Mark Andrews
dc71aa898a
don't use strlcat with non NUL terminated strings rt45981_stage3
2017-09-15 13:14:16 +10:00
Tinderbox User
f54a365aeb
update copyright notice / whitespace
2017-09-14 23:46:40 +00:00
Mark Andrews
cb629cdeda
more str{n}{cat,cpy} corrections rt45981_stage2
2017-09-14 18:11:56 +10:00
Evan Hunt
077d9d2838
[master] cast char *
2017-09-13 22:03:56 -07:00
Evan Hunt
9b729a06b0
[master] clean up bufsize errors
2017-09-13 21:18:26 -07:00
Tinderbox User
33987cb5fd
update copyright notice / whitespace
2017-09-13 23:48:32 +00:00
Evan Hunt
54c5723e31
[master] fix incorrect comment
2017-09-13 13:53:49 -07:00
Mukund Sivaraman
e5eca6eebb
Fix output string size in GOST unittest
2017-09-14 01:36:08 +05:30
Mukund Sivaraman
93f7384928
Fix gost unittest failure
2017-09-14 00:29:04 +05:30
Mukund Sivaraman
188fa6ea68
Add missing <isc/print.h>
2017-09-13 19:44:47 +05:30
Mark Andrews
4c9ba9ded8
add #include <isc/string.h>
2017-09-13 23:43:43 +10:00
Evan Hunt
114f95089c
[master] cleanup strcat/strcpy
...
4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
strlcpy() and strlcat() for safety. [RT #45981 ]
2017-09-13 00:14:37 -07:00
Evan Hunt
e0fc12185d
[rt31459d] silence compiler warning
2017-09-13 00:02:53 -07:00
Evan Hunt
20502f35dd
[master] allow CDS/CDNSKEY records to be signed with only KSK
...
4721. [func] 'dnssec-signzone -x' and 'dnssec-dnskey-kskonly'
options now apply to CDNSKEY and DS records as well
as DNSKEY. Thanks to Tony Finch. [RT #45689 ]
2017-09-12 23:09:48 -07:00
Evan Hunt
dcbe6a66d7
[rt31459d] setup entropy in dns_lib_init()
2017-09-12 23:03:49 -07:00
Evan Hunt
cc24a8725f
[rt31459d] update the newer tools
2017-09-12 22:49:35 -07:00
Mark Andrews
84feab03a9
add dns_name_towire2 to lib/dns/win32/libdns.def.in
2017-09-13 12:10:24 +10:00
Evan Hunt
586e65ea5c
[rt31459d] rebased rt31459c
2017-09-12 19:05:46 -07:00
Mark Andrews
34130ee25a
4719. [bug] Address PVS static analyzer warnings. [RT #45946 ]
2017-09-13 09:50:51 +10:00
Mark Andrews
4a258c3c42
4718. [func] Avoid seaching for a owner name compression pointer
...
more than once when writing out a RRset. [RT #45802 ]
2017-09-13 09:24:34 +10:00
Evan Hunt
25b33bede4
[master] improve handling of qcount=0 replies
...
4717. [bug] Treat replies with QCOUNT=0 as truncated if TC=1,
FORMERR if TC=0, and log the error correctly.
[RT #45836 ]
2017-09-12 15:26:30 -07:00
Mark Andrews
0a1359034d
4715. [bug] TreeMemMax was mis-identified as a second HeapMemMax
...
in the Json cache statistics. [RT #45980 ]
2017-09-12 14:55:03 +10:00
Evan Hunt
534c43860e
[master] update copyrights
2017-09-11 17:47:12 -07:00
Evan Hunt
0c9683cff8
[master] prep 9.12.0a1
2017-09-11 17:30:39 -07:00
Evan Hunt
3363f3147a
[master] DNS Response Policy Service API
...
4713. [func] Added support for the DNS Response Policy Service
(DNSRPS) API, which allows named to use an external
response policy daemon when built with
"configure --enable-dnsrps". Thanks to Vernon
Schryver and Farsight Security. [RT #43376 ]
2017-09-11 11:57:43 -07:00
Evan Hunt
3e66721b35
[master] add missing rrtypes to genzones
...
4711. [test] Some RR types were missing from genzones.sh.
[RT #45782 ]
2017-09-11 09:34:41 -07:00
Francis Dupont
90f6140832
Finished merge of rt45019 (openssl hash default)
2017-09-09 10:30:16 +02:00
Evan Hunt
f13385770e
[master] change hash function for RRL
...
