fix meger error (cherry picked from commit f6b7ff72808bb8b44daa06bb45fad18c2964a6df)

4889. [func] Warn about the use of old root keys without the new root key being present. Warn about dlv.isc.org's key being present. Warn about both managed and trusted root keys being present. [RT #43670] (cherry picked from commit baef0ca9886bb67d7c6a2ae0405e504ccdc0fb9f)

[v9_11] fix merge error

[v9_11] normalize rndc on/off commands 4867. [cleanup] Normalize rndc on/off commands (validation and querylog) so they accept the same synonyms for on/off (yes/no, true/false, enable/disable). Thanks to Tony Finch. [RT #47022] (cherry picked from commit cf8f4241e7826a6deb605d0b65ba625414805642)

[v9_11] Ensure all master definitions in a catalog zone contain an IP address 4864. [bug] named acting as a slave for a catalog zone crashed if the latter contained a master definition without an IP address. [RT #45999] (cherry picked from commit ae51a676c9921907cbbffa151910b96f87848d0d)

update copyright notice / whitespace

4856. [bug] 'rndc zonestatus' reported the wrong underlying type for a inline slave zone. [RT #46875] (cherry picked from commit 0b27aa071284d184c7413929378fd2c03f2c7ead)

4850. [bug] Named failed to restart with multiple added zones in lmdb database. [RT #46889] (cherry picked from commit 9bec7facfbb839836d67190c92613524fa5ad405)

4849. [bug] Duplicate zones could appear in the .nzf file if addzone failed. [RT #46435] (cherry picked from commit 2d7f89b9c76646baca3d65a938844f1f90157d83) (cherry picked from commit 22a32060c14d8b791e1fcffcf3a282150052c375)

[v9_11] fix incorrect comment

[v9_11] fix "allow-transfer" inheritance and clean up ACL configuration 4836. [bug] Zones created using "rndc addzone" could temporarily fail to inherit an "allow-transfer" ACL that had been configured in the options statement. [RT #46603] (cherry picked from commit e197a2bd150783f53044342cf0d02510dfb744df)

[v9_11] Fix LMDB support on OpenBSD; clean up and refactor LMDB-related code 4835. [cleanup] Clean up and refactor LMDB-related code. [RT #46718] 4834. [port] Fix LMDB support on OpenBSD. [RT #46718] (cherry picked from commit 2c20fc0d135e3d3fb6b468e4807caa18ff8974f0)

[v9_11] Do not use thread-local storage for storing LMDB reader locktable slots 4828. [bug] Do not use thread-local storage for storing LMDB reader locktable slots. [RT #46556] (cherry picked from commit 40a90fbf89738c1aa867a5f09ef7243ef3ae52e4)

style

[v9_11] Minor improvements to code handling managed keys 4812. [bug] Minor improvements to stability and consistency of code handling managed keys. [RT #46468] (cherry picked from commit 312c84c73aaffff6d13bb56eef688be68aea3392)

fix merge error

4804. [port] win32: access() does not work on directories as required by POSIX. Supply a alternative in isc_file_isdirwritable. [RT #46394]

Add system tests and remove redundent logging from: 4801. [func] 'dnssec-lookaside auto;' and 'dnssec-lookaside . trust-anchor dlv.isc.org;' now elicit warnings rather than being fatal configuration errors. [RT #46410] (cherry picked from commit f5e1b555c59074e9b8626921c4a068ee6fc1c1e3)

When processing delzone, write one zone config per line to the NZF (#46323) (cherry picked from commit 625f656aa8fdf50a26af4db6ad02f11012a02140)

[v9_11] clean up a redundancy 4777. [cleanup] Removed a redundant call to configure_view_acl(). [RT #46369] (cherry picked from commit 89636d8f305956ad42e95a988502c7345e85ffe1)

[v9_11] require writable managed keys directory 4769. [bug] Enforce the requirement that the managed keys directory (specified by "managed-keys-directory", and defaulting to the working directory if not specified) must be writable. [RT #46077]

