Commit Graph
3732 Commits
Author SHA1 Message Date
Mark Andrews 3fb5bccf59 3205. [func] Upgrade dig's defaults to better reflect modern
nameserver behaviour.  Enable "dig +adflag" and
                        "dig +edns=0" by default.  Enable "+dnssec" when
                        running "dig +trace". [RT #23497]
2011-11-04 10:41:38 +00:00
Evan Hunt 8899393ccd typo 2011-11-04 05:54:33 +00:00
Evan Hunt 90a354ab36 3204. [bug] When a master server that has been marked as
unreachable but sends a NOTIFY, mark it reachable
			again. [RT #25960]
2011-11-04 05:51:02 +00:00
Evan Hunt 25845da41a 3203. [bug] Increase log level to 'info' for validation failures
from expired or not-yet-valid RRSIGs. [RT #21796]
2011-11-04 05:36:28 +00:00
Mark Andrews a5166d5fce 3202. [bug] NOEDNS caching on timeout was too agressive.
[RT #26416]
2011-11-04 03:38:44 +00:00
Evan Hunt f550b4b104 3201. [func] 'rndc querylog' can now be given an on/off parameter
instead of only being used as a toggle. [RT #18351]
2011-11-03 23:05:31 +00:00
Evan Hunt 6150d3cb66 3200. [doc] Some rndc functions were undocumented or were
missing from 'rndc -h' output. [RT #25555]
2011-11-03 22:06:21 +00:00
Evan Hunt fd0cb18761 3199. [func] When logging client information, include the name
being queried. [RT #25944]
2011-11-03 21:14:22 +00:00
Evan Hunt d7be2b79ed 3198. [doc] Clarified that dnssec-settime can alter keyfile
permissions. [RT #24866]
2011-11-03 20:21:37 +00:00
Evan Hunt 1c1879b7ef 3197. [bug] Don't try to log the filename and line number when
the config parser can't open a file. [RT #22263]
2011-11-03 05:15:09 +00:00
Evan Hunt 7f2a245b96 3196. [bug] nsupdate: return nonzero exit code when target zone
doesn't exist. [RT #25783]
2011-11-03 04:29:28 +00:00
Evan Hunt 77b8f02d19 3195. [cleanup] Silence "file not found" warnings when loading
managed-keys zone. [RT #26340]
2011-11-03 03:26:19 +00:00
Evan Hunt 0c25a44aac 3194. [doc] Updated RFC references in the 'empty-zones-enable'
documentation. [RT #25203]
2011-11-03 03:08:33 +00:00
Evan Hunt 8281fd83da 3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
dnssec.h. [RT #26415]
2011-11-03 02:54:47 +00:00
Mark Andrews 146057d7e7 3192. [bug] A query structure could be used after being freed.
[RT #22208]
2011-11-02 23:42:33 +00:00
Evan Hunt 8b04568c80 grammar fix 2011-11-02 02:20:46 +00:00
Mark Andrews fe3472c80b 3191. [bug] Print NULL records using unknown format. [RT #26392] 2011-11-02 01:01:52 +00:00
Mark Andrews 3975f627fe 3190. [bug] Underflow in error handling in isc_mutexblock_init.
[RT #26397]
2011-11-01 21:59:56 +00:00
Evan Hunt e2271ee953 3189. [test] Added a summary report after system tests. [RT #25517] 2011-11-01 18:35:53 +00:00
Evan Hunt 5caf26b168 3188. [bug] zone.c:zone_refreshkeys() could fail to detach
references correctly when errors occurred, causing
			a hang on shutdown. [RT #26372]
2011-11-01 04:00:45 +00:00
Mark Andrews 36e97eb661 3187. [port] win32: support for Visual Studio 2008. [RT #26356] 2011-10-30 23:39:39 +00:00
Mark Andrews 62a348b15d 9.9.0b1 2011-10-28 12:02:31 +00:00
Mark Andrews 7b4b6f361b 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-28 11:46:50 +00:00
Evan Hunt 9c03f13e18 3185. [func] New 'rndc signing' option for auto-dnssec zones:
- 'rndc signing -list' displays the current
			   state of signing operations
			 - 'rndc signing -clear' clears the signing state
		  	   records for keys that have fully signed the zone
			 - 'rndc signing -nsec3param' sets the NSEC3
			   parameters for the zone
			The 'rndc keydone' syntax is removed. [RT #23729]
2011-10-28 06:20:07 +00:00
Mark Andrews c4352fb17e add excessive 2011-10-28 01:23:58 +00:00
Mark Andrews cd22c3e4e4 3184. [bug] named had cpu usage when a redirect zone was
configured. [RT #26013]
2011-10-28 00:36:54 +00:00
Scott Mann 0148654d85 added RTLD_GLOBAL to dlopen call (RT #26301). 2011-10-27 23:01:59 +00:00
Scott Mann b91b288f92 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:18:42 +00:00
Mark Andrews 24ef32426d 3181. [func] Inline-signing is now supported for master zones.
