Tinderbox User
431a83fb29
update copyright notice
2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260
[master] replace memcpy() with memmove().
...
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120 ]
2014-01-08 16:39:05 -08:00
Mark Andrews
3c7df84b20
3488. [bug] Use after free error with DH generated keys. [RT #32649 ]
2013-02-18 20:26:26 +11:00
Tinderbox User
32dc577940
update copyright notice
2013-02-16 23:46:02 +00:00
Evan Hunt
0b8bd3a4ae
[master] address TKEY bugs
...
3486. [bug] named could crash when using TKEY-negotiated keys
that had been deleted and then recreated. [RT #32506 ]
commit 6a48b9999766d26cddc7cef275cd984b7d53c014
Author: Evan Hunt <each@isc.org>
Date: Tue Jan 29 14:59:46 2013 -0800
[rt32506] don't dump key if dump is unimplemented
commit d0ae0f44b460bab2e8bb24bba683d3ef69ec1765
Author: Evan Hunt <each@isc.org>
Date: Tue Jan 29 14:42:25 2013 -0800
[rt32506] make sure LRU needs adjusting before adjusting it
commit 0437f8f06b1cb72a6d5e3c30f27febca23846d95
Author: Evan Hunt <each@isc.org>
Date: Tue Jan 29 12:28:28 2013 -0800
[rt32506] demonstrate bugs in tkey test
2013-02-15 10:19:50 -08:00
Mark Andrews
c6f03e7903
treat clang 3.x and 4.x as independent release streams
2012-12-03 09:10:43 +11:00
Mark Andrews
85a873f000
conditionally silence false positives from clang --analyze
2012-11-30 16:19:00 +11:00
Evan Hunt
0e37e9e3d7
[master] silence noisy OpenSSL logging
...
3402. [bug] Correct interface numbers for IPv4 and IPv6 interfaces.
2012-10-24 12:58:16 -07:00
Tinderbox User
5fa46bc916
update copyright notice
2012-03-10 23:45:53 +00:00
Mark Andrews
28a8f5b0de
set $Id$
2012-03-08 00:21:15 +11:00
Evan Hunt
7a30c8f783
edited a comment for clarity.
2011-11-02 19:41:02 +00:00
Mark Andrews
106561b398
INSIST(response);
2011-08-29 04:02:54 +00:00
Mark Andrews
f67bcc9dc6
save the result of is_response(msg) so it can be treated as a invariant by clang
2011-08-25 06:20:07 +00:00
Evan Hunt
0994d3a21b
3087. [bug] DDNS updates using SIG(0) with update-policy match
...
type "external" could cause a crash. [RT #23735 ]
2011-03-21 19:54:03 +00:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
adccda3b4c
&dstkey -> dstkey
2011-01-10 07:38:22 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Evan Hunt
d9ad0a55bb
3000. [bug] More TKEY/GSS fixes:
...
- nsupdate can now get the default realm from
the user's Kerberos principal
- corrected gsstest compilation flags
- improved documentation
- fixed some NULL dereferences
[RT #22795 ]
2010-12-24 02:20:47 +00:00
Mark Andrews
9f9b7f0e8d
2982. [bug] Reference count dst keys. dst_key_attach() can be used
...
increment the reference count.
Note: dns_tsigkey_createfromkey() callers should now
always call dst_key_free() rather than setting it
to NULL on success. [RT #22672 ]
2010-12-09 00:54:34 +00:00
Mark Andrews
c87f15dac8
2976. [bug] named die on exit after negotiating a GSS-TSIG key. [RT #3415 ]
2010-12-02 23:22:42 +00:00
Evan Hunt
bf9b852c3e
2929. [bug] Improved handling of GSS security contexts:
...
- added LRU expiration for generated TSIGs
- added the ability to use a non-default realm
- added new "realm" keyword in nsupdate
- limited lifetime of generated keys to 1 hour
or the lifetime of the context (whichever is
smaller)
[RT #19737 ]
2010-07-09 05:13:15 +00:00
Automatic Updater
230987e819
update copyright notice
2010-03-12 23:51:11 +00:00
Mark Andrews
c19f322914
2866. [bug] Windows does not like the TSIG name being compressed.
