Commit Graph

220 Commits

Author SHA1 Message Date
Andreas Gustafsson
9c11326b18 237. [bug] If connect() returned ENOBUFS when the resolver was
initiating a TCP query, the socket didn't get destroyed,
                        and the server did not shut down cleanly.  [RT #107]
2000-06-05 22:31:54 +00:00
James Brister
c78dc8b001 Added new listen-on-v6 config file statement.
Consider it a config file error if a listen-on statement has an IPv6
address in it, or a listen-on-v6 statement has an IPv4 address in it.
2000-06-05 22:08:50 +00:00
James Brister
d5399cc351 Allow a trusted-key's first field (domain-name) be either a quoted or
an unquoted string, instead of requiring a quoted string.
2000-06-05 20:32:01 +00:00
James Brister
40f349ad1f Convert all config structure integer values to unsigned integer
(isc_uint32_t) to match grammer.
2000-06-05 09:17:01 +00:00
Mark Andrews
ac3b769801 232. [bug] Allow slave zones to not have a file. 2000-06-05 03:44:17 +00:00
James Brister
69b691c962 Support new 'port' clause in config file options section. Causes
'listen-on', 'masters' and 'also-notify' statements to use its value
instead of default (53).
2000-06-04 19:51:22 +00:00
Brian Wellington
dba20696eb dst update 2000-06-02 19:04:12 +00:00
Andreas Gustafsson
e4eed779ed removed item [230], it was a duplicate of [217] 2000-06-02 17:33:07 +00:00
James Brister
98c2f9a111 Support config file trusted-keys and also-notify statemenets in views.
Support config file sig-validity-interval statement in options, views
and zone statements (master zones only).

Logging messages in config module stripped of trailing period.
2000-06-02 15:12:36 +00:00
David Lawrence
705cb05a18 227. [cleanup] The enumerated identifiers dns_rdataclass_*,
dns_rcode_*, dns_opcode_*, and dns_trust_* are
                        also now cast to their appropriate types.
2000-06-02 02:53:31 +00:00
Andreas Gustafsson
a3c0a79b61 dns_name_totext() now always prints the root name as '.',
even when omit_final_dot is true
2000-06-02 00:14:02 +00:00
David Lawrence
0b056755b2 225. [cleanup] The enumerated dns_rdatatype_* identifiers are now
cast to dns_rdatatype_t via macros of their same name
                        so that they are of the proper integral type wherever
                        a dns_rdatatype_t is needed.

(And a few prototypes that I recently bogusly changed to take "int" parameters
in place of "dns_rdatatype_t" to accomodate the type of an enum identifier
have been reverted to again properly take a dns_rdatatype_t.)
2000-06-01 21:42:42 +00:00
David Lawrence
174a4f7b80 224. [cleanup] The entire project builds cleanly with gcc's
-Wcast-qual and -Wwrite-strings warnings enabled,
                        which is now the default when using gcc.  (Warnings
                        from confparser.c, because of yacc's code, are
                        unfortunately to be expected.)

