mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-22 01:59:26 +00:00
Code Issues Releases Wiki Activity
bind/bin/named/config.c

1082 lines
27 KiB
C
Raw Normal View History

762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
/*
Update license headers to not include years in copyright in all applicable files
2018-02-23 09:53:12 +01:00
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
*
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
* This Source Code Form is subject to the terms of the Mozilla Public
* License, v. 2.0. If a copy of the MPL was not distributed with this
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
Update license headers to not include years in copyright in all applicable files
2018-02-23 09:53:12 +01:00
*
* See the COPYRIGHT file distributed with this work for additional
* information regarding copyright ownership.
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
*/
1851. [doc] Doxygen comment markup. [RT #11398]
2005-04-27 04:57:32 +00:00
/*! \file */
#include <config.h>
2001-03-04 22:28:32 +00:00
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
#include <bind.keys.h>
Replace custom isc_u?intNN_t types with C99 u?intNN_t types
2018-03-28 14:19:37 +02:00
#include <inttypes.h>
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
#include <stdlib.h>
#include <isc/buffer.h>
#include <isc/log.h>
#include <isc/mem.h>
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
#include <isc/parseint.h>
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
#include <isc/region.h>
#include <isc/result.h>
#include <isc/sockaddr.h>
Fix compiler warnings on SCO OSr5
2007-09-13 04:45:18 +00:00
#include <isc/string.h>
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
#include <isc/util.h>
Use the new sorting rules to regroup #include headers
2020-03-09 16:17:26 +01:00
#include <pk11/site.h>
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
#include <dns/fixedname.h>
#include <dns/name.h>
#include <dns/rdataclass.h>
1234. [bug] 'rrset-order' and 'sortlist' should be additive not exclusive. 1223. [func] 'rrset-order' partially works 'cyclic' and 'random' are supported.
2002-03-07 13:46:41 +00:00
#include <dns/rdatatype.h>
fix key algorithm checks
2001-08-03 18:12:08 +00:00
#include <dns/tsig.h>
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
#include <dns/zone.h>
Use the new sorting rules to regroup #include headers
2020-03-09 16:17:26 +01:00
#include <dst/dst.h>
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
#include <isccfg/grammar.h>
#include <isccfg/namedconf.h>
2609. [func] Simplify the configuration of dynamic zones: - add ddns-confgen command to generate configuration text for named.conf - add zone option "ddns-autoconf yes;", which causes named to generate a TSIG session key and allow updates to the zone using that key - add '-l' (localhost) option to nsupdate, which causes nsupdate to connect to a locally-running named process using the session key generated by named [RT #19284]
2009-06-10 00:27:22 +00:00
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
#include <named/config.h>
#include <named/globals.h>
2572. [func] Simplify DLV configuration, with a new option "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
1851. [doc] Doxygen comment markup. [RT #11398]
2005-04-27 04:57:32 +00:00
/*% default configuration */
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
static char defaultconf[] = "\
options {\n\
Add a answer-cookie named config option (cherry picked from commit 29305073575459a66f0a93b9becc4863fd1c0c6b)
2018-03-19 18:09:05 +05:30
answer-cookie true;\n\
3733. [func] Improve interface scanning support. Interface information will be automatically updated if the OS supports routing sockets. Use "automatic-interface-scan no;" to disable. Add "rndc scan" to trigger a scan. [RT #23027]
2014-02-07 17:16:37 +11:00
automatic-interface-scan yes;\n\
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
bindkeys-file \"" NAMED_SYSCONFDIR "/bind.keys\";\n\
1614. [port] win32: silence resource limit messages. [RT# 11101]
2004-04-19 23:09:51 +00:00
# blackhole {none;};\n"
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
" cookie-algorithm siphash24;\n"
" coresize default;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
datasize default;\n"
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
"\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# deallocate-on-exit <obsolete>;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
# directory <none>\n\
dnssec-policy inheritance from options/view 'dnssec-policy' can now also be set on the options and view level and a zone that does not set 'dnssec-policy' explicitly will inherit it from the view or options level. This requires a new keyword to be introduced: 'none'. If set to 'none' the zone will not be DNSSEC maintained, in other words it will stay unsigned. You can use this to break the inheritance. Of course you can also break the inheritance by referring to a different policy. The keywords 'default' and 'none' are not allowed when configuring your own dnssec-policy statement. Add appropriate tests for checking the configuration (checkconf) and add tests to the kasp system test to verify the inheritance works. Edit the kasp system test such that it can deal with unsigned zones and views (so setting a TSIG on the query).
2019-11-05 17:22:35 +01:00
dnssec-policy \"none\";\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
dump-file \"named_dump.db\";\n\
Simplify the EDNS buffer size logic for DNS Flag Day 2020 The DNS Flag Day 2020 aims to remove the IP fragmentation problem from the UDP DNS communication. In this commit, we implement the required changes and simplify the logic for picking the EDNS Buffer Size. 1. The defaults for `edns-udp-size`, `max-udp-size` and `nocookie-udp-size` have been changed to `1232` (the value picked by DNS Flag Day 2020). 2. The probing heuristics that would try 512->4096->1432->1232 buffer sizes has been removed and the resolver will always use just the `edns-udp-size` value. 3. Instead of just disabling the PMTUD mechanism on the UDP sockets, we now set IP_DONTFRAG (IPV6_DONTFRAG) flag. That means that the UDP packets won't get ever fragmented. If the ICMP packets are lost the UDP will just timeout and eventually be retried over TCP.
2020-09-23 14:47:26 +02:00
edns-udp-size 1232;\n\
Completely remove BIND 9 Windows support The Windows support has been completely removed from the source tree and BIND 9 now no longer supports native compilation on Windows. We might consider reviewing mingw-w64 port if contributed by external party, but no development efforts will be put into making BIND 9 compile and run on Windows again.
2021-05-20 15:53:50 +02:00
# fake-iquery <obsolete>;\n\
files unlimited;\n"
#if defined(HAVE_GEOIP2)
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
" geoip-directory \"" MAXMINDDB_PREFIX "/share/"
"GeoIP\";"
"\n"
convert geoip to geoip2 in win32utils/Configure
2019-07-02 16:27:42 -07:00
#elif defined(HAVE_GEOIP2)
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
" geoip-directory \".\";\n"
Completely remove BIND 9 Windows support The Windows support has been completely removed from the source tree and BIND 9 now no longer supports native compilation on Windows. We might consider reviewing mingw-w64 port if contributed by external party, but no development efforts will be put into making BIND 9 compile and run on Windows again.
2021-05-20 15:53:50 +02:00
#endif /* if defined(HAVE_GEOIP2) */
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
"\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# has-old-clients <obsolete>;\n\
854. [bug] The config parser didn't properly handle config options that were specified in units of time other than seconds. [RT #1372]
2001-06-04 21:51:27 +00:00
heartbeat-interval 60;\n\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# host-statistics <obsolete>;\n\
854. [bug] The config parser didn't properly handle config options that were specified in units of time other than seconds. [RT #1372]
2001-06-04 21:51:27 +00:00
interface-interval 60;\n\
[master] add TCP pipelining support 4040. [func] Added server-side support for pipelined TCP queries. TCP connections are no longer closed after the first query received from a client. (The new "keep-response-order" option allows clients to be specified for which the old behavior will still be used.) [RT #37821]
2015-01-20 16:10:30 -08:00
# keep-response-order {none;};\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
listen-on {any;};\n\
3529. [func] Named now listens on both IPv4 and IPv6 interfaces by default. Named previously only listened on IPv4 interfaces by default unless named was running in IPv6 only mode. [RT #32945]
2013-03-21 10:16:12 +11:00
listen-on-v6 {any;};\n\
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
# lock-file \"" NAMED_LOCALSTATEDIR "/run/named/named.lock\";\n\
788. [feature] Add the "match-mapped-addresses" options, which causes IPv6 v4mapped addresses to be treated as IPv4 addresses for the purpose of acl matching.
2001-03-26 21:33:07 +00:00
match-mapped-addresses no;\n\
add syntax and setter/getter functions to configure max-ixfr-ratio
2020-02-21 10:53:08 -08:00
max-ixfr-ratio 100%;\n\
3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228]
2012-06-14 15:44:20 +10:00
max-rsa-exponent-size 0; /* no limit */\n\
Simplify the EDNS buffer size logic for DNS Flag Day 2020 The DNS Flag Day 2020 aims to remove the IP fragmentation problem from the UDP DNS communication. In this commit, we implement the required changes and simplify the logic for picking the EDNS Buffer Size. 1. The defaults for `edns-udp-size`, `max-udp-size` and `nocookie-udp-size` have been changed to `1232` (the value picked by DNS Flag Day 2020). 2. The probing heuristics that would try 512->4096->1432->1232 buffer sizes has been removed and the resolver will always use just the `edns-udp-size` value. 3. Instead of just disabling the PMTUD mechanism on the UDP sockets, we now set IP_DONTFRAG (IPV6_DONTFRAG) flag. That means that the UDP packets won't get ever fragmented. If the ICMP packets are lost the UDP will just timeout and eventually be retried over TCP.
2020-09-23 14:47:26 +02:00
max-udp-size 1232;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
memstatistics-file \"named.memstats\";\n\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# multiple-cnames <obsolete>;\n\
A commented out line in the quoted string representing the default configuration was missing a semicolon. How AIX's make depend caught this is somewhat of a mystery.
2001-03-20 21:54:29 +00:00
# named-xfer <obsolete>;\n\
Change the default value for nocookie-udp-size back to 4096 The DNS Flag Day 2020 reduced all the EDNS buffer sizes to 1232. In this commit, we revert the default value for nocookie-udp-size back to 4096 because the option is too obscure and most people don't realize that they also need to change this configuration option in addition to max-udp-size.
2020-12-01 18:53:26 +01:00
nocookie-udp-size 4096;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
notify-rate 20;\n\
[master] complete NTA work 3882. [func] By default, negative trust anchors will be tested periodically to see whether data below them can be validated, and if so, they will be allowed to expire early. The "rndc nta -force" option overrides this behvaior. The default NTA lifetime and the recheck frequency can be configured by the "nta-lifetime" and "nta-recheck" options. [RT #36146]
2014-06-18 16:47:22 -07:00
nta-lifetime 3600;\n\
nta-recheck 300;\n\
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
# pid-file \"" NAMED_LOCALSTATEDIR "/run/named/named.pid\"; \n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
port 53;\n\
DoT test Preliminary test for DNSoverTLS - add the dot-port template to system tests, test a simple query to an authoritative.
