Mark Andrews
caac342072
add @ISC_OPENSSL_LIBS@
2014-02-21 00:35:22 +11:00
Mark Andrews
16134801ce
3750. [experimental] Partially implement EDNS EXPIRE option as described
...
in draft-andrews-dnsext-expire-00. Retrivial of
remaining time to expiry from slave zones is supported.
EXPIRE uses an experimental option code (65002) and
is subject to change. [RT #35416 ]
2014-02-20 14:56:20 +11:00
Mark Andrews
86a85a3bbd
don't error on rpz percentage checks as they fail inconsistently on virtual machines
2014-02-20 12:22:14 +11:00
Mark Andrews
e676a59686
update copyrights
2014-02-20 10:53:11 +11:00
Mark Andrews
7e2e41df67
3748. [func] Use delve to test dns_client interfaces. [RT #35383 ]
2014-02-19 19:33:21 +11:00
Evan Hunt
35f6a21f5f
[master] max-zone-ttl
...
3746. [func] New "max-zone-ttl" option enforces maximum
TTLs for zones. If loading a zone containing a
higher TTL, the load fails. DDNS updates with
higher TTLs are accepted but the TTL is truncated.
(Note: Currently supported for master zones only;
inline-signing slaves will be added.) [RT #38405 ]
2014-02-18 23:26:50 -08:00
Mark Andrews
b5f6271f4d
3744. [experimental] SIT: send and process Source Identity Tokens
...
(which are similar to DNS Cookies by Donald Eastlake)
and are designed to help clients detect off path
spoofed responses and for servers to detect legitimate
clients.
SIT use a experimental EDNS option code (65001).
SIT can be enabled via --enable-developer or
--enable-sit. It is on by default in Windows.
RRL processing as been updated to know about SIT with
legitimate clients not being rate limited. [RT #35389 ]
2014-02-19 12:53:42 +11:00
Tinderbox User
3fd910dec5
update copyright notice
2014-02-17 23:46:29 +00:00
Evan Hunt
5efcb3a3e2
[master] fix test errors
...
- require 5.006_001
- cut off the least significant figures of rrsig dates before
comparison to avoid integer overflow
2014-02-17 08:40:02 -08:00
Evan Hunt
7ba88e2a95
[master] fix dnssec test errors
2014-02-16 14:14:56 -08:00
Evan Hunt
72fd845d5a
[master] remove accidentally committed changes
2014-02-16 13:59:19 -08:00
Evan Hunt
792915beb0
[master] fix accidental dig breakage
2014-02-16 13:42:42 -08:00
Mark Andrews
2729aea3c1
3738. [bug] --enable-openssl-hash failed to build. [RT #35343 ]
2014-02-13 15:09:08 +11:00
Evan Hunt
dbb012765c
[master] merge libiscpk11 to libisc
...
3735. [cleanup] Merged the libiscpk11 library into libisc
to simplify dependencies. [RT #35205 ]
2014-02-11 21:20:28 -08:00
Mark Andrews
6b66ee9147
define and use BACKTRACECFLAGS
2014-02-12 09:07:54 +11:00
Tinderbox User
6874b16e4a
update copyright notice
2014-02-10 23:46:26 +00:00
Mark Andrews
d7729155df
3734. [bug] Improve building with libtool. [RT #35314 ]
2014-02-10 15:01:06 +11:00
Tinderbox User
81f58902eb
update copyright notice
2014-02-07 23:46:39 +00:00
Mark Andrews
2870ee1fe5
use exit 255
2014-02-08 09:43:16 +11:00
Mark Andrews
0584ab7e9c
#include <isc/util.h>
2014-02-07 16:46:11 +11:00
Evan Hunt
7983f6f77a
[master] Merge branch 'master' of ssh://repo/proj/git/prod/bind9
2014-02-06 19:41:48 -08:00
Evan Hunt
166341d554
[master] add no-case-compress
...
3731. [func] Added a "no-case-compress" ACL, which causes
named to use case-insensitive compression
(disabling change #3645 ) for specified
clients. (This is useful when dealing
with broken client implementations that
use case-sensitive name comparisons,
rejecting responses that fail to match the
capitalization of the query that was sent.)
