Tinderbox User
4c3f28eb0e
Merge branch 'prep-release' into v9_11
v9.11.6rc1
2019-02-21 04:12:26 +00:00
Tinderbox User
5f064519d5
rebuild configure
2019-02-21 04:08:01 +00:00
Evan Hunt
6f19b4c052
Merge branch 'broken-test' into v9_11
2019-02-20 19:54:41 -08:00
Evan Hunt
946ca23f51
fixed an error in the mkeys system test
2019-02-20 19:54:41 -08:00
Tinderbox User
07661c6ca2
Merge branch 'prep-release' into v9_11
2019-02-20 19:54:40 -08:00
Tinderbox User
4738d62e1c
doc rebuild
2019-02-20 19:54:40 -08:00
Tinderbox User
4b1b4e1f78
prep 9.11.6rc1
2019-02-20 19:54:38 -08:00
Evan Hunt
6a70b17582
Merge branch 'security-dlz-axfr-deny-broken-security-v9_11' into 'security-v9_11'
...
denied axfr requests were not effective for writable DLZ zones
See merge request isc-private/bind9!57
2019-02-20 19:54:23 -08:00
Mark Andrews
2a76f24b14
add CHANGES and release notes entries
...
(cherry picked from commit 354ad18a12e84e5c660ce8e08e56382e529d8b2c)
2019-02-20 19:54:23 -08:00
Evan Hunt
7192ed9236
Merge 'keytag-memleak' into security-v9_11
2019-02-20 19:54:22 -08:00
Mark Andrews
34348d9ee4
denied axfr requests were not effective for writable DLZ zones
...
(cherry picked from commit d9077cd0038e59726e1956de18b4b7872038a283)
2019-02-20 19:54:22 -08:00
Mark Andrews
bf6b477994
add CHANGES and release note entries
...
(cherry picked from commit 8134c9a3f3bf46455ce4d16f2bf01e086d20f69b)
(cherry picked from commit 193e59fb06687055c675d21f1829644673ac8db2)
2019-02-20 19:54:22 -08:00
Mark Andrews
2bda5ac2e1
check that multiple KEY-TAG trust-anchor-telemetry options don't leak memory
...
(cherry picked from commit 4b1dc4a5445e9561f2208f9388cf9f9e2cfcbe51)
(cherry picked from commit f545e9dff1f0eadcdea5531ef7062324d232c716)
2019-02-20 19:54:22 -08:00
Evan Hunt
665c4ae0cf
Merge 'managed-key-assert' into security-v9_11
2019-02-20 19:54:21 -08:00
Mark Andrews
d5243a5231
silently ignore additional keytag options
...
(cherry picked from commit 36158e6c96e982768bd33d4090cbe563718534f2)
(cherry picked from commit ccca4986b3a14188becb173c4473d9eac1587f66)
2019-02-20 19:54:21 -08:00
Evan Hunt
de8b2d4a6a
use algorithm 255 for both unsupported keys
2019-02-20 19:54:21 -08:00
Matthijs Mekking
a39f1fae0b
CHANGES, notes
...
(cherry picked from commit f0eefb06d488cc99e8b4a4b7238e4a556afb7586)
2019-02-20 19:54:21 -08:00
Matthijs Mekking
8f64928e2e
Update keyfetch_done compute_tag check
...
If in keyfetch_done the compute_tag fails (because for example the
algorithm is not supported), don't crash, but instead ignore the
key.
(cherry picked from commit b1d5411569ae10830b63f07560091193646cc739)
2019-02-20 19:54:20 -08:00
Matthijs Mekking
8c2a8ca509
Add tests for mkeys with unsupported algorithm
...
These tests check if a key with an unsupported algorithm in
managed-keys is ignored and when seeing an algorithm rollover to
an unsupported algorithm, the new key will be ignored too.
(cherry picked from commit 144cb53d0ae3aa5e6e3123720b603f9ab2bd1fa9)
2019-02-20 19:54:20 -08:00
Matthijs Mekking
acae423ef4
Don't free key in compute_tag in case of failure
...
If `dns_dnssec_keyfromrdata` failed we don't need to call
`dst_key_free` because no `dstkey` was created. Doing so
nevertheless will result in an assertion failure.
This can happen if the key uses an unsupported algorithm.
(cherry picked from commit 7a1ca39b950b7d5230b605ac60f15a1cb94e3d69)
2019-02-20 19:54:20 -08:00
Evan Hunt
260d30edc0
Merge branch '823-masterformat-test-fix-v9_11' into 'v9_11'
...
fix broken masterformat test
See merge request isc-projects/bind9!1555
2019-02-20 22:41:22 -05:00
Evan Hunt
1702187676
fix broken masterformat test
...
- dig command had the @ parameter in the wrong place
- private-dnskey and private-cdnskey are queried in a separate
loop, which strips 'private-' from the name to determine the qtype
(cherry picked from commit bc7b34d6ef )
2019-02-20 22:30:09 -05:00
Evan Hunt
a8067ebf5e
Merge branch 'each-enable-threads-v9_11' into 'v9_11'
...
enable threads by default on openbsd 6.2 and higher
See merge request isc-projects/bind9!1553
2019-02-20 22:25:00 -05:00
Evan Hunt
bf39e98daf
CHANGES
...
(cherry picked from commit 60125f1ecc )
2019-02-20 19:12:40 -08:00
Evan Hunt
87840b3477
enable threads by default on openbsd 6.2 and higher
...
