CHANGES revision 1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence2878. [func] Incrementally write the master file after performing
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence a AXFR. [RT #21010]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington2877. [bug] The validator failed to skip obviously mismatching
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington RRSIGs. [RT #21138]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer2876. [bug] Named could return SERVFAIL for negative responses
cc7420cb3b8eb2c48a00384784701bfee37cc96fAndreas Gustafsson from unsigned zones. [RT #21131]
cc7420cb3b8eb2c48a00384784701bfee37cc96fAndreas Gustafsson2875. [bug] dns_time64_fromtext() could accept non digits.
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer2874. [bug] Cache lack of EDNS support only after the server
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews successfully responds to the query using plain DNS.
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson2873. [bug] Canceling a dynamic update via the dns/client module
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson could trigger an assertion failure. [RT #21133]
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews require one of IPv4 or IPv6 rather than both.
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews the header file, causing build failure with
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson --enable-exportlib. [RT #21138]
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews any changes made by configure are integrated.
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews Use --with-make-clean=no to disable. [RT #20994]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley don't like it. [RT #20986]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2866. [bug] Windows does not like the TSIG name being compressed.
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer2865. [bug] memset to zero event.data. [RT #20986]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2862. [bug] nsupdate didn't default to the parent zone when
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff updating DS records. [RT #20896]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2861. [doc] dnssec-settime man pages didn't correctly document the
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff inactivation time. [RT #21039]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2860. [bug] named-checkconf's usage was out of date. [RT #21039]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2859. [bug] When cancelling validation it was possible to leak
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson memory. [RT #20800]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson2858. [bug] RTT estimates were not being adjusted on ICMP errors.
ba43c53451d5c38765f376eeede457178b36951aBob Halley2857. [bug] named-checkconf did not fail on a bad trusted key.
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews2856. [bug] The size of a memory allocation was not always properly
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews recorded. [RT #20927]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews2855. [func] nsupdate will now preserve the entered case of domain
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews names in update requests it sends. [RT #20928]
668278867ba063995988507b6b28724ebb9f9391Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff be suppressed, dig +onesoa. [RT #20929]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2851. [doc] nslookup.1, removed <informalexample> from the docbook
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson source as it produced bad nroff. [RT #21007]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2850. [bug] If isc_heap_insert() failed due to memory shortage
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson the heap would have corrupted entries. [RT #20951]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2849. [bug] Don't treat errors from the xml2 library as fatal.
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson README.rfc5011 into the ARM. [RT #20899]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2846. [bug] EOF on unix domain sockets was not being handled
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson correctly. [RT #20731]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2844. [doc] notify-delay default in ARM was wrong. It should have
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff been five (5) seconds.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff creating key files if there is a chance that the new
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff key ID will collide with an existing one after
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff either of the keys has been revoked. (To override
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff this in the case of dnssec-keyfromlabel, use the -y
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington option. dnssec-keygen will simply create a
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington different, non-colliding key, so an override is
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington not necessary.) [RT #20838]
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2842. [func] Added "smartsign" and improved "autosign" and
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley "dnssec" regression tests. [RT #20865]
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2841. [bug] Change 2836 was not complete. [RT #20883]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2840. [bug] Temporary fixed pkcs11-destroy usage check.
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2839. [bug] A KSK revoked by named could not be deleted.
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson2838. [placeholder]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley2837. [port] Prevent Linux spurious warnings about fwrite().
