Commit Graph

6049 Commits

Author SHA1 Message Date
Evan Hunt
ffff5d6792 [master] fix dns_request_createvia assert
3474.	[bug]		nsupdate could assert when the local and remote
			address families didn't match. [RT #22897]
2013-01-23 15:39:05 -08:00
Evan Hunt
9a0dd99a75 [master] fix incorrect nsec3 check
- check for NSEC3 in empty nodes when not due to optout delegations
    - fixed typo in output ("Bad record NSEC record")
    - incidentally fixed an error in signzone that caused an
      incorrect warning about missing DNSKEYs when using -S
      and -3 together

3473.	[bug]		dnssec-signzone/verify could incorrectly report
			an error condition due to an empty node above an
			opt-out delegation lacking an NSEC3. [RT #32072]
2013-01-23 14:56:00 -08:00
Evan Hunt
2154c01912 [master] default -U to ncpus, not to -n
3471.	[bug]		The number of UDP dispatches now defaults to
			the number of CPUs even if -n has been set to
			a higher value. [RT #30964]
2013-01-22 18:07:05 -08:00
Evan Hunt
a0a1003895 Merge branch 'master' of ssh://repo/proj/git/prod/bind9 2013-01-22 16:13:09 -08:00
Evan Hunt
214836c184 [master] dump masterfile after successful xfrin
3470.	[bug]		Slave zones could fail to dump when successfully
			refreshing after an initial failure. [RT #31276]
2013-01-22 15:49:50 -08:00
Tinderbox User
b95504f9a7 update copyright notice 2013-01-22 23:45:48 +00:00
Evan Hunt
cbd1fa092e [master] DLZ fixes
- handle malformed answers from DLZ better:
 - handle dlz_lookup errors better:
   when the first lookup of a name returns an unexpected failure code,
   we return it to the caller rather than continuing on to look up
   the wildcard. we now only continue processing if the return from
   the first lookup was either ISC_R_SUCCESS or ISC_R_NOTFOUND.

 - improved backward-compatibility for dlz_version:
   added a DLZ_DLOPEN_AGE value indicating how many versions
   back from the current DLZ_DLOPEN_VERSION named will support
2013-01-22 15:13:08 -08:00
Tinderbox User
0a8a14d513 update copyright notice 2013-01-21 23:45:48 +00:00
Evan Hunt
a631c8d9b8 [master] prevent ixfr/ns1 being removed 2013-01-21 14:16:15 -08:00
Evan Hunt
30a7cf3957 [master] add 10.53.0.8 address 2013-01-21 12:36:41 -08:00
Tinderbox User
5ac5300fdf update copyright notice 2013-01-17 23:46:25 +00:00
Evan Hunt
71f8edccba [master] fix DNS64 with RPZ-remapped A records
3468.	[security]	RPZ rules to generate A records (but not AAAA records)
			could trigger an assertion failure when used in
			conjunction with DNS64. [RT #32141]
2013-01-17 11:23:30 -08:00
Curtis Blackburn
c8803902d6 [bug] Added checks in dnssec-keygen and dnssec-settime to check for
delete date < inactive date. [RT #31719]
2013-01-17 10:59:16 -06:00
Tinderbox User
dc3d68d6fe update copyright notice 2013-01-11 23:46:02 +00:00
Mark Andrews
c8bfcec3c9 silence compiler warning 2013-01-11 17:38:58 +11:00
Mark Andrews
b5d3508e8a silence compiler warning 2013-01-11 17:30:21 +11:00
Evan Hunt
b3d116c299 [master] fixed clientinfo version check
3466.	[contrib]	Corrected the DNS_CLIENTINFOMETHODS_VERSION check
			in DLZ example driver. [RT #32275]
2013-01-10 19:57:21 -08:00
Evan Hunt
dc6cea0448 [master] update openssl pkcs11 patches
3464.	[maint]		Updates to PKCS#11 openssl patches, supporting
			versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
2013-01-10 18:21:50 -08:00
Tinderbox User
48cbc7cd1e regen master 2013-01-11 01:04:23 +00:00
Tinderbox User
5c6b95ba1b update copyright notice 2013-01-10 23:46:00 +00:00
Tinderbox User
d8620c7234 regen master 2013-01-10 20:19:56 +00:00
Evan Hunt
3b9d9ad58b [master] doc clarification about dig & resolv.conf 2013-01-10 11:48:46 -08:00
Mark Andrews
4801931443 3461. [bug] Negative responses could incorrectly have AD=1
set. [RT #32237]
2013-01-10 23:09:08 +11:00
Mark Andrews
dab4aac006 3460. [bug] Only link against readline where needed. [RT #29810] 2013-01-10 17:34:28 +11:00
Evan Hunt
578e319607 [master] add -J option to checkzone/compilezone
3459.	[func]		Added -J option to named-checkzone/named-compilezone
			to specify the path to the journal file. [RT #30958]
2013-01-09 16:56:46 -08:00
Tinderbox User
b941edbeb5 update copyright notice 2013-01-09 23:45:53 +00:00
Mark Andrews
c07c2a862e 3458. [bug] Return FORMERR when presented with a overly long
domain named in a request. [RT #29682]
2013-01-10 10:30:15 +11:00
Mark Andrews
f1c1aab2c9 3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836] 2013-01-10 08:26:31 +11:00
Mark Andrews
1a592aae29 test eighth interface 2013-01-09 19:08:59 +11:00
Tinderbox User
afe7d4b934 update copyright notice 2013-01-08 23:45:50 +00:00
Mark Andrews
fc0bfa07c7 3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
failed. [RT #31960]
2013-01-09 07:40:27 +11:00
Tinderbox User
49503f1d9f update copyright notice 2013-01-05 23:45:47 +00:00
Mark Andrews
25b95d31ce 3450. [bug] Stop logfileconfig system test spam system logs.
[RT #32315]

