Commit Graph

2686 Commits

Author SHA1 Message Date
Mark Andrews
9efce3c577 3981. [bug] Cache DS/NXDOMAIN independently of other query types.
[RT #37467]

(cherry picked from commit 72775a79fe)
2014-10-18 13:09:40 +11:00
Mark Andrews
27231c6877 allow for the set of ttls to be empty
(cherry picked from commit 44ef2206d7)
2014-10-16 14:47:02 +11:00
Mark Andrews
bd5d920bd5 make test more robust in the face of server failures 2014-10-16 12:34:29 +11:00
Evan Hunt
835ec62f82 [v9_10] add redirect zone to checkconf -z test 2014-10-09 18:30:50 -07:00
Mark Andrews
74741bc952 3971. [bug] Reduce the cascasding failures due to a bad $TTL line
in named-checkconf / named-checkzone. [RT #37138]

(cherry picked from commit c81d56c03e)
2014-10-05 08:30:29 +11:00
Mark Andrews
4c12b6709a verifying inline zones work with views requires crypto to be configured 2014-10-04 18:06:25 +10:00
Evan Hunt
e0e6797c03 [v9_10] add delv system test
3969.	[test]		Added 'delv' system test. [RT #36901]

(cherry picked from commit 12002ea49e)
2014-10-02 22:37:50 -07:00
Tinderbox User
210ba0547c update copyright notice 2014-10-02 23:45:51 +00:00
Mark Andrews
1b9a5c6516 3967. [test] Add test for inlined signed zone in multiple views
with different DNSKEY sets. [RT #35759]

(cherry picked from commit b24061719c)
2014-10-03 08:00:22 +10:00
Mark Andrews
5bbdd6cc6b SIG(0) update forwarding testing requires crypto be configured
(cherry picked from commit a837c939c4)
2014-10-02 11:08:07 +10:00
Tinderbox User
d5a5ca7225 update copyright notice 2014-09-30 23:46:53 +00:00
Mark Andrews
a6869655d6 3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
BADSIG.  [RT #37216]
2014-10-01 07:37:27 +10:00
Mark Andrews
7e2d191c0a 3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
(cherry picked from commit c83b91fb63)
2014-10-01 07:17:42 +10:00
Tinderbox User
c16cf64ba5 update copyright notice 2014-09-29 23:45:52 +00:00
Mark Andrews
d8aa4db790 use RANDFILE rather than /dev/urandom
(cherry picked from commit 4bc581ca31)
2014-09-29 23:39:22 +10:00
Mark Andrews
eeafb33f52 3958. [bug] Detect when writeable files have multiple references
in named.conf. [RT #37172]

(cherry picked from commit 386d6c08167bc048dfd20e3bba051a5f9d3cc545)
2014-09-29 10:51:14 +10:00
Mark Andrews
c85116cb56 3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
and ECDSAP384SHA384. [RT #37183]

(cherry picked from commit 80169c379d)
2014-09-29 10:19:52 +10:00
Mark Andrews
1809c690e3 3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
(cherry picked from commit 9a36fb86f5)
2014-09-27 12:14:47 +10:00
Mark Andrews
44483c28cb give the nameserver a little longer to response
(cherry picked from commit 06e28e50bd)
2014-09-18 10:08:17 +10:00
Tinderbox User
0253b39064 update copyright notice 2014-09-05 23:45:59 +00:00
Evan Hunt
9f6a6d24dc [v9_10] [rt37057] server-id tests
3944.	[test]		Added a regression test for "server-id". [RT #37057]

(cherry picked from commit c9e976dc43)
2014-09-05 09:59:56 -07:00
Mark Andrews
99a3873ba5 3942. [bug] Wildcard responses from a optout range should be
marked as insecure. [RT #37072]
2014-09-04 13:58:15 +10:00
Mark Andrews
a29fb8cef7 update copyrights 2014-08-30 12:29:06 +10:00
Tinderbox User
91ed46dd3a update copyright notice 2014-08-29 23:45:51 +00:00
Evan Hunt
4ab9bb2b27 [v9_10] fix geoip asnum matching
3935.	[bug]		"geoip asnum" ACL elements would not match unless
			the full organization name was specified.  They
			can now match against the AS number alone (e.g.,
			AS1234). [RT #36945]
2014-08-28 21:39:43 -07:00
Mark Andrews
e30f7e362d 3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
sit-secrets documentation. [RT #36980]