[v9_11] remove no-longer-needed check for nonexistence

[v9_11] don't log when NZF file doesn't exist 4755. [cleanup] Silence unnecessary log message when NZF file doesn't exist. [RT #46186] (cherry picked from commit d7ee3ed48849225213583758090e2fe5a301fbf2)

4754. [bug] dns_zone_setview needs a two stage commit to properly handle errors. [RT #45841]

[v9_11] de-DLV 4749. [func] The ISC DLV service has been shut down, and all DLV records have been removed from dlv.isc.org. - Removed references to ISC DLV in documentation - Removed DLV key from bind.keys - No longer use ISC DLV by default in delv [RT #46155]

4748. [cleanup] Sprintf to snprintf coversions. [RT #46132] (cherry picked from commit a009d03a1abf73c8146c1696ce1100e62c3b9dbb)

4744. [bug] Suppress trust-anchor-telementry queries if validation is disabled. [RT #46131] (cherry picked from commit dc0a792d946871140bc3689d04ce7934d210544b)

4739. [cleanup] Address clang static analysis warnings. [RT #45952] (cherry picked from commit f9f3f20d2d08e1c8756a1b260d7c5125426d8395)

[v9_11] backport rpz tweaks 4713. [cleanup] Minor revisions to RPZ code to reduce differences with the development branch. [RT #46037]

Fix use after free when closing an LMDB (#46000) (cherry picked from commit e2ed24aa4ddf10b24596ef91de3e81258638c627)

[v9_11] Prevent possible infinite signing loop after retransferring an inline-signed slave using NSEC3 4727. [bug] Retransferring an inline-signed slave using NSEC3 around the time its NSEC3 salt was changed could result in an infinite signing loop. [RT #45080] (cherry picked from commit f665c724e4ec7fb48100e808a08788904ddd74b6)

[master] cleanup strcat/strcpy 4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of strlcpy() and strlcat() for safety. [RT #45981] (cherry picked from commit 114f95089c4db619ee723e4146639700afa17b5e)

4648. [bug] "rndc reconfig" on a slave no longer causes all member zones of configured catalog zones to be removed from configuration. [RT #45310] (cherry picked from commit 1e9b39fe26cf609144014134133b678c744a13fd)

[v9_11] put in a missing #ifdef section (cherry picked from commit 19a72397da00969586301f91e400094715d43b91)

[v9_11] prevent reload failure due to LMDB database perms 4638. [bug] Reloading or reconfiguring named could fail on some platforms when LMDB was in use. [RT #45203] (cherry picked from commit bf05e66bb38c44378a7873ff3701e6e596e70bf7)

4530. [bug] "dyndb" is dependent on dlopen existing / being enabled. [RT #45291] (cherry picked from commit aa3a8979bc7eb1596d044eff572b3c35310584fa)

[v9_11] don't keep an LMDB transaction open across an exclusive section 4625. [bug] Running "rndc addzone" and "rndc delzone" at close to the same time could trigger a deadlock if using LMDB. [RT #45209] (cherry picked from commit 03a7a952c0ea6e6c3a225ec9b9de540cb0598019)

4619. [bug] Call isc_mem_put instead of isc_mem_free in bin/named/server.c:setup_newzones. [RT #45202] (cherry picked from commit 0c18eb4783d6b53d3b6b244ec6f85db219ca972e)

[v9_11] fix lmdb delzone 4616. [bug] When using LMDB, zones deleted using "rndc delzone" were not correctly removed from the new-zone database. [RT #45185] (cherry picked from commit 3a554a444caf444b6239a7ae80d6448cad3a363e)

Set a LMDB mapsize and also provide a config option to control it (#44954) (cherry picked from commit 241b49e6119eb37eebe2de98f0e8bde436074cb3)

[v9_11] fall back to builtin keys if bind.keys is empty 4570. [cleanup] named did not correctly fall back to the built-in initializing keys if the bind.keys file was present but empty. [RT #44531]

[v9_11] Revert "fixed build failure when building without LMDB" This reverts commit d9788e03ad446db1d4887c2999d330aba6f155da.

