update copyright notice / whitespace

[v9_11] normalize rndc on/off commands 4867. [cleanup] Normalize rndc on/off commands (validation and querylog) so they accept the same synonyms for on/off (yes/no, true/false, enable/disable). Thanks to Tony Finch. [RT #47022] (cherry picked from commit cf8f4241e7826a6deb605d0b65ba625414805642)

update copyright notice / whitespace

[v9_11] Fix minor memory leak in rndc [RT #46739] (cherry picked from commit 1b0ca5d5bb5e79a6edb83384301161bb1a54f08c)

[v9_11] minor cleanup/clarification in dnstap documentation Patch submitted by Tony Finch (dot@dotat.at). (cherry picked from commit e9917a51d321c8ecf3b12491884bcb5114569f03)

add signing -serial to rndc usage (cherry picked from commit 7bb9972a1f21c2375d7dafa71fbdf5dbebf8daeb)

4450. [port] Provide more nuanced HSM support which better matches the specific PKCS11 providers capabilities. [RT #42458] (cherry picked from commit 8ee6f289d87851a5b898b24a64587f0e6bc225bc)

add dnstap to help. [RT #42928] (cherry picked from commit f814343d1b31d28c012c8344bdcaf4c744d92463)

4401. [misc] Change LICENSE to MPL 2.0.

update copyright notice / whitespace

4318. [security] Malformed control messages can trigger assertions in named and rndc. (CVE-2016-1285) [RT #41666]

[master] s/the the/the/

Update rndc usage output (#40010) Squashed commit of the following: commit 73f0bba7d8d4763763ff88731c739ac646714ac8 Author: Mukund Sivaraman <muks@isc.org> Date: Mon Jul 13 05:40:35 2015 +0530 Update rndc usage output This is based on a patch sent by Tony Finch.

[master] correct the maximum NTA lifetime in rndc's help output

[master] DDoS mitigation features 3938. [func] Added quotas to be used in recursive resolvers that are under high query load for names in zones whose authoritative servers are nonresponsive or are experiencing a denial of service attack. - "fetches-per-server" limits the number of simultaneous queries that can be sent to any single authoritative server. The configured value is a starting point; it is automatically adjusted downward if the server is partially or completely non-responsive. The algorithm used to adjust the quota can be configured via the "fetch-quota-params" option. - "fetches-per-zone" limits the number of simultaneous queries that can be sent for names within a single domain. (Note: Unlike "fetches-per-server", this value is not self-tuning.) - New stats counters have been added to count queries spilled due to these quotas. See the ARM for details of these options. [RT #37125]

added print.h includes, updated copyrights

[master] add "rndc -r" to print result code 4115. [func] "rndc -r" now prints the result code (e.g., ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after running the requested command. [RT #38913]

add managed-keys to help

update copyright notice / whitespace

[master] clean up gcc -Wshadow warnings 4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]

[master] allow arbitrary-size rndc output 4005. [func] The buffer used for returning text from rndc commands is now dynamically resizable, allowing arbitrarily large amounts of text to be sent back to the client. (Prior to this change, it was possible for the output of "rndc tsig-list" to be truncated.) [RT #37731]

move 'nta -dump'

3907. [cleanup] Alphabetise rndc help. [RT#36683]

remove trailing whitespace

[master] add "rndc nta" options to "rndc -h" output

[master] rndc -q 3776. [bug] "rndc -q" suppresses output from successful rndc commands. Errors are printed on stderr. [RT #21393]

3733. [func] Improve interface scanning support. Interface information will be automatically updated if the OS supports routing sockets. Use "automatic-interface-scan no;" to disable. Add "rndc scan" to trigger a scan. [RT #23027]

update copyright notice

[master] replace memcpy() with memmove(). 3698. [cleanup] Replaced all uses of memcpy() with memmove(). [RT #35120]

[master] address race conditions with removing inline zones 3513. [bug] named could crash when deleting inline-signing zones with "rndc delzone". [RT #34066]

[master] add "-clean" option to "rndc delzone" 3585. [func] "rndc delzone -clean" option removes zone files when deleting a zone. [RT #33570]

