2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00
Commit Graph

16819 Commits

Author SHA1 Message Date
Tatuya JINMEI 神明達哉
d8680445d6 2828. [security] Cached CNAME or DNAME RR could be returned to clients
without DNSSEC validation. [RT #20737]

9.4-ESV, 9.5.3, 9.6.2, 9.7.0, 9.8.0(?)
2009-12-30 08:02:23 +00:00
Automatic Updater
0f348b269b update 2009-12-30 07:17:54 +00:00
Evan Hunt
9ead684875 2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712] 2009-12-30 06:46:58 +00:00
Automatic Updater
3156309a79 update 2009-12-30 04:21:03 +00:00
Evan Hunt
687b6322fb 2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
being released.  [RT #20740]
2009-12-30 03:38:57 +00:00
Automatic Updater
5a1d90c7ed update 2009-12-30 03:21:48 +00:00
Mark Andrews
57fb4f7bbe 2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
was in the process of being created was not properly
                        recorded in the zone. [RT #20786]
2009-12-30 02:43:09 +00:00
Mark Andrews
7ddd859470 more for:
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
2009-12-30 02:32:13 +00:00
Mark Andrews
502dc92f58 more for:
2824.   [bug]           "rndc sign" was not being run by the correct task.
                        [RT #20759]
2009-12-30 02:26:30 +00:00
Automatic Updater
0216fd2ac6 auto update 2009-12-29 23:19:13 +00:00
Automatic Updater
7fc63ac0ed update 2009-12-29 23:17:04 +00:00
Mark Andrews
5b77627c09 2824. [bug] "rndc sign" was not being run by the correct task.
[RT #20759]
2009-12-29 22:20:33 +00:00
Automatic Updater
5e4b540170 update 2009-12-29 22:17:09 +00:00
Mark Andrews
288486df9d 2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781] 2009-12-29 22:04:16 +00:00
Automatic Updater
d4c0bf0a08 update 2009-12-29 09:17:23 +00:00
Mark Andrews
5773d3c007 2822. [bug] rbtdb.c:loadnode() could return the wrong result.
[RT #20802]
2009-12-29 08:53:33 +00:00
Automatic Updater
845309d349 update 2009-12-29 01:16:31 +00:00
Automatic Updater
d856585f5f regen 2009-12-29 01:14:03 +00:00
Automatic Updater
773199d3ad update 2009-12-29 00:19:31 +00:00
Evan Hunt
85c5ed3577 2821. [doc] Add note that named-checkconf doesn't automatically
read rndc.key and bind.keys [RT #20758]
2009-12-28 23:21:16 +00:00
Automatic Updater
ead17d97ab auto update 2009-12-27 23:18:41 +00:00
Automatic Updater
85087d31ab auto update 2009-12-24 23:18:40 +00:00
Automatic Updater
c67053f35f update 2009-12-24 18:17:17 +00:00
Francis Dupont
0faf1492c7 non-readable openssl.cnf [20668] 2009-12-24 17:49:39 +00:00
Automatic Updater
0eaa00ce70 update 2009-12-24 01:16:43 +00:00
Evan Hunt
bd31f734ee 2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define
[RT #20771]
2009-12-24 00:35:46 +00:00
Automatic Updater
c6323eed9d update 2009-12-24 00:20:11 +00:00
Evan Hunt
1361014b02 2818. [cleanup] rndc could return an incorrect error code
when a zone was not found. [RT #20767]
2009-12-24 00:14:20 +00:00
Evan Hunt
40ad4ed01b 2817. [cleanup] Removed unnecessary isc_tasc_endexclusive() calls.
[RT #20768]
2009-12-23 23:59:42 +00:00
Evan Hunt
b09559fd36 2816. [bug] previous_closest_nsec() could fail to return
data for NSEC3 nodes [RT #29730]
2009-12-23 23:43:01 +00:00
Evan Hunt
aa3415ba49 2815. [bug] Exclusively lock the task when freezing a zone.
[RT #19838]
2009-12-23 23:33:09 +00:00
Automatic Updater
f09e6b6025 auto update 2009-12-22 23:18:46 +00:00
Automatic Updater
a9890810cf update 2009-12-21 05:17:55 +00:00
Mark Andrews
c9630524c7 2814. [func] Provide a definitive error message when a master
zone is not loaded. [RT #20757]
2009-12-21 04:29:10 +00:00
Automatic Updater
1585604c53 auto update 2009-12-19 23:19:16 +00:00
Automatic Updater
4c2ac09e46 update 2009-12-19 18:17:05 +00:00
Evan Hunt
f766024a27 change all keys from rsasha1 to nsec3rsasha1 so that the nsec->nsec3
transitions work correctly.  (they worked before, but weren't supposed
to; when that bug was fixed, the test broke.)
2009-12-19 17:30:31 +00:00
Automatic Updater
3c8a4c7a8b update 2009-12-19 01:16:40 +00:00
Automatic Updater
7a0d680aa5 regen 2009-12-19 01:14:05 +00:00
Automatic Updater
0d41ea8c5c update 2009-12-19 00:19:37 +00:00
Automatic Updater
928e12ccdc update copyright notice 2009-12-18 23:49:03 +00:00
Automatic Updater
59edd79b87 newcopyrights 2009-12-18 23:30:39 +00:00
Automatic Updater
f219cfd749 update 2009-12-18 23:16:58 +00:00
Evan Hunt
4e55893d30 2813. [bug] Better handling of unreadable DNSSEC key files.
[RT #20710]

2812.	[bug]		Make sure updates can't result in a zone with
			NSEC-only keys and NSEC3 records. [RT 20748]
2009-12-18 22:16:49 +00:00
Automatic Updater
84faa4f2ef update 2009-12-18 08:20:18 +00:00
Evan Hunt
0da859c5a7 2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
output. [RT #20733]
2009-12-18 07:59:43 +00:00
Evan Hunt
19a6c40c37 2810. [doc] Clarified the process of transitioning an NSEC3 zone
to insecure. [RT #20746]
2009-12-18 07:56:29 +00:00
Evan Hunt
9de98fbbbe 2809. [cleanup] Restored accidentally-deleted text in usage output
in dnssec-settime and dnssec-revoke [RT #20739]
2009-12-18 07:49:42 +00:00
Automatic Updater
c020cb62e9 update 2009-12-18 04:20:53 +00:00
Mark Andrews
c221360e9f spelling 2009-12-18 04:07:58 +00:00