2020-10-12 23:06:55 +02:00
tls-port 853;\n\
Add parser support for DoH configuration options This commit adds stub parser support and tests for: - an "http" global option for HTTP/2 endpoint configuration. - command line options to set http or https port numbers by specifying -p http=PORT or -p https=PORT. (NOTE: this change only affects syntax; specifying HTTP and HTTPS ports on the command line currently has no effect.) - named.conf options "http-port" and "https-port" - HTTPSPORT environment variable for use when running tests.
2020-09-16 12:21:32 -07:00
http-port 80;\n\
https-port 443;\n\
Replace all random functions with isc_random, isc_random_buf and isc_random_uniform API. The three functions has been modeled after the arc4random family of functions, and they will always return random bytes. The isc_random family of functions internally use these CSPRNG (if available): 1. getrandom() libc call (might be available on Linux and Solaris) 2. SYS_getrandom syscall (might be available on Linux, detected at runtime) 3. arc4random(), arc4random_buf() and arc4random_uniform() (available on BSDs and Mac OS X) 4. crypto library function: 4a. RAND_bytes in case OpenSSL 4b. pkcs_C_GenerateRandom() in case PKCS#11 library
2018-04-22 14:56:28 +02:00
prefetch 2 9;\n\
recursing-file \"named.recursing\";\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
recursive-clients 1000;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
request-nsid false;\n\
reserved-sockets 512;\n\
3333. [bug] Setting resolver-query-timeout too low can cause named to not recover if it looses connectivity. [RT #29623]
2012-06-08 12:34:33 +10:00
resolver-query-timeout 10;\n\
Restore default rrset-order to random.
2018-06-15 13:34:27 +10:00
rrset-order { order random; };\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
secroots-file \"named.secroots\";\n\
send-cookie true;\n\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# serial-queries <obsolete>;\n\
782. [feature] Implement the serial-query-rate option.
2001-03-19 22:34:14 +00:00
serial-query-rate 20;\n\
1417. [func] ID.SERVER/CHAOS is now a built in zone. See "server-id" for how to configure.
2003-01-20 05:46:11 +00:00
server-id none;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
session-keyalg hmac-sha256;\n\
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
# session-keyfile \"" NAMED_LOCALSTATEDIR "/run/named/session.key\";\n\
Completely remove BIND 9 Windows support The Windows support has been completely removed from the source tree and BIND 9 now no longer supports native compilation on Windows. We might consider reviewing mingw-w64 port if contributed by external party, but no development efforts will be put into making BIND 9 compile and run on Windows again.
2021-05-20 15:53:50 +02:00
session-keyname local-ddns;\n\
stacksize default;\n\
startup-notify-rate 20;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
statistics-file \"named.stats\";\n\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# statistics-interval <obsolete>;\n\
[master] EDNS padding and keepalive support 4549. [func] Added support for the EDNS TCP Keepalive option (RFC 7828). [RT #42126] 4548. [func] Added support for the EDNS Padding option (RFC 7830). [RT #42094]
2017-01-04 09:16:30 -08:00
tcp-advertised-timeout 300;\n\
[master] add TCP pipelining support 4040. [func] Added server-side support for pipelined TCP queries. TCP connections are no longer closed after the first query received from a client. (The new "keep-response-order" option allows clients to be specified for which the old behavior will still be used.) [RT #37821]
2015-01-20 16:10:30 -08:00
tcp-clients 150;\n\
[master] EDNS padding and keepalive support 4549. [func] Added support for the EDNS TCP Keepalive option (RFC 7828). [RT #42126] 4548. [func] Added support for the EDNS Padding option (RFC 7830). [RT #42094]
2017-01-04 09:16:30 -08:00
tcp-idle-timeout 300;\n\
tcp-initial-timeout 300;\n\
tcp-keepalive-timeout 300;\n\
3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
2013-06-03 14:00:03 -05:00
tcp-listen-queue 10;\n\
Add configuration option to set send/recv buffers on the nm sockets This commit adds a new configuration option to set the receive and send buffer sizes on the TCP and UDP netmgr sockets. The default is `0` which doesn't set any value and just uses the value set by the operating system. There's no magic value here - set it too small and the performance will drop, set it too large, the buffers can fill-up with queries that have already timeouted on the client side and nobody is interested for the answer and this would just make the server clog up even more by making it produce useless work. The `netstat -su` can be used on POSIX systems to monitor the receive and send buffer errors.
2020-12-02 20:51:38 +01:00
tcp-receive-buffer 0;\n\
tcp-send-buffer 0;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
# tkey-dhkey <none>\n\
# tkey-domain <none>\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
# tkey-gssapi-credential <none>\n\
Use optimal message sizes to improve compression in AXFRs (#40996)
2015-12-15 13:22:15 +05:30
transfer-message-size 20480;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
transfers-in 10;\n\
transfers-out 10;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
transfers-per-ns 2;\n\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# treat-cr-as-space <obsolete>;\n\
4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries to provide feedback to the trust-anchor administrators about how key rollovers are progressing as per draft-ietf-dnsop-edns-key-tag-02. This can be disabled using 'trust-anchor-telemetry no;'. [RT #40583]
2016-07-22 20:02:17 +10:00
trust-anchor-telemetry yes;\n\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# use-id-pool <obsolete>;\n\
Add configuration option to set send/recv buffers on the nm sockets This commit adds a new configuration option to set the receive and send buffer sizes on the TCP and UDP netmgr sockets. The default is `0` which doesn't set any value and just uses the value set by the operating system. There's no magic value here - set it too small and the performance will drop, set it too large, the buffers can fill-up with queries that have already timeouted on the client side and nobody is interested for the answer and this would just make the server clog up even more by making it produce useless work. The `netstat -su` can be used on POSIX systems to monitor the receive and send buffer errors.
2020-12-02 20:51:38 +01:00
udp-receive-buffer 0;\n\
udp-send-buffer 0;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
\n\
/* view */\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
allow-new-zones no;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
allow-notify {none;};\n\
2006. [security] Allow-query-cache and allow-recursion now default to the builtin acls "localnets" and "localhost". This is being done to make caching servers less attractive as reflective amplifying targets for spoofed traffic. This still leave authoritative servers exposed. The best fix is for full BCP 38 deployment to remove spoofed traffic.
2006-03-09 03:30:18 +00:00
allow-query-cache { localnets; localhost; };\n\
2165. [func] Allow the destination address of a query to determine if we will answer the query or recurse. allow-query-on, allow-recursion-on and allow-query-cache-on. [RT #16291]
2007-03-29 06:36:31 +00:00
allow-query-cache-on { any; };\n\
2006. [security] Allow-query-cache and allow-recursion now default to the builtin acls "localnets" and "localhost". This is being done to make caching servers less attractive as reflective amplifying targets for spoofed traffic. This still leave authoritative servers exposed. The best fix is for full BCP 38 deployment to remove spoofed traffic.
2006-03-09 03:30:18 +00:00
allow-recursion { localnets; localhost; };\n\
2165. [func] Allow the destination address of a query to determine if we will answer the query or recurse. allow-query-on, allow-recursion-on and allow-query-cache-on. [RT #16291]
2007-03-29 06:36:31 +00:00
allow-recursion-on { any; };\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
allow-update-forwarding {none;};\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
auth-nxdomain false;\n\
2801. [func] Detect and report records that are different according to DNSSEC but are sematically equal according to plain DNS. Apply plain DNS comparisons rather than DNSSEC comparisons when processing UPDATE requests. dnssec-signzone now removes such semantically duplicate records prior to signing the RRset. named-checkzone -r {ignore|warn|fail} (default warn) named-compilezone -r {ignore|warn|fail} (default warn) named.conf: check-dup-records {ignore|warn|fail};
2009-12-04 21:09:34 +00:00
check-dup-records warn;\n\
1862. [func] Add additional zone data constancy checks. named-checkzone has extended checking of NS, MX and SRV record and the hosts they reference. named has extended post zone load checks. New zone options: check-mx and integrity-check. [RT #4940]
2005-05-19 04:59:05 +00:00
check-mx warn;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
check-names master fail;\n\
check-names response ignore;\n\
check-names slave warn;\n\
3559. [func] Check that both forms of Sender Policy Framework records exist or do not exist. [RT #33355]
2013-04-30 13:49:41 +10:00
check-spf warn;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
clients-per-query 10;\n\
dnssec-accept-expired no;\n\
Set "dnssec-validation auto" by default - the default setting for dnssec-validation is now "auto", which activates DNSSEC validation using the IANA root key. The old behavior can be restored by explicitly setting "dnssec-validation yes", which "yes", which activates DNSSEC validation only if keys are explicitly configured in named.conf. - the ARM has been updated to describe the new behavior
2018-05-16 11:58:15 -07:00
dnssec-validation " VALIDATION_DEFAULT "; \n"
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
#ifdef HAVE_DNSTAP
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
" dnstap-identity hostname;\n"
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
#endif /* ifdef HAVE_DNSTAP */
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
"\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
# fetch-glue <obsolete>;\n\
[master] DDoS mitigation features 3938. [func] Added quotas to be used in recursive resolvers that are under high query load for names in zones whose authoritative servers are nonresponsive or are experiencing a denial of service attack. - "fetches-per-server" limits the number of simultaneous queries that can be sent to any single authoritative server. The configured value is a starting point; it is automatically adjusted downward if the server is partially or completely non-responsive. The algorithm used to adjust the quota can be configured via the "fetch-quota-params" option. - "fetches-per-zone" limits the number of simultaneous queries that can be sent for names within a single domain. (Note: Unlike "fetches-per-server", this value is not self-tuning.) - New stats counters have been added to count queries spilled due to these quotas. See the ARM for details of these options. [RT #37125]
2015-07-08 22:53:39 -07:00
fetch-quota-params 100 0.1 0.3 0.7;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
fetches-per-server 0;\n\
remove geoip-use-ecs from default config
2019-06-12 16:50:03 +10:00
fetches-per-zone 0;\n\
glue-cache yes;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
lame-ttl 600;\n"
4659. [bug] Remove spurious log message about lmdb-mapsize not being supported when parsing builtin configuration file. [RT #45618]
2017-07-28 16:02:52 +10:00
#ifdef HAVE_LMDB
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
" lmdb-mapsize 32M;\n"
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
#endif /* ifdef HAVE_LMDB */
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
" max-cache-size 90%;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
max-cache-ttl 604800; /* 1 week */\n\
max-clients-per-query 100;\n\
max-ncache-ttl 10800; /* 3 hours */\n\
max-recursion-depth 7;\n\
Adjust default value of "max-recursion-queries" Since the queries sent towards root and TLD servers are now included in the count (as a result of the fix for CVE-2020-8616), "max-recursion-queries" has a higher chance of being exceeded by non-attack queries. Increase its default value from 75 to 100.