Squashed commit of the following:

commit ad40744e2c7dc253b70857bb229def5dd194b418
Author: Mark Andrews <marka@isc.org>
Date:   Fri Jan 4 17:24:45 2013 +1100

    logfileconfig spams the system log files
2013-01-06 07:56:10 +11:00
Tinderbox User
6fe42ff85c update copyright notice 2013-01-04 23:45:53 +00:00
Evan Hunt
cb0a74fd8d [master] show signzone errors in pkcs11 test 2013-01-03 19:55:34 -08:00
Evan Hunt
222d38735f [master] allow-query-on works now
3448.	[bug]		The allow-query-on ACL was not processed correctly.
			[RT #29486]
2013-01-03 15:13:45 -08:00
Tinderbox User
d91e5a75df update copyright notice 2013-01-02 23:45:51 +00:00
Tinderbox User
fd6efb2c62 regen 2013-01-02 23:30:08 +00:00
Tinderbox User
19e593a7a5 regen master 2013-01-02 01:04:26 +00:00
Tinderbox User
024cf50d12 update copyright notice 2013-01-01 23:45:47 +00:00
Tinderbox User
b7d5c2f26d regen 2013-01-01 23:30:07 +00:00
Tinderbox User
cafd7a121f regen master 2013-01-01 01:04:27 +00:00
Mark Andrews
ae395e5f97 remove extranous rdata in nxrrset call as it is not ingnored in Net::DNS 0.70 2012-12-21 14:16:41 +11:00
Mark Andrews
ab91ece513 sign_tcp_continuation doesn't work with the newer versions of
Net:DNS.  Code has been submitted so we don't need to use
the sign_tcp_continuation hack in future.
2012-12-21 12:58:58 +11:00
Tinderbox User
9191b6c9e8 update copyright notice 2012-12-20 23:45:48 +00:00
Mark Andrews
b372587363 TSIG no longer has a mac_size method; arcount no longer need to be adjusted 2012-12-21 00:30:14 +11:00
Mark Andrews
f127a35b6c adjust test to account for blank owner after origin now being rejected 2012-12-19 14:37:56 +11:00
Mark Andrews
4040ff974c -H not -i sets iterations 2012-12-19 14:18:05 +11:00
Mark Andrews
58c543d840 remove redundant $ORIGINs 2012-12-19 13:34:31 +11:00
Mark Andrews
8462dfb880 3443. [bug] The NOQNAME proof was not being returned from cached
insecure responses. [RT #21409]
2012-12-19 09:55:02 +11:00