ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
16,481 Commits 589 Branches 805 Tags
fa9ae9dad2b4eaf6901ffd960faa6af71e7c6b57
Commit Graph

4926 Commits

Author SHA1 Message Date
Mark Andrews
ee73600181 2684. [bug] dnssec-signzone should clean the old NSEC chain when 
signing with NSEC3 and vica versa. [RT #20301]
 2009-09-23 14:06:42 +00:00
Mark Andrews
f2445757f1 2683. [bug] dnssec-signzone should clean out old NSEC3 chains when 
the NSEC3 parameters used to sign the zone change.
                        [RT #20246]
 2009-09-23 07:08:01 +00:00
Mark Andrews
69f73c967e 2678. [func] Treat DS queries as if "minimal-response yes;" 
was set. [RT #20258]
 2009-09-14 23:19:36 +00:00
Mark Andrews
dbd66db23f 2672. [bug] Don't enable searching in 'host' when doing reverse 
lookups. [RT #20218]
 2009-09-08 23:28:20 +00:00
Automatic Updater
c33527c0d2 update copyright notice 2009-09-04 23:46:58 +00:00
Mark Andrews
42e5782189 ALG_FORMATSIZE -> 20 2009-09-04 02:38:33 +00:00
Mark Andrews
2df4d8d3dd isc_resourcevalue_t is unsigned. use %ISC_PRINT_QUADFORMATu 2009-09-04 01:31:29 +00:00
Mark Andrews
00d47e05ae 2663. [func] win32: allow named to run as a service using 
"NT AUTHORITY\LocalService" as the account. [RT #19977]
 2009-09-02 00:21:08 +00:00
Automatic Updater
1c210d73bd update copyright notice 2009-08-25 23:46:55 +00:00
Mark Andrews
e08ab67c41 2656. [func] win32: add a "tools only" check box to the installer 
which causes it to only install dig, host, nslookup,
                        nsupdate and relevent dlls.  [RT #19998]
 2009-08-25 06:54:43 +00:00
Mark Andrews
4a8fa74137 2643. [bug] Stub zones interacted badly with NSEC3 support. 
[RT #19777]
 2009-08-05 02:11:48 +00:00
Mark Andrews
fcf7d085b9 2640. [security] A specially crafted update packet will cause named 
to exit. [RT #20000]
 2009-07-28 15:51:31 +00:00
Mark Andrews
23cb85e6e6 2637. [func] Rationalize dnssec-signzone's signwithkey() calling. 
[RT #19959]
 2009-07-21 03:33:05 +00:00
Automatic Updater
0da8837d0e update copyright notice 2009-07-11 23:47:17 +00:00
Mark Andrews
a416993543 2920. [bug] Delay thawing the zone until the reload of it has 
completed successfully.  [RT #19750]
 2009-07-11 04:23:54 +00:00
Automatic Updater
76728b8bc6 regen 2009-07-11 01:55:23 +00:00
Automatic Updater
bf06c5e25a update copyright notice 2009-06-26 23:47:12 +00:00
Tatuya JINMEI 神明達哉
81bae80881 cleanup: removed redundant initialization [RT #19866] 2009-06-26 08:03:47 +00:00
Mark Andrews
99525899e8 2617. [bug] ifconfig.sh failed to emit an error message when 
run from the wrong location. [RT #19375]
 2009-06-26 06:16:31 +00:00
Mark Andrews
6ecf117f14 2616. [bug] The nameserver argument to 'host' was being ignored. 
[RT #19852]
 2009-06-24 03:40:42 +00:00
Mark Andrews
ee93a63b2f missing unsigned 2009-06-24 01:26:32 +00:00
Automatic Updater
1862010c83 update copyright notice 2009-06-23 23:47:11 +00:00
Mark Andrews
8ce2b50c32 2615. [port] win32: 'named -v' should automatically be executed 
in the foreground. [RT #19844]
 2009-06-23 07:51:00 +00:00
Automatic Updater
8fa3d35e1b regen 2009-06-23 01:53:58 +00:00
Mark Andrews
f4dd23b4f4 remove 2009-06-23 00:12:50 +00:00
Automatic Updater
6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews
e6be77a26c 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-22 05:05:01 +00:00
Mark Andrews
0d5a20cb05 2580. [bug] UpdateRej statistics counter could be incremented twice 
for one rejection. [RT #19476]
 2009-06-22 03:29:20 +00:00
Tatuya JINMEI 神明達哉
dc653165b0 2613. [bug] Option argument validation was missing for 
dnssec-dsfromkey. [RT #19828]
 2009-06-17 23:41:58 +00:00
Automatic Updater
0aa00c0fbe regen 2009-06-10 01:54:15 +00:00
Evan Hunt
2d7fc2d5a6 added "known bugs" section to dnssec-signzone man page, edited 
KNOWN-DEFECTS a bit
 2009-06-09 01:47:19 +00:00
Automatic Updater
4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt
4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Automatic Updater
b3def9bbf7 regen 2009-06-07 01:53:42 +00:00
Jeremy Reed
d9cf22cc5a Please bump date on manpage. So we know we aren't using 2000 docs. 
For -P: clean up sentence and clarify that the option skips the tests.

(This is for RT19653. No CHANGES entry added for this minor fix.)

This is v9_6, okayed in RT19653.
 2009-06-06 01:46:54 +00:00
Mark Andrews
b13b64028b missing unsigned 2009-06-05 06:56:40 +00:00
Mark Andrews
e5e510dbab fix up merge 2009-06-04 03:11:31 +00:00
Automatic Updater
91c526913b regen 2009-06-04 03:07:24 +00:00
Automatic Updater
c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews
5fa0c17a78 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-04 02:41:54 +00:00
cvs2git
a75a29c672 This commit was manufactured by cvs2git to create branch 'v9_6'. 2009-06-04 02:13:38 +00:00
Mark Andrews
2534a73a59 2608. [func] Perform post signing verification checks in 
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
 2009-06-04 02:13:37 +00:00
Automatic Updater
e6ada020f5 update copyright notice 2009-05-29 23:47:49 +00:00
Tatuya JINMEI 神明達哉
40d0f115a6 2604. [func] Add support for DNS rebinding attack prevention through 
new options, deny-answer-addresses and
			deny-answer-aliases.  Based on contributed code from
			JD Nurmi, Google. [RT #18192]
 2009-05-29 22:22:37 +00:00
Mark Andrews
2e8bd7f1b7 2603. [port] win32: handle .exe extension of named-checkzone and 
named-comilezone argv[0] names under windows.
                        [RT #19767]
 2009-05-29 02:17:43 +00:00
Mark Andrews
fc7ecc628d 2603. [port] win32: handle .exe extension of named-checkzone and 
named-comilezone argv[0] names under windows.
                        [RT #19767]
 2009-05-29 02:14:31 +00:00
Automatic Updater
a9a054302d regen 2009-05-22 01:14:49 +00:00
Automatic Updater
bbe20aa62c update copyright notice 2009-05-21 23:47:28 +00:00
Jeremy Reed
5d924e398e 2601. [doc] Mention file creation mode mask in the 
named manual page.

Similar to what is also in the migration document.
Also see Support ticket 862.
 2009-05-21 19:54:28 +00:00
Automatic Updater
54cdd2b307 update copyright notice 2009-05-07 23:47:44 +00:00