mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-28 21:17:54 +00:00
Code Issues Releases Wiki Activity
26,809 Commits 656 Branches 820 Tags
Commit Graph

26809 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Ondřej Surý
8bf192b4d1 Use BN_hex2bn instead of custom BN_fromhex function 2018-05-03 15:22:15 +02:00
Ondřej Surý
35d2dbb9f5 Fix extra ] in configure.in 2018-05-03 15:22:15 +02:00
Ondřej Surý
f1722ff512 Merge branch '165-always-use-crypto-provider-for-random-data' into 'master' 
Always use OpenSSL or PKCS#11 random data providers

Closes #165

See merge request isc-projects/bind9!208
 2018-05-03 09:13:00 -04:00
Ondřej Surý
115fbc3540 Add CHANGES entries 
4936.   [func]          Always use OpenSSL or PKCS#11 random data providers and
                        remove the configure option --{enable,disable}-crypto-rand.
                        [GL #165]
 2018-05-03 15:03:46 +02:00
Evan Hunt
0795dceda7 remove dangling references to --enable-crypto-rand in doc and comments 2018-05-03 15:03:46 +02:00
Ondřej Surý
9a3a257374 Always use random data from the crypto provider 2018-05-03 15:03:46 +02:00
Ondřej Surý
6a49d41c5b Merge branch 'random-test-improvement' into 'master' 
Improve random_test to also test the high bound of the confidence interval

See merge request isc-projects/bind9!210
 2018-05-03 09:02:09 -04:00
Ondřej Surý
8d3220643c Also test the higher part of the confidence interval 2018-05-03 08:30:31 -04:00
Ondřej Surý
9d1e9ce4bd Merge branch '191-add-LibreSSL-2.7-support' into 'master' 
Add LibreSSL 2.7.0 support

Closes #210

See merge request isc-projects/bind9!233
 2018-05-03 08:25:40 -04:00
Ondřej Surý
30488dddf0 Add CHANGES entry 
4935.   [func]          Add support for LibreSSL >= 2.7.0 (some OpenSSL 1.1.0
                        call were added). [GL #191]
 2018-05-03 14:17:17 +02:00
Ondřej Surý
6b9e3b7b06 Workaround LibreSSL 2.7.0-2.7.2 quirk in DH_set0_key 2018-05-03 14:13:32 +02:00
Ondřej Surý
29ff62a149 Add support for LibreSSL 2.7 2018-05-03 14:13:20 +02:00
Evan Hunt
f9f09069a8 Merge branch 'placeholder' into 'master' 
placeholder

See merge request isc-projects/bind9!229
 2018-05-01 21:04:13 -04:00
Evan Hunt
f78bfda4b8 placeholder 2018-05-01 16:14:23 -07:00
Evan Hunt
16dea1c577 Merge branch '208-dig-doc' into 'master' 
Resolve "Added -t TYPEnn description to dig"

Closes #208

See merge request isc-projects/bind9!221
 2018-04-27 02:24:07 -04:00
Paul Hoffman
2d957c6b9f add -t type### description to the dig man page 2018-04-27 02:16:51 -04:00
Evan Hunt
9212a1b401 Merge branch 'date-test-error' into 'master' 
Fix a testing error when using python3 on certain dates

See merge request isc-projects/bind9!220
 2018-04-27 02:12:46 -04:00
Evan Hunt
30b988f09a Fix a testing error when using python3 on certain dates 
Date conversion was broken in python3 for dates with
leading zeroes in both month and day.
 2018-04-26 23:02:40 -07:00
Evan Hunt
6070c734f2 Merge branch '159-improve-handling-of-inline-signed-zones-with-missing-signing-keys' into 'master' 
Improve handling of inline signed zones with missing signing keys

Closes #159

See merge request isc-projects/bind9!133
 2018-04-25 15:07:47 -04:00
Michał Kępień
7d2c09c905 Add CHANGES entries 
4916.	[bug]		Not creating signing keys for an inline signed zone
			prevented changes applied to the raw zone from being
			reflected in the secure zone until signing keys were
			made available. [GL #159]

4915.	[bug]		Bumped signed serial of an inline signed zone was
			logged even when an error occurred while updating
			signatures. [GL #159]
 2018-04-25 12:00:31 -07:00
Michał Kępień
6acf326969 Apply raw zone deltas to yet unsigned secure zones 
When inline signing is enabled for a zone without creating signing keys
for it, changes subsequently applied to the raw zone will not be
reflected in the secure zone due to the dns_update_signaturesinc() call
inside receive_secure_serial() failing.  Given that an inline zone will
be served (without any signatures) even with no associated signing keys
being present, keep applying raw zone deltas to the secure zone until
keys become available in an attempt to follow the principle of least
astonishment.
 2018-04-25 12:00:31 -07:00
Michał Kępień
cfbc8e264d Only log bumped signed serial after a successful secure zone update 
If a raw zone is modified, but the dns_update_signaturesinc() call in
receive_secure_serial() fails, the corresponding secure zone's database
will not be modified, even though by that time a message containing the
bumped signed serial will already have been logged.  This creates
confusion, because a different secure zone version will be served than
the one announced in the logs.  Move the relevant dns_zone_log() call so
that it is only performed if the secure zone's database is modified.
 2018-04-24 09:18:47 -07:00
Evan Hunt
498491555e Merge branch '171-lgtm-issues' into 'master' 
Resolve "problems detected by LGTM static analyzer"

