Mark Andrews
350f45bed8
9.6.3
2011-01-30 06:39:08 +00:00
Automatic Updater
92306578c0
update copyright notice
2011-01-27 23:45:47 +00:00
Mark Andrews
1be3bd3c8f
3009. [bug] clients-per-query code didn't work as expected with
...
particular query patterns. [RT #22972 ]
2011-01-27 02:29:47 +00:00
Mark Andrews
dbb2c2bb65
9.6.3rc1
2011-01-14 00:52:40 +00:00
Automatic Updater
166b841b92
update copyright notice
2011-01-13 04:48:23 +00:00
Mark Andrews
b41db83139
3007. [bug] Named failed to preserve the case of domain names in
...
rdata which is no compressable when writing master
files. [RT #22863 ]
2011-01-13 02:14:46 +00:00
Mark Andrews
0219620a50
3007. [bug] Named failed to preserve the case of domain names in
...
rdata which is no compressable when writing master
files. [RT #22863 ]
2011-01-13 02:06:13 +00:00
Mark Andrews
d8bf1487c7
2995. [bug] The Kerberos realm was not being correctly extracted
...
from the signer's identity. [RT #22770 ]
2010-12-22 02:37:55 +00:00
Automatic Updater
27ee4b8ca4
update copyright notice
2010-12-14 23:46:09 +00:00
Mark Andrews
8c5ba02091
2984. [bug] Don't run MX checks when the target of the MX record
...
is ".". [RT #22645 ]
2010-12-14 00:48:23 +00:00
Mark Andrews
57628d8c51
dst_key_attach
2010-12-09 07:55:34 +00:00
Mark Andrews
f3786154f8
9.6.3b1
2010-12-09 07:29:04 +00:00
Mark Andrews
12fd7da162
2982. [bug] Reference count dst keys. dst_key_attach() can be used
...
increment the reference count.
Note: dns_tsigkey_createfromkey() callers should now
always call dst_key_free() rather than setting it
to NULL on success. [RT #22672 ]
2010-12-09 01:12:55 +00:00
Mark Andrews
4df431ecde
2976. [bug] named could die on exit after negotiating a GSS-TSIG
...
key. [RT #3415 ]
2010-12-02 23:40:28 +00:00
Mark Andrews
bf0013e9a5
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
...
wrong lock which could lead to server deadlock.
[RT #22614 ]
2010-12-02 05:09:58 +00:00
Automatic Updater
fff1bf76bd
update copyright notice
2010-11-17 23:45:46 +00:00
Evan Hunt
886b4dfbb5
2971. [bug] Fixed a bug that caused journal files not to be
...
compacted on Windows systems as a result of
non-POSIX-compliant rename() semantics. [RT #22434 ]
2010-11-17 00:36:27 +00:00
Mark Andrews
7e3fa21d40
2970. [security] Adding a NO DATA negative cache entry failed to clear
...
any matching RRSIG records. A subsequent lookup of
of NO DATA cache entry could trigger a INSIST when the
unexpected RRSIG was also returned with the NO DATA
cache entry. [RT #22288 ]
2010-11-16 07:35:03 +00:00
Mark Andrews
c1e4f06f90
2968. [security] Named could fail to prove a data set was insecure
...
before marking it as insecure. One set of conditions
that can trigger this occurs naturally when rolling
DNSKEY algorithms. [RT #22309 ]
2010-11-16 02:23:44 +00:00
Automatic Updater
c828f12404
update copyright notice
2010-09-24 08:30:28 +00:00
Mark Andrews
ff826c2844
2964. [bug] view->queryacl was being overloaded. Seperate the
...
usage into view->queryacl, view->cacheacl and
view->queryonacl. [RT #22114 ]
2010-09-24 08:09:08 +00:00
Automatic Updater
ce26def095
update copyright notice
2010-09-15 12:37:35 +00:00
Mark Andrews
6fd0466e76
2957. [bug] entropy_get() and entropy_getpseudo() failed to match
...
the API for RAND_bytes() and RAND_pseudo_bytes()
respectively. [RT #21962 ]
2010-09-15 03:26:09 +00:00
Mark Andrews
4616a212ab
9.6.3b1
2010-09-10 07:41:42 +00:00
Mark Andrews
7b2f8a1909
mark node as from nsec3 tree using 9.6.x method
2010-09-07 01:37:05 +00:00
Mark Andrews
5122ec7d9e
2951. [bug] named failed to generate a correct signed response
...
in a optout, delegation only zone with no secure
delegations. [RT #22007 ]
2010-09-07 01:12:24 +00:00
Mark Andrews
004d763170
2950. [bug] named failed to perform a SOA up to date check when
...
falling back to TCP on UDP timeouts when
ixfr-from-differences was set. [RT #21595 ]
2010-09-06 04:49:19 +00:00
Mark Andrews
f2d91bd3e5
2941. [bug] sdb and sdlz (dlz's zone database) failed to support
...