3578. [bug] 'rndc -c file' now fails if 'file' does not exist. [RT #33571]

update copyright notice

[master] algorithm flexibility for rndc 3525. [func] Support for additional signing algorithms in rndc: hmac-sha1, -sha224, -sha256, -sha384, and -sha512. The -A option to rndc-confgen can be used to select the algorithm for the generated key. (The default is still hmac-md5; this may change in a future release.) [RT #20363]

[master] silence coverity warnings 3401. [bug] Addressed Coverity warnings. [RT #31484]

3275. [bug] Corrected rndc -h output; the 'rndc sync -clean' option had been missplled as '-clear'. (To avoid future confusion, both options now work.) [RT #27173]

update copyright notice

3271. [func] New "rndc zonestatus" command prints information about the specified zone. [RT #21671]

3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]

3201. [func] 'rndc querylog' can now be given an on/off parameter instead of only being used as a toggle. [RT #18351]

3200. [doc] Some rndc functions were undocumented or were missing from 'rndc -h' output. [RT #25555]

3185. [func] New 'rndc signing' option for auto-dnssec zones: - 'rndc signing -list' displays the current state of signing operations - 'rndc signing -clear' clears the signing state records for keys that have fully signed the zone - 'rndc signing -nsec3param' sets the NSEC3 parameters for the zone The 'rndc keydone' syntax is removed. [RT #23729]

3177. [func] 'rndc keydone', remove the indicator record that named has finished signing the zone with the corresponding key. [RT #26206]

clarify "rndc sync" logging, add it to "rndc -h" output, per francis review comments in rt22473.

update copyright notice

3016. [bug] rndc usage missing '-b'. [RT #22937]

Include "loadkeys" in rndc help output. [RT #22493]

2930. [experimental] New "rndc addzone" and "rndc delzone" commads allow dynamic addition and deletion of zones. To enable this feature, specify a "new-zone-file" option at the view or options level in named.conf. Zone configuration information for the new zones will be written into that file. To make the new zones persist after a restart, "include" the file into named.conf in the appropriate view. (Note: This feature is not yet documented, and its syntax is expected to change.) [RT #19447]

update copyright notice

2924. [func] 'rndc secroots' dump a combined summary of the current managed keys combined with trusted keys. [RT #20904]

2811. [cleanup] Add "rndc sign" to list of commands in rndc usage output. [RT #20733]

noreturn RT #20257

2594. [func] Have rndc warn if using its default configuration file when the key file also exists. [RT #19424]

update copyright notice

spelling

constistant declaration of progname

2396. [bug] Don't set SO_REUSEADDR for randomized ports. [RT #18336] part 2

update copyright notice

2396. [bug] Don't set SO_REUSEADDR for randomized ports. [RT #18336]

update copyright notice

update copyright notice

rndc now has -h for help.

2191. [func] named-checkzone now allows dumping to stdout (-). named-checkconf now has -h for help. named-checkzone now has -h for help. Better handling of '-?' for usage summaries. [RT #16707]

2105. [func] GSS-TSIG support (RFC 3645).

2067. [bug] 'rndc' could close the socket too early triggering a INSIST under Windows. [RT #16317]

2052. [bug] 'rndc' improve connect failed message to report the failing address. [RT #15978]

2008. [func] It is now posssible to enable/disable DNSSEC validation from rndc. This is useful for the mobile hosts where the current connection point breaks DNSSEC (firewall/proxy). [RT #15592] rndc validation newstate [view]

update copyright notice

1991. [cleanup] The configuration data, once read, should be treated as readonly. Expand the use of const to enforce this at compile time. [RT #15813]

silence compiler warning

upate

finetune isc_thread_key implementation [RT #15408]

1851. [doc] Doxygen comment markup. [RT #11398]

1795. [bug] "rndc dumpb" was not fully documented. Minor formating issues with "rndc dumpdb -all". [RT #13396]

1814. [func] UNIX domain controls are now supported.

update copyrights

1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.

1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY messages for the specified zone. [RT #9479]

1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.

1680. [func] rndc: the source address can now be specified.

1666. [bug] The optional port on hostnames in dual-stack-servers was being ignored. 1665. [func] rndc now allows addresses to be set in the server clauses.

update copyright notice