Mark Andrews
fdcfc6bae7
add signing -serial to rndc usage
...
(cherry picked from commit 7bb9972a1f )
2016-08-23 13:42:25 +10:00
Evan Hunt
32431c79c7
[master] fix dnstap query/response selectors
...
4427. [bug] The "query" and "response" parameters to the
"dnstap" option had their functions reversed.
(cherry picked from commit e9bd1496ed )
2016-08-19 11:41:07 +10:00
Tinderbox User
281ed127e3
regen v9_11
2016-08-19 01:08:24 +00:00
Mark Andrews
c40906dfad
4450. [port] Provide more nuanced HSM support which better matches
...
the specific PKCS11 providers capabilities. [RT #42458 ]
(cherry picked from commit 8ee6f289d8 )
2016-08-19 08:05:47 +10:00
Witold Krecicki
f9e49fd80e
4449. [test] Fix catalog zones test on slower systems. [RT #42997 ]
2016-08-18 18:17:17 +02:00
Mark Andrews
7204d08a31
4447. [tuning] Allow the fstrm_iothr_init() options to be set using
...
named.conf to control how dnstap manages the data
flow. [RT #42974 ]
(cherry picked from commit 934837913f )
2016-08-18 11:16:58 +10:00
Tinderbox User
a0c1ad17ab
update copyright notice / whitespace
2016-08-17 23:46:03 +00:00
Evan Hunt
f5898cf348
[v9_11] fix dyndb issues; isc_errno_toresult()
...
4445. [cleanup] isc_errno_toresult() can now be used to call the
formerly private function isc__errno2result().
[RT #43050 ]
4444. [bug] Fixed some issues related to dyndb: A bug caused
braces to be omitted when passing configuration text
from named.conf to a dyndb driver, and there was a
use-after-free in the sample dyndb driver. [RT #43050 ]
Patch for dyndb driver submitted by Petr Spacek at Red Hat.
(cherry picked from commit 3390d74e33 )
2016-08-17 11:39:42 -07:00
Mark Andrews
ab598428c8
update dyndb_init inline documentationi [RT #43050 ]
...
(cherry picked from commit 8c2c6b8b42 )
2016-08-17 14:12:54 +10:00
Tinderbox User
d621f10ebe
update copyright notice / whitespace
2016-08-15 23:45:57 +00:00
Mukund Sivaraman
4e9a1ad226
Fix RPZ CIDR tree insertion bug ( #43035 )
...
(cherry picked from commit 131307a70e )
2016-08-15 17:07:50 +05:30
Mark Andrews
d6a0e00dc3
add dnstap to help. [RT #42928 ]
...
(cherry picked from commit f814343d1b )
2016-08-15 11:56:37 +10:00
Mark Andrews
555469af35
4441. [cleanup] Alphabetize host's help output. [RT #43031 ]
...
(cherry picked from commit 8a98ea9e94 )
2016-08-15 11:22:08 +10:00
Mark Andrews
b4bbf49418
4439. [bug] Address race conditions getting ownernames of nodes.
...
[RT #43005 ]
(cherry picked from commit c7e021e2e6 )
2016-08-12 14:09:34 +10:00
Tinderbox User
0cfa9af7ed
regen v9_11
2016-08-12 01:08:44 +00:00
Mark Andrews
2fb6d3782b
4437. [func] Minimal-responses now has two additional modes
...
no-auth and no-auth-recursive which suppress
adding the NS records to the authority section
as well as the associated address records for the
nameservers. [RT #42005 ]
(cherry picked from commit 78e31dd187 )
2016-08-12 10:49:57 +10:00
Mark Andrews
bc09fd1365
4436. [func] Return TLSA records as additional data for MX and SRV
...
lookups. [RT #42894 ]
(cherry picked from commit bb900e62bf )
2016-08-12 10:10:30 +10:00
Mark Andrews
36be0aad8e
4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
...
will not fit into a single IPv4 encapsulated IPv6
UDP packet when transmitted over a Ethernet link.
[RT #42871 ]
(cherry picked from commit 31ffec1541 )
2016-08-12 09:43:55 +10:00
Mark Andrews
33f91e248b
4434. [protocol] Return EDNS EXPIRE option for master zones in addition
...
to slave zones. [RT #43008 ]
(cherry picked from commit bf2238b064 )
2016-08-12 09:32:29 +10:00
Evan Hunt
51227d6f16
[v9_11] error on bad parameter to 'rndc dumpdb'
...
4433. [cleanup] Report an error when passing an invalid option or
view name to "rndc dumpdb". [RT #42958 ]
(cherry picked from commit c38d989fdd )
2016-08-11 16:04:38 -07:00
Mark Andrews
9e4811dc90
4432. [testing] Hide rndc output on expected failures in logfileconfig
...
system test. [RT #27996 ]
(cherry picked from commit 12895c8d6f )
2016-08-10 13:07:05 +10:00
Tinderbox User
b0cd1a7a63
update copyright notice / whitespace
2016-08-09 00:25:59 +00:00
Mark Andrews
12b791ae20
4431. [bug] named-checkconf now checks the rate-limit clause.
...
[RT #42970 ]
2016-08-08 23:54:15 +10:00
Mark Andrews
080582dc47
4430. [bug] Lwresd died if a search list was not defined.
