Commit Graph

5278 Commits

Author SHA1 Message Date
Mark Andrews
46054b10cc actually set ns_g_nosoa on -T nosoa 2010-09-06 03:58:32 +00:00
Mark Andrews
2fc748be4d test that all 7 interfaces are up 2010-09-06 02:05:02 +00:00
Automatic Updater
5cab9cc0ce update copyright notice 2010-08-13 23:46:11 +00:00
Mark Andrews
c44bb94bc8 2940. [func] Check that named successfully skips NSEC3 records
that fail to match the NSEC3PARAM record currently
                        in use. [RT# 21868]
2010-08-13 07:25:22 +00:00
Mark Andrews
cdb5f33baf check that we have non-cachable answers to test against
match the dig.out.ns#.$n to the nameserver
2010-06-28 01:43:01 +00:00
Automatic Updater
e0d80dbc1d update copyright notice 2010-06-26 23:46:15 +00:00
Mark Andrews
7a2f2d9ba0 cvs rdiff -r1.2931.2.271 -r1.2931.2.272 bind9/CHANGES
cvs rdiff -r1.166.34.3 -r1.166.34.4 bind9/bin/named/main.c
cvs rdiff -r1.313.20.18 -r1.313.20.19 bind9/bin/named/query.c
cvs rdiff -r1.80 -r1.80.12.1 bind9/bin/named/include/named/globals.h
cvs rdiff -r1.13 -r1.13.176.1 bind9/bin/tests/system/start.pl
cvs rdiff -r1.53.48.7 -r1.53.48.8 bind9/bin/tests/system/dnssec/tests.sh
cvs rdiff -r1.13 -r1.13.48.1 \
    bind9/bin/tests/system/dnssec/ns3/secure.example.db.in
cvs rdiff -r1.3 -r1.3.48.1 bind9/bin/tests/system/dnssec/ns7/named.conf
cvs rdiff -r0 -r1.2.4.2 bind9/bin/tests/system/dnssec/ns7/named.nosoa \
    bind9/bin/tests/system/dnssec/ns7/nosoa.secure.example.db
cvs rdiff -r1.164.12.21 -r1.164.12.22 bind9/lib/dns/validator.c
2010-06-26 00:02:45 +00:00
Automatic Updater
90de0c8201 update copyright notice 2010-05-19 09:32:03 +00:00
Mark Andrews
b24553b060 2900. [bug] The placeholder negative caching element was not
properly constructed triggering a INSIST in
                        dns_ncache_towire(). [RT #21346]
2010-05-19 06:56:01 +00:00
Automatic Updater
09609ba50d update copyright notice 2010-03-03 23:32:17 +00:00
Automatic Updater
80f5acb51e regen v9_6_esv_branch 2010-03-03 22:19:19 +00:00
Mark Andrews
a3398dba83 9.6-ESV 2010-03-03 22:06:40 +00:00
Automatic Updater
5eb1c53ca2 update copyright notice 2010-02-04 23:47:46 +00:00
Mark Andrews
01347cce29 2849. [bug] Don't treat errors from the xml2 library as fatal.
[RT #20945]
2010-02-04 01:10:32 +00:00
Automatic Updater
7aca55cd83 regen 2010-01-16 01:55:32 +00:00
Automatic Updater
9feb8eda57 update copyright notice 2010-01-15 23:47:34 +00:00
Evan Hunt
cab45cd588 missed adding these files in earlier commit 2010-01-15 21:17:41 +00:00
Automatic Updater
763250ea4e regen 2010-01-15 20:35:07 +00:00
Evan Hunt
3f39cbcc76 2838. [func] Backport support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512, from BIND 9.7.  (This
			incorporates changes 2726 and 2738 from that
			release branch.) [RT #20871]
2010-01-15 19:38:54 +00:00
Automatic Updater
d889e9701a update copyright notice 2010-01-11 23:47:22 +00:00
Francis Dupont
6720b9fe94 Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 11:02:32 +00:00
Automatic Updater
c91b60a119 update copyright notice 2010-01-07 23:47:36 +00:00
Evan Hunt
0f83518a99 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 17:49:01 +00:00
