Evan Hunt
8c9fba44a4
[master] further RPZ fixes
...
4131. [bug] Addressed further problems with reloading RPZ
zones. [RT #39649 ]
2015-06-03 18:18:55 -07:00
Mark Andrews
e53e202ef3
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537 ]
2015-05-28 13:17:07 +10:00
Tinderbox User
3813d22587
update copyright notice / whitespace
2015-05-27 23:45:25 +00:00
Mark Andrews
598b502695
4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
...
key as per RFC 7344, Section 4.1. [RT #37215 ]
2015-05-27 15:25:45 +10:00
Evan Hunt
a32b6291aa
[master] address regression
...
4126. [bug] Addressed a regression introduced in change #4121 .
[RT #39611 ]
2015-05-26 19:11:08 -07:00
Mark Andrews
f1a261ba2d
4104. [bug] Address uninitialized elements. [RT #39252 ]
2015-04-17 14:04:47 +10:00
Francis Dupont
bcb68be0a8
misc fixes for VS 2015 CTP #39267
2015-04-17 02:57:02 +02:00
Mark Andrews
54fe1d05b6
4095. [bug] zone->options2 was not being properly initalized.
...
[RT #39228 ]
2015-04-11 08:04:02 +10:00
Mukund Sivaraman
9a7532f836
Send notifies immediately for slave zones during startup ( #38843 )
2015-03-25 10:55:55 +05:30
Mukund Sivaraman
ebeb4b3e09
Fix a crash due to use-after-free ( #38495 )
2015-03-18 06:42:54 +05:30
Mark Andrews
1b05d22789
4082. [bug] Incrementally sign large inline zone deltas.
...
[RT #37927 ]
2015-03-05 09:59:29 +11:00
Mark Andrews
29d52c001f
4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759 ]
2015-03-03 16:43:42 +11:00
Mark Andrews
a8da00ef95
4079. [func] Preserve the case of the ownername of records to
...
the RRset level. [RT #37442 ]
2015-02-27 15:08:38 +11:00
Mark Andrews
af669cb4fd
4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708 ]
2015-02-27 10:55:55 +11:00
Evan Hunt
bfc11b9c65
[master] additional mkeys tests
...
4065. [test] Additional RFC 5011 tests. [RT #38569 ]
2015-02-23 21:07:26 -08:00
Evan Hunt
7acc2f2156
[master] fix LOADPENDING issues
...
4063. [bug] Asynchronous zone loads were not handled
correctly when the zone load was already in
progress; this could trigger a crash in zt.c.
[RT #37573 ]
2015-02-22 20:43:39 -08:00
Tinderbox User
29756974c5
update copyright notice / whitespace
2015-02-06 23:45:21 +00:00
Evan Hunt
591389c7d4
[master] 5011 tests and fixes
...
4056. [bug] Expanded automatic testing of trust anchor
management and fixed several small bugs including
a memory leak and a possible loss of key state
information. [RT #38458 ]
4055. [func] "rndc managed-keys" can be used to check status
of trust anchors or to force keys to be refreshed,
Also, the managed keys data file has easier-to-read
comments. [RT #38458 ]
2015-02-05 17:18:15 -08:00
Evan Hunt
801fb8b894
[master] avoid crash due to managed-key rollover
...
4053. [security] Revoking a managed trust anchor and supplying
an untrusted replacement could cause named
to crash with an assertion failure.
(CVE-2015-1349) [RT #38344 ]
2015-02-03 18:25:28 -08:00
Mark Andrews
875574f1e4
4045. [bug] Skip to next master on dns_request_createvia4 failure.
...
[RT #25185 ]
2015-01-22 15:56:50 +11:00
Tinderbox User
c110d61b17
update copyright notice / whitespace
2015-01-20 23:45:26 +00:00
Evan Hunt
11463c0ac2
[master] clean up gcc -Wshadow warnings
...
4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381 ]
2015-01-20 13:29:18 -08:00
Mark Andrews
f8eb4e5bfd
4037. [bug] also-notify was ignoring the tsig key when checking
...
for duplicates resulting in some expected notify
messages not being sent. [RT #38369 ]
2015-01-20 16:42:56 +11:00
Francis Dupont
5c5c6d289d
Add a TCP only option to server/peer
2014-12-02 14:17:59 +01:00
Evan Hunt
c4abb19716
[master] reference leak with AAAA glue but not A
...