[RT #35300 ]
2014-02-06 19:37:26 -08:00
Mark Andrews
a928b54fa9
silence unused parameter
2014-02-07 11:47:32 +11:00
Evan Hunt
dd19c1a352
[master] report T_SKIPPED from t_dst
2014-02-06 16:21:38 -08:00
Evan Hunt
a165a17a81
[master] dnssec-keygen fixes
...
3730. [cleanup] Added "never" as a synonym for "none" when
configuring key event dates in the dnssec tools.
[RT #35277 ]
3729. [bug] dnssec-kegeyn could set the publication date
incorrectly when only the activation date was
specified on the command line. [RT #35278 ]
2014-02-06 15:59:14 -08:00
Tinderbox User
7fa75f8e0e
update copyright notice
2014-02-06 23:46:25 +00:00
Tinderbox User
0666e6db54
update copyright notice
2014-01-31 23:46:22 +00:00
Evan Hunt
48def18179
[master] silence coverity warnings
...
- remove dead code in server.c
- initialize a struct tm.c
2014-01-31 09:34:37 -08:00
Evan Hunt
d0803df331
[master] fixed geoip in blackhole ACLs
...
3722. [bug] Using geoip ACLs in a blackhole statement
could cause a segfault. [RT #35272 ]
2014-01-30 17:03:32 -08:00
Tinderbox User
4734976943
update copyright notice
2014-01-30 23:46:20 +00:00
Tinderbox User
04b5785fde
update copyright notice
2014-01-29 23:46:19 +00:00
Mark Andrews
63add83a26
3720. [bug] Address compiler warnings. [RT #35261 ]
2014-01-30 10:33:28 +11:00
Mark Andrews
75d747e1c5
3719. [bug] Address memory leak in in peer.c. [RT #35255 ]
2014-01-30 07:54:52 +11:00
Mark Andrews
61932ed917
copyright cleanups
2014-01-29 14:05:46 +11:00
Tinderbox User
aa7b16ec2a
update copyright notice
2014-01-21 23:46:16 +00:00
Evan Hunt
d58e33bfab
[master] testcrypto.sh in system tests
...
3714. [test] System tests that need to test for cryptography
support before running can now use a common
"testcrypto.sh" script to do so. [RT #35213 ]
2014-01-20 16:08:09 -08:00
Evan Hunt
e45d0508c3
[master] skip unnecesary also-notify data
...
3713. [bug] Save memory by not storing "also-notify" addresses
in zone objects that are configured not to send
notify requests. [RT #35195 ]
2014-01-20 15:53:51 -08:00
Tinderbox User
dfd5f3b388
update copyright notice
2014-01-18 23:46:13 +00:00
Evan Hunt
12bf5d4796
[master] address several issues with native pkcs11
2014-01-18 11:51:07 -08:00
Tinderbox User
c0682c2367
update copyright notice
2014-01-17 23:46:32 +00:00
Francis Dupont
e02659b241
applied emacs filled-paragraph (ESC-q) to reindent SUBDIRS
2014-01-17 14:14:30 +01:00
Tinderbox User
1633aead67
update copyright notice
2014-01-16 23:46:28 +00:00
Mark Andrews
db8938c993
3710. [bug] Address double dns_zone_detach when switching to
...
using automatic empty zones from regular zones.
[RT #35177 ]
2014-01-17 10:04:16 +11:00
Evan Hunt
5760095601
[master] skip xfer test with Net::DNS 0.73
2014-01-16 09:50:23 -08:00
Evan Hunt
eb94c78be4
[master] atomic test doesn't need libdns
2014-01-16 09:24:44 -08:00
Francis Dupont
6080262ffe
add iscpk11 dep in lwresd system test
2014-01-16 16:06:04 +01:00
Francis Dupont
e2258edfef
libtoolized pkcs11 Makefile.in files
2014-01-16 10:35:24 +01:00
Mark Andrews
e20788e121
update copyrights
2014-01-16 15:19:24 +11:00
Mark Andrews
75e5062bc5
#include <isc/print.h>
2014-01-15 12:30:50 +11:00
Tinderbox User
bf0266f286
update copyright notice
2014-01-14 23:46:22 +00:00