2020-11-26 15:59:14 +11:00
max-recursion-queries 100;\n\
Update serve-stale config defaults Change the serve-stale configuration defaults so that they match the recommendations from RFC 8767.
2020-12-08 15:58:45 +01:00
max-stale-ttl 86400; /* 1 day */\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
message-compression yes;\n\
Add min-cache-ttl and min-ncache-ttl keywords Sometimes it is useful to set a 'floor' on the TTL for records to be cached. Some sites like to use ridiculously low TTLs for some reason, and that often is not compatible with slow links. Signed-off-by: Michael Milligan <milli@acmeps.com> Signed-off-by: LaMont Jones <lamont@debian.org>
2018-10-24 15:17:18 +02:00
min-ncache-ttl 0; /* 0 hours */\n\
min-cache-ttl 0; /* 0 seconds */\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
# min-roots <obsolete>;\n\
minimal-any false;\n\
Change default minimal-responses setting to no-auth-recursive (#46016)
2017-09-19 19:49:02 +05:30
minimal-responses no-auth-recursive;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
notify-source *;\n\
notify-source-v6 *;\n\
nsec3-test-zone no;\n\
provide-ixfr true;\n\
qname-minimization: Some post-review style/minor fixes
2018-05-29 10:22:34 +02:00
qname-minimization relaxed;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
query-source address *;\n\
query-source-v6 address *;\n\
recursion true;\n\
request-expire true;\n\
request-ixfr true;\n\
Updated CHANGES note to include require-server-cookie: 4152. [func] Implement DNS COOKIE option. This replaces the experimental SIT option of BIND 9.10. The following named.conf directives are available: send-cookie, cookie-secret, cookie-algorithm, nocookie-udp-size and require-server-cookie. The following dig options are available: +[no]cookie[=value] and +[no]badcookie. [RT #39928]
2015-08-13 08:26:23 +10:00
require-server-cookie no;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
resolver-nonbackoff-tries 3;\n\
resolver-retry-interval 800; /* in milliseconds */\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
# rfc2308-type1 <obsolete>;\n\
add named.conf option root-key-sentinel
2018-03-13 15:17:22 +11:00
root-key-sentinel yes;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
servfail-ttl 1;\n\
# sortlist <none>\n\
Change default stale-answer-client-timeout to off Using "stale-answer-client-timeout" turns out to have unforeseen negative consequences, and thus it is better to disable the feature by default for the time being.
2021-04-02 14:33:54 +02:00
stale-answer-client-timeout off;\n\
Serve-stale nit fixes While working on the serve-stale backports, I noticed the following oddities: 1. In the serve-stale system test, in one case we keep track of the time how long it took for dig to complete. In commit aaed7f9d8c2465790d769221dfe8378c7147f5eb, the code removed the exception to check for result == ISC_R_SUCCESS on stale found answers, and adjusted the test accordingly. This failed to update the time tracking accordingly. Move the t1/t2 time track variables back around the two dig commands to ensure the lookups resolved faster than the resolver-query-timeout. 2. We can remove the setting of NS_QUERYATTR_STALEOK and DNS_RDATASETATTR_STALE_ADDED on the "else if (stale_timeout)" code path, because they are added later when we know we have actually found a stale answer on a stale timeout lookup. 3. We should clear the NS_QUERYATTR_STALEOK flag from the client query attributes instead of DNS_RDATASETATTR_STALE_ADDED (that flag is set on the rdataset attributes). 4. In 'bin/named/config.c' we should set the configuration options in alpabetical order. 5. In the ARM, in the backports we have added "(stale)" between "cached" and "RRset" to make more clear a stale RRset may be returned in this scenario.
2021-04-26 09:19:25 +02:00
stale-answer-enable false;\n\
Update serve-stale config defaults Change the serve-stale configuration defaults so that they match the recommendations from RFC 8767.
2020-12-08 15:58:45 +01:00
stale-answer-ttl 30; /* 30 seconds */\n\
Add stale-cache-enable option and disable serve-stable by default The current serve-stale implementation in BIND 9 stores all received records in the cache for a max-stale-ttl interval (default 12 hours). This allows DNS operators to turn the serve-stale answers in an event of large authoritative DNS outage. The caching of the stale answers needs to be enabled before the outage happens or the feature would be otherwise useless. The negative consequence of the default setting is the inevitable cache-bloat that happens for every and each DNS operator running named. In this MR, a new configuration option `stale-cache-enable` is introduced that allows the operators to selectively enable or disable the serve-stale feature of BIND 9 based on their decision. The newly introduced option has been disabled by default, e.g. serve-stale is disabled in the default configuration and has to be enabled if required.
2020-07-21 10:38:55 +02:00
stale-cache-enable false;\n\
Add stale-answer-client-timeout option The general logic behind the addition of this new feature works as folows: When a client query arrives, the basic path (query.c / ns_query_recurse) was to create a fetch, waiting for completion in fetch_callback. With the introduction of stale-answer-client-timeout, a new event of type DNS_EVENT_TRYSTALE may invoke fetch_callback, whenever stale answers are enabled and the fetch took longer than stale-answer-client-timeout to complete. When an event of type DNS_EVENT_TRYSTALE triggers fetch_callback, we must ensure that the folowing happens: 1. Setup a new query context with the sole purpose of looking up for stale RRset only data, for that matters a new flag was added 'DNS_DBFIND_STALEONLY' used in database lookups. . If a stale RRset is found, mark the original client query as answered (with a new query attribute named NS_QUERYATTR_ANSWERED), so when the fetch completion event is received later, we avoid answering the client twice. . If a stale RRset is not found, cleanup and wait for the normal fetch completion event. 2. In ns_query_done, we must change this part: /* * If we're recursing then just return; the query will * resume when recursion ends. */ if (RECURSING(qctx->client)) { return (qctx->result); } To this: if (RECURSING(qctx->client) && !QUERY_STALEONLY(qctx->client)) { return (qctx->result); } Otherwise we would not proceed to answer the client if it happened that a stale answer was found when looking up for stale only data. When an event of type DNS_EVENT_FETCHDONE triggers fetch_callback, we proceed as before, resuming query, updating stats, etc, but a few exceptions had to be added, most important of which are two: 1. Before answering the client (ns_client_send), check if the query wasn't already answered before. 2. Before detaching a client, e.g. isc_nmhandle_detach(&client->reqhandle), ensure that this is the fetch completion event, and not the one triggered due to stale-answer-client-timeout, so a correct call would be: if (!QUERY_STALEONLY(client)) { isc_nmhandle_detach(&client->reqhandle); } Other than these notes, comments were added in code in attempt to make these updates easier to follow.
2020-12-11 14:10:31 -03:00
stale-refresh-time 30; /* 30 seconds */\n\
Disable NSEC Aggressive Cache (synth-from-dnssec) by default It was found that NSEC Aggressive Caching has a significant performance impact on BIND 9 when used as recursor. This commit disables the synth-from-dnssec configuration option by default to provide immediate remedy for people running BIND 9.12+. The NSEC Aggressive Cache will be enabled again after a proper fix will be prepared.
2019-10-28 15:04:38 -05:00
synth-from-dnssec no;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
# topology <none>\n\
transfer-format many-answers;\n\
4222. [func] Bias IPv6 servers when selecting the next server to query. [RT #40836]
2015-09-28 18:57:19 +10:00
v6-bias 50;\n\
4693. [func] Synthesis of responses from DNSSEC-verified records. Stage 1 covers NXDOMAIN synthesis from NSEC records. This is controlled by synth-from-dnssec and is enabled by default. [RT #40138]
2017-08-31 07:57:50 +10:00
zero-no-soa-ttl-cache no;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
\n\
/* zone */\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
allow-query {any;};\n\
2165. [func] Allow the destination address of a query to determine if we will answer the query or recurse. allow-query-on, allow-recursion-on and allow-query-cache-on. [RT #16291]
2007-03-29 06:36:31 +00:00
allow-query-on {any;};\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
allow-transfer {any;};\n\
# also-notify <none>\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
alt-transfer-source *;\n\
alt-transfer-source-v6 *;\n\
check-integrity yes;\n\
check-mx-cname warn;\n\
check-sibling yes;\n\
check-srv-cname warn;\n\
check-wildcard yes;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
dialup no;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
dnssec-dnskey-kskonly no;\n\
dnssec-loadkeys-interval 60;\n\
dnssec-secure-to-insecure no;\n\
dnssec-update-mode maintain;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
# forward <none>\n\
# forwarders <none>\n\
inline-signing should have been in zone_only_clauses
2021-02-26 10:00:09 +11:00
# inline-signing no;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
ixfr-from-differences false;\n\
[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]
2015-05-21 23:04:29 -07:00
# maintain-ixfr-base <obsolete>;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
# max-ixfr-log-size <obsolete>\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
max-journal-size default;\n\
4504. [security] Allow the maximum number of records in a zone to be specified. This provides a control for issues raised in CVE-2016-6170. [RT #42143]
2016-11-02 17:31:27 +11:00
max-records 0;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
max-refresh-time 2419200; /* 4 weeks */\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
max-retry-time 1209600; /* 2 weeks */\n\
max-transfer-idle-in 60;\n\
max-transfer-idle-out 60;\n\
max-transfer-time-in 120;\n\
max-transfer-time-out 120;\n\
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
min-refresh-time 300;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
min-retry-time 500;\n\
Fixed missing newline and continuation character (\n\)
2002-08-01 03:23:36 +00:00
multi-master no;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
notify yes;\n\
notify-delay 5;\n\
notify-to-soa no;\n\
serial-update-method increment;\n\
2349. [func] Provide incremental re-signing support for secure dynamic zones. [RT #1091] back out incorrect branch rt1091 and apply correct branch rt1091a.
