Commit Graph

142 Commits

Author SHA1 Message Date
Mark Andrews
55b1dda9d8 2640. [security] A specially crafted update packet will cause named
to exit. [RT #20000]
2009-07-28 15:57:26 +00:00
Mark Andrews
99f0cd7dc1 2591. [bug] named could die when processing a update in
removed_orphaned_ds(). [RT #19507]
2009-04-30 07:02:57 +00:00
Automatic Updater
2a6997e72c update copyright notice 2009-01-19 23:46:17 +00:00
Mark Andrews
0f4ec602dd spelling 2009-01-19 00:36:29 +00:00
Automatic Updater
d53d756c84 update copyright notice 2008-11-20 23:46:03 +00:00
Mark Andrews
a696315d19 2485. [bug] Change update's the handling of obscured RRSIG
records.  Not all orphand DS records were being
                        removed. [RT #18828]
2008-11-20 01:24:16 +00:00
Mark Andrews
458d1cf9a0 2331. [bug] Failure to regenerate any signatures was not being reported
or past back to the UPDATE client. [RT #17570]
2008-02-07 03:16:08 +00:00
Automatic Updater
fcef5293d2 update copyright notice 2008-01-17 23:46:05 +00:00
Automatic Updater
9a581e09eb update copyright notice 2008-01-02 23:46:02 +00:00
Mark Andrews
b3eb875aad 2284. [bug] Memory leak in UPDATE prerequisite processing.
[RT #17377]
2008-01-02 04:44:56 +00:00
Automatic Updater
beb9fabda3 update copyright notice 2007-08-28 07:20:06 +00:00
Mark Andrews
bc8b82523f 2219. [bug] Apply zone consistancy checks to additions, not
removals, when updating. [RT #17049]
2007-08-28 00:08:49 +00:00
Automatic Updater
dc6337ec77 update copyright notice 2007-05-18 23:46:28 +00:00
Mark Andrews
514ba8adb0 2183. [bug] dnssec-signzone didn't handle offline private keys
well.  [RT #16832]
2007-05-18 05:59:26 +00:00
Mark Andrews
cb6bc372d8 2001. [func] Check the KSK flag when updating a dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:38:01 +00:00
Mark Andrews
bf3bbdc9b6 1999. [func] Implement "rrset-order fixed". [RT #13662] 2006-03-03 00:56:53 +00:00
Mark Andrews
586f82c999 update copyright notice 2006-01-06 00:01:43 +00:00
Mark Andrews
d71329a7df 1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
[RT #15465]
2006-01-05 03:21:54 +00:00
Mark Andrews
b9a8524f2f 1923. [bug] ns_client_detach() called too early. [RT #15499] 2005-10-07 04:07:54 +00:00
Mark Andrews
59606dc362 seperate out sibling glue checks 2005-08-25 00:05:47 +00:00
Mark Andrews
066f566317 1862. [func] Add additional zone data constancy checks.
named-checkzone has extended checking of NS, MX and
                        SRV record and the hosts they reference.
                        named has extended post zone load checks.
                        New zone options: check-mx and integrity-check.
                        [RT #4940]
2005-05-19 04:59:57 +00:00
Rob Austein
372edff338 1851. [doc] Doxygen comment markup. [RT #11398] 2005-04-27 05:02:59 +00:00
Mark Andrews
7150e2289b update copyright 2005-01-11 01:39:40 +00:00
Mark Andrews
4238db360a 1794. [func] Named and named-checkzone can now both check for
non-terminal wildcard records.
2005-01-10 00:05:32 +00:00
Mark Andrews
983e56a9a0 1742. [bug] Deleting all records at a node then adding a
previously existing record, in a single UPDATE
                        transaction, failed to leave / regenerate the
                        associated RRSIG records. [RT #12788]
2004-10-21 01:34:16 +00:00
Mark Andrews
38364a5555 1741. [bug] Deleting all records at a node in a secure zone
using a update-policy grant failed. [RT #12787]
2004-10-12 22:01:52 +00:00
Mark Andrews
0f42634aea 1690. [bug] Delay detaching view from the client until UPDATE
processing completes when shutting down. [RT #11714]