[v9_11] fixed build failure when building without LMDB (cherry picked from commit 8acbf7e4de99bbc4867b02ed87dbbc3761a57ca5)

update copyright notice / whitespace

[v9_11] more specific date for DLV shutdown warning

update copyright notice / whitespace

4541. [bug] rndc addzone should properly reject non master/slave zones. [RT #43665] (cherry picked from commit e20db12918c2e808c9ddb0e5e0f75dae71a63ad7)

4539. [bug] Referencing a nonexistant zone with rpz could lead to a assertion failure when configuring. [RT #43787] (cherry picked from commit 762c4fc5a8cc0433a6139aecb9e91624af51e3b1)

[v9_11] log as error if entropy unavailable 4521. [cleanup] Log it as an error if an entropy source is not found and there is no fallback available. [RT #43659] (cherry picked from commit 6bdb70057d1505f86816b77edee8bc66c5e428ba)

[v9_11] add cfg_parse_buffer3() function with linenum parameter 4482. [cleanup] Change #4455 was incomplete. [RT #43252] (cherry picked from commit 676ac3cc8234dafcbab053554c657113e811e562)

4465. [bug] Don't use "%z" as Windows doesn't support it. [RT #43131] (cherry picked from commit f1977af0d3e400ac6debadd9fdd4c42e52645eb7)

[v9_11] pass source file and line to dyndb load function 4455. [cleanup] Allow dyndb modules to correctly log the filename and line number when processing configuration text from named.conf. [RT #43050] (cherry picked from commit 02fb764681d145e4607c59280a48617013e886ac)

4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089] (cherry picked from commit 726cddb56447812f7c4080816b08cbae8e96f7b0)

[master] fix dnstap query/response selectors 4427. [bug] The "query" and "response" parameters to the "dnstap" option had their functions reversed. (cherry picked from commit e9bd1496ed7a0da5ef39ce83c3315c87699971b4)

4447. [tuning] Allow the fstrm_iothr_init() options to be set using named.conf to control how dnstap manages the data flow. [RT #42974] (cherry picked from commit 934837913ff197b1a10ad027705d4497fae21e59)

4437. [func] Minimal-responses now has two additional modes no-auth and no-auth-recursive which suppress adding the NS records to the authority section as well as the associated address records for the nameservers. [RT #42005] (cherry picked from commit 78e31dd18798f22828059b0f5cbc1c984c7e142c)

[v9_11] error on bad parameter to 'rndc dumpdb' 4433. [cleanup] Report an error when passing an invalid option or view name to "rndc dumpdb". [RT #42958] (cherry picked from commit c38d989fdd73a49fbbfcce62ef36103cf5cf828d)

4429. [bug] Address potential use after free on fclose() error. [RT #42976] (cherry picked from commit c1915935cfdf971462e95c418f78a38567d3059b)

Remove spurious isc_stdio_open

4426. [bug] Addressed Coverity warnings. [RT #42908]

4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries to provide feedback to the trust-anchor administrators about how key rollovers are progressing as per draft-ietf-dnsop-edns-key-tag-02. This can be disabled using 'trust-anchor-telemetry no;'. [RT #40583] (cherry picked from commit f20179857a8512441c3be7ad33f1c84e367de041)

update copyright notice / whitespace

[v9_11] store "addzone" zone config in a NZD database 4421. [func] When built with LMDB (Lightning Memory-mapped Database), named will now use a database to store the configuration for zones added by "rndc addzone" instead of using a flat NZF file. This improves performance of "rndc delzone" and "rndc modzone" significantly. Existing NZF files will automatically by converted to NZD databases. To view the contents of an NZD or to roll back to NZF format, use "named-nzd2nzf". To disable this feature, use "configure --without-lmdb". [RT #39837]

Visual Studio 2005 doesn't like named elements, construct addr using isc_netaddr_fromin6 (cherry picked from commit d937f8e999f203b6cd7fddd5fdc1d16150840c59)

[v9_11] rndc dnstap -roll 4411. [func] "rndc dnstap -roll" automatically rolls the dnstap output file; the previous version is saved with ".0" suffix, and earlier versions with ".1" and so on. An optional numeric argument indicates how many prior files to save. [RT #42830]

update copyright notice / whitespace

4409. [bug] DNS64 should exlude mapped addresses by default when a exclude acl is not defined. [RT #42810] (cherry picked from commit 557c7221fd4a7a439916e17d21405188c94a6aa1)

4401. [misc] Change LICENSE to MPL 2.0.