2008-04-02 02:37:42 +00:00
sig-signing-nodes 100;\n\
sig-signing-signatures 10;\n\
2578. [bug] Changed default sig-signing-type to 65534, because 65535 turns out to be reserved. [RT #19477]
2009-03-16 23:41:21 +00:00
sig-signing-type 65534;\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
sig-validity-interval 30; /* days */\n\
new option "dnskey-sig-validity" - overrides "sig-validity-interval" for DNSKEY, CDNSKEY and CDS RRSIGs
2018-03-12 22:14:26 -07:00
dnskey-sig-validity 0; /* default: sig-validity-interval */\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
transfer-source *;\n\
transfer-source-v6 *;\n\
2035. [func] Make falling back to TCP on UDP refresh failure optional. Default "try-tcp-refresh yes;" for BIND 8 compatibility. [RT #16123]
2006-06-04 23:17:07 +00:00
try-tcp-refresh yes; /* BIND 8 compat */\n\
4700. [func] Serving of stale answers is now supported. This allows named to provide stale cached answers when the authoritative server is under attack. See max-stale-ttl, stale-answer-enable, stale-answer-ttl. [RT #44790]
2017-09-06 09:58:29 +10:00
update-check-ksk yes;\n\
zero-no-soa-ttl yes;\n\
zone-statistics terse;\n\
properly quote embedded newlines in string
2001-11-20 18:46:43 +00:00
};\n\
pullup fixed from 9.3
2004-03-16 05:52:24 +00:00
"
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
"#\n\
spelling s/is/in/
2007-06-17 23:52:28 +00:00
# Zones in the \"_bind\" view are NOT counted in the count of zones.\n\
1468. [func] Internal zones are nolonger for 'rndc status'. [RT #4706]
2003-04-17 12:11:39 +00:00
#\n\
properly quote embedded newlines in string
2001-11-20 18:46:43 +00:00
view \"_bind\" chaos {\n\
recursion no;\n\
1702. [bug] also-notify should not be applied to builtin zones. [RT #12323]
2004-08-28 05:42:12 +00:00
notify no;\n\
2936. [func] Improved configuration syntax and multiple-view support for addzone/delzone feature (see change #2930). Removed "new-zone-file" option, replaced with "allow-new-zones (yes|no)". The new-zone-file for each view is now created automatically, with a filename generated from a hash of the view name. It is no longer necessary to "include" the new-zone-file in named.conf; this happens automatically. Zones that were not added via "rndc addzone" can no longer be removed with "rndc delzone". [RT #19447]
2010-08-11 18:14:20 +00:00
allow-new-zones no;\n\
Hardcode "max-cache-size" for the "_bind" view The built-in "_bind" view does not allow recursion and therefore does not need a large cache database. However, as "max-cache-size" is not explicitly set for that view in the default configuration, it inherits that setting from global options. Set "max-cache-size" for the built-in "_bind" view to a fixed value (2 MB, i.e. the smallest allowed value) to prevent needlessly preallocating memory for its cache RBT hash table.
2021-06-22 15:28:31 +02:00
max-cache-size 2M;\n\
[master] DNS RRL 3494. [func] DNS RRL: Blunt the impact of DNS reflection and amplification attacks by rate-limiting substantially- identical responses. [RT #28130]
2013-02-25 10:49:30 -08:00
\n\
# Prevent use of this zone in DNS amplified reflection DoS attacks\n\
rate-limit {\n\
responses-per-second 3;\n\
slip 0;\n\
min-table-size 10;\n\
};\n\
properly quote embedded newlines in string
2001-11-20 18:46:43 +00:00
\n\
zone \"version.bind\" chaos {\n\
type master;\n\
database \"_builtin version\";\n\
};\n\
\n\
zone \"hostname.bind\" chaos {\n\
type master;\n\
database \"_builtin hostname\";\n\
};\n\
\n\
zone \"authors.bind\" chaos {\n\
type master;\n\
database \"_builtin authors\";\n\
};\n\
2619. [func] Add support for RFC 5011, automatic trust anchor maintenance. The new "managed-keys" statement can be used in place of "trusted-keys" for zones which support this protocol. (Note: this syntax is expected to change prior to 9.7.0 final.) [RT #19248]
2009-06-30 02:53:46 +00:00
\n\
1417. [func] ID.SERVER/CHAOS is now a built in zone. See "server-id" for how to configure.
2003-01-20 05:46:11 +00:00
zone \"id.server\" chaos {\n\
type master;\n\
database \"_builtin id\";\n\
};\n\
properly quote embedded newlines in string
2001-11-20 18:46:43 +00:00
};\n\
2572. [func] Simplify DLV configuration, with a new option "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
"
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
"#\n\
[master] de-DLV 4749. [func] The ISC DLV service has been shut down, and all DLV records have been removed from dlv.isc.org. - Removed references to ISC DLV in documentation - Removed DLV key from bind.keys - No longer use ISC DLV by default in delv [RT #46155]
2017-10-03 00:28:31 -07:00
# Default trusted key(s), used if \n\
# \"dnssec-validation auto;\" is set and\n\
2572. [func] Simplify DLV configuration, with a new option "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
# sysconfdir/bind.keys doesn't exist).\n\
#\n\
"dnssec-keys" is now a synonym for "managed-keys" - managed-keys is now deprecated as well as trusted-keys, though it continues to work as a synonym for dnssec-keys - references to managed-keys have been updated throughout the code. - tests have been updated to use dnssec-keys format - also the trusted-keys entries have been removed from the generated bind.keys.h file and are no longer generated by bindkeys.pl.
2018-10-05 12:00:42 -07:00
# BEGIN DNSSEC KEYS\n"
2572. [func] Simplify DLV configuration, with a new option "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
/* Imported from bind.keys.h: */
TRUST_ANCHORS
2572. [func] Simplify DLV configuration, with a new option "dnssec-lookaside auto;" This is the equivalent of "dnssec-lookaside . trust-anchor dlv.isc.org;" plus setting a trusted-key for dlv.isc.org. Note: The trusted key is hard-coded into named, but is also stored in (and can be overridden by) $sysconfdir/bind.keys. As the ISC DLV key rolls over it can be kept up to date by replacing the bind.keys file with a key downloaded from https://www.isc.org/solutions/dlv. [RT #18685]
2009-03-04 02:42:31 +00:00
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
"# END MANAGED KEYS\n\
Define a default master server list for the root zone To minimize the effort required to set up IANA root zone mirroring, define a default master server list for the root zone and use it when that zone is to be mirrored and no master server list was explicitly specified. Contents of that list are taken from RFC 7706 and are subject to change in future releases. Since the static get_masters_def() function in bin/named/config.c does exactly what named_zone_configure() in bin/named/zoneconf.c needs to do, make the former non-static and use it in the latter to prevent code duplication.
2018-10-09 10:54:51 +02:00
\n\
add "primaries" as a synonym for "masters" in named.conf as "type primary" is preferred over "type master" now, it makes sense to make "primaries" available as a synonym too. added a correctness check to ensure "primaries" and "masters" cannot both be used in the same zone.
2020-06-17 02:02:27 -07:00
primaries " DEFAULT_IANA_ROOT_ZONE_PRIMARIES " {\n\
Define a default master server list for the root zone To minimize the effort required to set up IANA root zone mirroring, define a default master server list for the root zone and use it when that zone is to be mirrored and no master server list was explicitly specified. Contents of that list are taken from RFC 7706 and are subject to change in future releases. Since the static get_masters_def() function in bin/named/config.c does exactly what named_zone_configure() in bin/named/zoneconf.c needs to do, make the former non-static and use it in the latter to prevent code duplication.
2018-10-09 10:54:51 +02:00
2001:500:84::b; # b.root-servers.net\n\
2001:500:2f::f; # f.root-servers.net\n\
2001:7fd::1; # k.root-servers.net\n\
2620:0:2830:202::132; # xfr.cjr.dns.icann.org\n\
2620:0:2d0:202::132; # xfr.lax.dns.icann.org\n\
192.228.79.201; # b.root-servers.net\n\
192.33.4.12; # c.root-servers.net\n\
192.5.5.241; # f.root-servers.net\n\
192.112.36.4; # g.root-servers.net\n\
193.0.14.129; # k.root-servers.net\n\
192.0.47.132; # xfr.cjr.dns.icann.org\n\
192.0.32.132; # xfr.lax.dns.icann.org\n\
};\n\
Reimplemented the built-in CHAOS zones using sdb.
2001-11-20 01:18:15 +00:00
";
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
isc_result_t
apply the modified style
2020-02-13 14:44:37 -08:00
named_config_parsedefaults(cfg_parser_t *parser, cfg_obj_t **conf) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
isc_buffer_t b;
isc_buffer_init(&b, defaultconf, sizeof(defaultconf) - 1);
isc_buffer_add(&b, sizeof(defaultconf) - 1);
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
return (cfg_parse_buffer(parser, &b, __FILE__, 0, &cfg_type_namedconf,
cleanup cfg_parse_buffer* functions cfg_parse_buffer() now has the same signature as the former cfg_parse_buffer4(). cfg_parse_buffer{2,3,4}() have been removed.
2019-01-21 20:03:45 -08:00
CFG_PCTX_NODEPRECATED, conf));
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
isc_result_t
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
named_config_get(cfg_obj_t const *const *maps, const char *name,
apply the modified style
2020-02-13 14:44:37 -08:00
const cfg_obj_t **obj) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
int i;
Do not put a space before ';' when terminating a statement or in a 'for' statement.
2001-11-27 00:56:32 +00:00
for (i = 0;; i++) {
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (maps[i] == NULL) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (ISC_R_NOTFOUND);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
if (cfg_map_get(maps[i], name, obj) == ISC_R_SUCCESS) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (ISC_R_SUCCESS);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
}
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
isc_result_t
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_checknames_get(const cfg_obj_t **maps, const char *which,
apply the modified style
2020-02-13 14:44:37 -08:00
const cfg_obj_t **obj) {
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_listelt_t *element;
apply the modified style
2020-02-13 14:44:37 -08:00
const cfg_obj_t *checknames;
const cfg_obj_t *type;
const cfg_obj_t *value;
int i;
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
Add DBC checks to named_checknames_get
2020-05-20 11:56:37 +10:00
REQUIRE(maps != NULL);
REQUIRE(which != NULL);
REQUIRE(obj != NULL && *obj == NULL);
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
for (i = 0;; i++) {
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (maps[i] == NULL) {
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
return (ISC_R_NOTFOUND);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
checknames = NULL;
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
if (cfg_map_get(maps[i], "check-names", &checknames) ==
ISC_R_SUCCESS) {
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
/*
* Zone map entry is not a list.
