Mark Andrews
dcc7a2738f
hold a nta reference while fetching
2014-07-10 10:24:47 +10:00
Mark Andrews
63e1ac1e09
3890. [bug] RRSIG sets that were not loaded in a single transaction
...
at start up where not being correctly added to
re-signing heaps. [RT #36302 ]
2014-07-07 12:05:01 +10:00
Mark Andrews
769224a8dc
state fw_copy is never used; n only needs to be set for fw_ordinary;
...
(cherry picked from commit d956d9689c13b093fff5faf6b10f06338354dcfc)
2014-07-04 08:51:26 +10:00
Mark Andrews
e58154a6ec
silence coverity warnings
2014-07-02 15:28:02 +10:00
Mark Andrews
7dbd309799
be consistent about expire time
2014-07-02 14:12:46 +10:00
Mark Andrews
5d63868ad0
DNS_VALIDATOR_NONTA needs passed to sub validator
2014-07-02 14:12:15 +10:00
Mark Andrews
33399d6a14
3888. [func] 'rndc status' now reports the number of automatic
...
zones. [RT #36015 ]
2014-06-25 13:17:03 +10:00
Mark Andrews
65eba0a5a8
add init_count
2014-06-25 12:40:28 +10:00
Mark Andrews
777ea03a92
move definition of FILE_VERSION to after #define of FILE_VERSION
2014-06-25 12:29:15 +10:00
Mark Andrews
c312172e13
more statics that were optimised out
2014-06-25 11:10:25 +10:00
Mark Andrews
c21e9f1a92
add and deserialize are structure element names
2014-06-25 09:45:53 +10:00
Mark Andrews
ef117da205
3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
...
they are easier to use in a debugger. [RT #36373 ]
2014-06-25 08:33:37 +10:00
Mark Andrews
d2dc08308f
set now on all paths
2014-06-25 00:44:11 +10:00
Mark Andrews
6343df7150
silence signed vs unsigned
2014-06-25 00:19:17 +10:00
Mark Andrews
ba5c73b383
3886. [bug] rbtdb_write_header should use a once to initialize
...
FILE_VERSION. [RT #36374 ]
2014-06-24 19:58:25 +10:00
Mark Andrews
a421f4458d
use isc_time_seconds rather than .seconds
2014-06-23 23:15:19 +10:00
Tinderbox User
5a31767b09
update copyright notice
2014-06-19 23:45:23 +00:00
Evan Hunt
cac2181160
[master] CDS/CDNSKEY rrtypes
...
3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333 ]
2014-06-19 00:35:11 -07:00
Mark Andrews
3a37159a95
add #include <isc/print.h>
2014-06-19 10:20:34 +10:00
Evan Hunt
b8a9632333
[master] complete NTA work
...
3882. [func] By default, negative trust anchors will be tested
periodically to see whether data below them can be
validated, and if so, they will be allowed to
expire early. The "rndc nta -force" option
overrides this behvaior. The default NTA lifetime
and the recheck frequency can be configured by the
"nta-lifetime" and "nta-recheck" options. [RT #36146 ]
2014-06-18 16:50:38 -07:00
Mark Andrews
8eb2d262dc
silence coverity - add nul termination
2014-06-18 20:04:21 +10:00
Tinderbox User
51437e2eea
update copyright notice
2014-06-16 23:45:20 +00:00
Evan Hunt
56510cd031
[master] null terminate strings for coverity
2014-06-16 15:30:11 -07:00
Tinderbox User
4ded8003e3
update copyright notice
2014-06-12 23:45:22 +00:00
Evan Hunt
06e0d6bb12
[master] address rpz bugs
...
3877. [bug] Inserting and deleting parent and child nodes
in response policy zones could trigger an assertion
failure. [RT #36272 ]
2014-06-11 20:00:19 -07:00
Mark Andrews
1208790272
make lhs unsigned
2014-06-12 11:12:22 +10:00
Mark Andrews
8a2ff13c3d
add INSISTs to silence tainted data false positive in Coverity
2014-06-12 10:42:39 +10:00
Tinderbox User
889eb2e055
update copyright notice
2014-06-11 23:45:23 +00:00
Mark Andrews
23fe5cbb07
pass rng to destroy
2014-06-11 22:57:46 +10:00
Evan Hunt
8d8f9f7f86
[master] suppress unnecessary db lookups in DLZ redirect zones
...
3876. [bug] Improve efficiency of DLZ redirect zones by
suppressing unnecessary database lookups. [RT #35835 ]
2014-06-10 16:25:26 -07:00
Evan Hunt
7c9d11b654
[master] add print.h, CHANGES note
2014-06-10 08:54:16 -07:00
Mukund Sivaraman
aa232396ee
[24702] Include key filename in logged message
...
