606 Commits
Author SHA1 Message Date
Evan Hunt 7dd768823b 3286. [bug] Managed key maintenance timer could fail to start
after 'rndc reconfig'. [RT #26786]
2012-02-22 00:31:58 +00:00
Automatic Updater 4583255b24 update copyright notice 2012-02-06 23:45:34 +00:00
Evan Hunt 9ab048a866 3277. [bug] Make sure automatic key maintenance is started
when "auto-dnssec maintain" is turned on during
			"rndc reconfig". [RT #26805]
2012-02-06 21:27:17 +00:00
Mark Andrews a937e32c70 3256. [bug] Disable empty zones for lwresd -C. [RT #27139] 2011-12-22 08:28:18 +00:00
Mark Andrews ca7b9f18da 3209. [func] Add "dnssec-lookaside 'no'". [RT #24858] 2011-11-07 01:20:51 +00:00
Mark Andrews dc9823fb8a 3171. [bug] Exclusively lock the task when adding a zone using
'rndc addzone'.  [RT #25600]
2011-10-14 05:47:25 +00:00
Evan Hunt 4dd839d8e2 3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
the config file before pausing the server. [RT #21373]
2011-10-07 04:43:36 +00:00
Automatic Updater 69a1852134 update copyright notice 2011-09-02 23:45:31 +00:00
Evan Hunt 2533514b8b 3149. [tuning] Improve scalability by allocating one zone
task per 100 zones at startup time.  (The
			BIND9_ZONE_TASKS_HINT environment variable
			which was established as a temporary measure
			in change #3132 is no longer needed or
			used.) [rt25541]
2011-09-02 20:22:27 +00:00
Evan Hunt 1999760f5d 3136. [func] Add RFC 1918 reverse zones to the list of built-in
empty zones switched on by the 'empty-zones-enable'
			option. [RT #24990]
2011-08-02 04:57:54 +00:00
Mark Andrews 526b51ec93 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 07:12:03 +00:00
Evan Hunt 69c1260911 3057. [bug] "rndc secroots" would abort after the first error
and so could miss some views. [RT #23488]
2011-03-03 16:19:29 +00:00
Francis Dupont 6c0d104d75 backport load_view_keys() from 9.8 2011-03-03 14:02:53 +00:00
Evan Hunt 031da3eb0c 3053. [bug] Under a sustained high query load with a finite
max-cache-size, it was possible for cache memory
			to be exhausted and not recovered. [RT #23371]
2011-03-03 04:43:36 +00:00
Evan Hunt a0e5d39d03 3021. [bug] Change #3010 was incomplete. [RT #22296] 2011-02-16 19:44:17 +00:00
Evan Hunt 24a73837dd 3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
for refreshing managed-keys. [RT #22296]
2011-02-03 00:28:08 +00:00
Automatic Updater 74d29b18ad update copyright notice 2011-01-07 23:46:36 +00:00
Evan Hunt 3207a16d0d Initialize a pointer to NULL in order to silence a compiler warning.
Committing without review because the change is trivial.
2011-01-07 00:53:18 +00:00
Mark Andrews 93b433d299 2982. [bug] Reference count dst keys. dst_key_attach() can be used
increment the reference count.

                        Note: dns_tsigkey_createfromkey() callers should now
                        always call dst_key_free() rather than setting it
                        to NULL on success. [RT #22672]
2010-12-09 01:05:29 +00:00
Mark Andrews e7ca8c91ec 2976. [bug] named die on exit after negotiating a GSS-TSIG key.
[RT #3415]
2010-12-02 23:26:58 +00:00
Shawn Routhier 75636f9b01 Fix acl type processing so that allow-query works in options and view
statements.  Also add a new set of tests to verify proper functioning.
[RT #22418]
2010-11-16 02:11:53 +00:00
Automatic Updater a78ef43fe3 update copyright notice 2010-09-24 08:30:58 +00:00
Mark Andrews 0a2897853b 2963. [security] The allow-query acl was being applied instead of the
allow-query-cache acl to cache lookups. [RT #22114]
2010-09-24 05:54:06 +00:00
Mark Andrews 14dfb38385 silence signed/unsigned warning hpux 2010-08-24 01:01:45 +00:00
Mark Andrews 8c19a64364 2945. [doc] Update empty-zones list in ARM. [RT #21772]
2944.   [maint]         Remove ORCHID prefix from built in empty zones.