[RT #26224]
2011-10-26 20:56:45 +00:00
Evan Hunt 9570ddcd41 3180. [func] Local copies of slave zones are now saved in raw
format by default, to improve startup performance.
			'masterfile-format text;' can be used to override
			the default, if desired. [RT #25867]
2011-10-26 15:23:37 +00:00
Mark Andrews 9a8ffb1ac7 3179. [port] kfreebsd: build issues. [RT #26273] 2011-10-25 21:22:09 +00:00
Evan Hunt f704fa0ca6 3178. [bug] A race condition introduced by change #3163 could
cause an assertion failure on shutdown. [RT #26271]
2011-10-25 16:21:21 +00:00
Mark Andrews b1c6de5456 3177. [func] 'rndc keydone', remove the indicator record that
named has finished signing the zone with the
                        corresponding key.  [RT #26206]
2011-10-25 01:54:22 +00:00
Evan Hunt 9336f01769 3176. [doc] Corrected example code and added a README to the
sample external DLZ module in contrib/dlz/example.
			[RT #26215]
2011-10-20 22:01:48 +00:00
Mark Andrews ada40193c8 3175. [bug] Fix how DNSSEC positive wildcard responses from a
NSEC3 signed zone are validated.  Stop sending a
                        unnecessary NSEC3 record when generating such
                        responses. [RT #26200]
2011-10-20 21:42:11 +00:00
Mark Andrews 1946c596b4 3174. [bug] Always compute to revoked key tag from scratch.
[RT #24711]
2011-10-20 21:20:02 +00:00
Vernon Schryver 48a3b28263 mention RPZ user interface changes 2011-10-20 19:22:41 +00:00
Mark Andrews 020c4484fe 3173. [port] Correctly validate root DS responses. [RT #25726] 2011-10-15 05:00:15 +00:00
Mark Andrews e94c7d2358 changes number 2011-10-15 04:16:38 +00:00
Mark Andrews 30d9cf665d 3171. [port] darwin 10.* and freebsd [89] are now built threaded by
default.
2011-10-14 05:42:52 +00:00
Mark Andrews 0a1009ae64 3171. [bug] Exclusively lock the task when adding a zone using
'rndc addzone'.  [RT #25600]
2011-10-14 05:38:50 +00:00
Mark Andrews 88a8e5a8d0 3170. [func] RPZ update:
- fix precedence among competing rules
                        - improve ARM text including documenting rule precedence
                        - try to rewrite CNAME chains until first hit
                        - new "rpz" logging channel
2011-10-14 03:05:45 +00:00
Mark Andrews 2801318d3c 9.9.0a3 2011-10-13 22:53:39 +00:00
Mark Andrews ebe4f01a8f 3169. [func] Catch db/version mis-matches when call dns_db_*().
[RT #26017]
2011-10-12 23:11:30 +00:00
Mark Andrews af850c4120 3168. [bug] Nxdomain redirection could trigger a assert with
a ANY query. [RT #26017]
2011-10-12 23:09:35 +00:00
Mark Andrews dc2e627239 3167. [bug] Negative answers from forwarders were not being
correctly tagged making them appear to not be cached.
                        [RT #25380]
2011-10-12 00:18:11 +00:00
Mark Andrews 02286522fb 3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014] 2011-10-12 00:10:20 +00:00
Evan Hunt 653a78de95 3165. [bug] dnssec-signzone could generate new signatures when
resigning, even when valid signatures were already
			present. [RT #26025]
2011-10-11 19:26:06 +00:00
Evan Hunt 793814f807 3164. [func] Enable DLZ modules to retrieve client information,
so that responses can be changed depending on the
			source address of the query. [RT #25768]
2011-10-11 00:09:03 +00:00
Evan Hunt b2086d798b 3163. [bug] Use finer-grained locking in client.c to address
concurrency problems with large numbers of threads.
			[RT #26044]
2011-10-10 22:57:14 +00:00