Tinderbox User
cb5bc50c91
update copyright notice / whitespace
2017-09-18 23:48:50 +00:00
Michał Kępień
f665c724e4
[master] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3
...
4727. [bug] Retransferring an inline-signed slave using NSEC3
around the time its NSEC3 salt was changed could result
in an infinite signing loop. [RT #45080 ]
2017-09-18 09:18:45 +02:00
Francis Dupont
8a98277811
Made RAND_status check optional (broke --disable-crypto-rand)
2017-09-17 12:02:09 +02:00
Evan Hunt
6e5ae91479
[master] silence compiler warning
2017-09-16 21:01:06 -07:00
Francis Dupont
9c829f4f96
Merged rt31459d (openssl random)
2017-09-16 13:53:29 +02:00
Mark Andrews
dc71aa898a
don't use strlcat with non NUL terminated strings rt45981_stage3
2017-09-15 13:14:16 +10:00
Tinderbox User
f54a365aeb
update copyright notice / whitespace
2017-09-14 23:46:40 +00:00
Mark Andrews
cb629cdeda
more str{n}{cat,cpy} corrections rt45981_stage2
2017-09-14 18:11:56 +10:00
Evan Hunt
077d9d2838
[master] cast char *
2017-09-13 22:03:56 -07:00
Evan Hunt
9b729a06b0
[master] clean up bufsize errors
2017-09-13 21:18:26 -07:00
Tinderbox User
33987cb5fd
update copyright notice / whitespace
2017-09-13 23:48:32 +00:00
Evan Hunt
54c5723e31
[master] fix incorrect comment
2017-09-13 13:53:49 -07:00
Mukund Sivaraman
e5eca6eebb
Fix output string size in GOST unittest
2017-09-14 01:36:08 +05:30
Mukund Sivaraman
93f7384928
Fix gost unittest failure
2017-09-14 00:29:04 +05:30
Mukund Sivaraman
188fa6ea68
Add missing <isc/print.h>
2017-09-13 19:44:47 +05:30
Mark Andrews
4c9ba9ded8
add #include <isc/string.h>
2017-09-13 23:43:43 +10:00
Evan Hunt
114f95089c
[master] cleanup strcat/strcpy
...
4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
strlcpy() and strlcat() for safety. [RT #45981 ]
2017-09-13 00:14:37 -07:00
Evan Hunt
e0fc12185d
[rt31459d] silence compiler warning
2017-09-13 00:02:53 -07:00
Evan Hunt
20502f35dd
[master] allow CDS/CDNSKEY records to be signed with only KSK
...
4721. [func] 'dnssec-signzone -x' and 'dnssec-dnskey-kskonly'
options now apply to CDNSKEY and DS records as well
as DNSKEY. Thanks to Tony Finch. [RT #45689 ]
2017-09-12 23:09:48 -07:00
Evan Hunt
dcbe6a66d7
[rt31459d] setup entropy in dns_lib_init()
2017-09-12 23:03:49 -07:00
Evan Hunt
cc24a8725f
[rt31459d] update the newer tools
2017-09-12 22:49:35 -07:00
Mark Andrews
84feab03a9
add dns_name_towire2 to lib/dns/win32/libdns.def.in
2017-09-13 12:10:24 +10:00
Evan Hunt
586e65ea5c
[rt31459d] rebased rt31459c
2017-09-12 19:05:46 -07:00
Mark Andrews
34130ee25a
4719. [bug] Address PVS static analyzer warnings. [RT #45946 ]
2017-09-13 09:50:51 +10:00
Mark Andrews
4a258c3c42
4718. [func] Avoid seaching for a owner name compression pointer
...
more than once when writing out a RRset. [RT #45802 ]
2017-09-13 09:24:34 +10:00
Evan Hunt
25b33bede4
[master] improve handling of qcount=0 replies
...
4717. [bug] Treat replies with QCOUNT=0 as truncated if TC=1,
FORMERR if TC=0, and log the error correctly.
[RT #45836 ]
2017-09-12 15:26:30 -07:00
Mark Andrews
0a1359034d
4715. [bug] TreeMemMax was mis-identified as a second HeapMemMax
...
in the Json cache statistics. [RT #45980 ]
2017-09-12 14:55:03 +10:00
Evan Hunt
534c43860e
[master] update copyrights
2017-09-11 17:47:12 -07:00
Evan Hunt
0c9683cff8
[master] prep 9.12.0a1
2017-09-11 17:30:39 -07:00
Evan Hunt
3363f3147a
[master] DNS Response Policy Service API
...
