Mark Andrews
d0ca4e90e2
2786. [bug] Additional could be promoted to answer. [RT #20663 ]
2009-11-25 02:22:05 +00:00
Automatic Updater
b314ea10b4
update copyright notice
2009-11-24 23:48:12 +00:00
Evan Hunt
d312bc5d81
2785. [bug] Revoked keys could fail to self-sign [RT #20652 ]
2009-11-24 03:42:32 +00:00
Mark Andrews
9dd2ee95f1
2784. [bug] TC was not always being set when required glue was
...
dropped. [RT #234186 ]
2009-11-24 03:20:02 +00:00
Automatic Updater
94e3a63110
update copyright notice
2009-11-23 23:48:16 +00:00
Evan Hunt
5985af3f5c
2781. [bug] Inactive keys could be used for signing. [RT #20649 ]
2009-11-23 15:18:07 +00:00
Evan Hunt
cef109efa7
2780. [bug] dnssec-keygen -A none didn't properly unset the
...
activation date in all cases. [RT #20648 ]
2779. [bug] Dynamic key revokation could fail. [RT #20644 ]
2778. [bug] dnssec-signzone could fail when a key was revoked
without deleting the unrevoked version. [RT #20638 ]
2009-11-23 02:55:41 +00:00
Mark Andrews
c16d37d06e
2776. [bug] Change #2762 was not correct. [RT #20647 ]
2009-11-23 02:10:16 +00:00
Automatic Updater
fe2b9bf570
update copyright notice
2009-11-18 23:48:07 +00:00
Evan Hunt
b08325a7f3
2773. [bug] In autosigned zones, the SOA could be signed
...
with the KSK. [RT #20628 ]
2009-11-18 21:22:31 +00:00
Evan Hunt
2ad776a5c4
changed age to 0
2009-11-18 16:46:10 +00:00
Evan Hunt
af52d6ddd7
prep for release of 9.7.0b3
2009-11-18 00:30:37 +00:00
Mark Andrews
a39a5f4d81
2772. [security] When validating, track whether pending data was from
...
the additional section or not and only return it if
validates as secure. [RT #20438 ]
2009-11-17 23:55:18 +00:00
Automatic Updater
e34e9a8d68
update copyright notice
2009-11-17 23:48:13 +00:00
Evan Hunt
7ee4b13ded
2771. [bug] dnssec-signzone: DNSKEY records could be
...
corrupted when importing from key files [RT #20624 ]
2009-11-17 05:46:53 +00:00
Evan Hunt
44a3999cf4
2770. [cleanup] Add log messages to resolver.c to indicate events
...
causing FORMERR responses. [RT #20526 ]
2009-11-17 02:23:15 +00:00
Evan Hunt
7048af0a55
2769. [cleanup] Change #2742 was incomplete. [RT #19589 ]
2009-11-16 07:56:06 +00:00
Evan Hunt
e856482b1f
2767. [bug] named could crash on startup if a zone was
...
configured with auto-dnssec and there was no
key-directory. [RT #20615 ]
2009-11-16 01:44:33 +00:00
Automatic Updater
53d502202a
update copyright notice
2009-11-12 23:47:59 +00:00
Evan Hunt
86132f0ef5
eliminate warning when building without -DBIND9
2009-11-12 23:43:02 +00:00
Mark Andrews
1d0ebb4cf2
2765. [bug] Skip masters for which the TSIG key cannot be found.
...
[RT #20595 ]
2009-11-12 23:30:36 +00:00
Evan Hunt
e9dff04d3b
2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591 ]
2009-11-12 03:03:36 +00:00
Evan Hunt
0c3948e606
2761. [bug] DLV validation failed with a local slave DLV zone.
...
[RT #20577 ]
2009-11-12 02:59:20 +00:00
Evan Hunt
5c6c5669ec
#include <time.h> for the ctime() prototype.
