ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
24,150 Commits 589 Branches 805 Tags
f6b7ff72808bb8b44daa06bb45fad18c2964a6df
Commit Graph
2981 Commits
Author SHA1 Message Date
Mark Andrews 11221a5504 4889. [func] Warn about the use of old root keys without the new 
root key being present.  Warn about dlv.isc.org's
                        key being present. Warn about both managed and
                        trusted root keys being present. [RT #43670]

(cherry picked from commit baef0ca988)
 2018-02-09 12:16:30 +11:00
Tinderbox User 0cba4c94d4 update copyright notice / whitespace 2018-02-07 23:52:52 +00:00
Mark Andrews 274b1ae55a 4885. [security] update-policy rules that otherwise ignore the name 
field now require that it be set to "." to ensure
                        that any type list present is properly interpreted.
                        [RT #47126]

(cherry picked from commit ec771bbdc8)
 2018-02-07 13:51:05 +11:00
Tinderbox User 0478b1d205 update copyright notice / whitespace 2018-01-22 23:49:47 +00:00
Mukund Sivaraman ef838436ef Don't permit loading meta RR types such as TKEY from master files (#47009) 
(cherry picked from commit 8a4ce20172)
(cherry picked from commit c8eb726046)
(cherry picked from commit 6fb3db01ac)
(cherry picked from commit 96456c0834)
 2018-01-22 15:03:31 +05:30
Tinderbox User 8d5a01a868 update copyright notice / whitespace 2018-01-13 23:50:30 +00:00
Mark Andrews a8b6d87ebe ret was not being set to 1 on dig error. [RT #46990] 
(cherry picked from commit 69c4c987f6)
 2018-01-13 13:18:15 +11:00
Mark Andrews 7210904eb9 backport support for Windows differences 2017-12-13 17:51:29 +11:00
Mark Andrews 26facb12cb test for key != NULL on error path 
(cherry picked from commit 9bad78cbc2)
 2017-12-13 15:13:30 +11:00
Mark Andrews 93b42ff4cc 4846. [test] Adjust timing values in runtime system test. Address 
named.pid removal races in runtime system test.
                        [RT #46800]

(cherry picked from commit c67180f09b)
(cherry picked from commit 0f14b04132)
(cherry picked from commit 265ba7d08b)
 2017-12-13 10:38:48 +11:00
Mark Andrews 60a1305469 increment test number 
(cherry picked from commit e5c2cfdbf9)
 2017-12-08 14:51:37 +11:00
Tinderbox User 92c1063230 update copyright notice / whitespace 2017-12-06 23:48:04 +00:00
Mark Andrews 4a51a6fd40 4840. [test] Add tests to cover fallback to using ZSK on inactive 
KSK. [RT #46787]

(cherry picked from commit 32d09cd7e0)
(cherry picked from commit 0d6328ce5f)
(cherry picked from commit 51f13bcd2f)
 2017-12-06 20:50:56 +11:00
Tinderbox User d114b94481 update copyright notice / whitespace 2017-12-05 23:48:43 +00:00
Curtis Blackburn 60b4b5ead3 clarify "stage 1" and "stage 2" in autosign test 2017-12-05 10:05:21 -08:00
Mark Andrews 02324ce60a set the DNSKEY deletion time to now+5 once we got all the zones into their initial state 
(cherry picked from commit ecafa2ae50)
(cherry picked from commit 15057131d5)
 2017-12-05 21:43:13 +11:00
Mark Andrews 124a44db43 use 9.11 and earlier syntax for dnssec-keygen 
(cherry picked from commit 7f31784c52)
 2017-12-05 20:44:20 +11:00
Mark Andrews 3666b9bfb6 4839. [bug] zone.c:zone_sign was not properly determining 
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46774]

(cherry picked from commit 00f5ea91cf)
 2017-12-05 16:12:05 +11:00
Tinderbox User 55da37ecc7 update copyright notice / whitespace 2017-12-04 23:51:02 +00:00
Evan Hunt 36794f5653 [v9_9] fix test descriptions 2017-12-04 15:48:09 -08:00
Mark Andrews 2c0a365200 4838. [bug] zone.c:add_sigs was not properly determining 
if there were active KSK and ZSK keys for
                        a algorithm when update-check-ksk is true
                        (default) leaving records unsigned with one or
                        more DNSKEY algorithms. [RT #46754]

(cherry picked from commit 6fa2a0691e)
(cherry picked from commit 677f507de7)
 2017-12-05 09:44:49 +11:00
Tinderbox User bd9577293b update copyright notice / whitespace 2017-12-03 23:47:49 +00:00
Mark Andrews 5ed673c0d2 4837. [bug] dns_update_signatures{inc} (add_sigs) was not 
properly determining if there were active KSK and
                        ZSK keys for a algorithm when update-check-ksk is
                        true (default) leaving records unsigned. [RT #46743]

(cherry picked from commit 196e01da5f)
(cherry picked from commit bf459d24a1)
(cherry picked from commit 5623f65cc4)
 2017-12-04 10:09:45 +11:00
Tinderbox User 03674299c7 update copyright notice / whitespace 2017-11-30 23:50:30 +00:00
Evan Hunt 17122341fe [v9_9] fix "allow-transfer" inheritance and clean up ACL configuration 
4836.	[bug]		Zones created using "rndc addzone" could
			temporarily fail to inherit an "allow-transfer"
			ACL that had been configured in the options
			statement. [RT #46603]

