Mark Andrews
0fedfcafb5
add bin/tests/system/rootkeysentinel/prereq.sh
2018-05-03 10:27:50 -04:00
Mark Andrews
e713f83064
add dnssec prerequisite test to rootkeysentinel
2018-05-03 10:27:50 -04:00
Ondřej Surý
65320aa38d
Merge branch '191-remove-openssl-0.9.x-support' into 'master'
...
Remove OpenSSL 0.9.x support
Closes #191
See merge request isc-projects/bind9!175
2018-05-03 10:20:56 -04:00
Ondřej Surý
f10e43ac94
Add CHANGES entries
...
4937. [func] Remove support for OpenSSL < 1.0.0 [GL #191 ]
2018-05-03 16:00:37 +02:00
Ondřej Surý
ea95e83f5c
Add release notes about removed support for OpenSSL 0.9.x
2018-05-03 15:55:45 +02:00
Ondřej Surý
61da2bf028
Remove support for OpenSSL < 1.0.0
2018-05-03 15:55:39 +02:00
Ondřej Surý
16e352248d
Merge branch '191-misc-improvements' into 'master'
...
Miscelaneous improvements found when working on #191
See merge request isc-projects/bind9!236
2018-05-03 09:52:33 -04:00
Ondřej Surý
8d648e7a8a
Use standard OPENSSL_NO_ENGINE instead of custom USE_ENGINE define
2018-05-03 15:32:43 +02:00
Ondřej Surý
8bf192b4d1
Use BN_hex2bn instead of custom BN_fromhex function
2018-05-03 15:22:15 +02:00
Ondřej Surý
35d2dbb9f5
Fix extra ] in configure.in
2018-05-03 15:22:15 +02:00
Ondřej Surý
f1722ff512
Merge branch '165-always-use-crypto-provider-for-random-data' into 'master'
...
Always use OpenSSL or PKCS#11 random data providers
Closes #165
See merge request isc-projects/bind9!208
2018-05-03 09:13:00 -04:00
Ondřej Surý
115fbc3540
Add CHANGES entries
...
4936. [func] Always use OpenSSL or PKCS#11 random data providers and
remove the configure option --{enable,disable}-crypto-rand.
[GL #165 ]
2018-05-03 15:03:46 +02:00
Evan Hunt
0795dceda7
remove dangling references to --enable-crypto-rand in doc and comments
2018-05-03 15:03:46 +02:00
Ondřej Surý
9a3a257374
Always use random data from the crypto provider
2018-05-03 15:03:46 +02:00
Ondřej Surý
6a49d41c5b
Merge branch 'random-test-improvement' into 'master'
...
Improve random_test to also test the high bound of the confidence interval
See merge request isc-projects/bind9!210
2018-05-03 09:02:09 -04:00
Ondřej Surý
8d3220643c
Also test the higher part of the confidence interval
2018-05-03 08:30:31 -04:00
Ondřej Surý
9d1e9ce4bd
Merge branch '191-add-LibreSSL-2.7-support' into 'master'
...
Add LibreSSL 2.7.0 support
Closes #210
See merge request isc-projects/bind9!233
2018-05-03 08:25:40 -04:00
Ondřej Surý
30488dddf0
Add CHANGES entry
...
4935. [func] Add support for LibreSSL >= 2.7.0 (some OpenSSL 1.1.0
call were added). [GL #191 ]
2018-05-03 14:17:17 +02:00
Ondřej Surý
6b9e3b7b06
Workaround LibreSSL 2.7.0-2.7.2 quirk in DH_set0_key
2018-05-03 14:13:32 +02:00
Ondřej Surý
29ff62a149
Add support for LibreSSL 2.7
2018-05-03 14:13:20 +02:00
Evan Hunt
f9f09069a8
Merge branch 'placeholder' into 'master'
...
placeholder
See merge request isc-projects/bind9!229
2018-05-01 21:04:13 -04:00
Evan Hunt
f78bfda4b8
placeholder
2018-05-01 16:14:23 -07:00
Evan Hunt
16dea1c577
Merge branch '208-dig-doc' into 'master'
...
Resolve "Added -t TYPEnn description to dig"
Closes #208
See merge request isc-projects/bind9!221
2018-04-27 02:24:07 -04:00
Paul Hoffman
2d957c6b9f
add -t type### description to the dig man page
2018-04-27 02:16:51 -04:00
Evan Hunt
9212a1b401
Merge branch 'date-test-error' into 'master'
...
Fix a testing error when using python3 on certain dates
See merge request isc-projects/bind9!220
2018-04-27 02:12:46 -04:00
Evan Hunt
30b988f09a
Fix a testing error when using python3 on certain dates
...
Date conversion was broken in python3 for dates with
leading zeroes in both month and day.
2018-04-26 23:02:40 -07:00
Evan Hunt
6070c734f2
Merge branch '159-improve-handling-of-inline-signed-zones-with-missing-signing-keys' into 'master'
...