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff2836. [bug] Keys that were scheduled to become active could
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff be delayed. [RT #20874]
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff2835. [bug] Key inactivity dates were inadvertently stored in
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington the private key file with the outdated tag
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson "Unpublish" rather than "Inactive". This has been
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson fixed; however, any existing keys that had Inactive
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson dates set will now need to have them reset, using
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson 'dnssec-settime -I'. [RT #20868]
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff2834. [bug] HMAC-SHA* keys that were longer than the algorithm
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff digest length were used incorrectly, leading to
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff interoperability problems with other DNS
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff implementations. This has been corrected.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff (Note: If an oversize key is in use, and
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson compatibility is needed with an older release of
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson BIND, the new tool "isc-hmac-fixup" can convert
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson the key secret to a form that will work with all
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson versions.) [RT #20751]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson to avoid redefinition in some OSes [RT 20831]
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington2831. [security] Do not attempt to validate or cache
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington out-of-bailiwick data returned with a secure
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington answer; it must be re-fetched from its original
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson source and validated in that context. [RT #20819]
0d00f4bb92090ff64d49ae803a2e75b3f299f547Andreas Gustafsson2830. [bug] Changing the OPTOUT setting could take multiple
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson passes. [RT #20813]
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2829. [bug] Fixed potential node inconsistency in rbtdb.c.
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson2828. [security] Cached CNAME or DNAME RR could be returned to clients
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson without DNSSEC validation. [RT #20737]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington being released. [RT #20740]
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson was in the process of being created was not properly
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson recorded in the zone. [RT #20786]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2824. [bug] "rndc sign" was not being run by the correct task.
cdc2d4a065b6b1a00f0b07aae94bc7cb380d15bcAndreas Gustafsson2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2822. [bug] rbtdb.c:loadnode() could return the wrong result.
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson2821. [doc] Add note that named-checkconf doesn't automatically
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2820. [func] Handle read access failure of OpenSSL configuration
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson file more user friendly (PKCS#11 engine patch).
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson2818. [cleanup] rndc could return an incorrect error code
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson when a zone was not found. [RT #20767]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
2c187cbe49de3ec81c67e6c2eb328bfc6f325f22Brian Wellington2816. [bug] previous_closest_nsec() could fail to return
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington data for NSEC3 nodes [RT #29730]
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington2815. [bug] Exclusively lock the task when freezing a zone.
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2814. [func] Provide a definitive error message when a master
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson zone is not loaded. [RT #20757]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2813. [bug] Better handling of unreadable DNSSEC key files.
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2812. [bug] Make sure updates can't result in a zone with
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson NSEC-only keys and NSEC3 records. [RT 20748]
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson output. [RT #20733]
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson2810. [doc] Clarified the process of transitioning an NSEC3 zone
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson to insecure. [RT #20746]
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2809. [cleanup] Restored accidentally-deleted text in usage output
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson in dnssec-settime and dnssec-revoke [RT #20739]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews atomic.h is correctly installed by the architecture
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews specific subdirectories. [RT #20722]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews keys. [RT #20720]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews --- 9.7.0rc1 released ---
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews when it had changed. [RT #20703]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2805. [bug] Fixed namespace problems encountered when building
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews external programs using non-exported BIND9 libraries
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson (i.e., built without --enable-exportlib). [RT #20679]
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson2804. [bug] Send notifies when a zone is signed with "rndc sign"
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson or as a result of a scheduled key change. [RT #20700]
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson and genrandom under windows. [RT #20670]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
e3402551ac9be809eeb3a4b7b30d023ba67dad28Brian Wellington2801. [func] Detect and report records that are different according
6d3f954c572db02159deedd444373161fda47a88Brian Wellington to DNSSEC but are sematically equal according to plain
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington DNS. Apply plain DNS comparisons rather than DNSSEC
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington comparisons when processing UPDATE requests.
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington dnssec-signzone now removes such semantically duplicate
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson records prior to signing the RRset.
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson named-checkzone -r {ignore|warn|fail} (default warn)
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson named-compilezone -r {ignore|warn|fail} (default warn)
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson named.conf: check-dup-records {ignore|warn|fail};
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence2800. [func] Reject zones which have NS records which refer to
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson CNAMEs, DNAMEs or don't have address record (class IN
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington only). Reject UPDATEs which would cause the zone
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington to fail the above checks if committed. [RT #20678]
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson2799. [cleanup] Changed the "secure-to-insecure" option to
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson "dnssec-secure-to-insecure", and "dnskey-ksk-only"
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington2798. [bug] Addressed bugs in managed-keys initialization
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington and rollover. [RT #20683]
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington2797. [bug] Don't decrement the dispatch manager's maxbuffers.