4713. [func] Added support for the DNS Response Policy Service
(DNSRPS) API, which allows named to use an external
response policy daemon when built with
"configure --enable-dnsrps". Thanks to Vernon
Schryver and Farsight Security. [RT #43376 ]
2017-09-11 11:57:43 -07:00
Evan Hunt
3e66721b35
[master] add missing rrtypes to genzones
...
4711. [test] Some RR types were missing from genzones.sh.
[RT #45782 ]
2017-09-11 09:34:41 -07:00
Francis Dupont
90f6140832
Finished merge of rt45019 (openssl hash default)
2017-09-09 10:30:16 +02:00
Evan Hunt
f13385770e
[master] change hash function for RRL
...
4709. [cleanup] Use dns_name_fullhash() to hash names for RRL.
[RT #45435 ]
2017-09-08 15:46:15 -07:00
Evan Hunt
8eb88aafee
[master] add libns and remove liblwres
...
4708. [cleanup] Legacy Windows builds (i.e. for XP and earlier)
are no longer supported. [RT #45186 ]
4707. [func] The lightweight resolver daemon and library (lwresd
and liblwres) have been removed. [RT #45186 ]
4706. [func] Code implementing name server query processing has
been moved from bin/named to a new library "libns".
Functions remaining in bin/named are now prefixed
with "named_" rather than "ns_". This will make it
easier to write unit tests for name server code, or
link name server functionality into new tools.
[RT #45186 ]
2017-09-08 13:47:34 -07:00
Evan Hunt
509ba96497
[rt45019] separate DNS_CRYPTO_LIBS from ISC_OPENSSL_LIBS and use both
2017-09-07 22:05:20 -07:00
Evan Hunt
60387eb495
[master] windows can't cope with #ifdef in a macro expansion
2017-09-07 21:02:17 -07:00
Tinderbox User
7bd8900aa8
update copyright notice / whitespace
2017-09-07 23:46:43 +00:00
Mark Andrews
e01d88e885
don't disturb search->chain when calling find_coveringnsec
2017-09-08 06:48:41 +10:00
Mark Andrews
6adc40b3ce
4704. [cleanup] Silence Visual Studio compiler warnings. [RT #45898 ]
2017-09-07 12:57:55 +10:00
Mark Andrews
d1f34ef400
4702. [func] Update function declarations to use
...
dns_masterstyle_flags_t for style flags. [RT #45924 ]
2017-09-07 12:48:16 +10:00
Tinderbox User
40780aa36f
update copyright notice / whitespace
2017-09-06 23:46:23 +00:00
Mark Andrews
86c86693e3
move declaration to start of block
2017-09-07 06:39:24 +10:00
Evan Hunt
e90926bb9e
[master] refactor tsig.c
...
4701. [cleanup] Refactored lib/dns/tsig.c to reduce code
duplication and simplify the disabling of MD5.
[RT #45490 ]
2017-09-06 10:57:40 -07:00
Mark Andrews
09ccb70e11
add missing defines
2017-09-06 11:17:46 +10:00
Mark Andrews
45df736f88
add missing functions
2017-09-06 10:39:53 +10:00
Mark Andrews
df50751585
4700. [func] Serving of stale answers is now supported. This
...
allows named to provide stale cached answers when
the authoritative server is under attack.
See max-stale-ttl, stale-answer-enable,
stale-answer-ttl. [RT #44790 ]
2017-09-06 09:58:29 +10:00
Mark Andrews
a322a0f31c
silence converity warning [RT #45891 ]
2017-09-05 07:38:13 +10:00
Mukund Sivaraman
cdabd36dc7
Tweak code (reviewed by Mark)
2017-09-01 12:41:13 +05:30
Mark Andrews
5c269d84c2
remove development logging
2017-09-01 14:45:26 +10:00
Mark Andrews
a8a20462b5
4697. [bug] Restore workaround for Microsoft Windows TSIG hash
...
computation bug. [RT #45854 ]
2017-09-01 11:17:59 +10:00