Closes #171

See merge request isc-projects/bind9!213
 2018-04-20 20:18:28 -04:00
Evan Hunt
8b1baa10ee remove unnecessary comparison 2018-04-20 19:51:00 -04:00
Evan Hunt
e00eb55cd2 silence warnings about unnecessary comparisons 
- these are cases where result has been explicitly set, so
  if (result != ISC_R_SUCCESS) is unnecessary
 2018-04-20 19:51:00 -04:00
Evan Hunt
4247477b61 add header guards in files that were missing them 2018-04-20 19:51:00 -04:00
Evan Hunt
bfbe6925df add header guard when generating bind.keys.h 2018-04-20 19:51:00 -04:00
Evan Hunt
0cc7aa250e change "key" to "tsigkey" to silence "short global name" warning 2018-04-20 19:51:00 -04:00
Evan Hunt
9ca3ab1168 fix shadowed global variables 2018-04-20 19:51:00 -04:00
Evan Hunt
a08ba418ef fix duplicate include guard in dnsconf.h 
- IMHO we should consider removing dnsconf.c and deprecating the
  /etc/dns.conf file, though, as I don't think it's likely anyone
  is using it
 2018-04-20 19:51:00 -04:00
Evan Hunt
4472144220 Merge branch 'fix-win32-def' into 'master' 
add missing symbols

See merge request isc-projects/bind9!218
 2018-04-20 19:47:55 -04:00
Evan Hunt
4bef0cfcfd add missing symbols 2018-04-20 16:40:17 -07:00
Evan Hunt
2b73dfea75 Merge branch '217-remove-rbtdb64' into 'master' 
Resolve "remove rbtdb64"

Closes #217

See merge request isc-projects/bind9!209
 2018-04-20 19:34:44 -04:00
Evan Hunt
784087390a remove the rbtdb64 database implementation 2018-04-20 16:14:51 -07:00
Ondřej Surý
3852bf4f24 Merge branch '202-cppcheck-reporting-miscellaneous-issues' into 'master' 
Resolve "cppcheck reporting miscellaneous issues"

Closes #202

See merge request isc-projects/bind9!202
 2018-04-20 18:12:39 -04:00
Mark Andrews
f8d2a46daa remove exit calls after FATAL_ERROR 2018-04-20 14:50:35 -07:00
Mark Andrews
686edad5c5 remove dead code 2018-04-20 14:50:35 -07:00
Mark Andrews
49f8e9571c use %u instead of %d for unsigned int arguments 2018-04-20 14:50:35 -07:00
Ondřej Surý
d21ff4b72e Merge branch '206-nslookup-accepts-any-bogus-option-interpret-it-as-vc' into 'master' 
Resolve "nslookup accepts any -bogus -option, interpret it as -vc"

Closes #206

See merge request isc-projects/bind9!205
 2018-04-20 17:50:27 -04:00
Mukund Sivaraman
89cf503880 Remove bogus comparison 2018-04-20 14:43:06 -07:00
Evan Hunt
dc8fc06e53 Merge branch '213-add-raflag-and-tcflag-to-dig' into 'master' 
Resolve "Add +raflag and +tcflag to dig."

Closes #213

See merge request isc-projects/bind9!201
 2018-04-20 17:25:17 -04:00
Mark Andrews
58c103e09c dig: add the ability to set RA and TC in queries 2018-04-20 14:17:58 -07:00
Evan Hunt
529d862573 Merge branch '145-dnskey-sigvalidity' into 'master' 
Resolve "different RRSIG expiry for DNSKEY"

Closes #145

See merge request isc-projects/bind9!121
 2018-04-20 15:20:09 -04:00
Evan Hunt
c592655c0f new option "dnskey-sig-validity" 
- overrides "sig-validity-interval" for DNSKEY, CDNSKEY and CDS RRSIGs
 2018-04-20 12:12:08 -07:00
Evan Hunt
d4086d6b04 Merge branch 'placeholder' into 'master' 
placeholder

See merge request isc-projects/bind9!211
 2018-04-19 13:36:43 -04:00
Evan Hunt
f5b7ad718a placeholder 2018-04-19 10:36:13 -07:00
Ondřej Surý
2fc568b2e7 Merge branch 'rm-clang-format' into 'master' 
Remove .clang-format as we are going to use uncrustify anyway

See merge request isc-projects/bind9!207
 2018-04-18 18:12:56 -04:00
Ondřej Surý
f0dc3b44df We are going to use uncrustify 2018-04-18 15:05:24 -07:00
Ondřej Surý
62bc422df1 Merge branch 'clang-format-updates' into 'master' 
Add more tweaks to .clang-format style for experiments

See merge request isc-projects/bind9!206
 2018-04-18 14:21:51 -04:00
Ondřej Surý
d52283111d Add more tweaks to .clang-format style for experimenting 2018-04-18 11:14:57 -07:00