*/
if (checknames != NULL && !cfg_obj_islist(checknames)) {
*obj = checknames;
return (ISC_R_SUCCESS);
}
for (element = cfg_list_first(checknames);
apply the modified style
2020-02-13 14:44:37 -08:00
element != NULL; element = cfg_list_next(element))
{
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
value = cfg_listelt_value(element);
type = cfg_tuple_get(value, "type");
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
if (strcasecmp(cfg_obj_asstring(type), which) ==
0) {
1612. [bug] check-names at the option/view level could trigger an INSIST. [RT# 11116]
2004-04-20 14:11:47 +00:00
*obj = cfg_tuple_get(value, "mode");
return (ISC_R_SUCCESS);
}
}
}
}
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
int
apply the modified style
2020-02-13 14:44:37 -08:00
named_config_listcount(const cfg_obj_t *list) {
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_listelt_t *e;
apply the modified style
2020-02-13 14:44:37 -08:00
int i = 0;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
for (e = cfg_list_first(list); e != NULL; e = cfg_list_next(e)) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
i++;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (i);
}
isc_result_t
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_config_getclass(const cfg_obj_t *classobj, dns_rdataclass_t defclass,
apply the modified style
2020-02-13 14:44:37 -08:00
dns_rdataclass_t *classp) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
isc_textregion_t r;
apply the modified style
2020-02-13 14:44:37 -08:00
isc_result_t result;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
if (!cfg_obj_isstring(classobj)) {
955. [bug] When using views, the zone's class was not being inherited from the view's class. [RT #1583]
2001-08-07 01:58:59 +00:00
*classp = defclass;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (ISC_R_SUCCESS);
}
1914. [bug] Strings returned from cfg_obj_asstring() should be treated as read-only. The prototype for cfg_obj_asstring() has been updated to reflect this. [RT #15256]
2005-08-23 02:36:11 +00:00
DE_CONST(cfg_obj_asstring(classobj), r.base);
r.length = strlen(r.base);
1002. [bug] Log unknown class including file and line. [RT #1759]
2001-09-17 00:33:52 +00:00
result = dns_rdataclass_fromtext(classp, &r);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(classobj, named_g_lctx, ISC_LOG_ERROR,
1914. [bug] Strings returned from cfg_obj_asstring() should be treated as read-only. The prototype for cfg_obj_asstring() has been updated to reflect this. [RT #15256]
2005-08-23 02:36:11 +00:00
"unknown class '%s'", r.base);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
1002. [bug] Log unknown class including file and line. [RT #1759]
2001-09-17 00:33:52 +00:00
return (result);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
1234. [bug] 'rrset-order' and 'sortlist' should be additive not exclusive. 1223. [func] 'rrset-order' partially works 'cyclic' and 'random' are supported.
2002-03-07 13:46:41 +00:00
isc_result_t
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_config_gettype(const cfg_obj_t *typeobj, dns_rdatatype_t deftype,
apply the modified style
2020-02-13 14:44:37 -08:00
dns_rdatatype_t *typep) {
1234. [bug] 'rrset-order' and 'sortlist' should be additive not exclusive. 1223. [func] 'rrset-order' partially works 'cyclic' and 'random' are supported.
2002-03-07 13:46:41 +00:00
isc_textregion_t r;
apply the modified style
2020-02-13 14:44:37 -08:00
isc_result_t result;
1234. [bug] 'rrset-order' and 'sortlist' should be additive not exclusive. 1223. [func] 'rrset-order' partially works 'cyclic' and 'random' are supported.
2002-03-07 13:46:41 +00:00
if (!cfg_obj_isstring(typeobj)) {
*typep = deftype;
return (ISC_R_SUCCESS);
}
1914. [bug] Strings returned from cfg_obj_asstring() should be treated as read-only. The prototype for cfg_obj_asstring() has been updated to reflect this. [RT #15256]
2005-08-23 02:36:11 +00:00
DE_CONST(cfg_obj_asstring(typeobj), r.base);
r.length = strlen(r.base);
1234. [bug] 'rrset-order' and 'sortlist' should be additive not exclusive. 1223. [func] 'rrset-order' partially works 'cyclic' and 'random' are supported.
2002-03-07 13:46:41 +00:00
result = dns_rdatatype_fromtext(typep, &r);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(typeobj, named_g_lctx, ISC_LOG_ERROR,
1914. [bug] Strings returned from cfg_obj_asstring() should be treated as read-only. The prototype for cfg_obj_asstring() has been updated to reflect this. [RT #15256]
2005-08-23 02:36:11 +00:00
"unknown type '%s'", r.base);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
1234. [bug] 'rrset-order' and 'sortlist' should be additive not exclusive. 1223. [func] 'rrset-order' partially works 'cyclic' and 'random' are supported.
2002-03-07 13:46:41 +00:00
return (result);
}
AIX was extremely unhappy about unescaped literal newlines in a multiline string. ns_config_getzonetype was declared in the header to return dns_zonetype_t, but in the source file to return isc_result_t. The former is correct.
2001-03-05 13:43:14 +00:00
dns_zonetype_t
apply the modified style
2020-02-13 14:44:37 -08:00
named_config_getzonetype(const cfg_obj_t *zonetypeobj) {
initialize ztype in ns_config_getzonetype() to silence warning
2001-03-05 11:49:15 +00:00
dns_zonetype_t ztype = dns_zone_none;
apply the modified style
2020-02-13 14:44:37 -08:00
const char *str;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
str = cfg_obj_asstring(zonetypeobj);
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
if (strcasecmp(str, "primary") == 0 || strcasecmp(str, "master") == 0) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
ztype = dns_zone_master;
[master] allow primary/secondary as synonyms for master/slave 4848. [func] Zone types "primary" and "secondary" can now be used as synonyms for "master" and "slave" in named.conf. [RT #46713]
2017-12-15 01:47:05 -08:00
} else if (strcasecmp(str, "secondary") == 0 ||
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
strcasecmp(str, "slave") == 0) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
ztype = dns_zone_slave;
Define a separate dns_zonetype_t for mirror zones Rather than overloading dns_zone_slave and discerning between a slave zone and a mirror zone using a zone option, define a separate enum value, dns_zone_mirror, to be used exclusively by mirror zones. Update code handling slave zones to ensure it also handles mirror zones where applicable.
2018-10-09 10:54:51 +02:00
} else if (strcasecmp(str, "mirror") == 0) {
ztype = dns_zone_mirror;
[master] allow primary/secondary as synonyms for master/slave 4848. [func] Zone types "primary" and "secondary" can now be used as synonyms for "master" and "slave" in named.conf. [RT #46713]
2017-12-15 01:47:05 -08:00
} else if (strcasecmp(str, "stub") == 0) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
ztype = dns_zone_stub;
[master] allow primary/secondary as synonyms for master/slave 4848. [func] Zone types "primary" and "secondary" can now be used as synonyms for "master" and "slave" in named.conf. [RT #46713]
2017-12-15 01:47:05 -08:00
} else if (strcasecmp(str, "static-stub") == 0) {
2947. [func] Add new zone type "static-stub". It's like a stub zone, but the nameserver names and/or their IP addresses are statically configured. [RT #21474] (for 9.8.0)
2010-12-16 09:51:30 +00:00
ztype = dns_zone_staticstub;
[master] allow primary/secondary as synonyms for master/slave 4848. [func] Zone types "primary" and "secondary" can now be used as synonyms for "master" and "slave" in named.conf. [RT #46713]
2017-12-15 01:47:05 -08:00
} else if (strcasecmp(str, "redirect") == 0) {
2039. [func] Redirect on NXDOMAIN support. [RT #23146]
2011-02-23 03:08:11 +00:00
ztype = dns_zone_redirect;
[master] allow primary/secondary as synonyms for master/slave 4848. [func] Zone types "primary" and "secondary" can now be used as synonyms for "master" and "slave" in named.conf. [RT #46713]
2017-12-15 01:47:05 -08:00
} else {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
INSIST(0);
Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached
2018-11-07 15:00:07 +07:00
ISC_UNREACHABLE();
[master] allow primary/secondary as synonyms for master/slave 4848. [func] Zone types "primary" and "secondary" can now be used as synonyms for "master" and "slave" in named.conf. [RT #46713]
2017-12-15 01:47:05 -08:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (ztype);
}
isc_result_t
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_config_getiplist(const cfg_obj_t *config, const cfg_obj_t *list,
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
in_port_t defport, isc_mem_t *mctx,
isc_sockaddr_t **addrsp, isc_dscp_t **dscpsp,
apply the modified style
2020-02-13 14:44:37 -08:00
uint32_t *countp) {
int count, i = 0;
const cfg_obj_t *addrlist;
const cfg_obj_t *portobj, *dscpobj;
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_listelt_t *element;
apply the modified style
2020-02-13 14:44:37 -08:00
isc_sockaddr_t *addrs;
in_port_t port;
isc_dscp_t dscp = -1, *dscps = NULL;
isc_result_t result;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
INSIST(addrsp != NULL && *addrsp == NULL);
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
INSIST(dscpsp == NULL || *dscpsp == NULL);
reverse also-notify changes. dns_zone_setalsonotify() has relaxed its calling convention. Correct INSIST
2002-01-23 02:12:24 +00:00
INSIST(countp != NULL);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
addrlist = cfg_tuple_get(list, "addresses");
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
count = named_config_listcount(addrlist);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
portobj = cfg_tuple_get(list, "port");
if (cfg_obj_isuint32(portobj)) {
Replace custom isc_u?intNN_t types with C99 u?intNN_t types
2018-03-28 14:19:37 +02:00
uint32_t val = cfg_obj_asuint32(portobj);
if (val > UINT16_MAX) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(portobj, named_g_lctx, ISC_LOG_ERROR,
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
"port '%u' out of range", val);
return (ISC_R_RANGE);
}
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
port = (in_port_t)val;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
} else if (defport != 0) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
port = defport;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
} else {
Add DoT support to bind Parse the configuration of tls objects into SSL_CTX* objects. Listen on DoT if 'tls' option is setup in listen-on directive. Use DoT/DoH ports for DoT/DoH.
