ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
Files
edd923e8ebe330c00b12563107d6bc3ca2a8af22
bind9/lib/dns
History
Aram Sargsyan 78e04d8d0c Don't trust a placeholder KEYDATA record 
When named starts it creates an empty KEYDATA record in the managed-keys
zone as a placeholder, then schedules a key refresh. If key refresh
fails for some reason (e.g. connectivity problems), named will load the
placeholder key into secroots as a trusted key during the next startup,
which will break the chain of trust, and named will never recover from
that state until managed-keys.bind and managed-keys.bind.jnl files are
manually deleted before (re)starting named again.

Before calling load_secroots(), check that we are not dealing with a
placeholder.

(cherry picked from commit 354ae2d7e3)
2022-11-01 10:55:38 +00:00
..
include
Fix RRL responses-per-second bypass using wildcard names
2022-09-08 09:41:15 +02:00
rdata
Add support for 'dohpath' to SVCB (and HTTPS)
2022-10-04 15:33:49 +11:00
tests
Add support for 'dohpath' to SVCB (and HTTPS)
2022-10-04 15:33:49 +11:00
win32
Add new functions to lib/dns/win32/libdns.def.in
2022-05-16 18:31:55 +02:00
.gitignore
…
acl.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
adb.c
Lock the address entry bucket when dumping ADB namehook
2022-08-12 17:17:43 -07:00
badcache.c
…
byaddr.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
cache.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
callbacks.c
…
catz.c
Check that primary key names have not changed
2022-09-27 22:20:41 +10:00
client.c
Consistenly use UNREACHABLE() instead of ISC_UNREACHABLE()
2022-03-28 23:28:05 +02:00
clientinfo.c
allow dns_clientinfo to store client ECS data
2022-01-27 16:08:57 -08:00
compress.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
db.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
dbiterator.c
…
dbtable.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
diff.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
dispatch.c
Consistenly use UNREACHABLE() instead of ISC_UNREACHABLE()
2022-03-28 23:28:05 +02:00
dlz.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
dns64.c
…
dnsrps.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
dnssec.c
Update dns_dnssec_syncdelete() function
2022-04-13 15:13:12 +02:00
dnstap.c
dnstap query_message field was erroneously set with responses
2022-08-31 15:49:25 -07:00
dnstap.proto
…
ds.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
dst_api.c
Require valid key for dst_key functions
2022-05-23 12:31:23 +02:00
dst_internal.h
Check if key metadata is modified before writing
2022-05-16 10:35:33 +02:00
dst_openssl.h
Use autoconf check for BN_GENCB_new()
2022-03-02 09:34:29 +00:00
dst_parse.c
…
dst_parse.h
…
dst_pkcs11.h
…
dst_result.c
…
dyndb.c
…
ecdb.c
…
ecs.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
fixedname.c
…
forward.c
…
gen-unix.h
…
gen-win32.h
…
gen.c
…
geoip2.c
…
gssapi_link.c
Remove a redundant variable-length array
2022-03-18 17:21:57 +00:00
gssapictx.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
hmac_link.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
ipkeylist.c
…
iptable.c
…
journal.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
kasp.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
key.c
…
keydata.c
…
keymgr.c
Check if key metadata is modified before writing
2022-05-16 10:35:33 +02:00
keytable.c
…
Kyuafile
…
lib.c
…
log.c
…
lookup.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
Makefile.in
…
mapapi
…
master.c
Tighten $GENERATE directive parsing
2022-07-06 11:26:24 +10:00
masterdump.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
message.c
Stop passing mctx to dns_rdata_tostruct as it is unnecessary for SIG
2022-09-26 12:45:21 +02:00
name.c
Remove workaround for ancient clang versions (<< 3.2 and << 4.0.1)
2022-03-25 09:37:22 +01:00
ncache.c
Update the rdataset->trust field in ncache.c:rdataset_settrust
2022-04-19 09:45:16 +10:00
nsec3.c
nsec3.c: Add a missing dns_db_detachnode() call
2022-08-23 12:05:38 +02:00
nsec.c
…
nta.c
…
openssl_link.c
…
openssldh_link.c
Use autoconf check for BN_GENCB_new()
2022-03-02 09:34:29 +00:00
opensslecdsa_link.c
Free eckey on siglen mismatch
2022-09-08 12:12:36 +02:00
openssleddsa_link.c
Free ctx on invalid siglen
2022-09-08 12:16:36 +02:00
opensslrsa_link.c
Check BN_dup results in rsa_check
2022-09-28 10:06:39 +10:00
order.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
peer.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
pkcs11.c
…
pkcs11ecdsa_link.c
Consistenly use UNREACHABLE() instead of ISC_UNREACHABLE()
2022-03-28 23:28:05 +02:00
pkcs11eddsa_link.c
Consistenly use UNREACHABLE() instead of ISC_UNREACHABLE()
2022-03-28 23:28:05 +02:00
pkcs11rsa_link.c
Consistenly use UNREACHABLE() instead of ISC_UNREACHABLE()
2022-03-28 23:28:05 +02:00
portlist.c
…
private.c
Increase the BUFSIZ-long buffers
2022-07-15 21:21:03 +02:00
rbt.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
rbtdb.c
Fix rndc dumpdb -expired for stuck cache contents
2022-07-26 10:02:15 +02:00
rbtdb.h
…
rcode.c
…
rdata.c
Additional safety check for negative array index
2022-04-29 11:46:33 +10:00
rdatalist_p.h
…
rdatalist.c
…
rdataset.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
rdatasetiter.c
…
rdataslab.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
request.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
resolver.c
Match prefetch eligibility behavior with ARM
2022-10-21 10:30:28 +00:00
result.c
…
rootns.c
Add FALLTHROUGH macro for __attribute__((fallthrough))
2022-03-25 09:30:16 +01:00
rpz.c
Allow DNS_RPZ_POLICY_ERROR to be converted to a string
2022-05-04 23:53:21 +10:00
rriterator.c
…
rrl.c
Fix RRL responses-per-second bypass using wildcard names
2022-09-08 09:41:15 +02:00
sdb.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
sdlz.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
soa.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
ssu_external.c
…
ssu.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
stats.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
tcpmsg.c
…
time.c
…
timer.c
…
tkey.c
Fix tkey.c:buildquery() function's error handling
2022-08-17 08:46:31 +00:00
tsec.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
tsig_p.h
…
tsig.c
Remove workaround for ancient clang versions (<< 3.2 and << 4.0.1)
2022-03-25 09:37:22 +01:00
ttl.c
…
update.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
validator.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
version.c
…
view.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
xfrin.c
Simplify way we tag unreachable code with only ISC_UNREACHABLE()
2022-03-25 09:33:51 +01:00
zone_p.h
…
zone.c
Don't trust a placeholder KEYDATA record
2022-11-01 10:55:38 +00:00
zonekey.c
…
zoneverify.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 09:37:18 +01:00
zt.c
…