Squashed commit of the following:
commit 593e6bc7e29938ff5c2f7508bde303fb069a97a9
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 19:17:40 2014 +0530
Increase size of filename buffers
commit b8685678e026ba98b8833e26664193b6345eb00e
Author: Evan Hunt <each@isc.org>
Date: Wed Jun 4 18:57:44 2014 -0700
[rt24702] some tweaks during review
commit adfbc8f808716c63e9e097d92beef104527e5c6f
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed Jun 4 18:18:35 2014 +0530
[24702] Include key filename in logged message
commit f1eff77e7e3704b145c3d65101a735467dd81dc3
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed Jun 4 18:12:43 2014 +0530
Add dst_key_getfilename()
2014-06-10 19:18:34 +05:30
Mark Andrews
3b187cad7a
3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210 ]
2014-06-10 09:32:43 +10:00
Mark Andrews
b16d99bac1
3872. [bug] Address issues found by static analysis. [RT #36209 ]
2014-06-10 09:17:15 +10:00
Mukund Sivaraman
79d27f505a
[35063] Don't publish an activated key automatically before its publish time
2014-06-04 14:31:42 +05:30
Mukund Sivaraman
84dc4b3e7e
[35942] Update random number generator to ChaCha based (and add tests)
...
Squashed commit of the following:
commit 219a904fea95c74016229b6f4436d4f09de1bfd0
Author: Evan Hunt <each@isc.org>
Date: Mon Jun 2 12:20:54 2014 -0700
[rt35942] style
commit 90bc77185e9798af4595989abb8698efef8c70d7
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 18:01:30 2014 +0530
Return p-value=0 when prerequisite (monobit) fails
commit 5594669728f1181a447616f60b835e4a043d1b21
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 17:44:25 2014 +0530
Print proportion of test sequences passing too
commit 9e94b67a4114651224a8285f7c4a7fb03907f376
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 17:34:03 2014 +0530
Check uniform distribution of p-values
commit acf911b32dd84ac1c30c57d8937cfeb6b3ff972f
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 17:17:39 2014 +0530
Check proportion of sequences passing a test
commit 7289eb441fc4ec623364ad882e22b240ba8da308
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon Jun 2 04:33:37 2014 +0530
Refactor common setup code into random_test()
No behavioral change is made.
commit 51feef3e08c233d34a6b8b9d25a72d43110b4eed
Author: Mukund Sivaraman <muks@isc.org>
Date: Sun Jun 1 17:31:57 2014 +0530
Fix binary rank computation
commit 0ea3c03dea353f309d13c38e26aa0abbffdcff2b
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue May 27 06:01:10 2014 +0530
Add binary matrix rank RNG test
commit eb4e7c53540ac97436d94714d30084907eeff01a
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 15:45:31 2014 +0530
Add function to find rank of a binary matrix
commit 1292a06e0e09ebd37d4ecf5337814951dcacc4a4
Author: Evan Hunt <each@isc.org>
Date: Thu May 29 16:21:51 2014 -0700
[rt35942] style; check whether we need libm for exp()
commit c19788e5a89235e937a5aedf2ebea50f33406609
Author: Evan Hunt <each@isc.org>
Date: Thu May 29 15:31:19 2014 -0700
[rt35942] incidental spelling error fixed
commit c833326ad0df21e2a8b35958e85ccc0a692e38be
Author: Mukund Sivaraman <muks@isc.org>
Date: Thu May 29 11:34:37 2014 +0530
Revert "Add function to find rank of a binary matrix"
This reverts commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb.
This test will be added in RT#36125.
commit cf786a533d34fdcd9e1c5650356e56d33e93a29f
Author: Mukund Sivaraman <muks@isc.org>
Date: Thu May 29 11:33:18 2014 +0530
Revert "Add binary matrix rank RNG test"
This reverts commit dd843b9ca84fa9af80ec39631152f82778f0b97c.
This test will be added in RT#36125.