2020-10-01 13:18:47 +02:00
result = named_config_getport(config, "port", &port);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (result);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
if (dscpsp != NULL) {
dscpobj = cfg_tuple_get(list, "dscp");
if (dscpobj != NULL && cfg_obj_isuint32(dscpobj)) {
if (cfg_obj_asuint32(dscpobj) > 63) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(dscpobj, named_g_lctx,
ISC_LOG_ERROR,
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
"dscp value '%u' is out of range",
cfg_obj_asuint32(dscpobj));
return (ISC_R_RANGE);
}
dscp = (isc_dscp_t)cfg_obj_asuint32(dscpobj);
}
4110. [bug] Address memory leaks / null pointer dereferences on out of memory. [RT #39310]
2015-04-29 03:16:50 +10:00
dscps = isc_mem_get(mctx, count * sizeof(isc_dscp_t));
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
addrs = isc_mem_get(mctx, count * sizeof(isc_sockaddr_t));
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
for (element = cfg_list_first(addrlist); element != NULL;
apply the modified style
2020-02-13 14:44:37 -08:00
element = cfg_list_next(element), i++)
{
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
const cfg_obj_t *addr;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
INSIST(i < count);
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
addr = cfg_listelt_value(element);
addrs[i] = *cfg_obj_assockaddr(addr);
if (dscpsp != NULL) {
isc_dscp_t innerdscp;
innerdscp = cfg_obj_getdscp(addr);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (innerdscp == -1) {
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
innerdscp = dscp;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
dscps[i] = innerdscp;
}
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (isc_sockaddr_getport(&addrs[i]) == 0) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
isc_sockaddr_setport(&addrs[i], port);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
INSIST(i == count);
*addrsp = addrs;
*countp = count;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (dscpsp != NULL) {
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
*dscpsp = dscps;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (ISC_R_SUCCESS);
}
void
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_config_putiplist(isc_mem_t *mctx, isc_sockaddr_t **addrsp,
apply the modified style
2020-02-13 14:44:37 -08:00
isc_dscp_t **dscpsp, uint32_t count) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
INSIST(addrsp != NULL && *addrsp != NULL);
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
INSIST(dscpsp == NULL || *dscpsp != NULL);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
isc_mem_put(mctx, *addrsp, count * sizeof(isc_sockaddr_t));
*addrsp = NULL;
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
if (dscpsp != NULL) {
isc_mem_put(mctx, *dscpsp, count * sizeof(isc_dscp_t));
*dscpsp = NULL;
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
prevent "primaries" lists from having duplicate names it is now an error to have two primaries lists with the same name. this is true regardless of whether the "primaries" or "masters" keywords were used to define them.
2020-06-25 21:59:56 -07:00
static isc_result_t
getprimariesdef(const cfg_obj_t *cctx, const char *list, const char *name,
const cfg_obj_t **ret) {
apply the modified style
2020-02-13 14:44:37 -08:00
isc_result_t result;
prevent "primaries" lists from having duplicate names it is now an error to have two primaries lists with the same name. this is true regardless of whether the "primaries" or "masters" keywords were used to define them.
2020-06-25 21:59:56 -07:00
const cfg_obj_t *obj = NULL;
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_listelt_t *elt;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
prevent "primaries" lists from having duplicate names it is now an error to have two primaries lists with the same name. this is true regardless of whether the "primaries" or "masters" keywords were used to define them.
2020-06-25 21:59:56 -07:00
REQUIRE(cctx != NULL);
REQUIRE(name != NULL);
REQUIRE(ret != NULL && *ret == NULL);
result = cfg_map_get(cctx, list, &obj);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
return (result);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
prevent "primaries" lists from having duplicate names it is now an error to have two primaries lists with the same name. this is true regardless of whether the "primaries" or "masters" keywords were used to define them.
2020-06-25 21:59:56 -07:00
elt = cfg_list_first(obj);
while (elt != NULL) {
obj = cfg_listelt_value(elt);
if (strcasecmp(cfg_obj_asstring(cfg_tuple_get(obj, "name")),
name) == 0) {
*ret = obj;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
return (ISC_R_SUCCESS);
}
prevent "primaries" lists from having duplicate names it is now an error to have two primaries lists with the same name. this is true regardless of whether the "primaries" or "masters" keywords were used to define them.
2020-06-25 21:59:56 -07:00
elt = cfg_list_next(elt);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
}
return (ISC_R_NOTFOUND);
}
prevent "primaries" lists from having duplicate names it is now an error to have two primaries lists with the same name. this is true regardless of whether the "primaries" or "masters" keywords were used to define them.
2020-06-25 21:59:56 -07:00
isc_result_t
named_config_getprimariesdef(const cfg_obj_t *cctx, const char *name,
const cfg_obj_t **ret) {
isc_result_t result;
result = getprimariesdef(cctx, "primaries", name, ret);
if (result != ISC_R_SUCCESS) {
result = getprimariesdef(cctx, "masters", name, ret);
}
return (result);
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
static isc_result_t
named_config_getname(isc_mem_t *mctx, const cfg_obj_t *obj,
dns_name_t **namep) {
REQUIRE(namep != NULL && *namep == NULL);
const char *objstr;
isc_result_t result;
isc_buffer_t b;
dns_fixedname_t fname;
if (!cfg_obj_isstring(obj)) {
*namep = NULL;
return (ISC_R_SUCCESS);
}
*namep = isc_mem_get(mctx, sizeof(**namep));
dns_name_init(*namep, NULL);
objstr = cfg_obj_asstring(obj);
isc_buffer_constinit(&b, objstr, strlen(objstr));
isc_buffer_add(&b, strlen(objstr));
dns_fixedname_init(&fname);
result = dns_name_fromtext(dns_fixedname_name(&fname), &b, dns_rootname,
0, NULL);
if (result != ISC_R_SUCCESS) {
Fix wrong length passed to isc_mem_put If an invalid key name (e.g. "a..b") in a primaries list in named.conf is specified the wrong size is passed to isc_mem_put resulting in the returned memory being put on the wrong freed list. *** CID 316784: Incorrect expression (SIZEOF_MISMATCH) /bin/named/config.c: 636 in named_config_getname() 630 isc_buffer_constinit(&b, objstr, strlen(objstr)); 631 isc_buffer_add(&b, strlen(objstr)); 632 dns_fixedname_init(&fname); 633 result = dns_name_fromtext(dns_fixedname_name(&fname), &b, dns_rootname, 634 0, NULL); 635 if (result != ISC_R_SUCCESS) { CID 316784: Incorrect expression (SIZEOF_MISMATCH) Passing argument "*namep" of type "dns_name_t *" and argument "8UL /* sizeof (*namep) */" to function "isc__mem_put" is suspicious. 636 isc_mem_put(mctx, *namep, sizeof(*namep)); 637 *namep = NULL; 638 return (result); 639 } 640 dns_name_dup(dns_fixedname_name(&fname), mctx, *namep); 641
2021-02-01 11:43:45 +11:00
isc_mem_put(mctx, *namep, sizeof(**namep));
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
*namep = NULL;
return (result);
}
dns_name_dup(dns_fixedname_name(&fname), mctx, *namep);
return (ISC_R_SUCCESS);
}
#define grow_array(mctx, array, newlen, oldlen) \
if (newlen >= oldlen) { \
size_t newsize = (newlen + 16) * sizeof(array[0]); \
size_t oldsize = oldlen * sizeof(array[0]); \
void *tmp = isc_mem_get(mctx, newsize); \
memset(tmp, 0, newsize); \
if (oldlen != 0) { \
memmove(tmp, array, oldsize); \
isc_mem_put(mctx, array, oldsize); \
} \
array = tmp; \
oldlen = newlen + 16; \
}
#define shrink_array(mctx, array, newlen, oldlen) \
if (newlen < oldlen) { \
void *tmp = NULL; \
size_t newsize = newlen * sizeof(array[0]); \
size_t oldsize = oldlen * sizeof(array[0]); \
if (newlen != 0) { \
tmp = isc_mem_get(mctx, newsize); \
memset(tmp, 0, newsize); \
memmove(tmp, array, newsize); \
} else { \
tmp = NULL; \
} \
isc_mem_put(mctx, array, oldsize); \
array = tmp; \
oldlen = newlen; \
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
isc_result_t
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_config_getipandkeylist(const cfg_obj_t *config, const cfg_obj_t *list,
apply the modified style
2020-02-13 14:44:37 -08:00
isc_mem_t *mctx, dns_ipkeylist_t *ipkl) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
uint32_t addrcount = 0, dscpcount = 0, keycount = 0, tlscount = 0,
i = 0;
apply the modified style
2020-02-13 14:44:37 -08:00
uint32_t listcount = 0, l = 0, j;
uint32_t stackcount = 0, pushed = 0;
isc_result_t result;
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_listelt_t *element;
apply the modified style
2020-02-13 14:44:37 -08:00
const cfg_obj_t *addrlist;
const cfg_obj_t *portobj;
const cfg_obj_t *dscpobj;
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
in_port_t port = (in_port_t)0;
in_port_t def_port;
in_port_t def_tlsport;
apply the modified style
2020-02-13 14:44:37 -08:00
isc_dscp_t dscp = -1;
isc_sockaddr_t *addrs = NULL;
isc_dscp_t *dscps = NULL;
dns_name_t **keys = NULL;
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
dns_name_t **tlss = NULL;
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
struct {
const char *name;
} *lists = NULL;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
struct {
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_listelt_t *element;
apply the modified style
2020-02-13 14:44:37 -08:00
in_port_t port;
isc_dscp_t dscp;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
} *stack = NULL;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]
2016-05-26 21:23:19 +02:00
REQUIRE(ipkl != NULL);
4387. [test] Rewritten test suite for catalog zones. [RT #42676] 4386. [func] Support for master entries with TSIG keys in catalog zones. [RT #42577]
2016-06-22 10:49:25 +02:00
REQUIRE(ipkl->count == 0);
4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]
2016-05-26 21:23:19 +02:00
REQUIRE(ipkl->addrs == NULL);
REQUIRE(ipkl->keys == NULL);
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
REQUIRE(ipkl->tlss == NULL);
4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]
2016-05-26 21:23:19 +02:00
REQUIRE(ipkl->dscps == NULL);
4387. [test] Rewritten test suite for catalog zones. [RT #42676] 4386. [func] Support for master entries with TSIG keys in catalog zones. [RT #42577]
2016-06-22 10:49:25 +02:00
REQUIRE(ipkl->labels == NULL);
REQUIRE(ipkl->allocated == 0);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
4011. [bug] master's list port and dscp inheritance was not properly implemented. [RT #37792]
2014-11-24 11:25:06 +11:00
/*
* Get system defaults.
