ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
18,462 Commits 589 Branches 805 Tags
fc7e537b45ba3d7735e4a28fbf6c19e1ef3bf55f
Commit Graph
592 Commits
Author SHA1 Message Date
Evan Hunt a0e5d39d03 3021. [bug] Change #3010 was incomplete. [RT #22296] 2011-02-16 19:44:17 +00:00
Evan Hunt 24a73837dd 3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer 
for refreshing managed-keys. [RT #22296]
 2011-02-03 00:28:08 +00:00
Automatic Updater 74d29b18ad update copyright notice 2011-01-07 23:46:36 +00:00
Evan Hunt 3207a16d0d Initialize a pointer to NULL in order to silence a compiler warning. 
Committing without review because the change is trivial.
 2011-01-07 00:53:18 +00:00
Mark Andrews 93b433d299 2982. [bug] Reference count dst keys. dst_key_attach() can be used 
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
 2010-12-09 01:05:29 +00:00
Mark Andrews e7ca8c91ec 2976. [bug] named die on exit after negotiating a GSS-TSIG key. 
[RT #3415]
 2010-12-02 23:26:58 +00:00
Shawn Routhier 75636f9b01 Fix acl type processing so that allow-query works in options and view 
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
 2010-11-16 02:11:53 +00:00
Automatic Updater a78ef43fe3 update copyright notice 2010-09-24 08:30:58 +00:00
Mark Andrews 0a2897853b 2963. [security] The allow-query acl was being applied instead of the 
allow-query-cache acl to cache lookups. [RT #22114]
 2010-09-24 05:54:06 +00:00
Mark Andrews 14dfb38385 silence signed/unsigned warning hpux 2010-08-24 01:01:45 +00:00
Mark Andrews 8c19a64364 2945. [doc] Update empty-zones list in ARM. [RT #21772] 
2944.   [maint]         Remove ORCHID prefix from built in empty zones.
                        [RT #21772]
 2010-08-20 00:17:40 +00:00
Automatic Updater 5d98af56f2 update copyright notice 2010-08-16 23:46:31 +00:00
Mark Andrews 30579c29be 2943. [func] Add support to load new keys into managed zones 
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
 2010-08-16 22:27:18 +00:00
Evan Hunt 0658d99891 2936. [func] Improved configuration syntax and multiple-view 
support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]
 2010-08-11 18:19:59 +00:00
Mark Andrews 74373ce898 while (1) -> for (;;) to silence compiler warning 2010-07-20 04:51:38 +00:00
Mark Andrews 11f8ef90da format/arg mismatch solaris 2010-07-20 04:48:01 +00:00
Mark Andrews e5c3961bf6 0 -> 0U 2010-07-19 06:14:11 +00:00
Mark Andrews d647b53008 silence compiler warnings about (char) as index to array 2010-07-19 05:14:47 +00:00
Evan Hunt 4b186490dd Added function definitions and moved a variable declaration for win32 build. 2010-07-12 18:52:23 +00:00
Automatic Updater d4fb9a4b93 update copyright notice 2010-07-11 23:46:36 +00:00
Evan Hunt 92f39ccb5b 2930. [experimental] New "rndc addzone" and "rndc delzone" commads 
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
 2010-07-11 00:12:19 +00:00
Automatic Updater c65ab74d31 update copyright notice 2010-06-25 23:46:33 +00:00
Mark Andrews 9777316c64 2924. [func] 'rndc secroots' dump a combined summary of the 
current managed keys combined with trusted keys.
                        [RT #20904]
 2010-06-25 03:51:07 +00:00
Mark Andrews 13ce1be5d3 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively 
to IPv4 clients.  New acl 'filter-aaaa' (default any).
 2010-06-22 04:04:22 +00:00
Mark Andrews 777d3c3963 silence compiler warning 2010-05-18 00:29:31 +00:00
Automatic Updater 71324ae046 update copyright notice 2010-05-14 23:49:21 +00:00
Mark Andrews 812b6d8d11 2893. [bug] Improve managed keys support. New named.conf option 
managed-keys-directory. [RT #20924]
 2010-05-14 04:49:40 +00:00
Mark Andrews b756b7d22f 2891. [maint] Update empty-zones list to match 
draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
 2010-05-14 03:32:11 +00:00
Mark Andrews 2473968416 2956. [bug] named-checkconf did not fail on a bad trusted key. 