4394. [func] Add rndc command "dnstap-reopen" to close and reopen dnstap output filed. [RT #41803]

4402. [func] Collect statistics for RSSAC02v3 traffic-volume, traffic-sizes and rcode-volume reporting. [RT #41475]

4387. [test] Rewritten test suite for catalog zones. [RT #42676] 4386. [func] Support for master entries with TSIG keys in catalog zones. [RT #42577]

4385. [func] Add support for allow-query and allow-transfer ACLs to catalog zones. [RT #42578]

silence compiler warning

silence coverity warnings

4382. [bug] rndc {addzone,modzone,delzone,showzone} should all compare the zone name using a canonical format. [RT #42630]

4381. [bug] Missing "zone-directory" option in catalog zone definition caused BIND to crash. [RT #42579]

[master] zone-directory option for catalog zones 4380. [experimental] Added a "zone-directory" option to "catalog-zones" syntax, allowing local masterfiles for slaves that are provisioned by catalog zones to be stored in a directory other than the server's working directory. [RT #42527]

4376. [experimental] Added support for Catalog Zones, a new method for provisioning secondary servers in which a list of zones to be served is stored in a DNS zone and can be propagated to slaves via AXFR/IXFR. [RT #41581] 4375. [func] Add support for automatic reallocation of isc_buffer to isc_buffer_put* functions. [RT #42394]

[master] minimal-any 4371. [func] New "minimal-any" option reduces the size of UDP responses for qtype ANY by returning a single arbitrarily selected RRset instead of all RRsets. Thanks to Tony Finch. [RT #41615]

4362. [func] Changed rndc reconfig behaviour so that newly added zones are loaded asynchronously and the loading does not block the server. [RT #41934]

4358. [test] Added American Fuzzy Lop harness that allows feeding fuzzed packets into BIND. [RT #41723]

4356. [func] Add the ability to specify whether to wait for nameserver addresses to be looked up or not to rpz with a new modifying directive 'nsip-wait-recurse'. [RT #35009]

[master] log message when using ISC DLV 4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service is scheduled to be disabled in 2017. A warning is now logged when named is configured to use it, either explicitly or via "dnssec-lookaside auto;" [RT #42207]

[master] add OS details to rndc status 4325. [func] Add a line to "rndc status" indicating the hostname and operating system details. [RT #41610]

[master] fixed a regression in dyndb due to change #4277

Check that configured view class isn't a meta class (#41572)

[master] disallow delzone on policiy zones 4311. [bug] Prevent "rndc delzone" from being used on response-policy zones. [RT #41593]

update copyright notice / whitespace

use 0 not ISC_FALSE for dns_name_fromtext

Use optimal message sizes to improve compression in AXFRs (#40996)

[master] update to previous commit: also list chrootdir if applicable

[master] add conf file to rndc status 4268. [func] "rndc status" now reports the path to the configuration file. [RT #36470]

Merged VS 2015 64 bit warnings (#40373)

check ptr is not NULL

Allow non-destructive control channel access using a "read-only" clause (#40498)

[master] allow spaces in rndc arguments 4256. [bug] Allow rndc command arguments to be quoted so as to allow spaces. [RT #36665]

4255. [func] Add 'message-compression' option to disable DNS compression in responses. [RT #40726]

[master] NTAs did not survive reoad/reconfig 4251. [bug] NTAs were deleted when the server was reconfigured or reloaded. [RT #41058]

4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]

[master] shorten default servfail-ttl 4239. [func] Changed default servfail-ttl value to 1 second from 10. Also, the maximum value is now 30 instead of 300. [RT #37556]