2009-11-07 03:36:58 +00:00
Mark Andrews
df1599d0e1
address initialization type mismatch warning
2009-11-06 04:19:28 +00:00
Mark Andrews
7963a67df0
address statement not reached warning
2009-11-06 04:12:15 +00:00
Evan Hunt
c1bfa5b0ad
2753. [bug] Removed an unnecessary warning that could appear when
...
building an NSEC chain. [RT #20588 ]
2009-11-06 03:26:59 +00:00
Evan Hunt
aa2f010f13
Switch from OpenSSL 0.9.8k to 0.9.8l
2009-11-06 03:14:10 +00:00
Mark Andrews
302ed789bd
2752. [bug] Locking violation. [RT #20587 ]
2009-11-06 01:30:06 +00:00
Evan Hunt
ca97301c37
remove extra \n from a log message
2009-11-05 21:45:05 +00:00
Automatic Updater
2d84cba8f4
update copyright notice
2009-11-04 23:48:18 +00:00
Mark Andrews
2484c7db7a
spelling
2009-11-04 04:22:16 +00:00
Mark Andrews
e94fe42a20
2749. [bug] ixfr-from-differences generated a non-minimal ixfr
...
for NSEC3 signed zones. [RT #20452 ]
2009-11-04 03:46:44 +00:00
Mark Andrews
0a30185f80
2748. [func] Identify bad answers from GTLD servers and treat them
...
as referrals. [RT #18884 ]
2009-11-04 02:15:30 +00:00
Mark Andrews
0181a0a92f
2747. [bug] Journal roll forwards failed to set the re-signing
...
time of RRSIGs correctly. [RT #20541 ]
2009-11-04 01:25:55 +00:00
Mark Andrews
a3285e811d
2746. [port] hpux: address signed/unsigned expansion mismatch of
...
dns_rbtnode_t.nsec. [RT #20542 ]
2009-11-04 01:18:19 +00:00
Automatic Updater
126dce8ebf
update copyright notice
2009-11-03 23:48:23 +00:00
Mark Andrews
5ccd971c72
UNUSED(engine) if !defined(OPENSSL)
2009-11-03 19:43:54 +00:00
Mark Andrews
554d22d2de
2743. [bug] RRSIG could be incorrectly sent in the NSEC3 record
...
for a insecure delegation.
2009-11-03 01:07:48 +00:00
Mark Andrews
8a0943e125
silence compiler warnings. [RT #20472 ]
2009-10-30 05:08:23 +00:00
Mark Andrews
4c53f98dbd
RFC5702
2009-10-28 21:08:18 +00:00
Evan Hunt
3684692720
update def file
2009-10-28 18:39:47 +00:00
Evan Hunt
5b72cda36b
update API and def files for 9.7.0b2 release
2009-10-28 18:13:24 +00:00
Evan Hunt
5cb44a38d9
back out change 2740
2009-10-28 18:04:29 +00:00
Evan Hunt
be69d48443
2742. [cleanup] Clarify some DNSSEC-related log messages in
...
validator.c. [RT #19589 ]
2009-10-28 05:34:21 +00:00
Automatic Updater
990dca4605
update copyright notice
2009-10-27 23:47:45 +00:00
Mark Andrews
e9d45c0a04
2740. [func] Identify bad answers from GTLD servers and treat them
...
as referrals. [RT #18884 ]
2009-10-27 23:05:53 +00:00
Evan Hunt
95f2377b4f
2739. [cleanup] Clean up API for initializing and clearing trust
...
anchors for a view. [RT #20211 ]
2009-10-27 22:46:13 +00:00
Mark Andrews
e09cdbac08
2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
...
test. [RT #20453 ]
2009-10-27 22:25:37 +00:00
Mark Andrews
63d5a6f680
2736. [func] Improve the performance of NSEC signed zones with
...
more than a normal amount of glue below a delegation.
[RT #20191 ]
2009-10-27 04:46:58 +00:00