cvs2git
8fd7205f18 This commit was manufactured by cvs2git to create branch 'v9_6'. 2010-01-07 16:48:28 +00:00
Evan Hunt
597642c0ba 2831. [security] Do not attempt to validate or cache
out-of-bailiwick data returned with a secure
			answer; it must be re-fetched from its original
			source and validated in that context. [RT #20819]
2010-01-07 16:48:23 +00:00
Automatic Updater
247f299fb0 update copyright notice 2010-01-06 23:48:47 +00:00
Evan Hunt
b1fbf2a4db fix spacing 2010-01-06 00:53:45 +00:00
Automatic Updater
3ee1371212 update copyright notice 2010-01-05 23:48:37 +00:00
Evan Hunt
564d687132 missing newline in dnssec-signzone usage 2010-01-05 15:31:58 +00:00
Automatic Updater
ef413fafe5 update copyright notice 2009-12-30 23:47:31 +00:00
Tatuya JINMEI 神明達哉
450c3bb498 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:34:30 +00:00
cvs2git
9b4b69eac1 This commit was manufactured by cvs2git to create branch 'v9_6'. 2009-12-30 08:02:37 +00:00
Tatuya JINMEI 神明達哉
d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Mark Andrews
e02ccd485e 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 04:02:56 +00:00
Mark Andrews
57fb4f7bbe 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 02:43:09 +00:00
Mark Andrews
5b77627c09 2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759]
2009-12-29 22:20:33 +00:00
Automatic Updater
d856585f5f regen 2009-12-29 01:14:03 +00:00
Evan Hunt
85c5ed3577 2821. [doc] Add note that named-checkconf doesn't automatically
read rndc.key and bind.keys [RT #20758]
2009-12-28 23:21:16 +00:00
Francis Dupont
0faf1492c7 non-readable openssl.cnf [20668] 2009-12-24 17:49:39 +00:00
Evan Hunt
c7a3571cf6 2818. [cleanup] rndc could return an incorrect error code
when a zone was not found. [RT #20767]
2009-12-24 00:17:47 +00:00
Evan Hunt
1361014b02 2818. [cleanup] rndc could return an incorrect error code
when a zone was not found. [RT #20767]
2009-12-24 00:14:20 +00:00
Evan Hunt
40ad4ed01b 2817. [cleanup] Removed unnecessary isc_tasc_endexclusive() calls.
[RT #20768]
2009-12-23 23:59:42 +00:00
Evan Hunt
b8f874d1b3 2815. [bug] Exclusively lock the task when freezing a zone.
[RT #19838]
2009-12-23 23:34:16 +00:00
Evan Hunt
aa3415ba49 2815. [bug] Exclusively lock the task when freezing a zone.
[RT #19838]
2009-12-23 23:33:09 +00:00
Evan Hunt
f766024a27 change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
transitions work correctly.  (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:31 +00:00
Automatic Updater
928e12ccdc update copyright notice 2009-12-18 23:49:03 +00:00
Evan Hunt
4e55893d30 2813. [bug] Better handling of unreadable DNSSEC key files.
[RT #20710]

2812.	[bug]		Make sure updates can't result in a zone with
			NSEC-only keys and NSEC3 records. [RT 20748]
2009-12-18 22:16:49 +00:00
Evan Hunt
0da859c5a7 2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
output. [RT #20733]
2009-12-18 07:59:43 +00:00
Evan Hunt
9de98fbbbe 2809. [cleanup] Restored accidentally-deleted text in usage output
in dnssec-settime and dnssec-revoke [RT #20739]
2009-12-18 07:49:42 +00:00
Automatic Updater
90c38ab4e6 regen 2009-12-17 01:13:46 +00:00