(cherry picked from commit e197a2bd15)
(cherry picked from commit f53e0bda46)
(cherry picked from commit 9dfff4e378)
 2017-11-30 13:34:53 -08:00
Tinderbox User 230916c184 update copyright notice / whitespace 2017-11-27 23:50:30 +00:00
Michał Kępień a59eb10b23 [v9_9] Stabilize nsupdate system test [RT #46673] 
(cherry picked from commit 00ff44c7c2)
 2017-11-27 10:16:09 +01:00
Tinderbox User f2f3b68ac7 update copyright notice / whitespace 2017-11-21 23:47:58 +00:00
Michał Kępień bbfa83da40 [v9_9] Refactor reclimit system test 
4823.	[test]		Refactor reclimit system test to improve its
			reliability and speed. [RT #46632]

(cherry picked from commit 1fd4803e84)
 2017-11-21 10:34:03 +01:00
Tinderbox User 7fed20ed8f update copyright notice / whitespace 2017-11-16 23:48:10 +00:00
Michał Kępień a3b4977931 [v9_9] Stabilize logfileconfig system test 
4818.	[test]		The logfileconfig system test could intermittently
			report false negatives on some platforms. [RT #46615]

(cherry picked from commit 169ce30bf7)
 2017-11-16 08:17:18 +01:00
Tinderbox User ec547a9877 update copyright notice / whitespace 2017-11-08 23:48:10 +00:00
Michał Kępień 14e1eac55c [v9_9] Do not NOTIFY back the master view from slave views in notify system test 
This prevents a Linux kernel bug discussed in RT #32355 from being
triggered and thus makes "checking notify to multiple views using tsig"
stable.

(cherry picked from commit 27bf48327c)
 2017-11-08 09:22:31 +01:00
Mark Andrews 38400d2bec 4810. [test] The chain system test failed if the IPv6 interfaces 
were not configured. [RT #46508]

(cherry picked from commit c652213857)
 2017-11-08 10:18:47 +11:00
Mark Andrews 3b9332a20d 4804. [port] win32: access() does not work on directories as 
required by POSIX.  Supply a alternative in
                        isc_file_isdirwritable. [RT #46394]
 2017-11-01 09:47:52 +11:00
Evan Hunt 5f0cc4be38 [v9_9] copyrights 2017-10-29 16:44:31 -07:00
Mark Andrews e1dd822fc3 number tests 2017-10-30 08:32:18 +11:00
Mark Andrews 24592f9f78 Add system tests and remove redundent logging from: 
4801.   [func]          'dnssec-lookaside auto;' and 'dnssec-lookaside .
                        trust-anchor dlv.isc.org;' now elicit warnings rather
                        than being fatal configuration errors. [RT #46410]

(cherry picked from commit f5e1b555c5)
 2017-10-30 08:20:51 +11:00
Evan Hunt dcaf355f00 [v9_9] log when update-policy local gets a key match from a remote host 
4788.	[cleanup]	When using "update-policy local", log a warning
			when an update matching the session key is received
			from a remote host. [RT #46213]

- this completes change #4762.
 2017-10-25 01:09:41 -07:00
Mark Andrews 42f1b7e3e8 read dig.out.ns3.test$n rather than dig.out.ns2.test$n 
(cherry picked from commit 80739779fc)
 2017-10-25 15:03:28 +11:00
Tinderbox User c53d3336d6 update copyright notice / whitespace 2017-10-24 23:53:22 +00:00
Mark Andrews 8221d208a7 4783. [test] dnssec: 'check that NOTIFY is sent at the end of 
NSEC3 chain generation failed' required more time
                        on some machines for the IXFR to complete. [RT #46388]

(cherry picked from commit 969d923536)
 2017-10-25 09:22:28 +11:00
Mark Andrews 6455eec8e2 remove redundent reconfig; number tests 2017-10-24 14:46:27 +11:00
Evan Hunt 0a5b0a447e [v9_9] omit NS from authority section if it was in answer 
4780.	[bug]		When answering ANY queries, don't include the NS
			RRset in the authority section if it was already
			in the answer section. [RT #44543]

(cherry picked from commit b7b76d6b85)
(cherry picked from commit 13435af49a)
 2017-10-23 19:38:29 -07:00
Mark Andrews ab342443aa report if named.run or named.memstats not removed after successful test 
(cherry picked from commit 5bead588b7)
 2017-10-24 12:48:51 +11:00
Evan Hunt 9c84f65183 [v9_9] test for Net::DNS::Nameserver in prereq.sh 
(cherry picked from commit 475c51cce0)
 2017-10-21 00:29:27 -07:00
Mark Andrews 1a26741d87 include "../mkd"; as we have already changed working directory 
(cherry picked from commit b71747f765)
 2017-10-20 11:50:06 +11:00
Evan Hunt 9ad9f7694d [v9_9] skip managed-keys reconfig tests in runtime if no crypto [RT #46327] 
(cherry picked from commit b093b684a6)
(cherry picked from commit b5c1d2bc01)
 2017-10-18 22:29:21 -07:00
Evan Hunt eb66afdde0 [v9_9] copyrights 2017-10-18 17:34:15 -07:00
Evan Hunt 8b35d08f70 [v9_9] require writable managed keys directory 
4769.	[bug]		Enforce the requirement that the managed keys
			directory (specified by "managed-keys-directory",
			and defaulting to the working directory if not
			specified) must be writable. [RT #46077]

(cherry picked from commit 56e30ebae6)
(cherry picked from commit b6b2b0b9b5)
 2017-10-17 21:39:05 -07:00