Mark Andrews
d2a8d00228
2724. [bug] Updates to a existing node in secure zone using NSEC
...
were failing. [RT #20448 ]
2009-10-22 01:55:55 +00:00
Automatic Updater
8667770ad2
update copyright notice
2009-10-10 23:47:58 +00:00
Evan Hunt
3727725bb7
2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
...
zone option cause a zone to be signed with only KSKs
signing the DNSKEY RRset, not ZSKs. This reduces
the size of a DNSKEY answer. [RT #20340 ]
2009-10-10 01:48:00 +00:00
Automatic Updater
15bbb8a129
update copyright notice
2009-10-08 23:48:10 +00:00
Mark Andrews
2847930722
2708. [func] Insecure to secure and NSEC3 parameter changes via
...
update are now fully supported and no longer require
defines to enable. We now no longer overload the
NSEC3PARAM flag field, nor the NSEC OPT bit at the
apex. Secure to insecure changes are controlled by
by the named.conf option 'secure-to-insecure'.
Warning: If you had previously enabled support by
adding defines at compile time to BIND 9.6 you should
ensure that all changes that are in progress have
completed prior to upgrading to BIND 9.7. BIND 9.7
is not backwards compatible.
2009-10-08 23:13:07 +00:00
Mark Andrews
88471538d6
2652. [func] Provide more detail about what record is being
...
deleted. [RT #20061 ]
2009-08-17 07:18:41 +00:00
Mark Andrews
bd190a40a8
2640. [security] A specially crafted update packet will cause named
...
to exit. [RT #20000 ]
2009-07-28 15:45:43 +00:00
Mark Andrews
47323be2af
2591. [bug] named could die when processing a update in
...
removed_orphaned_ds(). [RT #19507 ]
2009-04-30 06:59:11 +00:00
Tatuya JINMEI 神明達哉
3af7cd2661
2580. [bug] UpdateRej statistics counter could be incremented twice
...
for one rejection. [RT #19476 ]
2009-03-18 22:17:24 +00:00
Tatuya JINMEI 神明達哉
d9059b0c38
2537. [func] Added more statistics counters including those on socket
...
I/O events and query RTT histograms. [RT #18802 ]
2009-01-27 22:30:00 +00:00
Mark Andrews
3efa3f07d5
2530. [bug] named failed to reject insecure to secure transitions
...
via UPDATE. [RT #19101 ]
2009-01-20 01:40:04 +00:00
Automatic Updater
d362465c77
update copyright notice
2009-01-17 23:47:43 +00:00
Francis Dupont
b9d4899121
spelling
2009-01-17 11:35:11 +00:00
Mark Andrews
515a537cd1
silence compiler
2008-11-19 06:21:45 +00:00
Automatic Updater
7f950d7cb7
update copyright notice
2008-11-06 23:47:06 +00:00
Mark Andrews
1f3e0508c2
2485. [bug] Change update's the handling of obscured RRSIG
...
records. Not all orphand DS records were being
removed. [RT #18828 ]
2008-11-06 02:31:41 +00:00
Automatic Updater
6e2871232f
update copyright notice
2008-09-24 03:16:58 +00:00
Mark Andrews
6098d364b6
2448. [func] Add NSEC3 support. [RT #15452 ]
2008-09-24 02:46:23 +00:00
Mark Andrews
8907d8fa04
2355. [func] Extend the number statistics counters available.
...
[RT #17590 ]
2008-04-03 05:55:52 +00:00
Mark Andrews
3f42cf2f3e
2349. [func] Provide incremental re-signing support for secure
...
dynamic zones. [RT #1091 ]
back out incorrect branch rt1091 and apply correct branch rt1091a.
2008-04-02 02:37:42 +00:00
Automatic Updater
e672951ed2
update copyright notice
2008-04-01 23:47:10 +00:00
Mark Andrews
a76b380643
2349. [func] Provide incremental re-signing support for secure
...
dynamic zones. [RT #1091 ]
2008-04-01 01:37:25 +00:00
Mark Andrews
c09c2bf800
2331. [bug] Failure to regenerate any signatures was not being reported
...
or past back to the UPDATE client. [RT #17570 ]
2008-02-07 03:12:15 +00:00
Automatic Updater
2f012d936b
update copyright notice
2008-01-18 23:46:58 +00:00
Automatic Updater
1da14e066c
update copyright notice
2008-01-02 23:47:02 +00:00
Mark Andrews
92f60809e8
2286. [func] Allow a TCP connection to be used as a weak
...
authentication method for reverse zones.