 223.   [func]          Several functions were reprototyped to qualify one
                        or more of their arguments with "const".  Similarly,
                        several functions that return pointers now have
                        those pointers qualified with const.
2000-06-01 19:39:26 +00:00
Andreas Gustafsson
0640343258 222. [bug] The global 'also-notify' option was ignored. 2000-06-01 00:39:45 +00:00
Andreas Gustafsson
c8df84cb38 edited entry 217: also-notify and trusted-keys
are now supported in view statements (it said 'supported in config
files', which is true but not a recent change)
2000-06-01 00:39:09 +00:00
Andreas Gustafsson
dccfe96a44 RT #127 2000-06-01 00:32:37 +00:00
Michael Graff
d98c74e2ec set the default destination port in the view, and use it when returning addresses from the adb. 2000-06-01 00:30:58 +00:00
Brian Wellington
d03d452499 Signed truncated messages more correctly follow the respective specs. 2000-06-01 00:28:43 +00:00
Brian Wellington
75f6c57d95 When an rdataset is signed, its ttl is normalized based on the signature
validity period.
2000-05-31 22:01:39 +00:00
James Brister
f34984369f New alto-notify and trusted-keys view options in config file. 2000-05-31 13:13:04 +00:00
Andreas Gustafsson
7cd4c3ddd1 The 'cache-ttl' and 'ncache-ttl' options now work 2000-05-26 23:17:56 +00:00
Andreas Gustafsson
76a191c420 failures at certain points in request processing could cause
the assertion INSIST(client->lockview == NULL) to be triggered
2000-05-26 22:43:36 +00:00
Andreas Gustafsson
fef059dcec 214. [func] New public function isc_netaddr_format(), for
formatting network addresses in log messages.
2000-05-26 16:40:44 +00:00
Brian Wellington
5f80c1428b Don't leak memory when reloading the zone if an update-policy clause was
present in the old zone.
2000-05-26 00:48:59 +00:00
Brian Wellington
af60263664 Added dns_tsigkey_attach & _detach, to simplify reference counting.
Added dns_message_get/settsigkey to deuglify tsig key handling in message code.
2000-05-26 00:16:46 +00:00
Andreas Gustafsson
b3aaa872e1 211. [func] The 'key' and 'server' statements can now occur
inside 'view' statements.

 210.   [bug]           The 'allow-transfer' option was ignored for slave
                        zones, and the 'transfers-per-ns' option was
                        was ignored for all zones.
2000-05-25 22:25:54 +00:00
Olafur Gudmundsson
389f2ccc2f Upgrading openssl to latest released version 0.9.5
there are no major fixes in here but couple of bug fixes that
	may affect operation in some cases. I updated rename.h to
	make sure all symbols with T have dst__openssl prefix.
	Any bugs found in this source code should be reported to the
	openssl people.
	Olafur
2000-05-25 18:27:42 +00:00
David Lawrence
6deb631b20 208. [func] Added ISC_OFFSET_MAXIMUM for the maximum value
of an isc_offset_t.
2000-05-25 03:34:34 +00:00
Brian Wellington
b1d234eb75 The dnssec tools properly use the logging subsystem and share more code. 2000-05-24 23:54:43 +00:00
Brian Wellington
a9bc95f22e dst now stores the key name as a dns_name_t, not a char *. 2000-05-24 23:13:32 +00:00
David Lawrence
bcea992514 also turn off IRIX warning 1552, variable set but not used, in dnssafe,openssl 2000-05-24 22:16:34 +00:00
David Lawrence
3c8e458ed2 205. [cleanup] On IRIX, turn off warning 1692 ("prototyped function
redeclared without prototype") when compiling in
                        the lib/dns/sec/{dnssafe,openssl} directories, which
                        are code imported from outside sources.

... and on HP/UX, pass -Wl,+vnocompatwarnings as part of LIBS, no CC,
so it only appears on the command line when linking.
2000-05-24 20:04:47 +00:00
David Lawrence
7ffc4c63ac 204. [cleanup] On HP/UX, Pass +vnocompatwarnings to the linker
to quiet the warnings that "The linked output may not
                        run on a PA 1.x system."
2000-05-24 19:42:00 +00:00
Brian Wellington
19d1b1667d notify and zone soa queries are now tsig signed when appropriate. 2000-05-24 17:30:41 +00:00
David Lawrence
20b20b2394 202. [func] isc_lex_getsourceline() changed from returning int
to returning unsigned long, the type of its underlying
                        counter.
2000-05-24 15:07:59 +00:00
Andreas Gustafsson
a89b06a49c sdig is gone 2000-05-24 04:03:05 +00:00
Andreas Gustafsson
9c987b20b9 --- 9.0.0b3 released --- 2000-05-23 14:47:18 +00:00
Andreas Gustafsson
7e9bfde795 200. [bug] Failures in sending query responses to clients
(e.g., running out of network buffers) were
                        not logged.
2000-05-22 17:00:27 +00:00
Andreas Gustafsson
4c94069644 199. [bug] isc_heap_delete() sometimes violated the heap
invariant, causing timer events not to be posted
			when due.