[master] dnstap 4235. [func] Added support in named for "dnstap", a fast method of capturing and logging DNS traffic, and a new command "dnstap-read" to read a dnstap log file. Use "configure --enable-dnstap" to enable this feature (note that this requires libprotobuf-c and libfstrm). See the ARM for configuration details. Thanks to Robert Edmonds of Farsight Security. [RT #40211]

handle ISC_R_FILENOTFOUND

4227. [bug] Silence static analysis warnings. [RT #40828

update copyright notice / whitespace

[master] merge dyndb 4224. [func] Added support for "dyndb", a new interface for loading zone data from an external database, developed by Red Hat for the FreeIPA project. DynDB drivers fully implement the BIND database API, and are capable of significantly better performance and functionality than DLZ drivers, while taking advantage of advanced database features not available in BIND such as multi-master replication. Thanks to Adam Tkac and Petr Spacek of Red Hat. [RT #35271]

update copyright notice / whitespace

use %zu

4223. [func] Add support for setting max-cache-size to percentage of available physical memory, set default to 90%. [RT #38442]

4222. [func] Bias IPv6 servers when selecting the next server to query. [RT #40836]

4213. [bug] Don't reuse a cache across multiple classes. [RT #40205]

Updated CHANGES note to include require-server-cookie: 4152. [func] Implement DNS COOKIE option. This replaces the experimental SIT option of BIND 9.10. The following named.conf directives are available: send-cookie, cookie-secret, cookie-algorithm, nocookie-udp-size and require-server-cookie. The following dig options are available: +[no]cookie[=value] and +[no]badcookie. [RT #39928]

Make rndc showzone print a message when allow-new-zones is not configured (#40009) Squashed commit of the following: commit 77f12b02cf4e81f13e10db3cfac90e9de0b53928 Author: Mukund Sivaraman <muks@isc.org> Date: Mon Jul 13 05:28:13 2015 +0530 Some tweaks commit 9c521020b03c2fe7293ec4c970225fff479efd40 Author: Tony Finch <dot@dotat.at> Date: Thu Jul 9 15:36:15 2015 +0100 rndc addzone error reporting improvements Clearer error messages from rndc addzone and modzone when the view is not known or when allow-new-zones is off. Also, remove a spurious newline from the delzone response.

update copyright notice / whitespace

[master] DDoS mitigation features 3938. [func] Added quotas to be used in recursive resolvers that are under high query load for names in zones whose authoritative servers are nonresponsive or are experiencing a denial of service attack. - "fetches-per-server" limits the number of simultaneous queries that can be sent to any single authoritative server. The configured value is a starting point; it is automatically adjusted downward if the server is partially or completely non-responsive. The algorithm used to adjust the quota can be configured via the "fetch-quota-params" option. - "fetches-per-zone" limits the number of simultaneous queries that can be sent for names within a single domain. (Note: Unlike "fetches-per-server", this value is not self-tuning.) - New stats counters have been added to count queries spilled due to these quotas. See the ARM for details of these options. [RT #37125]

allow named to build w/o openssl

[master] traffic size stats 4156. [func] Added statistics counters to track the sizes of incoming queries and outgoing responses in histogram buckets, as specified in RSSAC002. [RT #39049]

Allow RPZ rewrite logging to be configured on a per-zone basis (#39754)

update copyright notice / whitespace

4152. [func] Implement DNS COOKIE option. This replaces the experimental SIT option of BIND 9.10. The following named.conf directives are avaliable: send-cookie, cookie-secret, cookie-algorithm and nocookie-udp-size. The following dig options are available: +[no]cookie[=value] and +[no]badcookie. [RT #39928]

Fix parsing of NZFs saved by rndc addzone with view specified (#39845)

Print unsigned values for serial, etc. in rndc zonestatus output (#39854)

Remove redundant nzf_remove() call during delzone (#39844)

rndc reconfig reports configuration errors the same way rndc reload does [RT #39635]

[master] rpz_ver check was ineffective

update copyright notice / whitespace

[master] log parsing errors from default config or addzone/modzone 4124. [func] Log errors or warnings encountered when parsing the internal default configuration. Clarify the logging of errors and warnings encountered in rndc addzone or modzone parameters. [RT #39440]

[master] address a possible policy update race 4120. [bug] A bug in RPZ could cause the server to crash if policy zones were updated while recursion was pending for RPZ processing of an active query. [RT #39415]

4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.