New update-policy methods tcp-self and 6to4-self.
[RT #17378 ]
2008-01-02 05:13:42 +00:00
Mark Andrews
dc0ecf08db
2284. [bug] Memory leak in UPDATE prerequisite processing.
...
[RT #17377 ]
2008-01-02 04:26:26 +00:00
Mark Andrews
d91df50b67
2219. [bug] Apply zone consistancy checks to additions, not
...
removals, when updating. [RT #17097 ]
2007-08-28 00:05:06 +00:00
Mark Andrews
c5adbd722d
2217. [func] Adjust update log levels. [RT #17092 ]
2007-08-27 04:31:42 +00:00
Mark Andrews
6e5e27c38d
2211. [func] Update "dynamic update temporarily disabled" message.
...
[RT #17065 ]
2007-08-14 00:36:43 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
9860862ced
2183. [bug] dnssec-signzone didn't handle offline private keys
...
well. [RT #16832 ]
2007-05-18 05:50:35 +00:00
Automatic Updater
858ad8db23
update copyright notice
2007-03-29 23:47:04 +00:00
Mark Andrews
819b98479e
2165. [func] Allow the destination address of a query to determine
...
if we will answer the query or recurse.
allow-query-on, allow-recursion-on and
allow-query-cache-on. [RT #16291 ]
2007-03-29 06:36:31 +00:00
Mark Andrews
289ae548d5
2105. [func] GSS-TSIG support (RFC 3645).
2006-12-04 01:54:53 +00:00
Mark Andrews
59d84d1b07
2001. [func] Check the KSK flag when updating a secure dynamic zone.
...
New zone option "update-check-ksk yes;". [RT #15817 ]
2006-03-06 01:27:52 +00:00
Mark Andrews
d76ed813a5
1999. [func] Implement "rrset-order fixed". [RT #13662 ]
2006-03-03 00:43:35 +00:00
Mark Andrews
1b06367c34
update copyright notice
2006-01-06 00:01:44 +00:00
Mark Andrews
6eb8591f00
1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
...
[RT #15465 ]
2006-01-05 03:14:33 +00:00
Mark Andrews
e23932d3c8
1923. [bug] ns_client_detach() called too early. [RT #15499 ]
2005-10-07 04:03:25 +00:00
Mark Andrews
2c15fcdeac
seperate out sibling glue checks
2005-08-24 23:54:04 +00:00
Mark Andrews
fb827ed6df
9.4/HEAD sync
2005-07-18 06:03:01 +00:00
Mark Andrews
c5223c9cb7
1862. [func] Add additional zone data constancy checks.
...
named-checkzone has extended checking of NS, MX and
SRV record and the hosts they reference.
named has extended post zone load checks.
New zone options: check-mx and integrity-check.
[RT #4940 ]
2005-05-19 04:59:05 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
2f4ffd7f55
update copyrights
2005-01-10 23:43:27 +00:00
Mark Andrews
508f61f8d6
1794. [func] Named and named-checkzone can now both check for
...
non-terminal wildcard records.
2005-01-09 23:40:04 +00:00
Mark Andrews
055597532d
1742. [bug] Deleting all records at a node then adding a
...
previously existing record, in a single UPDATE
transaction, failed to leave / regenerate the
associated RRSIG records. [RT #12788 ]
2004-10-21 01:29:29 +00:00
Mark Andrews
6cdae8730d
1741. [bug] Deleting all records at a node in a secure zone
...
using a update-policy grant failed. [RT #12787 ]
2004-10-12 21:57:57 +00:00
Mark Andrews
c426fddf16
1690. [bug] Delay detaching view from the client until UPDATE
...
processing completes when shutting down. [RT #11714 ]
2004-07-23 02:57:27 +00:00
Mark Andrews
8bcfe79521
1686. [bug] Named sent a extraneous NOTIFY when it received a
...
redundant UPDATE request. [RT #11943 ]
2004-07-20 07:39:31 +00:00