commit dd843b9ca84fa9af80ec39631152f82778f0b97c
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue May 27 06:01:10 2014 +0530
Add binary matrix rank RNG test
commit 21b2f230e17f7fc638f81d9a34bcb148b0c4a6fb
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 15:45:31 2014 +0530
Add function to find rank of a binary matrix
commit 313c30088d6ba933bde3abb920f2a6d16b9b77e1
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 13:38:44 2014 +0530
Add block frequency random test
commit 0d279c60ed3eabe52cf3e1435bf14ec62752536f
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 13:04:03 2014 +0530
Add preconditions from NIST spec
commit 7a6c5f2ce5078814d5cf0fea30596e58171174c1
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 26 12:51:03 2014 +0530
Add functions to use in RNG tests
commit 8c5cb5594f904f6669cdffaa364f799b4a2c6b58
Author: Mukund Sivaraman <muks@isc.org>
Date: Thu May 22 00:26:10 2014 +0530
Add runs RNG test
commit 4882f078cc2596c0911066ffb783e4dd145a63ec
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 23:58:20 2014 +0530
Pre-compute bitcounts LUT
commit 896db3809fba2d9884a4a3a2fa847a73e007ad7f
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 23:30:23 2014 +0530
Fix the bit value being checked (this shouldn't affect the test)
commit b932cbb5dae39eb819db29cf9490fb51d59b7c56
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 19:35:12 2014 +0530
Add monobits RNG test
commit 7bef19fd8b095aa567a975ef5c97d5812162d92e
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 16:53:02 2014 +0530
Add API documentation
commit 54483f7feb64b5646dd1da45b1fd396e7d04b926
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 21 16:39:03 2014 +0530
Rename isc_rngctx_t to isc_rng_t
commit 7c5031b53555137a82c6b6218cd4dd5e95acf94d
Author: Evan Hunt <each@isc.org>
Date: Tue May 20 23:29:53 2014 -0700
[rt35942] use attach/detach with isc_rngctx_t
commit 8aabae5e09888e6af651ed27bd6b4e9f76334d55
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue May 20 18:32:42 2014 +0530
Move RNG from dispatch.c to libisc
commit e6d4ad4f389998b91d46e95e258cf420cb21d977
Author: Mukund Sivaraman <muks@isc.org>
Date: Mon May 12 19:16:27 2014 +0530
Replace old arc4random with new ChaCha implementation from OpenBSD
2014-06-04 13:44:10 +05:30
Mark Andrews
b925be3e54
attempt to silence leaked lock false positive
2014-06-04 14:07:16 +10:00
Mark Andrews
7cce33eb78
place a upper bound on rdcount
2014-06-04 13:20:42 +10:00
Mark Andrews
f4db7287da
bad size on isc_mem_put
2014-06-04 11:45:09 +10:00
Tinderbox User
6efae581d0
update copyright notice
2014-06-03 23:45:20 +00:00
Mark Andrews
6fc3efb93f
keytable depends on openssl/pkcs11
2014-06-03 15:15:19 +10:00
Tinderbox User
803d842603
update copyright notice
2014-05-30 23:45:21 +00:00
Evan Hunt
0cfb247368
[master] rndc nta
...
3867. [func] "rndc nta" can now be used to set a temporary
negative trust anchor, which disables DNSSEC
validation below a specified name for a specified
period of time (not exceeding 24 hours). This
can be used when validation for a domain is known
to be failing due to a configuration error on
the part of the domain owner rather than a
spoofing attack. [RT #29358 ]
2014-05-29 22:22:53 -07:00
Mark Andrews
536da846f6
update copyrights
2014-05-30 09:41:33 +10:00
Mukund Sivaraman
9ff0b976a1
Add missing include
...
Reported by tinderbox. It is not required on this developer's machine,
but would be required on platforms that don't supply snprintf().
2014-05-29 14:04:35 +05:30
Mukund Sivaraman
ce376a81fa
[35904] Add various RBT unit tests
...
No CHANGES entry was added as this commit mainly adds tests related
code.
Squashed commit of the following:
commit d3d44508daa128fb8b60f64b3a8c81f80602273d
Author: Evan Hunt <each@isc.org>
Date: Wed May 7 09:36:41 2014 -0700
[rt35904] remove private non-static names from .def file
commit dbca45661c3939f21c3bb3f405d08cfe1b35d7aa
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 7 21:39:32 2014 +0530
Remove test for shortcut findnode()
The implementation was not included in this review branch, but the tests
erroneously made it through.
This functionality will be addressed in a different ticket (RT#35906).
commit 94ff14576ab3407f2612d34727b7eacfefc3668c
Author: Mukund Sivaraman <muks@isc.org>
Date: Wed May 7 21:36:50 2014 +0530
Minor indent fix
commit 50972f17697bb222996e433faa8224843366f9b2
Author: Evan Hunt <each@isc.org>
Date: Tue May 6 20:05:21 2014 -0700
[rt35904] style
commit 5c4d5d41fcc5bfecdeebc008896974385c841b8d
Author: Mukund Sivaraman <muks@isc.org>
Date: Sun May 4 19:19:36 2014 +0530
RBT related updates
* Add various RBT unit tests
* Add some helper methods useful in unit testing RBT code
* General cleanup
2014-05-29 11:09:23 +05:30
Mark Andrews
57d5f5abe1
silence coverity warning
2014-05-28 10:43:19 +10:00
Mark Andrews
586d94eb74
3861. [security] Missing isc_buffer_availablelength check results
...
in a REQUIRE assertion when printing out a packet.
[RT #36078 ]
2014-05-25 12:39:03 +10:00
Mark Andrews
35711d3c73
correct EDNSOK sense
2014-05-22 22:02:09 +10:00
Mark Andrews
ba586e9568
3857. [bug] Make it harder for a incorrect NOEDNS classification
...
to be made. [RT #36020 ]
2014-05-22 21:38:53 +10:00