4709. [cleanup] Use dns_name_fullhash() to hash names for RRL.
[RT #45435 ]
2017-09-08 15:46:15 -07:00
Evan Hunt
8eb88aafee
[master] add libns and remove liblwres
...
4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier)
are no longer supported. [RT #45186 ]
4707. [func] The lightweight resolver daemon and library (lwresd
and liblwres) have been removed. [RT #45186 ]
4706. [func] Code implementing name server query processing has
been moved from bin/named to a new library "libns".
Functions remaining in bin/named are now prefixed
with "named_" rather than "ns_". This will make it
easier to write unit tests for name server code, or
link name server functionality into new tools.
[RT #45186 ]
2017-09-08 13:47:34 -07:00
Evan Hunt
509ba96497
[rt45019] separate DNS_CRYPTO_LIBS from ISC_OPENSSL_LIBS and use both
2017-09-07 22:05:20 -07:00
Evan Hunt
60387eb495
[master] windows can't cope with #ifdef in a macro expansion
2017-09-07 21:02:17 -07:00
Tinderbox User
7bd8900aa8
update copyright notice / whitespace
2017-09-07 23:46:43 +00:00
Mark Andrews
e01d88e885
don't disturb search->chain when calling find_coveringnsec
2017-09-08 06:48:41 +10:00
Mark Andrews
6adc40b3ce
4704. [cleanup] Silence Visual Studio compiler warnings. [RT #45898 ]
2017-09-07 12:57:55 +10:00
Mark Andrews
d1f34ef400
4702. [func] Update function declarations to use
...
dns_masterstyle_flags_t for style flags. [RT #45924 ]
2017-09-07 12:48:16 +10:00
Tinderbox User
40780aa36f
update copyright notice / whitespace
2017-09-06 23:46:23 +00:00
Mark Andrews
86c86693e3
move declaration to start of block
2017-09-07 06:39:24 +10:00
Evan Hunt
e90926bb9e
[master] refactor tsig.c
...
4701. [cleanup] Refactored lib/dns/tsig.c to reduce code
duplication and simplify the disabling of MD5.
[RT #45490 ]
2017-09-06 10:57:40 -07:00
Mark Andrews
09ccb70e11
add missing defines
2017-09-06 11:17:46 +10:00
Mark Andrews
45df736f88
add missing functions
2017-09-06 10:39:53 +10:00
Mark Andrews
df50751585
4700. [func] Serving of stale answers is now supported. This
...
allows named to provide stale cached answers when
the authoritative server is under attack.
See max-stale-ttl, stale-answer-enable,
stale-answer-ttl. [RT #44790 ]
2017-09-06 09:58:29 +10:00
Mark Andrews
a322a0f31c
silence converity warning [RT #45891 ]
2017-09-05 07:38:13 +10:00
Mukund Sivaraman
cdabd36dc7
Tweak code (reviewed by Mark)
2017-09-01 12:41:13 +05:30
Mark Andrews
5c269d84c2
remove development logging
2017-09-01 14:45:26 +10:00
Mark Andrews
a8a20462b5
4697. [bug] Restore workaround for Microsoft Windows TSIG hash
...
computation bug. [RT #45854 ]
2017-09-01 11:17:59 +10:00
Evan Hunt
45afdb2672
[master] remove default algorithm in dnssec-keygen
...
4594. [func] dnssec-keygen no longer uses RSASHA1 by default;
the signing algorithm must be specified on
the command line with the "-a" option. Signing
scripts that rely on the existing default behavior
will break; use "dnssec-keygen -a RSASHA1" to
repair them. (The goal of this change is to make
it easier to find scripts using RSASHA1 so they
can be changed in the event of that algorithm
being deprecated in the future.) [RT #44755 ]
2017-08-30 18:51:11 -07:00
Tinderbox User
587f005032
update copyright notice / whitespace
2017-08-30 23:46:18 +00:00
Mark Andrews
0aed466565
4693. [func] Synthesis of responses from DNSSEC-verified records.
...
Stage 1 covers NXDOMAIN synthesis from NSEC records.
This is controlled by synth-from-dnssec and is enabled
by default. [RT #40138 ]
2017-08-31 07:57:50 +10:00
Mark Andrews
c26370fc69
4692. [bug] Fix build failures with libressl introduced in 4676.
...
[RT #45879 ]
2017-08-30 17:11:20 +10:00
Tinderbox User
f562de3f71
update copyright notice / whitespace
2017-08-24 23:47:03 +00:00