                        [RT #21772]
2010-08-20 00:17:40 +00:00
Automatic Updater 5d98af56f2 update copyright notice 2010-08-16 23:46:31 +00:00
Mark Andrews 30579c29be 2943. [func] Add support to load new keys into managed zones
without signing immediately with "rndc loadkeys".
                        Add support to link keys with "dnssec-keygen -S"
                        and "dnssec-settime -S".  [RT #21351]
2010-08-16 22:27:18 +00:00
Evan Hunt 0658d99891 2936. [func] Improved configuration syntax and multiple-view
support for addzone/delzone feature (see change
			#2930).  Removed "new-zone-file" option, replaced
			with "allow-new-zones (yes|no)".  The new-zone-file
			for each view is now created automatically, with
			a filename generated from a hash of the view name.
			It is no longer necessary to "include" the
			new-zone-file in named.conf; this happens
			automatically.  Zones that were not added via
			"rndc addzone" can no longer be removed with
			"rndc delzone". [RT #19447]
2010-08-11 18:19:59 +00:00
Mark Andrews 74373ce898 while (1) -> for (;;) to silence compiler warning 2010-07-20 04:51:38 +00:00
Mark Andrews 11f8ef90da format/arg mismatch solaris 2010-07-20 04:48:01 +00:00
Mark Andrews e5c3961bf6 0 -> 0U 2010-07-19 06:14:11 +00:00
Mark Andrews d647b53008 silence compiler warnings about (char) as index to array 2010-07-19 05:14:47 +00:00
Evan Hunt 4b186490dd Added function definitions and moved a variable declaration for win32 build. 2010-07-12 18:52:23 +00:00
Automatic Updater d4fb9a4b93 update copyright notice 2010-07-11 23:46:36 +00:00
Evan Hunt 92f39ccb5b 2930. [experimental] New "rndc addzone" and "rndc delzone" commads
allow dynamic addition and deletion of zones.
			To enable this feature, specify a "new-zone-file"
			option at the view or options level in named.conf.
			Zone configuration information for the new zones
			will be written into that file.  To make the new
			zones persist after a restart, "include" the file
			into named.conf in the appropriate view.  (Note:
			This feature is not yet documented, and its syntax
			is expected to change.) [RT #19447]
2010-07-11 00:12:19 +00:00
Automatic Updater c65ab74d31 update copyright notice 2010-06-25 23:46:33 +00:00
Mark Andrews 9777316c64 2924. [func] 'rndc secroots' dump a combined summary of the
current managed keys combined with trusted keys.
                        [RT #20904]
2010-06-25 03:51:07 +00:00
Mark Andrews 13ce1be5d3 2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
to IPv4 clients.  New acl 'filter-aaaa' (default any).
2010-06-22 04:04:22 +00:00
Mark Andrews 777d3c3963 silence compiler warning 2010-05-18 00:29:31 +00:00
Automatic Updater 71324ae046 update copyright notice 2010-05-14 23:49:21 +00:00
Mark Andrews 812b6d8d11 2893. [bug] Improve managed keys support. New named.conf option
managed-keys-directory. [RT #20924]
2010-05-14 04:49:40 +00:00
Mark Andrews b756b7d22f 2891. [maint] Update empty-zones list to match
draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
2010-05-14 03:32:11 +00:00
Mark Andrews 2473968416 2956. [bug] named-checkconf did not fail on a bad trusted key.
[RT #20705]
2010-03-04 06:19:33 +00:00
Mark Andrews 8a98023414 2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619] 2010-02-25 05:05:09 +00:00
Automatic Updater 74f601e769 update copyright notice 2010-01-13 23:48:20 +00:00
Evan Hunt 96c51eadc9 Commit to v9_7 some changes that had been left out:
2838.	[bug]		A KSK revoked by named could not be deleted.
			[RT #20881]

2837.	[port]		Prevent Linux spurious warnings about fwrite().
			[RT #20812]
2010-01-13 19:31:53 +00:00
Mark Andrews 2b662f27f6 2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759]
2009-12-29 22:23:01 +00:00
Evan Hunt b4df2f48c7 2818. [cleanup] rndc could return an incorrect error code
when a zone was not found. [RT #20767]
2009-12-24 00:16:08 +00:00
Evan Hunt 84c9c592f8 2817. [cleanup] Removed unnecessary isc_tasc_endexclusive() calls.
[RT #20768]
2009-12-24 00:00:13 +00:00
Evan Hunt 5a33ab5d65 2815. [bug] Exclusively lock the task when freezing a zone.
[RT #19838]
2009-12-23 23:33:53 +00:00