[RT #20705]
 2010-03-04 06:19:33 +00:00
Mark Andrews 8a98023414 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 05:05:09 +00:00
Automatic Updater 74f601e769 update copyright notice 2010-01-13 23:48:20 +00:00
Evan Hunt 96c51eadc9 Commit to v9_7 some changes that had been left out: 
2838.	[bug]		A KSK revoked by named could not be deleted.
			[RT #20881]

2837.	[port]		Prevent Linux spurious warnings about fwrite().
			[RT #20812]
 2010-01-13 19:31:53 +00:00
Mark Andrews 2b662f27f6 2824. [bug] "rndc sign" was not being run by the correct task. 
[RT #20759]
 2009-12-29 22:23:01 +00:00
Evan Hunt b4df2f48c7 2818. [cleanup] rndc could return an incorrect error code 
when a zone was not found. [RT #20767]
 2009-12-24 00:16:08 +00:00
Evan Hunt 84c9c592f8 2817. [cleanup] Removed unnecessary isc_tasc_endexclusive() calls. 
[RT #20768]
 2009-12-24 00:00:13 +00:00
Evan Hunt 5a33ab5d65 2815. [bug] Exclusively lock the task when freezing a zone. 
[RT #19838]
 2009-12-23 23:33:53 +00:00
Vernon Schryver 5d9922e86f Allow the optional filter-aaaa-on-v4 option in view statements to close #20635 2009-11-28 15:57:37 +00:00
Evan Hunt 0088b45de5 2774. [bug] Existing cache DB wasn't being reused after 
reconfiguration. [RT #20629]
 2009-11-19 18:52:40 +00:00
Evan Hunt 95f2377b4f 2739. [cleanup] Clean up API for initializing and clearing trust 
anchors for a view. [RT #20211]
 2009-10-27 22:46:13 +00:00
Evan Hunt c8aa7ce70d 2732. [func] Add optional filter-aaaa-on-v4 option, available 
if built with './configure --enable-filter-aaaa'.
			Filters out AAAA answers to clients connecting
			via IPv4.  (This is NOT recommended for general
			use.) [RT #20339]
 2009-10-26 23:14:54 +00:00
Mark Andrews 06e7340198 2719. [func] Skip trusted/managed keys for unsupported algorithms. 
[RT #20392]
 2009-10-20 03:15:06 +00:00
Evan Hunt 77b8f88f14 2712. [func] New 'auto-dnssec' zone option allows zone signing 
to be fully automated in zones configured for
			dynamic DNS.  'auto-dnssec allow;' permits a zone
			to be signed by creating keys for it in the
			key-directory and using 'rndc sign <zone>'.
			'auto-dnssec maintain;' allows that too, plus it
			also keeps the zone's DNSSEC keys up to date
			according to their timing metadata. [RT #19943]
 2009-10-12 20:48:12 +00:00
Francis Dupont 8b78c993cb explicit engine rt20230a 2009-10-05 17:30:49 +00:00
Francis Dupont debd489a44 noreturn RT #20257 2009-09-29 15:06:07 +00:00
Evan Hunt a457576b58 "dnssec-lookaside auto" crashed if named was built without openssl [rt20231] 2009-09-10 01:49:29 +00:00
Mark Andrews 2d13af354a isc_resourcevalue_t is unsigned. use %ISC_PRINT_QUADFORMATu 2009-09-04 00:49:50 +00:00
Automatic Updater 823ca3c14f update copyright notice 2009-09-01 23:47:45 +00:00
Tatuya JINMEI 神明達哉 44de0b1f7d 2666. [func] Added an 'options' argument to dns_name_fromstring() 
(API change from 9.7.0a2). [RT #20196]
 2009-09-01 17:36:51 +00:00
Evan Hunt 85be60e3c8 2665. [func] Clarify syntax for managed-keys {} statement, add 
ARM documentation about RFC 5011 support. [RT #19874]
 2009-09-01 07:14:26 +00:00
Tatuya JINMEI 神明達哉 307d208450 2660. [func] Add a new set of DNS libraries for non-BIND9 
applications.  See README.libdns. [RT #19369]
 2009-09-01 00:22:28 +00:00