Specifically, isc_heap_delete() moved the last element of the heap to
the vacated position and then attempted to restore the heap invariant
by calling sink_down().  This works when the last element has a lower
priority than the one being deleted, and this is often the case
because the last element tends to have a low priority.  However, it is
not guaranteed to be the lowest.  When deleting an item of a lower
priority than the last item, restoring the invariant requires a call
to float_up(), not sink_down().

isc_heap_delete_now calls either float_up() or sink_down() as needed,
and INSISTs have been added to verify that the heap invariant indeed
holds after the calls.
2000-05-22 02:53:52 +00:00
Michael Graff
533131b93b document changes I've made today 2000-05-20 01:32:30 +00:00
Andreas Gustafsson
73abbeb582 195. [bug] Including the NXT record of the root domain
in a negative response caused an assertion
                        failure.
2000-05-19 21:53:33 +00:00
Andreas Gustafsson
538971e27d 194. [doc] The PDF version of the Administrator's Reference
Manual is no longer included in the ISC BIND9
                        distribution.
2000-05-19 18:14:17 +00:00
Brian Wellington
c50936eb40 changed dst_key_free() prototype, misc. dst cleanup 2000-05-19 00:20:59 +00:00
James Brister
8977ab7ca0 Zone configuration validation is now done at end of config file parsing,
and before loading callbacks.
2000-05-18 23:20:21 +00:00
David Lawrence
dc97fe4ed0 Added configuration tweaks for UnixWare:
-- set compiler flags, yacc program.
	-- define HAVE_UNIXWARE_SIGWAIT for one arg sigwait semantics.
	-- provide for inclusion of netinet/in6.h for IPv6 support.

Don't bother searching for netinet6/in6.h, just unconditionally declare
it is needed on BSD/OS.
2000-05-18 22:35:47 +00:00
Andreas Gustafsson
95be83b467 DNSSEC tools now have a new home 2000-05-18 21:45:10 +00:00
David Lawrence
6fa1cb5754 189. [func] isc_time_secondsastimet(), a new function, will ensure
that the number of seconds in an isc_time_t does not
                        exceed the range of a time_t, or return ISC_R_RANGE.
                        Similarly, isc_time_now(), isc_time_nowplusinterval(),
                        isc_time_add() and isc_time_subtract() now check the
                        range for overflow/underflow.  In the case of
                        isc_time_subtract, this changed a calling requirement
                        (ie, something that could generate an assertion)
                        into merely a condition that returns an error result.
                        isc_time_add() and isc_time_subtract() were void-
                        valued before but now return isc_result_t.

The seconds member isc_time_t on Unix platforms was changed from time_t
to unsigned int.

unix/time.c now uses macros for nanoseconds per second, nanoseconds per
microsecond and microseconds per second to make sure that the right
number of zeros appears each place the constant is used.

unix/time.c functions which take initialized isc_(interval|time)_t arguments
INSIST() that the nanoseconds value is less than one full second.

unix/time.c's isc_time_microdiff was broken because it did multiplication and
addition with unsigned integers and attempted to set them a 64 bit int to
avoid overflow, but C's ints don't promote to 64 bits on machines that only
have 32 bit longs.  Fixed.

Added all the pertinent documentation to time.h.
2000-05-18 17:08:32 +00:00
Andreas Gustafsson
52b784e2a6 log warning message about out-of-zone data in zone transfers
instead of ignoring it silently
2000-05-18 16:49:54 +00:00
Mark Andrews
edb8ffbbf3 187. [func] isc_ratelimter_enqueue() has an additional arguement
'task'.
2000-05-18 04:45:48 +00:00
Mark Andrews
59abb512d3 186 [func] dns_request_getresponse() has an additional arguement
'preserve_order'.
2000-05-18 02:59:20 +00:00