Commit Graph
930 Commits
Author SHA1 Message Date
Mark Andrews 3fb5bccf59 3205. [func] Upgrade dig's defaults to better reflect modern
nameserver behaviour.  Enable "dig +adflag" and
                        "dig +edns=0" by default.  Enable "+dnssec" when
                        running "dig +trace". [RT #23497]
2011-11-04 10:41:38 +00:00
Evan Hunt 25845da41a 3203. [bug] Increase log level to 'info' for validation failures
from expired or not-yet-valid RRSIGs. [RT #21796]
2011-11-04 05:36:28 +00:00
Automatic Updater 0b85ae70e9 update copyright notice 2011-11-03 23:46:26 +00:00
Evan Hunt 6150d3cb66 3200. [doc] Some rndc functions were undocumented or were
missing from 'rndc -h' output. [RT #25555]
2011-11-03 22:06:21 +00:00
Automatic Updater 1ab9944f6b update copyright notice 2011-11-02 23:46:24 +00:00
Mark Andrews 46c7b71b4d improve error diagnostics 2011-11-02 13:59:07 +00:00
Mark Andrews e223d4bb26 loop waiting for stub zone to transfer 2011-11-02 08:17:01 +00:00
Mark Andrews fe3472c80b 3191. [bug] Print NULL records using unknown format. [RT #26392] 2011-11-02 01:01:52 +00:00
Automatic Updater 89d1324270 update copyright notice 2011-11-01 23:47:00 +00:00
Evan Hunt e2271ee953 3189. [test] Added a summary report after system tests. [RT #25517] 2011-11-01 18:35:53 +00:00
Automatic Updater f308b3c2e0 update copyright notice 2011-10-30 23:46:15 +00:00
Evan Hunt 695ccee03b added cvsignore files 2011-10-30 23:14:31 +00:00
Evan Hunt 81443179e5 missing files from clean.sh 2011-10-30 23:14:23 +00:00
Evan Hunt 74c46f605f file missing from clean.sh 2011-10-30 23:11:24 +00:00
Evan Hunt 094672b313 some files were missing from clean.sh 2011-10-30 23:05:13 +00:00
Evan Hunt 3718adf753 some files were missing from clean.sh 2011-10-30 22:59:45 +00:00
Evan Hunt 0422d7c531 Need to clear db-* files in clean.sh. 2011-10-30 22:55:12 +00:00
Automatic Updater 98a7e53914 update copyright notice 2011-10-28 12:20:31 +00:00
Mark Andrews 7b4b6f361b 3186. [bug] Version/db mis-match in rpz code. [RT #26180] 2011-10-28 11:46:50 +00:00
Evan Hunt 9c03f13e18 3185. [func] New 'rndc signing' option for auto-dnssec zones:
- 'rndc signing -list' displays the current
			   state of signing operations
			 - 'rndc signing -clear' clears the signing state
		  	   records for keys that have fully signed the zone
			 - 'rndc signing -nsec3param' sets the NSEC3
			   parameters for the zone
			The 'rndc keydone' syntax is removed. [RT #23729]
2011-10-28 06:20:07 +00:00
Mark Andrews 30574fa9ad exit 255 for SKIPPED 2011-10-28 03:15:05 +00:00
Scott Mann 376444d40b add test for recent Net::DNS module. 2011-10-28 02:18:56 +00:00
Automatic Updater 96f5a19c12 update copyright notice 2011-10-27 23:46:31 +00:00
Scott Mann b91b288f92 fix edns0 retry issues (rt #23393/24964). 2011-10-27 20:18:42 +00:00
Automatic Updater 8826a72394 update copyright notice 2011-10-26 23:46:15 +00:00
Mark Andrews 24ef32426d 3181. [func] Inline-signing is now supported for master zones.
[RT #26224]
2011-10-26 20:56:45 +00:00
Evan Hunt 9570ddcd41 3180. [func] Local copies of slave zones are now saved in raw
format by default, to improve startup performance.
