Mark Andrews
8eceb0bffe
4461. [bug] win32: not all external data was properly marked
...
as external data for windows dll. [RT #43161 ]
2016-09-07 14:12:11 +10:00
Mark Andrews
e7bb78349f
sync w/ 9.11.0rc1
2016-08-31 12:15:55 +10:00
Mark Andrews
8ee6f289d8
4450. [port] Provide more nuanced HSM support which better matches
...
the specific PKCS11 providers capabilities. [RT #42458 ]
2016-08-19 08:02:51 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Mark Andrews
4ba89a0cfb
9.11.0a2
2016-05-17 13:33:55 +10:00
Mark Andrews
402c63495c
4354. [bug] Check that the received HMAC length matches the
...
expected length prior to check the contents on the
control channel. This prevents a OOB read error.
[RT #42215 ]
2016-05-05 14:19:37 +10:00
Tinderbox User
53ba272721
update copyright notice / whitespace
2016-02-18 23:45:32 +00:00
Mark Andrews
a2b15b3305
4318. [security] Malformed control messages can trigger assertions
...
in named and rndc. (CVE-2016-1285) [RT #41666 ]
2016-02-18 12:11:27 +11:00
Evan Hunt
30370d905e
[master] removed /Gy- from VS project files
...
4302. [port] win32: fixed a build error in VS 2015. [RT #41426 ]
2016-01-27 15:27:57 -08:00
Francis Dupont
343aeac717
Updated WIN32 files (rt40877)
2016-01-04 17:27:31 +01:00
Tinderbox User
3865e18d3d
update copyright notice / whitespace
2015-11-09 23:45:22 +00:00
Evan Hunt
e13d04fda9
[master] fix python script versions
...
4257. [cleanup] Python scripts reported incorrect version. [RT #41080 ]
2015-11-08 21:34:24 -08:00
Mark Andrews
2a12984ce6
4227. [bug] Silence static analysis warnings. [RT #40828
2015-09-30 14:14:47 +10:00
Mark Andrews
7867d18ce0
Introduce end-of-line normalization
2015-09-29 08:25:35 +10:00
Evan Hunt
4523c3b371
[master] incorrect result code in isccc
...
4202. [bug] isccc_cc_fromwire() could return an incorrect
result. [RT #40614 ]
2015-09-11 00:04:25 -07:00
Mark Andrews
91f66e374b
eol -> crlf
2015-08-26 12:43:08 +10:00
Evan Hunt
420a43c8d8
[master] timing safe memory comparisons
...
4183. [cleanup] Use timing-safe memory comparisons in cryptographic
code. Also, the timing-safe comparison functions have
been renamed to avoid possible confusion with
memcmp(). [RT #40148 ]
2015-08-17 18:26:44 -07:00
Tinderbox User
d70dac20d2
update copyright notice / whitespace
2015-05-23 23:45:25 +00:00
Francis Dupont
3759f10fc5
added print.h includes, updated copyrights
2015-05-23 14:21:51 +02:00
Tinderbox User
012142bbe0
update copyright notice / whitespace
2015-05-06 23:45:24 +00:00
Tinderbox User
4e92a74ec4
update copyright notice / whitespace
2015-05-05 23:45:24 +00:00
Evan Hunt
9e804040a2
[master] add "rndc -r" to print result code
...
4115. [func] "rndc -r" now prints the result code (e.g.,
ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
running the requested command. [RT #38913 ]
2015-05-05 16:39:09 -07:00
Mark Andrews
675900780a
150 ->160
2015-05-06 09:24:16 +10:00
Mark Andrews
5e73a8d791
set initial values for 9.11.x
2015-05-06 08:27:49 +10:00
Francis Dupont
ab973ec40c
misc x64 VS 2015 CTP fixes [ #39308 ]
2015-04-17 11:39:26 +02:00
Francis Dupont
bcb68be0a8
misc fixes for VS 2015 CTP #39267
2015-04-17 02:57:02 +02:00
Tinderbox User
3e2bfb151a
update copyright notice / whitespace
2015-03-23 23:45:21 +00:00
Mark Andrews
cef65f9409
@ISC_OPENSSL_INC@ needs to not be by itself
...