4004. [bug] When delegations had AAAA glue but not A, a
reference could be leaked causing an assertion
failure on shutdown. [RT #37796 ]
2014-11-14 09:02:28 -08:00
Tinderbox User
03fc2ff527
update copyright notice
2014-10-31 23:45:23 +00:00
Mark Andrews
4e59131f18
3995. [bug] receive_secure_serial holds the zone lock for too
...
long. [RT #37626 ]
2014-10-31 11:38:14 +11:00
Mark Andrews
eb5243365c
3989. [cleanup] Remove redundent dns_db_resigned calls. [RT #35748 ]
2014-10-30 10:53:12 +11:00
Tinderbox User
6932de75ef
update copyright notice
2014-10-21 23:45:24 +00:00
Mark Andrews
4140a96f22
3987. [func] Allow the zone serial of a dynamically updatable
...
zone to be updated via rndc. [RT #37404 ]
2014-10-21 18:15:42 +11:00
Evan Hunt
eb6d61d5e0
[master] correctly validate 5011 trust anchors
...
3976. [bug] When refreshing managed-key trust anchors, clear
any cached trust so that they will always be
revalidated with the current set of secure
roots. [RT #37506 ]
2014-10-17 15:40:07 -07:00
Mark Andrews
9c0589bc8b
3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
...
[RT #35746 ]
2014-10-03 07:50:09 +10:00
Tinderbox User
be484acb22
update copyright notice
2014-09-30 23:45:22 +00:00
Mark Andrews
ffeaac1d82
3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
...
BADSIG. [RT #37216 ]
2014-10-01 07:24:16 +10:00
Tinderbox User
2fb35a6d59
update copyright notice
2014-09-29 23:45:24 +00:00
Mark Andrews
10c12aa549
3956. [func] Notify messages are now rate limited by notify-rate and
...
startup-notify-rate instead of serial-query-rate.
[RT #24454 ]
3955. [bug] Notify messages due to changes are no longer queued
behind startup notify messages. [RT #24454 ]
2014-09-29 10:01:08 +10:00
Mark Andrews
48b093c864
update named-checkzone manpage for SPF changes
2014-09-13 07:55:57 +10:00
Tinderbox User
948c80ffa8
update copyright notice
2014-09-04 23:45:24 +00:00
Mark Andrews
74717eef53
3939. [func] Improve UPDATE forwarding performance by allowing TCP
...
connections to be shared. [RT #37039 ]
2014-09-04 10:37:45 +10:00
Mark Andrews
43b9737b11
3911. [func] Implement EDNS EXPIRE option client side. [RT #35925 ]
2014-08-06 11:50:40 +10:00
Mark Andrews
044c780437
silence coverity, explicitly ignore dns_peer_gettransferdscp result
2014-07-18 12:55:04 +10:00
Mark Andrews
33399d6a14
3888. [func] 'rndc status' now reports the number of automatic
...
zones. [RT #36015 ]
2014-06-25 13:17:03 +10:00
Mark Andrews
3b187cad7a
3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210 ]
2014-06-10 09:32:43 +10:00
Mark Andrews
e188b84bc4
suppress clang static analysis warning
2014-05-11 10:47:56 +10:00
Mark Andrews
faa01edd13
3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
...
[RT #35924 ]
2014-05-08 09:38:05 +10:00
Mark Andrews
36e5ac0033
3819. [bug] NSEC3 hashes need to be able to be entered and
...
displayed without padding. This is not a issue for
currently defined algorithms but may be for future
hash algorithms. [RT #27925 ]
2014-04-24 18:58:03 +10:00
Evan Hunt
ec3b216506
[master] masterfile-style
...
3814. [func] The "masterfile-style" zone option controls the
formatting of dumped zone files. Options are
"relative" (multiline format) and "full" (one
record per line). The default is "relative".
[RT #20798 ]
2014-04-17 17:10:29 -07:00
Evan Hunt
bbd5c0ab33
[master] fix possible assertion in save_nsec3param()
...
3793. [bug] zone.c:save_nsec3param() could assert when out of
memory. [RT #35621 ]
2014-03-26 13:12:35 -07:00
Mark Andrews
c1f26bd63c
silence clang compiler warnings
2014-03-26 16:20:31 +11:00
Mark Andrews
edd82b2ce2
3753. [bug] allow-notify was ignoring keys. [RT #35425 ]
2014-02-21 00:09:28 +11:00