ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
22,514 Commits 589 Branches 805 Tags
faefeaddb39e693ea6cbcb81f2e5dbded21ced93
Commit Graph
352 Commits
Author SHA1 Message Date
Evan Hunt b8a9632333 [master] complete NTA work 
3882.	[func]		By default, negative trust anchors will be tested
			periodically to see whether data below them can be
			validated, and if so, they will be allowed to
			expire early. The "rndc nta -force" option
			overrides this behvaior.  The default NTA lifetime
			and the recheck frequency can be configured by the
			"nta-lifetime" and "nta-recheck" options. [RT #36146]
 2014-06-18 16:50:38 -07:00
Evan Hunt a4e76a630e [master] update gitignore files; use rev-parse to get srcid 2014-06-17 13:49:30 -07:00
Tinderbox User f5c27ecceb regen master 2014-05-31 01:05:50 +00:00
Evan Hunt 0cfb247368 [master] rndc nta 
3867.	[func]		"rndc nta" can now be used to set a temporary
			negative trust anchor, which disables DNSSEC
			validation below a specified name for a specified
			period of time (not exceeding 24 hours).  This
			can be used when validation for a domain is known
			to be failing due to a configuration error on
			the part of the domain owner rather than a
			spoofing attack. [RT #29358]
 2014-05-29 22:22:53 -07:00
Tinderbox User 3c7b4ac451 regen master 2014-03-12 01:05:39 +00:00
Evan Hunt 62258ada48 [master] auto-generate salt 
3781.	[func]		Specifying "auto" as the salt when using
			"rndc signing -nsec3param" causes named to
			generate a 64-bit salt at random. [RT #35322]
 2014-03-11 08:46:58 -07:00
Tinderbox User 0f52ea95d8 regen master 2014-03-06 01:05:38 +00:00
Evan Hunt 431859b442 [master] typo 2014-03-04 21:46:21 -08:00
Tinderbox User d3ddafd746 regen master 2014-03-05 01:06:28 +00:00
Tinderbox User cc2a515684 update copyright notice 2014-03-04 23:46:15 +00:00
Evan Hunt e7c0d42b11 [master] rndc -q 
3776.	[bug]		"rndc -q" suppresses output from successful
			rndc commands. Errors are printed on stderr.
                        [RT #21393]
 2014-03-04 09:49:57 -08:00
Tinderbox User 74ae031d9d regen master 2014-03-02 01:05:20 +00:00
Evan Hunt 3ef4b7383a [master] improved doc for "rndc signing -list" 
3769.   [doc]           Improved documentation of "rndc signing -list".
                        [RT #30652]
 2014-02-28 21:29:19 -08:00
Tinderbox User 794b79e6bb regen master 2014-02-28 01:07:06 +00:00
Tinderbox User 938440694b update copyright notice 2014-02-27 23:46:22 +00:00
Evan Hunt 1753d3c4d7 [master] correct dates in man pages 2014-02-27 11:43:10 -08:00
Evan Hunt dbb012765c [master] merge libiscpk11 to libisc 
3735.	[cleanup]	Merged the libiscpk11 library into libisc
			to simplify dependencies. [RT #35205]
 2014-02-11 21:20:28 -08:00
Tinderbox User f2016fcecf regen master 2014-02-08 01:05:40 +00:00
Tinderbox User 81f58902eb update copyright notice 2014-02-07 23:46:39 +00:00
Mark Andrews 62ec9fd168 3733. [func] Improve interface scanning support. Interface 
information will be automatically updated if the
                        OS supports routing sockets.  Use
                        "automatic-interface-scan no;" to disable.

                        Add "rndc scan" to trigger a scan. [RT #23027]
 2014-02-07 17:16:37 +11:00
Mark Andrews e20788e121 update copyrights 2014-01-16 15:19:24 +11:00
Evan Hunt ba751492fc [master] native PKCS#11 support 
3705.	[func]		"configure --enable-native-pkcs11" enables BIND
			to use the PKCS#11 API for all cryptographic
			functions, so that it can drive a hardware service
			module directly without the need to use a modified
			OpenSSL as intermediary (so long as the HSM's vendor
			provides a complete-enough implementation of the
			PKCS#11 interface). This has been tested successfully
			with the Thales nShield HSM and with SoftHSMv2 from
			the OpenDNSSEC project. [RT #29031]
 2014-01-14 15:40:56 -08:00
Tinderbox User 431a83fb29 update copyright notice 2014-01-09 23:46:35 +00:00
Evan Hunt e851ea8260 [master] replace memcpy() with memmove(). 