(cherry picked from commit 95fff9538f )
2019-02-20 19:12:40 -08:00
Evan Hunt
3bd0ed80a4
Merge branch 'each-fix-timer-test-v9_11' into 'v9_11'
...
timer_test failed to compile if cmocka was enabled but threads were not
See merge request isc-projects/bind9!1552
2019-02-20 22:11:35 -05:00
Evan Hunt
4c15bbfb50
timer_test failed to compile if cmocka was enabled but threads were not
...
(cherry picked from commit c73e3175c7 )
2019-02-20 19:00:26 -08:00
Mark Andrews
267758962c
Merge branch '884-patches-to-review-v9_11' into 'v9_11'
...
Correct errno to result translation
See merge request isc-projects/bind9!1541
2019-02-19 18:33:22 -05:00
Mark Andrews
212e126fb8
add CHANGES
...
(cherry picked from commit a0c0d76029 )
2019-02-20 10:17:19 +11:00
Mark Andrews
47816f0ff5
correct errno to result translation
...
(cherry picked from commit 218ce34e7d )
2019-02-20 10:17:19 +11:00
Mark Andrews
46d6ca8690
Merge branch '836-building-fails-in-build-subdirectory-when-dnstap-is-enabled-v9_11' into 'v9_11'
...
Resolve "Building fails in build subdirectory when dnstap is enabled"
See merge request isc-projects/bind9!1539
2019-02-19 17:59:40 -05:00
Mark Andrews
e818eefc01
add CHANGES
...
(cherry picked from commit 3a21fdf884 )
2019-02-20 09:46:07 +11:00
Mark Andrews
28e054c36c
teach proto_c to look in the source directory for out of tree builds
...
(cherry picked from commit c0d4ff5796 )
2019-02-20 09:46:07 +11:00
Mark Andrews
fac4fe3d40
Merge branch '877-clang-scan-build-redundant-assignments-detected-v9_11' into 'v9_11'
...
Remove redundant assignments
See merge request isc-projects/bind9!1537
2019-02-19 17:30:31 -05:00
Mark Andrews
78bb82abd3
remove redundant assignment
...
(cherry picked from commit f475dc75b1 )
2019-02-19 10:26:00 +11:00
Mark Andrews
2019d4d64c
silence clang
...
(cherry picked from commit 7b60f6832e )
2019-02-19 10:25:59 +11:00
Mark Andrews
20c29a251a
don't overwrite result
...
(cherry picked from commit 70fab477b1 )
2019-02-19 10:25:13 +11:00
Mark Andrews
434fcb5f1e
remove seen_dname
...
(cherry picked from commit 63c03cdb2d )
2019-02-19 10:24:45 +11:00
Mark Andrews
66382ccd4b
Merge branch '877-clang-scan-build-redundant-assignments-detected-2-v9_11' into 'v9_11'
...
decode_NegTokenInit failed to cleanup allocated memory on error.
See merge request isc-projects/bind9!1530
2019-02-18 18:04:22 -05:00
Mark Andrews
333ce68d35
fix memory leak
...
(cherry picked from commit 7114d16098 )
2019-02-19 09:38:09 +11:00
Mark Andrews
3ea7b86492
Merge branch '877-clang-scan-build-redundant-assignments-detected-2-v9_11' into 'v9_11'
...
Add missing asserts to socket_test.c and dnstest.c
See merge request isc-projects/bind9!1525
2019-02-18 16:46:05 -05:00
Mark Andrews
d50b1ecd9c
assert result is ISC_R_SUCCESS
...
(cherry picked from commit 76a1c1531a )
2019-02-19 08:00:30 +11:00
Mark Andrews
57a00e7b6b
Merge branch 'u/fanf2/dnssec-keymgr-man-v9_11' into 'v9_11'
...
Improve dnssec-keymgr manual
See merge request isc-projects/bind9!1521
2019-02-18 00:10:03 -05:00
Tony Finch
33cdef544d
Improve dnssec-keymgr manual
...
Illustrate the syntax for the policy options, with semicolons.
Explicitly mention the "default" policy.
Fix a few typos and remove some redundant wording.
(cherry picked from commit 7ee56e2abd )
2019-02-18 15:46:24 +11:00
Evan Hunt
8a2a43b742
Merge branch '879-dnssec-checkds-help-v9_11' into 'v9_11'
...
Correct path in dnssec-checkds help
See merge request isc-projects/bind9!1517
2019-02-14 16:11:32 -05:00
Petr Menšík
e7e85d37b6
Correct path in dnssec-checkds help
...
(cherry picked from commit 7bd544e795 )
2019-02-14 12:53:50 -08:00
Mark Andrews
abd00c4d4e
Merge branch '871-add-a-ci-check-for-missing-prereq.sh-scripts-v9_11' into 'v9_11'
...
Add a CI check for missing prereq.sh scripts
See merge request isc-projects/bind9!1509
2019-02-11 17:20:04 -05:00
Mark Andrews
8d2790af06
add util/check-ans-prereq to precheck
...
(cherry picked from commit 74c1c37563 )
2019-02-12 09:04:20 +11:00
Mark Andrews
2274fd37e9
add check-ans-prereq
...
(cherry picked from commit ec2ecffef1 )
2019-02-12 09:04:20 +11:00
Evan Hunt
29e647276e
Merge branch '872-dlz-ldap-dname-v9_11' into 'v9_11'
...
added DNAME support to DLZ LDAP schema, and fixed a DLZ compile error
See merge request isc-projects/bind9!1504
2019-02-10 17:22:22 -05:00