			'masterfile-format text;' can be used to override
			the default, if desired. [RT #25867]
2011-10-26 15:23:37 +00:00
Mark Andrews aa0777cfb6 spin waiting for zone transfer to complete 2011-10-26 05:32:56 +00:00
Automatic Updater 329eb05c12 update copyright notice 2011-10-25 23:46:58 +00:00
Mark Andrews ad94465154 improve failure reports 2011-10-25 03:57:08 +00:00
Mark Andrews b1c6de5456 3177. [func] 'rndc keydone', remove the indicator record that
named has finished signing the zone with the
                        corresponding key.  [RT #26206]
2011-10-25 01:54:22 +00:00
Automatic Updater dfc015bc7e update copyright notice 2011-10-20 23:46:51 +00:00
Mark Andrews ada40193c8 3175. [bug] Fix how DNSSEC positive wildcard responses from a
NSEC3 signed zone are validated.  Stop sending a
                        unnecessary NSEC3 record when generating such
                        responses. [RT #26200]
2011-10-20 21:42:11 +00:00
Mark Andrews 1946c596b4 3174. [bug] Always compute to revoked key tag from scratch.
[RT #24711]
2011-10-20 21:20:02 +00:00
Automatic Updater e87f494810 update copyright notice 2011-10-17 23:46:33 +00:00
Mark Andrews ca890c0aa8 sleep 1 # allow lwresd to finish starting. 2011-10-17 05:40:11 +00:00
Mark Andrews 2da036f231 The notify system test was using a dynamic zone for reload testing
so it was just a plain fluke that it ever succeeded.
* use a normal (non-dynamic) zone.
* check that reloads of the master zone actually occur.
* remove example3 test from tests.sh as it wasn't testing notify.
* add a "sleep 1" so that the copied file will have a newer timestamp.
* improve system test logging.
* using seperate output files for each test so that it is possible
  to work out what went wrong if the system test fails.
2011-10-17 01:33:28 +00:00
Mark Andrews 020c4484fe 3173. [port] Correctly validate root DS responses. [RT #25726] 2011-10-15 05:00:15 +00:00
Automatic Updater 2d45eb7acb update copyright notice 2011-10-14 23:46:34 +00:00
Mark Andrews baabfdc0d9 wait for test zones to have loaded 2011-10-14 12:02:12 +00:00
Automatic Updater 304a539c59 update copyright notice 2011-10-13 22:48:24 +00:00
Mark Andrews c28bc44028 waiting for servers to be ready for testing 2011-10-13 22:18:05 +00:00
Mark Andrews 88112d5fcb 'test -e' is not portable, use 'test -f' 2011-10-13 13:03:51 +00:00
Mark Andrews abea1710a7 new 2011-10-13 04:53:07 +00:00
Mark Andrews 24ae404aca 'grep' -> 'grep -w' when checking for keyids 2011-10-13 03:55:01 +00:00
Mark Andrews 89d7808786 'grep' -> 'grep -w' when checking for keyids 2011-10-13 03:46:41 +00:00
Vernon Schryver 9fee08f655 Commit rt25172 changes to HEAD including
- fix precedence among competing rules
  - improve ARM text including documenting rule precedence
  - try to rewrite CNAME chains until first hit
  - new "rpz" logging channel
  - same fix for "NS ." as in RT 24985
2011-10-13 01:32:34 +00:00
Mark Andrews dc2e627239 3167. [bug] Negative answers from forwarders were not being
correctly tagged making them appear to not be cached.
                        [RT #25380]
2011-10-12 00:18:11 +00:00
Mark Andrews 02286522fb 3166. [bug] Upgrading a zone to support inline-signing failed. [RT #26014] 2011-10-12 00:10:20 +00:00
Evan Hunt 653a78de95 3165. [bug] dnssec-signzone could generate new signatures when
resigning, even when valid signatures were already
			present. [RT #26025]
2011-10-11 19:26:06 +00:00