[master] fix root-delegation-only without exclude 4112. [bug] Named failed to load when "root-delegation-only" was used without a list of domains to exclude. [RT #39380]

4108. [func] A additional nxdomain redirect (nxdomain-redirect) method is now supported. [RT #37989]

misc x64 VS 2015 CTP fixes [#39308]

4092. [bug] 'in-view' didn't work for zones beneath a empty zone. [RT #39173]

[master] improve thread support reporting 4083. [cleanup] Print of the number of CPUs and UDP listeners in the log and in "rndc status" output; indicate whether threads are supported in "named -V" output. [RT #38811]

4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]

[master] add "lock-file" and fix up singleton code 4080. [func] Completed change #4022, adding a "lock-file" option to named.conf to override the default lock file, in addition to the "named -X <filename>" command line option. Setting the lock file to "none" using either method disables the check completely. [RT #37908]

4076. [bug] Named could crash on shutdown with outstanding reload / reconfig events. [RT #38622]

[master] version cleanup 4073. [cleanup] Add libjson-c version number reporting to "named -V"; normalize version number formatting. [RT #38056]

[master] address valgrind warnings 4059. [bug] Addressed valgrind warnings. [RT #38549]

update copyright notice / whitespace

[master] better formatting fix

[master] fix "initialize with revoked key" test, add missing newline

[master] remove a change inadvertently committed

[master] 5011 tests and fixes 4056. [bug] Expanded automatic testing of trust anchor management and fixed several small bugs including a memory leak and a possible loss of key state information. [RT #38458] 4055. [func] "rndc managed-keys" can be used to check status of trust anchors or to force keys to be refreshed, Also, the managed keys data file has easier-to-read comments. [RT #38458]

initialise fp

[master] "rndc modzone" 4043. [func] "rndc modzone" can be used to modify the configuration of an existing zone, using similar syntax to "rndc addzone". [RT #37895]

[master] add TCP pipelining support 4040. [func] Added server-side support for pipelined TCP queries. TCP connections are no longer closed after the first query received from a client. (The new "keep-response-order" option allows clients to be specified for which the old behavior will still be used.) [RT #37821]

[master] clean up gcc -Wshadow warnings 4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]

Make call to open a temporary file name safe during NZF creation (#38331) Based on a patch sent in by Tony Finch <dot@dotat.at>. Also fix win32 implementation of isc_file_openunique() to use a random filename instead of using the process id.

Close FILEs before overwriting NZF file (#38332) Based on a patch sent in by Tony Finch <dot@dotat.at>.

Add NTA persistence (#37087) 4034. [func] When added, negative trust anchors (NTA) are now saved to files (viewname.nta), in order to persist across restarts of the named server. [RT #37087]

4032. [bug] Built-in "empty" zones did not correctly inherit the "allow-transfer" ACL from the options or view. [RT #38310]

[master] typo in comment

4031. [bug] named-checkconf -z failed to report a missing file with a hint zone. [RT #38294]

[master] intialize result *correctly*

[master] initialize result

update copyright notice / whitespace

[master] rndc showzone / rndc delzone of non-added zones 4030. [func] "rndc delzone" is now applicable to zones that were configured in named.conf, as well as zones that were added via "rndc addzone". (Note, however, that if named.conf is not also modified, the deleted zone will return when named is reloaded.) [RT #37887] 4029. [func] "rndc showzone" displays the current configuration of a specified zone. [RT #37887]

Make named a singleton process [RT#37908] Conflicts: bin/tests/system/conf.sh.in lib/dns/win32/libdns.def.in lib/isc/win32/file.c The merge also needed to update files in legacy and tcp system tests (newly introduced in master after branch was created) to introduce use of lockfile.

