Mark Andrews
fc7e537b45
3048. [bug] Fully seperate view key mangement. [RT #23419 ]
2011-03-01 23:22:42 +00:00
Scott Mann
a8ab505429
Fixed DNSKEY NODATA responses not cached and added tests [RT #22908 ].
2011-03-01 16:47:13 +00:00
Francis Dupont
fcf1934be8
Use RRSIG original TTL in validated RRset TTL [RT #23332 ]
2011-02-28 14:28:01 +00:00
Automatic Updater
0f1c24fec6
update copyright notice
2011-02-28 01:19:28 +00:00
Evan Hunt
de3940d1ea
3043. [test] Merged in the NetBSD ATF test framework (currently
...
version 0.12) for development of future unit tests.
Use configure --with-atf to build ATF internally
or configure --with-atf=prefix to use an external
copy. [RT #23209 ]
2011-02-26 02:48:58 +00:00
Mark Andrews
d1828d831e
3040. [bug] Named failed to validate insecure zones where a node
...
with a CNAME existed between the trust anchor and the
top of the zone. [RT #23338 ]
2011-02-23 12:08:40 +00:00
Mark Andrews
e009a9de75
2036. [bug] Check built-in zone arguments to see if the zone
...
is re-usable or not. [RT #21914 ]
2011-02-22 04:30:46 +00:00
Automatic Updater
e0c03c4a8c
update copyright notice
2011-02-21 23:46:39 +00:00
Mark Andrews
5ce02fb8f5
3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
...
[RT #22521 ]
2011-02-21 07:11:49 +00:00
Mark Andrews
e4cf833007
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521 ]
2011-02-21 07:03:55 +00:00
Mark Andrews
2c352f5b03
3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
...
[RT #22521 ]
2011-02-21 06:53:54 +00:00
Mark Andrews
3184f5e1a8
3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
...
[RT #22521 ]
2011-02-21 06:44:46 +00:00
Automatic Updater
7a18159352
update copyright notice
2011-02-19 23:46:55 +00:00
Evan Hunt
9cf990271f
Fixed an error in change 3023, ensuring that journal file isn't
...
removed after IXFR. No CHANGES note.
2011-02-19 01:25:30 +00:00
Evan Hunt
87519dfd8f
3025. [bug] Fixed a possible deadlock due to zone resigning.
...
[RT #22964 ]
2011-02-19 00:46:45 +00:00
Automatic Updater
5936aeafed
update copyright notice
2011-02-18 23:46:44 +00:00
Evan Hunt
7b4467366d
3023. [bug] Named could be left in an inconsistent state when
...
receiving multiple AXFR response messages that were
not all TSIG-signed. [RT #23254 ]
2011-02-18 21:29:19 +00:00
Automatic Updater
2ec8ca31c0
update copyright notice
2011-02-17 23:46:21 +00:00
Mark Andrews
5468d7a070
simplify zone_signwithkey call
2011-02-17 04:58:20 +00:00
Mark Andrews
e754375df7
ensure that the DNSKEY rrset get re-signed even if it hasn't been
...
updated in sign_apex.
2011-02-17 03:01:19 +00:00
Mark Andrews
9e1b196510
3020. [bug] auto-dnssec failed to correctly update the zone when
...
changing the DNSKEY RRset. [RT #23232 ]
2011-02-15 22:09:36 +00:00
Mark Andrews
f02cc38da0
undo commits to wrong branch
2011-02-15 05:40:16 +00:00
Mark Andrews
dace425c59
add NSEC/NSEC3 chains
2011-02-15 04:32:53 +00:00
Mark Andrews
d5e086f492
sign all changed rrsets
2011-02-15 03:55:55 +00:00
Mark Andrews
bc7aed2a6b
3018. [bug] Named failed to check for the "none;" acl when deciding
...
if a zone may need to be re-signed. RT #23120 ]
2011-02-07 00:16:48 +00:00
Automatic Updater
2dec8208b9
update copyright notice
2011-02-03 05:38:10 +00:00
Evan Hunt
24a73837dd
3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
...