2004-07-23 02:57:24 +00:00
Mark Andrews
d8b30c39c0 1686. [bug] Named sent a extraneous NOTIFY when it received a
redundant UPDATE request. [RT #11943]
2004-07-20 07:39:03 +00:00
Mark Andrews
029f8dce4d 1670. [func] Log UPDATE requests to slave zones without an acl as
"disabled" at debug level 3. [RT# 11657]
2004-06-21 00:42:36 +00:00
Mark Andrews
673d278aa3 1649. [bug] Silence "unexpected non-minimal diff" message.
[RT #11206]
2004-06-04 03:45:45 +00:00
Mark Andrews
57311e5df8 1633. [bug] named should return NOTIMP to update requests to a
slaves without a allow-update-forwarding acl specified.
                        [RT #11331]
2004-05-12 06:39:15 +00:00
Mark Andrews
2ec5372082 1625. [bug] named failed to load/transfer RFC2535 signed zones
which contained CNAMES. [RT# 11237]
2004-05-05 01:32:37 +00:00
Mark Andrews
3bdf0a6885 hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 02:04:05 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
2047977ce2 1586. [func] "check-names" is now implemented. 2004-02-27 20:41:51 +00:00
Mark Andrews
daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews
64cc9c8818 1421. [func] Differentiate updates that don't succeed due to
prerequisites (unsuccessful) vs other reasons
                        (failed).
developer: marka
reviews: explorer
2003-01-21 05:18:11 +00:00
Mark Andrews
c314efc295 add comment 2003-01-10 02:37:44 +00:00
Michael Graff
4411b9b6e7 pull down rt3507 (work by Mark, checked by me) 2002-11-12 21:52:44 +00:00
Mark Andrews
59ab128c97 1400. [bug] Block the addition of wildcard NS records by IXFR
or UPDATE. [RT #3502]
developer: marka
reveiwer: ogud
2002-11-12 20:16:30 +00:00
Mark Andrews
6b25d2f7f7 developer: bwelling
reviewed: marka
1369.   [bug]           Adding an NS record as the lexicographically last
                        record in a secure zone didn't work.
2002-08-29 05:40:07 +00:00
Mark Andrews
cc4928ec71 1219. [func] New category 'update-security'. 2002-06-12 06:29:49 +00:00
Mark Andrews
7c23b791f4 1301. [func] Log zone when unable to get private keys to update
zone.  Log zone when NXT records are missing from
                        secure zone.
2002-05-24 06:26:04 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Andreas Gustafsson
48b0f5ff87 1191. [bug] A dynamic update removing the last non-apex name in
a secure zone would fail. [RT #2399]
2002-01-22 22:26:45 +00:00
Brian Wellington
cde7dfea4c 1190. [func] Add the "rndc freeze" and"rndc unfreeze" commands.
[RT #2394]

Basically, "freeze" disables dynamic updates to a zone, syncs the journal
file into the master file, and removes the journal.  This allows manual
edits of a dynamic zone file without stopping the server, since the
zone is temporarily considered non-dynamic.  "unfreeze" re-enables dynamic
updates to a zone.

So, instead of the old:
	rndc stop
	edit master file
	remove journal
	restart server
you can now do:
	rndc freeze zone
	edit master file
	rndc reload zone
	rndc unfreeze zone
which doesn't require stopping the server.

About everyone here at the secure dynamic update workshop wanted this.
It will be documented soon.
2002-01-22 22:05:59 +00:00
Andreas Gustafsson
ec52edeff2 missing format string argument; add format checking 2002-01-22 21:45:07 +00:00
Brian Wellington
15033eed4d make a few dynamic update log messages more informative 2002-01-22 16:05:51 +00:00
Brian Wellington
a5c077e40c 1181. [func] Add the "key-directory" configuration statement,
which allows the server to look for online signing
			keys in alternate directories.
2002-01-21 11:00:25 +00:00