Add a TCP only option to server/peer

make isc_buffer_t **text

unchecked putnull

[master] add max-recursion-queries also fixes and documentation for max-recursion-depth

update copyright notice / whitespace

[master] limit recursion depth and iterative queries 4006. [security] A flaw in delegation handling could be exploited to put named into an infinite loop. This has been addressed by placing limits on the number of levels of recursion named will allow (default 7), and the number of iterative queries that it will send (default 50) before terminating a recursive query (CVE-2014-8500). The recursion depth limit is configured via the "max-recursion-depth" option. [RT #35780]

[master] complete coverity fixes

check returns from putstr and putnull

fix ns_smf_add_message

make inline

[master] allow arbitrary-size rndc output 4005. [func] The buffer used for returning text from rndc commands is now dynamically resizable, allowing arbitrarily large amounts of text to be sent back to the client. (Prior to this change, it was possible for the output of "rndc tsig-list" to be truncated.) [RT #37731]

[master] s/mempcy/memmove/

[master] new mkeys and nzf naming format 3999. [func] "mkeys" and "nzf" files are now named after their corresponding views, unless the view name contains characters that would be incompatible with use in a filename (i.e., slash, backslash, or capital letters). If a view name does contain these characters, the files will still be named using a cryptographic hash of the view name. Regardless of this, if a file using the old name format is found to exist, it will continue to be used. [RT #37704]

3987. [func] Allow the zone serial of a dynamically updatable zone to be updated via rndc. [RT #37404]

[master] fix spurious error in rndc secroots 3977. [cleanup] "rndc secroots" reported a "not found" error when there were no negative trust anchors set. [RT #37506]

3968. [bug] Silence spurious log messages when using 'named -[46]'. [RT #37308]

3966. [bug] Missing dns_db_closeversion call in receive_secure_db. [RT #35746]

3956. [func] Notify messages are now rate limited by notify-rate and startup-notify-rate instead of serial-query-rate. [RT #24454] 3955. [bug] Notify messages due to changes are no longer queued behind startup notify messages. [RT #24454]

3949. [experimental] Experimental support for draft-andrews-edns1 by sending EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when building). Add support for limiting the EDNS version advertised to servers: server { edns-version 0; }; Log the EDNS version received in the query log. [RT #35864]

[master] servfail cache 3943. [func] SERVFAIL responses can now be cached for a limited time (configured by "servfail-ttl", default 10 seconds, limit 30). This can reduce the frequency of retries when an authoritative server is known to be failing, e.g., due to ongoing DNSSEC validation problems. [RT #21347]

[master] [rt37069] update NTA limit to a week 3940. [func] "rndc nta" now allows negative trust anchors to be set for up to one week. [RT #37069]

error message was not being returned

[master] ECS authoritative support 3936. [func] Added authoritative support for the EDNS Client Subnet (ECS) option. ACLs can now include "ecs" elements which specify an address or network prefix; if an ECS option is included in a DNS query, then the address encoded in the option will be matched against "ecs" ACL elements. Also, if an ECS address is included in a query, then it will be used instead of the client source address when matching "geoip" ACL elements. This behavior can be overridden with "geoip-use-ecs no;". When "ecs" or "geoip" ACL elements are used to select a view for a query, the response will include an ECS option to indicate which client network the answer is valid for. (Thanks to Vincent Bernat.) [RT #36781]

3931. [cleanup] Cleanup how dlz grammer is defined. [RT #36879]

[master] "rndc nta -r" could hang 3930. [bug] "rndc nta -r" could cause a server hang if the NTA was not found. [RT #36909]

[master] silence coverity

3924. [bug] Improve 'rndc addzone' error reporting. RT #35187

3915 [bug] Address a assertion if a route event arrived while shutting down. [RT #36887]

3911. [func] Implement EDNS EXPIRE option client side. [RT #35925]

3908. [bug] rndc now differentiates between a zone in multiple views and a zone that doesn't exist at all. [RT #36691]

[master] complete change #3882 Parse arguments to "rndc nta" so they can be either long or shortened (i.e., both "-dump" and "-d" will work).

