Commit Graph

5013 Commits

Author SHA1 Message Date
Mark Andrews
fc7e537b45 3048. [bug] Fully seperate view key mangement. [RT #23419] 2011-03-01 23:22:42 +00:00
Scott Mann
a8ab505429 Fixed DNSKEY NODATA responses not cached and added tests [RT #22908]. 2011-03-01 16:47:13 +00:00
Francis Dupont
fcf1934be8 Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:28:01 +00:00
Automatic Updater
0f1c24fec6 update copyright notice 2011-02-28 01:19:28 +00:00
Evan Hunt
de3940d1ea 3043. [test] Merged in the NetBSD ATF test framework (currently
version 0.12) for development of future unit tests.
                        Use configure --with-atf to build ATF internally
                        or configure --with-atf=prefix to use an external
                        copy.  [RT #23209]
2011-02-26 02:48:58 +00:00
Mark Andrews
d1828d831e 3040. [bug] Named failed to validate insecure zones where a node
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
2011-02-23 12:08:40 +00:00
Mark Andrews
e009a9de75 2036. [bug] Check built-in zone arguments to see if the zone
is re-usable or not. [RT #21914]
2011-02-22 04:30:46 +00:00
Automatic Updater
e0c03c4a8c update copyright notice 2011-02-21 23:46:39 +00:00
Mark Andrews
5ce02fb8f5 3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
[RT #22521]
2011-02-21 07:11:49 +00:00
Mark Andrews
e4cf833007 3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521] 2011-02-21 07:03:55 +00:00
Mark Andrews
2c352f5b03 3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
[RT #22521]
2011-02-21 06:53:54 +00:00
Mark Andrews
3184f5e1a8 3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
[RT #22521]
2011-02-21 06:44:46 +00:00
Automatic Updater
7a18159352 update copyright notice 2011-02-19 23:46:55 +00:00
Evan Hunt
9cf990271f Fixed an error in change 3023, ensuring that journal file isn't
removed after IXFR.  No CHANGES note.
2011-02-19 01:25:30 +00:00
Evan Hunt
87519dfd8f 3025. [bug] Fixed a possible deadlock due to zone resigning.
[RT #22964]
2011-02-19 00:46:45 +00:00
Automatic Updater
5936aeafed update copyright notice 2011-02-18 23:46:44 +00:00
Evan Hunt
7b4467366d 3023. [bug] Named could be left in an inconsistent state when
receiving multiple AXFR response messages that were
			not all TSIG-signed. [RT #23254]
2011-02-18 21:29:19 +00:00
Automatic Updater
2ec8ca31c0 update copyright notice 2011-02-17 23:46:21 +00:00
Mark Andrews
5468d7a070 simplify zone_signwithkey call 2011-02-17 04:58:20 +00:00
Mark Andrews
e754375df7 ensure that the DNSKEY rrset get re-signed even if it hasn't been
updated in sign_apex.
2011-02-17 03:01:19 +00:00
Mark Andrews
9e1b196510 3020. [bug] auto-dnssec failed to correctly update the zone when
changing the DNSKEY RRset. [RT #23232]
2011-02-15 22:09:36 +00:00
Mark Andrews
f02cc38da0 undo commits to wrong branch 2011-02-15 05:40:16 +00:00
Mark Andrews
dace425c59 add NSEC/NSEC3 chains 2011-02-15 04:32:53 +00:00
Mark Andrews
d5e086f492 sign all changed rrsets 2011-02-15 03:55:55 +00:00
Mark Andrews
bc7aed2a6b 3018. [bug] Named failed to check for the "none;" acl when deciding
if a zone may need to be re-signed. RT #23120]
2011-02-07 00:16:48 +00:00
Automatic Updater
2dec8208b9 update copyright notice 2011-02-03 05:38:10 +00:00
Evan Hunt
24a73837dd 3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
for refreshing managed-keys. [RT #22296]
2011-02-03 00:28:08 +00:00
Mark Andrews
7726fff532 9.7.3 2011-01-30 08:01:01 +00:00
Automatic Updater
1fd0d83a38 update copyright notice 2011-01-27 23:46:37 +00:00
Mark Andrews
a244965075 3009. [bug] clients-per-query code didn't work as expected with
particular query patterns. [RT #22972]
2011-01-27 02:28:54 +00:00
Mark Andrews
0fc328e58e 9.7.3rc1 2011-01-14 00:09:38 +00:00
Automatic Updater
3c2e0ad5b3 update copyright notice 2011-01-13 04:48:58 +00:00
Mark Andrews
76be4e69ee 3007. [bug] Named failed to preserve the case of domain names in
rdata which is no compressable when writing master
                        files.  [RT #22863]
2011-01-13 01:34:41 +00:00
Mark Andrews
7d2b1dfede 2995. [bug] The Kerberos realm was not being correctly extracted
from the signer's identity. [RT #22770]
2010-12-22 02:36:17 +00:00
Mark Andrews
48e7dcf0d2 2984. [bug] Don't run MX checks when the target of the MX record
is ".".  [RT #22645]
2010-12-14 00:46:41 +00:00
Mark Andrews
5addd0b6cd 9.7.3b1 2010-12-10 01:23:06 +00:00
Mark Andrews
7035aa0ee2 dst_key_attach 2010-12-09 07:56:12 +00:00
Automatic Updater
9164ae2297 update copyright notice 2010-12-09 04:31:30 +00:00
Mark Andrews
93b433d299 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 01:05:29 +00:00
Mark Andrews
e69bed0b94 2980. [bug] named didn't properly handle UPDATES that changed the
TTL of the NSEC3PARAM RRset. [RT #22363]
2010-12-07 03:01:40 +00:00
Mark Andrews
d41b478b81 s/dns_key_free/dst_key_free/ 2010-12-03 12:04:24 +00:00
Automatic Updater
1517558cd3 update copyright notice 2010-12-02 23:46:30 +00:00
Mark Andrews
e7ca8c91ec 2976. [bug] named die on exit after negotiating a GSS-TSIG key.
[RT #3415]
2010-12-02 23:26:58 +00:00
Mark Andrews
7f2d8ae5da 2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
wrong lock which could lead to server deadlock.
                        [RT #22614]
2010-12-02 05:07:03 +00:00
Automatic Updater
14f8d8220c update copyright notice 2010-11-30 23:46:15 +00:00
Evan Hunt
f72883c6ae 2974. [bug] Some vaild UPDATE requests could fail due to a
consistency check examining the existing version
			of the zone rather than the new version resulting
			from the UPDATE. [RT #22413]
2010-11-30 02:27:38 +00:00
Automatic Updater
97c708294d update copyright notice 2010-11-17 23:46:32 +00:00
Evan Hunt
a53c04f050 2971. [bug] Fixed a bug that caused journal files not to be
compacted on Windows systems as a result of
			non-POSIX-compliant rename() semantics. [RT #22434]
2010-11-17 00:29:31 +00:00
Mark Andrews
8f110ca521 2970. [security] Adding a NO DATA negative cache entry failed to clear
any matching RRSIG records.  A subsequent lookup of
                        of NO DATA cache entry could trigger a INSIST when the
                        unexpected RRSIG was also returned with the NO DATA
                        cache entry.  [RT #22288]
2010-11-16 07:28:37 +00:00
Mark Andrews
8bdc865433 2968. [security] Named could fail to prove a data set was insecure
before marking it as insecure.  One set of conditions
                        that can trigger this occurs naturally when rolling
                        DNSKEY algorithms.  [RT #22309]
2010-11-16 01:21:49 +00:00