Improve handling of inline signed zones with missing signing keys
Closes #159
See merge request isc-projects/bind9!133
2018-04-25 15:07:47 -04:00
Michał Kępień
7d2c09c905
Add CHANGES entries
...
4916. [bug] Not creating signing keys for an inline signed zone
prevented changes applied to the raw zone from being
reflected in the secure zone until signing keys were
made available. [GL #159 ]
4915. [bug] Bumped signed serial of an inline signed zone was
logged even when an error occurred while updating
signatures. [GL #159 ]
2018-04-25 12:00:31 -07:00
Michał Kępień
6acf326969
Apply raw zone deltas to yet unsigned secure zones
...
When inline signing is enabled for a zone without creating signing keys
for it, changes subsequently applied to the raw zone will not be
reflected in the secure zone due to the dns_update_signaturesinc() call
inside receive_secure_serial() failing. Given that an inline zone will
be served (without any signatures) even with no associated signing keys
being present, keep applying raw zone deltas to the secure zone until
keys become available in an attempt to follow the principle of least
astonishment.
2018-04-25 12:00:31 -07:00
Michał Kępień
cfbc8e264d
Only log bumped signed serial after a successful secure zone update
...
If a raw zone is modified, but the dns_update_signaturesinc() call in
receive_secure_serial() fails, the corresponding secure zone's database
will not be modified, even though by that time a message containing the
bumped signed serial will already have been logged. This creates
confusion, because a different secure zone version will be served than
the one announced in the logs. Move the relevant dns_zone_log() call so
that it is only performed if the secure zone's database is modified.
2018-04-24 09:18:47 -07:00
Evan Hunt
498491555e
Merge branch '171-lgtm-issues' into 'master'
...
Resolve "problems detected by LGTM static analyzer"
Closes #171
See merge request isc-projects/bind9!213
2018-04-20 20:18:28 -04:00
Evan Hunt
8b1baa10ee
remove unnecessary comparison
2018-04-20 19:51:00 -04:00
Evan Hunt
e00eb55cd2
silence warnings about unnecessary comparisons
...
- these are cases where result has been explicitly set, so
if (result != ISC_R_SUCCESS) is unnecessary
2018-04-20 19:51:00 -04:00
Evan Hunt
4247477b61
add header guards in files that were missing them
2018-04-20 19:51:00 -04:00
Evan Hunt
bfbe6925df
add header guard when generating bind.keys.h
2018-04-20 19:51:00 -04:00
Evan Hunt
0cc7aa250e
change "key" to "tsigkey" to silence "short global name" warning
2018-04-20 19:51:00 -04:00
Evan Hunt
9ca3ab1168
fix shadowed global variables
2018-04-20 19:51:00 -04:00
Evan Hunt
a08ba418ef
fix duplicate include guard in dnsconf.h
...
- IMHO we should consider removing dnsconf.c and deprecating the
/etc/dns.conf file, though, as I don't think it's likely anyone
is using it
2018-04-20 19:51:00 -04:00
Evan Hunt
4472144220
Merge branch 'fix-win32-def' into 'master'
...
add missing symbols
See merge request isc-projects/bind9!218
2018-04-20 19:47:55 -04:00
Evan Hunt
4bef0cfcfd
add missing symbols
2018-04-20 16:40:17 -07:00
Evan Hunt
2b73dfea75
Merge branch '217-remove-rbtdb64' into 'master'
...
Resolve "remove rbtdb64"
Closes #217
See merge request isc-projects/bind9!209
2018-04-20 19:34:44 -04:00
Evan Hunt
784087390a
remove the rbtdb64 database implementation
2018-04-20 16:14:51 -07:00
Ondřej Surý
3852bf4f24
Merge branch '202-cppcheck-reporting-miscellaneous-issues' into 'master'
...
Resolve "cppcheck reporting miscellaneous issues"
Closes #202
See merge request isc-projects/bind9!202
2018-04-20 18:12:39 -04:00
Mark Andrews
f8d2a46daa
remove exit calls after FATAL_ERROR
2018-04-20 14:50:35 -07:00
Mark Andrews
686edad5c5
remove dead code
2018-04-20 14:50:35 -07:00
Mark Andrews
49f8e9571c
use %u instead of %d for unsigned int arguments
2018-04-20 14:50:35 -07:00
Ondřej Surý
d21ff4b72e
Merge branch '206-nslookup-accepts-any-bogus-option-interpret-it-as-vc' into 'master'
...
Resolve "nslookup accepts any -bogus -option, interpret it as -vc"
Closes #206
See merge request isc-projects/bind9!205
2018-04-20 17:50:27 -04:00
Mukund Sivaraman
89cf503880
Remove bogus comparison
2018-04-20 14:43:06 -07:00
Evan Hunt
dc8fc06e53
Merge branch '213-add-raflag-and-tcflag-to-dig' into 'master'
...
Resolve "Add +raflag and +tcflag to dig."
Closes #213
See merge request isc-projects/bind9!201
2018-04-20 17:25:17 -04:00
Mark Andrews
58c103e09c
dig: add the ability to set RA and TC in queries
2018-04-20 14:17:58 -07:00