3698.	[cleanup]	Replaced all uses of memcpy() with memmove().
			[RT #35120]
 2014-01-08 16:39:05 -08:00
Tinderbox User 4f9cb7bd58 regen master 2013-12-05 01:04:59 +00:00
Curtis Blackburn 8009525601 3682. [bug] Correct the behavior of rndc retransfer to allow 
inline-signing slave zones to retain NSEC3 parameters instead of
			reverting to NSEC [RT #34745]
 2013-12-04 12:26:20 -06:00
Mark Andrews c3c8823fed 3681. [port] Update the Windows build system to support feature 
selection and WIN64 builds.  This is a work in
                        progress. [RT #34160]
 2013-12-04 12:47:23 +11:00
Tinderbox User 03c0efc689 regen master 2013-11-13 01:04:50 +00:00
Jeremy C. Reed 0bda84553a Fix misspelling (at least use common spelling). 2013-11-12 07:08:02 -06:00
Mark Andrews 2c089bf6d2 whitspace 2013-09-16 10:14:07 +10:00
Evan Hunt 927e4c9fec [master] address race conditions with removing inline zones 
3513.	[bug]		named could crash when deleting inline-signing
			zones with "rndc delzone". [RT #34066]
 2013-07-09 17:39:21 -07:00
Tinderbox User ccee394812 regen master 2013-07-01 17:56:30 +00:00
Evan Hunt 9d4ec6d2c5 [master] "flushtree -all" no longer optional 
Updated CHANGES note:
3606.	[func]		"rndc flushtree" now flushes matching
			records in the address database and bad cache
                        as well as the DNS cache. (Previously only the
                        DNS cache was flushed.) [RT #33970]
 2013-06-30 18:53:48 -07:00
Tinderbox User 94479b3834 regen master 2013-06-27 01:04:50 +00:00
Evan Hunt 9fa5a723e1 [master] "rndc flushtree -all <name>" 
3606.	[func]		"rndc flushtree -all" flushes matching
			records in the ADB and bad cache as well as
			the DNS cache.  (Without the "-all" option,
			flushtree will still only flush records from
			the DNS cache.) [RT #33970]
 2013-06-26 14:59:32 -07:00
Tinderbox User 0ccb0e98c7 regen master 2013-06-12 01:04:55 +00:00
Evan Hunt c51e6991fd [master] corrected closing tag 2013-06-10 18:48:30 -07:00
Evan Hunt 1b2a4ce2b1 [master] move rndc command documentation to "man rndc" 
3592.	[doc]		Moved documentation of rndc command options to the
			rndc man page. [RT #33506]
 2013-06-10 14:23:14 -07:00
Evan Hunt 5f1dc0d505 [master] add "-clean" option to "rndc delzone" 
3585.	[func]		"rndc delzone -clean" option removes zone files
			when deleting a zone. [RT #33570]
 2013-06-04 21:26:29 -07:00
Mark Andrews 17a00ff54c 3578. [bug] 'rndc -c file' now fails if 'file' does not exist. 
[RT #33571]
 2013-05-30 11:09:29 +10:00
Tinderbox User cfa2326b5c update copyright notice 2013-03-14 23:46:11 +00:00
Tinderbox User b2f07642fd regen master 2013-03-14 01:04:33 +00:00
Evan Hunt 4eb998928b [master] algorithm flexibility for rndc 
3525.	[func]		Support for additional signing algorithms in rndc:
			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
			The -A option to rndc-confgen can be used to
			select the algorithm for the generated key.
			(The default is still hmac-md5; this may
			change in a future release.) [RT #20363]
 2013-03-13 17:53:11 -07:00
Evan Hunt 47c5b8af92 [master] silence coverity warnings 
3401.	[bug]		Addressed Coverity warnings. [RT #31484]
 2012-10-23 22:04:06 -07:00
Tinderbox User a3128c1995 update copyright notice 2012-06-29 23:45:57 +00:00
Mark Andrews bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User 247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User ea94d37012 regen master 2012-03-07 01:41:11 +00:00
Evan Hunt e41d5a00bc added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Evan Hunt adfc3ad3ce 3275. [bug] Corrected rndc -h output; the 'rndc sync -clean' 
option had been missplled as '-clear'.  (To avoid
			future confusion, both options now work.) [RT #27173]
 2012-02-03 22:27:17 +00:00