3888. [func] 'rndc status' now reports the number of automatic zones. [RT #36015]

fix 'result' might be used uninitialized in this function

[master] complete NTA work 3882. [func] By default, negative trust anchors will be tested periodically to see whether data below them can be validated, and if so, they will be allowed to expire early. The "rndc nta -force" option overrides this behvaior. The default NTA lifetime and the recheck frequency can be configured by the "nta-lifetime" and "nta-recheck" options. [RT #36146]

[master] rndc nta 3867. [func] "rndc nta" can now be used to set a temporary negative trust anchor, which disables DNSSEC validation below a specified name for a specified period of time (not exceeding 24 hours). This can be used when validation for a domain is known to be failing due to a configuration error on the part of the domain owner rather than a spoofing attack. [RT #29358]

3866. [bug] Named could die on disk full in generate_session_key. [RT #36119]

3849. [bug] Disabling forwarding could trigger a REQUIRE assertion. [RT #35979]

[master] log static-stub correctly when removing 3822. [bug] Log the correct type of static-stub zones when removing them. [RT #35842]

3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing time. [RT #35659]

[master] silence win64 build warning

[master] fixed 'fixed' 3784. [bug] Using "rrset-order fixed" when it had not been enabled at compile time caused inconsistent results. It now works as documented, defaulting to cyclic mode. [RT #28104]

make constant unsigned

check isc_hex_totext result

[master] auto-generate salt 3781. [func] Specifying "auto" as the salt when using "rndc signing -nsec3param" causes named to generate a 64-bit salt at random. [RT #35322]

[master] warn when wrong address family used in listen-on/-v6 3778. [bug] Log a warning when the wrong address family is used in "listen-on" or "listen-on-v6". [RT #17848]

[master] fix log level for built in keys 3771. [cleanup] Adjusted log level for "using built-in key" messages. [RT #24383]

use ISC_PLATFORM_USESIT

fixed ENABLE_LTR typos

[master] add "--with-tuning=large" option 3745. [func] "configure --with-tuning=large" adjusts various compiled-in constants and default settings to values suited to large servers with abundant memory. [RT #29538]

3744. [experimental] SIT: send and process Source Identity Tokens (which are similar to DNS Cookies by Donald Eastlake) and are designed to help clients detect off path spoofed responses and for servers to detect legitimate clients. SIT use a experimental EDNS option code (65001). SIT can be enabled via --enable-developer or --enable-sit. It is on by default in Windows. RRL processing as been updated to know about SIT with legitimate clients not being rate limited. [RT #35389]

3743. [bug] delegation-only flag wasn't working in forward zone declarations despite being documented. This is needed to support turning off forwarding and turning on delegation only at the same name. [RT #35392]

[master] delve 3741. [func] "delve" (domain entity lookup and validation engine): A new tool with dig-like semantics for performing DNS lookups, with internal DNSSEC validation, using the same resolver and validator logic as named. This allows easy validation of DNSSEC data in environments with untrustworthy resolvers, and assists with troubleshooting of DNSSEC problems. (Note: not yet available on win32.) [RT #32406]

spurious space

[master] merge libiscpk11 to libisc 3735. [cleanup] Merged the libiscpk11 library into libisc to simplify dependencies. [RT #35205]

fix typo in comment

3733. [func] Improve interface scanning support. Interface information will be automatically updated if the OS supports routing sockets. Use "automatic-interface-scan no;" to disable. Add "rndc scan" to trigger a scan. [RT #23027]

[master] add no-case-compress 3731. [func] Added a "no-case-compress" ACL, which causes named to use case-insensitive compression (disabling change #3645) for specified clients. (This is useful when dealing with broken client implementations that use case-sensitive name comparisons, rejecting responses that fail to match the capitalization of the query that was sent.) [RT #35300]

[master] better error message when exceeding RPZ zone limit 3726. [cleanup] Clarified the error message when attempting to configure more than 32 response-policy zones. [RT #35283]

[master] silence coverity warnings - remove dead code in server.c - initialize a struct tm.c

3710. [bug] Address double dns_zone_detach when switching to using automatic empty zones from regular zones. [RT #35177]

[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]