(cherry picked from commit 7c73ac5e13)
2014-08-29 14:36:55 +10:00
Evan Hunt
3df390931e [v9_10] fixes to checkconf test, HIP casecompare
3933.	[bug]		Corrected the implementation of dns_rdata_casecompare()
			for the HIP rdata type.  [RT #36911]

3932.	[test]		Improved named-checkconf tests. [RT #36911]

(cherry picked from commit 0c2313eb36)
2014-08-27 21:36:46 -07:00
Tinderbox User
8f39d695d9 update copyright notice 2014-08-23 23:45:48 +00:00
Tinderbox User
d58d0e8801 update copyright notice 2014-08-22 23:45:56 +00:00
Evan Hunt
995aaaf785 [v9_10] add to rndc test
3928.	[test]		Improve rndc system test. [RT #36898]

(cherry picked from commit 2401ee51d83a4cd9101398f30679fa4e6046c582)
2014-08-22 16:41:38 -07:00
Mark Andrews
fb5ab2d4ae 3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917
(cherry picked from commit 840d6a4614)
2014-08-22 16:33:06 +10:00
Mark Andrews
0597c5fd5e 3921. [bug] AD was inappopriately set on RPZ responses. [RT #36833]
(cherry picked from commit cef76ee5bd)
2014-08-22 15:46:35 +10:00
Tinderbox User
4d5ff10a0a update copyright notice 2014-08-21 23:45:46 +00:00
Mark Andrews
d5f5d2d502 3917. [bug] dig, nslookup and host now continue on names that are
too long after applying a search list elements.
                        [RT #36892]
2014-08-21 18:06:46 +10:00
Tinderbox User
81c00e3f87 update copyright notice 2014-08-18 23:45:46 +00:00
Evan Hunt
1058966060 [v9_10] backport doc fixes from master 2014-08-18 14:01:40 -07:00
Tinderbox User
addfa6e30b update copyright notice 2014-08-07 23:45:43 +00:00
Evan Hunt
a766d4c1d2 [v9_10] [36737] allow zero-length URI and CAA fields
3914.	[bug]		Allow the URI target and CAA value fields to
			be zero length. [RT #36737]

(cherry picked from commit cfe32752a6)
2014-08-06 17:41:16 -07:00
Tinderbox User
be5457a1e5 update copyright notice 2014-08-02 23:45:46 +00:00
Mark Andrews
140ebff1cf 3908. [bug] rndc now differentiates between a zone in multiple
views and a zone that doesn't exist at all. [RT #36691]

(cherry picked from commit c38341ec43)
2014-08-02 14:43:57 +10:00
Mark Andrews
b377bd505b adjust range 2014-07-31 20:33:10 +10:00
Tinderbox User
79ad2fed7b update copyright notice 2014-07-29 23:45:45 +00:00
Evan Hunt
eb898fa698 [v9_10] add CAA rdata support
3056.	[protocol]	Added support for CAA record type (RFC 6844).
			[RT #36625]
2014-07-29 08:40:50 -07:00
Mark Andrews
6ba941664d 3899. [bug] "request-ixfr" is only applicable to slave and redirect
zones. [RT #36608]

Conflicts:
	CHANGES
2014-07-25 14:25:32 +10:00
Mark Andrews
c1f186e453 3897. [bug] RPZ summary information was not properly being updated
after a AXFR resulting in changes sometimes being
                        ignored.  [RT #35885]

(cherry picked from commit ac5ed74860)
2014-07-22 10:58:34 +10:00
Mark Andrews
6b51798ec4 update copyrights 2014-07-08 12:41:25 +10:00
Mark Andrews
4b8ee3ad60 rename dnssec/ns7/split-rrsig.in 2014-07-08 11:13:01 +10:00
Mark Andrews
5ee1a66864 3892. [bug] Setting '-t aaaa' in .digrc had unintended side
effects. [RT #36452]
2014-07-08 02:01:05 +10:00
Mark Andrews
f2d672a7e0 3890. [bug] RRSIG sets that were not loaded in a single transaction
at start up where not being correctly added to
                        re-signing heaps.  [RT #36302]

(cherry picked from commit 63e1ac1e09)
2014-07-07 12:07:44 +10:00
Mark Andrews
28efa89818 make test for nsec3param more robust
(cherry picked from commit 62275d5306)
2014-06-27 15:51:29 +10:00