DNAME at the zone apex. [RT #21610 ]
2010-08-16 05:22:12 +00:00
Mark Andrews
3a3a245419
2940. [func] Check that named successfully skips NSEC3 records
...
that fail to match the NSEC3PARAM record currently
in use. [RT# 21868]
2010-08-13 07:21:39 +00:00
Automatic Updater
429ff72b69
update copyright notice
2010-08-11 23:45:49 +00:00
Tatuya JINMEI 神明達哉
85b94d05c0
2937. [bug] Worked around an apparent race condition in over
...
memory conditions. Without this fix a DNS cache DB or
ADB could incorrectly stay in an over memory state,
effectively refusing further caching, which
subsequently made a BIND 9 caching server unworkable.
This fix prevents this problem from happening by
polling the state of the memory context, rather than
making a copy of the state, which appeared to cause
a race. This is a "workaround" in that it doesn't
solve the possible race per se, but several experiments
proved this change solves the symptom. Also, the
polling overhead hasn't been reported to be an issue.
This bug should only affect a caching server that
specifies a finite max-cache-size. It's also quite
likely that the bug happens only when enabling threads,
but it's not confirmed yet. [RT #21818 ]
2010-08-11 23:04:21 +00:00
Automatic Updater
8f0cbae84a
update copyright notice
2010-07-09 23:45:55 +00:00
Evan Hunt
c81b0a2f65
2929. [bug] Improved handling of GSS security contexts:
...
- added LRU expiration for generated TSIGs
- added the ability to use a non-default realm
- added new "realm" keyword in nsupdate
- limited lifetime of generated keys to 1 hour
or the lifetime of the context (whichever is
smaller)
[RT #19737 ]
2010-07-09 05:15:06 +00:00
Mark Andrews
bc3343cc10
2925. [bug] Named failed to accept uncachable negative responses
...
from insecure zones. [RT# 21555]
2010-06-25 23:57:04 +00:00
Automatic Updater
04dc4f8218
update copyright notice
2010-06-23 23:46:05 +00:00
Mark Andrews
de37ff354c
2921. [bug] The resolver could attempt to destroy a fetch context
...
to soon. [RT #19878 ]
2010-06-23 01:50:41 +00:00
Mark Andrews
93827d06d2
AAAA not A
2010-06-18 05:37:50 +00:00
Mark Andrews
bec36072b8
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
2010-06-18 02:13:46 +00:00
Automatic Updater
80b1a05246
update copyright notice
2010-06-09 23:48:16 +00:00
Mark Andrews
10b8bf5195
2915. [cleanup] Be smarter about which objects we attempt to compile
...
based on configure options. [RT #21444 ]
2010-06-09 01:54:10 +00:00
Automatic Updater
a55880fd78
update copyright notice
2010-06-04 23:48:25 +00:00
Mark Andrews
8925c70a54
remove trailing comma
2010-06-04 00:15:28 +00:00
Mark Andrews
69fb084072
2912. [func] Windows clients don't like UPDATE responses that clear
...
the zone section. [RT #20986 ]
2010-06-03 05:29:03 +00:00
Mark Andrews
7e87f04c6d
2910. [func] Sanity check Kerberos credentials. [RT #20986 ]
2010-06-03 02:35:53 +00:00
Mark Andrews
8659464250
2908. [bug] It was possible for re-signing to stop after removing
...
a DNSKEY. [RT #21384 ]
2010-06-02 01:01:35 +00:00
Mark Andrews
8cbf30d0c0
2904. [bug] When using DLV, sub-zones of the zones in the DLV,
...
could be incorrectly marked as insecure instead of
secure leading to negative proofs failing. This was
a unintended outcome from change 2890. [RT# 21392]
2010-05-26 06:58:17 +00:00
Mark Andrews
586e2589ca
silence compiler, explict coversion
2010-05-19 09:53:46 +00:00
Mark Andrews
3980c36048
cvs rdiff -r1.3390 -r1.3391 bind9/CHANGES
...
cvs rdiff -r1.11 -r1.12 bind9/bin/tests/system/resolver/tests.sh
cvs rdiff -r1.13 -r1.14 bind9/bin/tests/system/resolver/ans2/ans.pl
cvs rdiff -r1.48 -r1.49 bind9/lib/dns/ncache.c
2010-05-19 06:43:42 +00:00
Mark Andrews
171c192b73
silence compile warnings, explict conversion
2010-05-18 06:30:01 +00:00
Automatic Updater
01565f50ca
update copyright notice
2010-05-14 23:47:50 +00:00