*/
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
result = named_config_getport(config, "port", &def_port);
if (result != ISC_R_SUCCESS) {
goto cleanup;
}
result = named_config_getport(config, "tls-port", &def_tlsport);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
4011. [bug] master's list port and dscp inheritance was not properly implemented. [RT #37792]
2014-11-24 11:25:06 +11:00
goto cleanup;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
4011. [bug] master's list port and dscp inheritance was not properly implemented. [RT #37792]
2014-11-24 11:25:06 +11:00
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
result = named_config_getdscp(config, &dscp);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
4011. [bug] master's list port and dscp inheritance was not properly implemented. [RT #37792]
2014-11-24 11:25:06 +11:00
goto cleanup;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
4011. [bug] master's list port and dscp inheritance was not properly implemented. [RT #37792]
2014-11-24 11:25:06 +11:00
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
newlist:
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
addrlist = cfg_tuple_get(list, "addresses");
portobj = cfg_tuple_get(list, "port");
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
dscpobj = cfg_tuple_get(list, "dscp");
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
if (cfg_obj_isuint32(portobj)) {
Replace custom isc_u?intNN_t types with C99 u?intNN_t types
2018-03-28 14:19:37 +02:00
uint32_t val = cfg_obj_asuint32(portobj);
if (val > UINT16_MAX) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(portobj, named_g_lctx, ISC_LOG_ERROR,
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
"port '%u' out of range", val);
1940. [bug] Fixed a number of error conditions reported by Coverity.
2005-11-30 03:33:49 +00:00
result = ISC_R_RANGE;
goto cleanup;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
port = (in_port_t)val;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
if (dscpobj != NULL && cfg_obj_isuint32(dscpobj)) {
if (cfg_obj_asuint32(dscpobj) > 63) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(dscpobj, named_g_lctx, ISC_LOG_ERROR,
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
"dscp value '%u' is out of range",
cfg_obj_asuint32(dscpobj));
4110. [bug] Address memory leaks / null pointer dereferences on out of memory. [RT #39310]
2015-04-29 03:16:50 +10:00
result = ISC_R_RANGE;
goto cleanup;
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
}
dscp = (isc_dscp_t)cfg_obj_asuint32(dscpobj);
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
result = ISC_R_NOMEMORY;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
element = cfg_list_first(addrlist);
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
resume:
for (; element != NULL; element = cfg_list_next(element)) {
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_obj_t *addr;
const cfg_obj_t *key;
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
const cfg_obj_t *tls;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
adjust the clang-format penalties to reduce string breaking this corrects some style glitches such as: ``` long_function_call(arg, arg2, arg3, arg4, arg5, "str" "ing"); ``` ...by adjusting the penalties for breaking strings and call parameter lists.
2020-02-17 12:05:39 -08:00
addr = cfg_tuple_get(cfg_listelt_value(element),
add "primaries" as a synonym for "masters" in named.conf as "type primary" is preferred over "type master" now, it makes sense to make "primaries" available as a synonym too. added a correctness check to ensure "primaries" and "masters" cannot both be used in the same zone.
2020-06-17 02:02:27 -07:00
"primarieselement");
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
key = cfg_tuple_get(cfg_listelt_value(element), "key");
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
tls = cfg_tuple_get(cfg_listelt_value(element), "tls");
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
if (!cfg_obj_issockaddr(addr)) {
apply the modified style
2020-02-13 14:44:37 -08:00
const char *listname = cfg_obj_asstring(addr);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
isc_result_t tresult;
/* Grow lists? */
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
grow_array(mctx, lists, l, listcount);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
/* Seen? */
Use coccinelle to add braces to nested single line statement Both clang-tidy and uncrustify chokes on statement like this: for (...) if (...) break; This commit uses a very simple semantic patch (below) to add braces around such statements. Semantic patch used: @@ statement S; expression E; @@ while (...) - if (E) S + { if (E) { S } } @@ statement S; expression E; @@ for (...;...;...) - if (E) S + { if (E) { S } } @@ statement S; expression E; @@ if (...) - if (E) S + { if (E) { S } }
2020-02-13 18:16:57 +01:00
for (j = 0; j < l; j++) {
if (strcasecmp(lists[j].name, listname) == 0) {
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
break;
Use coccinelle to add braces to nested single line statement Both clang-tidy and uncrustify chokes on statement like this: for (...) if (...) break; This commit uses a very simple semantic patch (below) to add braces around such statements. Semantic patch used: @@ statement S; expression E; @@ while (...) - if (E) S + { if (E) { S } } @@ statement S; expression E; @@ for (...;...;...) - if (E) S + { if (E) { S } } @@ statement S; expression E; @@ if (...) - if (E) S + { if (E) { S } }
2020-02-13 18:16:57 +01:00
}
}
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (j < l) {
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
continue;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
prevent "primaries" lists from having duplicate names it is now an error to have two primaries lists with the same name. this is true regardless of whether the "primaries" or "masters" keywords were used to define them.
2020-06-25 21:59:56 -07:00
list = NULL;
add "primaries" as a synonym for "masters" in named.conf as "type primary" is preferred over "type master" now, it makes sense to make "primaries" available as a synonym too. added a correctness check to ensure "primaries" and "masters" cannot both be used in the same zone.
2020-06-17 02:02:27 -07:00
tresult = named_config_getprimariesdef(config, listname,
&list);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
if (tresult == ISC_R_NOTFOUND) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(addr, named_g_lctx, ISC_LOG_ERROR,
add "primaries" as a synonym for "masters" in named.conf as "type primary" is preferred over "type master" now, it makes sense to make "primaries" available as a synonym too. added a correctness check to ensure "primaries" and "masters" cannot both be used in the same zone.
2020-06-17 02:02:27 -07:00
"primaries \"%s\" not found",
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
listname);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
result = tresult;
goto cleanup;
}
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (tresult != ISC_R_SUCCESS) {
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
goto cleanup;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
win32 fixes
2005-09-05 02:54:38 +00:00
lists[l++].name = listname;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
/* Grow stack? */
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
grow_array(mctx, stack, pushed, stackcount);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
/*
* We want to resume processing this list on the
* next element.
*/
stack[pushed].element = cfg_list_next(element);
stack[pushed].port = port;
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
stack[pushed].dscp = dscp;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
pushed++;
goto newlist;
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
grow_array(mctx, addrs, i, addrcount);
grow_array(mctx, dscps, i, dscpcount);
grow_array(mctx, keys, i, keycount);
grow_array(mctx, tlss, i, tlscount);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
addrs[i] = *cfg_obj_assockaddr(addr);
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
dscps[i] = cfg_obj_getdscp(addr);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (dscps[i] == -1) {
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
dscps[i] = dscp;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
result = named_config_getname(mctx, key, &keys[i]);
if (result != ISC_R_SUCCESS) {
i++; /* Increment here so that cleanup on error works.
*/
goto cleanup;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
result = named_config_getname(mctx, tls, &tlss[i]);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
i++; /* Increment here so that cleanup on error works.
*/
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
goto cleanup;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
/* Set the default port or tls-port */
if (port == 0) {
if (tlss[i] != NULL) {
port = def_tlsport;
} else {
port = def_port;
}
}
if (isc_sockaddr_getport(&addrs[i]) == 0) {
isc_sockaddr_setport(&addrs[i], port);
}
i++;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
}
if (pushed != 0) {
pushed--;
element = stack[pushed].element;
port = stack[pushed].port;
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
dscp = stack[pushed].dscp;
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
goto resume;
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
shrink_array(mctx, addrs, i, addrcount);
shrink_array(mctx, dscps, i, dscpcount);
shrink_array(mctx, keys, i, keycount);
shrink_array(mctx, tlss, i, tlscount);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (lists != NULL) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, lists, listcount * sizeof(lists[0]));
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
if (stack != NULL) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, stack, stackcount * sizeof(stack[0]));
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
update copyright notice
2008-01-22 23:28:04 +00:00
address or suppress cppcheck warnings
2019-08-08 13:52:44 +10:00
INSIST(dscpcount == addrcount);
1443. [func] Masters lists can now be specified and referenced in zone masters clauses and other masters lists. developer: marka reviewer: explorer
2003-02-26 06:04:03 +00:00
INSIST(keycount == addrcount);
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
INSIST(tlscount == addrcount);
also insist that keycount == dscpcount
2019-09-06 11:32:32 +10:00
INSIST(keycount == dscpcount);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]
2016-05-26 21:23:19 +02:00
ipkl->addrs = addrs;
ipkl->dscps = dscps;
ipkl->keys = keys;
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
ipkl->tlss = tlss;
4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]
2016-05-26 21:23:19 +02:00
ipkl->count = addrcount;
4387. [test] Rewritten test suite for catalog zones. [RT #42676] 4386. [func] Support for master entries with TSIG keys in catalog zones. [RT #42577]
2016-06-22 10:49:25 +02:00
ipkl->allocated = addrcount;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (ISC_R_SUCCESS);
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
cleanup:
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (addrs != NULL) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, addrs, addrcount * sizeof(addrs[0]));
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
if (dscps != NULL) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, dscps, dscpcount * sizeof(dscps[0]));
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
if (keys != NULL) {
3380. [bug] named could die if a non-existant master list was referenced in a also-notify. [RT #31004]
2012-09-26 15:28:46 +10:00
for (j = 0; j < i; j++) {
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (keys[j] == NULL) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
continue;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
if (dns_name_dynamic(keys[j])) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
dns_name_free(keys[j], mctx);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, keys[j], sizeof(*keys[j]));
}
isc_mem_put(mctx, keys, keycount * sizeof(keys[0]));
}
if (tlss != NULL) {
for (j = 0; j < i; j++) {
if (tlss[j] == NULL) {
continue;
}
if (dns_name_dynamic(tlss[j])) {
dns_name_free(tlss[j], mctx);
}
isc_mem_put(mctx, tlss[j], sizeof(*tlss[j]));
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, tlss, tlscount * sizeof(tlss[0]));
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
}
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (lists != NULL) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, lists, listcount * sizeof(lists[0]));
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
if (stack != NULL) {
implement xfrin via XoT Add support for a "tls" key/value pair for zone primaries, referencing either a "tls" configuration statement or "ephemeral". If set to use TLS, zones will send SOA and AXFR/IXFR queries over a TLS channel.