...
[RT #20986 ]
2010-03-12 03:34:56 +00:00
Automatic Updater
754cb8a2b3
update copyright notice
2009-06-11 23:47:56 +00:00
Evan Hunt
351b62535d
2609. [func] Simplify the configuration of dynamic zones:
...
- add ddns-confgen command to generate
configuration text for named.conf
- add zone option "ddns-autoconf yes;", which
causes named to generate a TSIG session key
and allow updates to the zone using that key
- add '-l' (localhost) option to nsupdate, which
causes nsupdate to connect to a locally-running
named process using the session key generated
by named
[RT #19284 ]
2009-06-10 00:27:22 +00:00
Mark Andrews
09416abf2d
remove debugging log that was accidently left in
2008-11-04 21:23:14 +00:00
Mark Andrews
3f42cf2f3e
2349. [func] Provide incremental re-signing support for secure
...
dynamic zones. [RT #1091 ]
back out incorrect branch rt1091 and apply correct branch rt1091a.
2008-04-02 02:37:42 +00:00
Mark Andrews
a76b380643
2349. [func] Provide incremental re-signing support for secure
...
dynamic zones. [RT #1091 ]
2008-04-01 01:37:25 +00:00
Automatic Updater
2f012d936b
update copyright notice
2008-01-18 23:46:58 +00:00
Automatic Updater
1da14e066c
update copyright notice
2008-01-02 23:47:02 +00:00
Mark Andrews
dc19dcbc23
2283. [bug] TSIG keys were not attaching to the memory
...
context. TSIG keys should use the rings
memory context rather than the clients memory
context. [RT #17377 ]
2008-01-02 04:24:59 +00:00
Evan Hunt
8327cdb88f
Fixes for several errors found by Coverity. [rt17160]
2007-09-24 17:18:25 +00:00
Automatic Updater
70e5a7403f
update copyright notice
2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
289ae548d5
2105. [func] GSS-TSIG support (RFC 3645).
2006-12-04 01:54:53 +00:00
Mark Andrews
a8f950ff05
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
...
responses more gracefully. [RT #15941 ]
2006-05-02 04:07:36 +00:00
Mark Andrews
1412643ba5
2004. [bug] dns_tsig_sign() could pass a NULL pointer to
...
dst_context_destroy() when cleaning up after a
error. [RT #15835 ]
2006-03-08 03:51:01 +00:00
Mark Andrews
26e2a07a0b
update copyright notice
2006-01-27 23:57:46 +00:00
Mark Andrews
c6d4f78152
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
...
HMACSHA512 support. [RT #13606 ]
2006-01-27 02:35:15 +00:00
Mark Andrews
2674e1a455
1940. [bug] Fixed a number of error conditions reported by
...
Coverity.
2005-11-30 03:33:49 +00:00
Mark Andrews
18d0b5e54b
1900. [port] freebsd: pthread_mutex_init can fail if it runs out
...
of memory. [RT #14995 ]
2005-07-12 01:00:20 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
9f069b2771
update copyright notice
2005-03-17 03:56:12 +00:00
Mark Andrews
713ad87a7f
1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
...
[RT #13620 ]
2005-03-16 01:47:16 +00:00
Mark Andrews
dafcb997e3
update copyright notice
2004-03-05 05:14:21 +00:00
Brian Wellington
4b171ebd70
1229. [bug] named would crash if it received a TSIG signed
...
query as part of an AXFR response. [RT #2570 ]
2002-03-14 18:34:48 +00:00
Andreas Gustafsson
1f1d36a87b
Check return values or cast them to (void), as required by the coding
...
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Danny Mayer
e61793f086
Added LIB*_EXTERNAL_DATA Macros necessary to make lib extern variables globally visible in Win32
2001-11-19 03:08:44 +00:00
Brian Wellington
ff7b9eede9
dns_tsigkey_createfromkey wasn't checking that the key algorithm matched the
...
key name.
2001-09-27 17:49:11 +00:00
Andreas Gustafsson
76c8294c81
format string bugs and improved format string checking [RT #1578 ]
2001-08-08 22:54:55 +00:00