...
Found by 0x710DDDD At Alibaba Security. [RT #42895 ]
(cherry picked from commit 3146be6fd6 )
2016-08-08 10:23:22 +10:00
Mark Andrews
3a71cd8ca3
4429. [bug] Address potential use after free on fclose() error.
...
[RT #42976 ]
(cherry picked from commit c1915935cf )
2016-08-08 09:51:13 +10:00
Witold Krecicki
a23f742c3d
Remove spurious isc_stdio_open
2016-07-28 14:26:36 +02:00
Witold Krecicki
ba340e4469
4426. [bug] Addressed Coverity warnings. [RT #42908 ]
2016-07-27 15:45:58 +02:00
Tinderbox User
1e9517ea21
regen v9_11
2016-07-27 01:12:35 +00:00
Witold Krecicki
bd9e956e03
Fix typos in nzd2nzf test
2016-07-26 21:16:15 +02:00
Witold Krecicki
3783f45e68
Fix merge error in bin/tests/system/conf.sh.in, add missing cleanups in tests
2016-07-26 20:33:06 +02:00
Mark Andrews
c70fb599b9
add space in #error message
2016-07-26 11:28:29 +10:00
Mark Andrews
17d4581ce9
remove comma
...
(cherry picked from commit 0ac94b80e8 )
2016-07-26 11:17:52 +10:00
Tinderbox User
0ff8d59a07
regen v9_11
2016-07-26 01:11:57 +00:00
Mark Andrews
b62db16a58
named-rrchecker is also in ${prefix}/bin
2016-07-26 07:12:00 +10:00
Mark Andrews
72cc860dd2
4425. [bug] arpaname and dnstap-read were not being installed
...
into ${prefix}/bin. Tidy up installation issues
with CHANGE 4421. [RT #42910 ]
(cherry picked from commit 711aff9fa7 )
2016-07-26 06:54:19 +10:00
Witold Krecicki
a6d873b8bc
Fix merge error in bin/tools/Makefile.in
2016-07-25 13:15:27 +02:00
Mark Andrews
b7161f9898
4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
...
to provide feedback to the trust-anchor administrators
about how key rollovers are progressing as per
draft-ietf-dnsop-edns-key-tag-02. This can be
disabled using 'trust-anchor-telemetry no;'.
[RT #40583 ]
(cherry picked from commit f20179857a )
2016-07-22 20:03:06 +10:00
Evan Hunt
2fee8782a6
[v9_11] copyrights
2016-07-21 20:06:52 -07:00
Tinderbox User
adb0ac475d
update copyright notice / whitespace
2016-07-21 23:46:46 +00:00
Evan Hunt
b83e886b30
[v9_11] silence clang warnings
...
4422. [port] Silence clang warnings in dig.c and dighost.c.
[RT #42451 ]
2016-07-21 15:54:00 -07:00
Evan Hunt
ee9982dbd9
[v9_11] add missing file
2016-07-21 12:45:39 -07:00
Evan Hunt
12c8dec44b
[v9_11] print.h
2016-07-21 11:25:26 -07:00
Evan Hunt
801707fe19
[v9_11] store "addzone" zone config in a NZD database
...
4421. [func] When built with LMDB (Lightning Memory-mapped
Database), named will now use a database to store
the configuration for zones added by "rndc addzone"
instead of using a flat NZF file. This improves
performance of "rndc delzone" and "rndc modzone"
significantly. Existing NZF files will
automatically by converted to NZD databases.
To view the contents of an NZD or to roll back to
NZF format, use "named-nzd2nzf". To disable
this feature, use "configure --without-lmdb".
[RT #39837 ]
2016-07-21 11:14:16 -07:00
Mark Andrews
529d8a7cf1
4420. [func] nslookup now looks for AAAA as well as A by default.
...
[RT #40420 ]
(cherry picked from commit e7e7efe901 )
2016-07-22 03:28:28 +10:00
Witold Krecicki
d9d7b2657e
4419. [bug] Don't cause undefined result if the label of an
...
entry in catalog zone is changed. [RT #42708 ]
2016-07-21 13:07:56 +02:00
Mark Andrews
a1ddbcb37a
more copyright cleanups
...
(cherry picked from commit 592127b7fa )
2016-07-21 19:16:24 +10:00
Tinderbox User
5347c0fcb0
regen v9_11
2016-07-21 07:53:18 +00:00
Mark Andrews
704e6c8876
copyright
...
(cherry picked from commit 813e9f7ee2 )
2016-07-21 17:02:22 +10:00
Evan Hunt
d907426f0f
[v9_11] fix keymgr with low prepublication interval
...
4417. [bug] dnssec-keymgr could fail to create successor keys
if the prepublication interval was set to a value
smaller than the default. [RT #42820 ]
Patch submitted by Nis Wechselberg (enbewe@enbewe.de ).
2016-07-20 15:14:20 -07:00
Evan Hunt
f0fe1930a2
[v9_11] normalize domain names for trailing dots
...
4416. [bug] dnssec-keymgr: Domain names in policy files could
fail to match due to trailing dots. [RT #42807 ]
Patch submitted by Armin Pech (mail@arminpech.de ).
2016-07-20 14:36:12 -07:00