for refreshing managed-keys. [RT #22296 ]
2011-02-03 00:28:08 +00:00
Mark Andrews
7726fff532
9.7.3
2011-01-30 08:01:01 +00:00
Automatic Updater
1fd0d83a38
update copyright notice
2011-01-27 23:46:37 +00:00
Mark Andrews
a244965075
3009. [bug] clients-per-query code didn't work as expected with
...
particular query patterns. [RT #22972 ]
2011-01-27 02:28:54 +00:00
Mark Andrews
0fc328e58e
9.7.3rc1
2011-01-14 00:09:38 +00:00
Automatic Updater
3c2e0ad5b3
update copyright notice
2011-01-13 04:48:58 +00:00
Mark Andrews
76be4e69ee
3007. [bug] Named failed to preserve the case of domain names in
...
rdata which is no compressable when writing master
files. [RT #22863 ]
2011-01-13 01:34:41 +00:00
Mark Andrews
7d2b1dfede
2995. [bug] The Kerberos realm was not being correctly extracted
...
from the signer's identity. [RT #22770 ]
2010-12-22 02:36:17 +00:00
Mark Andrews
48e7dcf0d2
2984. [bug] Don't run MX checks when the target of the MX record
...
is ".". [RT #22645 ]
2010-12-14 00:46:41 +00:00
Mark Andrews
5addd0b6cd
9.7.3b1
2010-12-10 01:23:06 +00:00
Mark Andrews
7035aa0ee2
dst_key_attach
2010-12-09 07:56:12 +00:00
Automatic Updater
9164ae2297
update copyright notice
2010-12-09 04:31:30 +00:00
Mark Andrews
93b433d299
2982. [bug] Reference count dst keys. dst_key_attach() can be used
...
increment the reference count.
Note: dns_tsigkey_createfromkey() callers should now
always call dst_key_free() rather than setting it
to NULL on success. [RT #22672 ]
2010-12-09 01:05:29 +00:00
Mark Andrews
e69bed0b94
2980. [bug] named didn't properly handle UPDATES that changed the
...
TTL of the NSEC3PARAM RRset. [RT #22363 ]
2010-12-07 03:01:40 +00:00
Mark Andrews
d41b478b81
s/dns_key_free/dst_key_free/
2010-12-03 12:04:24 +00:00
Automatic Updater
1517558cd3
update copyright notice
2010-12-02 23:46:30 +00:00
Mark Andrews
e7ca8c91ec
2976. [bug] named die on exit after negotiating a GSS-TSIG key.
...
[RT #3415 ]
2010-12-02 23:26:58 +00:00
Mark Andrews
7f2d8ae5da
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
...
wrong lock which could lead to server deadlock.
[RT #22614 ]
2010-12-02 05:07:03 +00:00
Automatic Updater
14f8d8220c
update copyright notice
2010-11-30 23:46:15 +00:00
Evan Hunt
f72883c6ae
2974. [bug] Some vaild UPDATE requests could fail due to a
...
consistency check examining the existing version
of the zone rather than the new version resulting
from the UPDATE. [RT #22413 ]
2010-11-30 02:27:38 +00:00
Automatic Updater
97c708294d
update copyright notice
2010-11-17 23:46:32 +00:00
Evan Hunt
a53c04f050
2971. [bug] Fixed a bug that caused journal files not to be
...
compacted on Windows systems as a result of
non-POSIX-compliant rename() semantics. [RT #22434 ]
2010-11-17 00:29:31 +00:00
Mark Andrews
8f110ca521
2970. [security] Adding a NO DATA negative cache entry failed to clear
...
any matching RRSIG records. A subsequent lookup of
of NO DATA cache entry could trigger a INSIST when the
unexpected RRSIG was also returned with the NO DATA
cache entry. [RT #22288 ]
2010-11-16 07:28:37 +00:00
Mark Andrews
8bdc865433
2968. [security] Named could fail to prove a data set was insecure
...
before marking it as insecure. One set of conditions
that can trigger this occurs naturally when rolling
DNSKEY algorithms. [RT #22309 ]
2010-11-16 01:21:49 +00:00