Tinderbox User
497f3f913e regen master 2017-10-28 01:12:35 +00:00
Evan Hunt
c9f8165a06 [master] tag initializing keys
4798.	[func]		Keys specified in "managed-keys" statements
			are tagged as "initializing" until they have been
			updated by a key refresh query. If initialization
			fails it will be visible from "rndc secroots".
			[RT #46267]
2017-10-27 15:49:44 -07:00
Evan Hunt
1d57d460d4 [master] change rndc-confgen default algorithm
this completes change 4785. the CHANGES note has been revised:

4785.	[func]		The hmac-md5 algorithm is no longer recommended for
			use with RNDC keys.  The default in rndc-confgen
			is now hmac-sha256. [RT #42272]
2017-10-27 10:56:43 -07:00
Evan Hunt
959d294067 [master] remove isc-hmac-fixup
4797.	[func]		Removed "isc-hmac-fixup", as the versions of BIND that
			had the bug it worked around are long past end of
			life. [RT #46411]
2017-10-27 09:56:11 -07:00
Brian Conry
864bc6b56e [master] Increase the maximum TCP keepalive timeout to 65535
4796.	[bug]		Increase the maximum configurable TCP keepalive
			timeout to 65535. [RT #44710]
2017-10-27 14:58:48 +02:00
Evan Hunt
06049b1c6c [master] stats counter for priming queries
4795.	[func]		A new statistics counter has been added to track
			priming queries. [RT #46313]
2017-10-26 21:38:43 -07:00