2021-01-14 12:51:25 +01:00
isc_mem_put(mctx, stack, stackcount * sizeof(stack[0]));
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
return (result);
}
isc_result_t
Add DoT support to bind Parse the configuration of tls objects into SSL_CTX* objects. Listen on DoT if 'tls' option is setup in listen-on directive. Use DoT/DoH ports for DoT/DoH.
2020-10-01 13:18:47 +02:00
named_config_getport(const cfg_obj_t *config, const char *type,
in_port_t *portp) {
1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]
2006-02-28 02:39:52 +00:00
const cfg_obj_t *maps[3];
const cfg_obj_t *options = NULL;
const cfg_obj_t *portobj = NULL;
apply the modified style
2020-02-13 14:44:37 -08:00
isc_result_t result;
int i;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
Check return values or cast them to (void), as required by the coding standards; add exceptions to the coding standards for cases where this is not desirable
2001-11-30 01:59:49 +00:00
(void)cfg_map_get(config, "options", &options);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
i = 0;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (options != NULL) {
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
maps[i++] = options;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
maps[i++] = named_g_defaults;
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
maps[i] = NULL;
Add DoT support to bind Parse the configuration of tls objects into SSL_CTX* objects. Listen on DoT if 'tls' option is setup in listen-on directive. Use DoT/DoH ports for DoT/DoH.
2020-10-01 13:18:47 +02:00
result = named_config_get(maps, type, &portobj);
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
INSIST(result == ISC_R_SUCCESS);
Replace custom isc_u?intNN_t types with C99 u?intNN_t types
2018-03-28 14:19:37 +02:00
if (cfg_obj_asuint32(portobj) >= UINT16_MAX) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(portobj, named_g_lctx, ISC_LOG_ERROR,
762. [feature] named now uses the new configuration parser.
2001-03-04 21:21:39 +00:00
"port '%u' out of range",
cfg_obj_asuint32(portobj));
return (ISC_R_RANGE);
}
*portp = (in_port_t)cfg_obj_asuint32(portobj);
return (ISC_R_SUCCESS);
}
fix key algorithm checks
2001-08-03 18:12:08 +00:00
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
isc_result_t
apply the modified style
2020-02-13 14:44:37 -08:00
named_config_getdscp(const cfg_obj_t *config, isc_dscp_t *dscpp) {
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
const cfg_obj_t *options = NULL;
const cfg_obj_t *dscpobj = NULL;
apply the modified style
2020-02-13 14:44:37 -08:00
isc_result_t result;
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
(void)cfg_map_get(config, "options", &options);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (options == NULL) {
3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
2013-04-19 12:36:02 +10:00
return (ISC_R_SUCCESS);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
2013-04-19 12:36:02 +10:00
result = cfg_map_get(options, "dscp", &dscpobj);
address warnings
2013-03-23 19:40:20 +11:00
if (result != ISC_R_SUCCESS || dscpobj == NULL) {
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
*dscpp = -1;
return (ISC_R_SUCCESS);
}
if (cfg_obj_asuint32(dscpobj) >= 64) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
cfg_obj_log(dscpobj, named_g_lctx, ISC_LOG_ERROR,
[master] add DSCP support 3535. [func] Add support for setting Differentiated Services Code Point (DSCP) values in named. Most configuration options which take a "port" option (e.g., listen-on, forwarders, also-notify, masters, notify-source, etc) can now also take a "dscp" option specifying a code point for use with outgoing traffic, if supported by the underlying OS. [RT #27596]
2013-03-22 12:27:54 -07:00
"dscp '%u' out of range",
cfg_obj_asuint32(dscpobj));
return (ISC_R_RANGE);
}
*dscpp = (isc_dscp_t)cfg_obj_asuint32(dscpobj);
return (ISC_R_SUCCESS);
}
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
struct keyalgorithms {
const char *str;
Reformat sources using clang-format-11
2020-08-24 09:23:19 +02:00
enum {
hmacnone,
hmacmd5,
hmacsha1,
hmacsha224,
hmacsha256,
hmacsha384,
hmacsha512
} hmac;
2609. [func] Simplify the configuration of dynamic zones: - add ddns-confgen command to generate configuration text for named.conf - add zone option "ddns-autoconf yes;", which causes named to generate a TSIG session key and allow updates to the zone using that key - add '-l' (localhost) option to nsupdate, which causes nsupdate to connect to a locally-running named process using the session key generated by named [RT #19284]
2009-06-10 00:27:22 +00:00
unsigned int type;
apply the modified style
2020-02-13 14:44:37 -08:00
uint16_t size;
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
} algorithms[] = { { "hmac-md5", hmacmd5, DST_ALG_HMACMD5, 128 },
{ "hmac-md5.sig-alg.reg.int", hmacmd5, DST_ALG_HMACMD5, 0 },
{ "hmac-md5.sig-alg.reg.int.", hmacmd5, DST_ALG_HMACMD5, 0 },
{ "hmac-sha1", hmacsha1, DST_ALG_HMACSHA1, 160 },
{ "hmac-sha224", hmacsha224, DST_ALG_HMACSHA224, 224 },
{ "hmac-sha256", hmacsha256, DST_ALG_HMACSHA256, 256 },
{ "hmac-sha384", hmacsha384, DST_ALG_HMACSHA384, 384 },
{ "hmac-sha512", hmacsha512, DST_ALG_HMACSHA512, 512 },
{ NULL, hmacnone, DST_ALG_UNKNOWN, 0 } };
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
fix key algorithm checks
2001-08-03 18:12:08 +00:00
isc_result_t
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_config_getkeyalgorithm(const char *str, const dns_name_t **name,
apply the modified style
2020-02-13 14:44:37 -08:00
uint16_t *digestbits) {
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
return (named_config_getkeyalgorithm2(str, name, NULL, digestbits));
2609. [func] Simplify the configuration of dynamic zones: - add ddns-confgen command to generate configuration text for named.conf - add zone option "ddns-autoconf yes;", which causes named to generate a TSIG session key and allow updates to the zone using that key - add '-l' (localhost) option to nsupdate, which causes nsupdate to connect to a locally-running named process using the session key generated by named [RT #19284]
2009-06-10 00:27:22 +00:00
}
isc_result_t
[master] add libns and remove liblwres 4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier) are no longer supported. [RT #45186] 4707. [func] The lightweight resolver daemon and library (lwresd and liblwres) have been removed. [RT #45186] 4706. [func] Code implementing name server query processing has been moved from bin/named to a new library "libns". Functions remaining in bin/named are now prefixed with "named_" rather than "ns_". This will make it easier to write unit tests for name server code, or link name server functionality into new tools. [RT #45186]
2017-09-08 13:39:09 -07:00
named_config_getkeyalgorithm2(const char *str, const dns_name_t **name,
apply the modified style
2020-02-13 14:44:37 -08:00
unsigned int *typep, uint16_t *digestbits) {
int i;
size_t len = 0;
uint16_t bits;
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
isc_result_t result;
for (i = 0; algorithms[i].str != NULL; i++) {
len = strlen(algorithms[i].str);
if (strncasecmp(algorithms[i].str, str, len) == 0 &&
(str[len] == '\0' ||
apply the modified style
2020-02-13 14:44:37 -08:00
(algorithms[i].size != 0 && str[len] == '-')))
{
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
break;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
fix key algorithm checks
2001-08-03 18:12:08 +00:00
}
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (algorithms[i].str == NULL) {
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
return (ISC_R_NOTFOUND);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
if (str[len] == '-') {
result = isc_parse_uint16(&bits, str + len + 1, 10);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (result != ISC_R_SUCCESS) {
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
return (result);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
if (bits > algorithms[i].size) {
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
return (ISC_R_RANGE);
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
} else if (algorithms[i].size == 0) {
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
bits = 128;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
} else {
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
bits = algorithms[i].size;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
if (name != NULL) {
switch (algorithms[i].hmac) {
Use clang-format to reformat the source files
2020-02-12 13:59:18 +01:00
case hmacmd5:
*name = dns_tsig_hmacmd5_name;
break;
case hmacsha1:
*name = dns_tsig_hmacsha1_name;
break;
case hmacsha224:
*name = dns_tsig_hmacsha224_name;
break;
case hmacsha256:
*name = dns_tsig_hmacsha256_name;
break;
case hmacsha384:
*name = dns_tsig_hmacsha384_name;
break;
case hmacsha512:
*name = dns_tsig_hmacsha512_name;
break;
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
default:
INSIST(0);
Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached
2018-11-07 15:00:07 +07:00
ISC_UNREACHABLE();
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
}
}
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
if (typep != NULL) {
2609. [func] Simplify the configuration of dynamic zones: - add ddns-confgen command to generate configuration text for named.conf - add zone option "ddns-autoconf yes;", which causes named to generate a TSIG session key and allow updates to the zone using that key - add '-l' (localhost) option to nsupdate, which causes nsupdate to connect to a locally-running named process using the session key generated by named [RT #19284]
2009-06-10 00:27:22 +00:00
*typep = algorithms[i].type;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
if (digestbits != NULL) {
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
*digestbits = bits;
Use clang-tidy to add curly braces around one-line statements The command used to reformat the files in this commit was: ./util/run-clang-tidy \ -clang-tidy-binary clang-tidy-11 -clang-apply-replacements-binary clang-apply-replacements-11 \ -checks=-*,readability-braces-around-statements \ -j 9 \ -fix \ -format \ -style=file \ -quiet clang-format -i --style=format $(git ls-files '*.c' '*.h') uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h') clang-format -i --style=format $(git ls-files '*.c' '*.h')
2020-02-13 21:48:23 +01:00
}
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and HMACSHA512 support. [RT #13606]
2006-01-27 02:35:15 +00:00
return (ISC_R_SUCCESS);
fix key algorithm checks
2001-08-03 18:12:08 +00:00
}
Reference in New Issue Copy Permalink