(cherry picked from commit a5885354413d503105521b7bf4cd603927f81814)
2015-03-24 07:54:51 +11:00
Evan Hunt
e89972afcb
[master] fixed build errors with libressl
...
4088. [port] Fixed errors when building with libressl. [RT #38899 ]
2015-03-23 13:34:56 -05:00
Tinderbox User
aee6c351d3
update copyright notice
2014-11-15 23:45:22 +00:00
Evan Hunt
e32d354f75
[master] allow arbitrary-size rndc output
...
4005. [func] The buffer used for returning text from rndc
commands is now dynamically resizable, allowing
arbitrarily large amounts of text to be sent back
to the client. (Prior to this change, it was
possible for the output of "rndc tsig-list" to be
truncated.) [RT #37731 ]
2014-11-14 15:58:54 -08:00
Mark Andrews
8aa098c633
update copyrights
2014-09-06 09:38:48 +10:00
Evan Hunt
f687e639f0
[master] [rt36786] use INSTALL_PROGRAM for shared libs
...
3947. [cleanup] Set the executable bit on libraries when using
libtool. [RT #36786 ]
2014-09-05 10:24:20 -07:00
Mark Andrews
2729aea3c1
3738. [bug] --enable-openssl-hash failed to build. [RT #35343 ]
2014-02-13 15:09:08 +11:00
Evan Hunt
dbb012765c
[master] merge libiscpk11 to libisc
...
3735. [cleanup] Merged the libiscpk11 library into libisc
to simplify dependencies. [RT #35205 ]
2014-02-11 21:20:28 -08:00
Evan Hunt
0a35160f4e
[master] prep 9.10.0a2
2014-01-30 18:02:26 -08:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Tinderbox User
431a83fb29
update copyright notice
2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260
[master] replace memcpy() with memmove().
...
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120 ]
2014-01-08 16:39:05 -08:00
Mark Andrews
2bdfb330af
update copyrights
2013-12-05 15:04:53 +11:00
Mark Andrews
c3c8823fed
3681. [port] Update the Windows build system to support feature
...
selection and WIN64 builds. This is a work in
progress. [RT #34160 ]
2013-12-04 12:47:23 +11:00
Evan Hunt
09755f7270
[master] prep 9.10.0a1 release
2013-09-04 15:41:50 -07:00
Evan Hunt
5b7abbef51
[master] added isc_safe_memcmp()
...
3611. [bug] Improved resistance to a theoretical authentication
attack based on differential timing. [RT #33939 ]
2013-07-09 11:47:16 -07:00
Tinderbox User
cfa2326b5c
update copyright notice
2013-03-14 23:46:11 +00:00
Evan Hunt
4eb998928b
[master] algorithm flexibility for rndc
...
3525. [func] Support for additional signing algorithms in rndc:
hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
The -A option to rndc-confgen can be used to
select the algorithm for the generated key.
(The default is still hmac-md5; this may
change in a future release.) [RT #20363 ]
2013-03-13 17:53:11 -07:00
Mark Andrews
611dc88768
3390. [bug] Silence clang compiler warnings. [RT #30417 ]
2012-10-06 14:20:45 +10:00
Evan Hunt
41bbb34bc2
fix coverity issues
...
3388. [bug] Fixed several Coverity warnings. [RT #30996 ]
2012-10-02 23:44:03 -07:00
Tinderbox User
a3128c1995
update copyright notice
2012-06-29 23:45:57 +00:00
Mark Andrews
bf8267aa45
reverse bad copyright update
2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860
update copyright notice
2012-06-29 01:22:18 +00:00