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson2796. [bug] Missing dns_rdataset_disassociate() call in
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence dns_nsec3_delnsec3sx(). [RT #20681]
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
b41de87910a4c57039a4f5968e272a9aec566959Brian Wellington log messages. [RT #18889]
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson2794. [bug] Install <isc/namespace.h>. [RT #20677]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington2793. [func] Add "autosign" and "metadata" tests to the
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington automatic tests. [RT #19946]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2792. [func] "filter-aaaa-on-v4" can now be set in view
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson options (if compiled in). [RT #20635]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2791. [bug] The installation of isc-config.sh was broken.
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson2790. [bug] Handle DS queries to stub zones. [RT #20440]
d403e27f2b1c94f2b9349ddb68f50a141ae8d26dAndreas Gustafsson2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson2788. [bug] dnssec-signzone could sign with keys that were
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson not requested [RT #20625]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2787. [bug] Spurious log message when zone keys were
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson dynamically reconfigured. [RT #20659]
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister --- 9.7.0b3 released ---
385a9cb48a70b329e507c39d043fa9a44c659913James Brister2785. [bug] Revoked keys could fail to self-sign [RT #20652]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister2784. [bug] TC was not always being set when required glue was
385a9cb48a70b329e507c39d043fa9a44c659913James Brister dropped. [RT #20655]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington buffer size of 512 or less. [RT #20654]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2782. [port] win32: use getaddrinfo() for hostname lookups.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2781. [bug] Inactive keys could be used for signing. [RT #20649]
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington2780. [bug] dnssec-keygen -A none didn't properly unset the
47ddde42728034854444cf17e278cebaea06f666Michael Graff activation date in all cases. [RT #20648]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2779. [bug] Dynamic key revokation could fail. [RT #20644]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2778. [bug] dnssec-signzone could fail when a key was revoked
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence without deleting the unrevoked version. [RT #20638]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2776. [bug] Change #2762 was not correct. [RT #20647]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence in dnssec-keyfromlabel. [RT #20643]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2774. [bug] Existing cache DB wasn't being reused after
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington reconfiguration. [RT #20629]
529a6b5224d751504027293a766a4c8b81241869Brian Wellington2773. [bug] In autosigned zones, the SOA could be signed
529a6b5224d751504027293a766a4c8b81241869Brian Wellington with the KSK. [RT #20628]
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson2772. [security] When validating, track whether pending data was from
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson the additional section or not and only return it if
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington validates as secure. [RT #20438]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington2771. [bug] dnssec-signzone: DNSKEY records could be
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington corrupted when importing from key files [RT #20624]
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence2770. [cleanup] Add log messages to resolver.c to indicate events
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson causing FORMERR responses. [RT #20526]
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2769. [cleanup] Change #2742 was incomplete. [RT #19589]
c9b176a5281c8232eec0f2056ce10ea249afc4a3Mark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson2767. [bug] named could crash on startup if a zone was
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson configured with auto-dnssec and there was no
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson key-directory. [RT #20615]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2766. [bug] isc_socket_fdwatchpoke() should only update the
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington socketmgr state if the socket is not pending on a
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson read or write. [RT #20603]
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2765. [bug] Skip masters for which the TSIG key cannot be found.
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister2762. [bug] DLV validation failed with a local slave DLV zone.
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer2761. [cleanup] Enable internal symbol table for backtrace only for
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer systems that are known to work. Currently, BSD
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer variants, Linux and Solaris are supported. [RT# 20202]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2759. [doc] Add information about .jbk/.jnw files to
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer the ARM. [RT #20303]
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2758. [bug] win32: Added a workaround for a windows 2008 bug
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer that could cause the UDP client handler to shut
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson down. [RT #19176]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2757. [bug] dig: assertion failure could occur in connect
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson timeout. [RT #20599]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2755. [placeholder]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2754. [bug] Secure-to-insecure transitions failed when zone
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson was signed with NSEC3. [RT #20587]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2753. [bug] Removed an unnecessary warning that could appear when
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson building an NSEC chain. [RT #20589]
c35f1e59379ff961b56163dd463b623898e2d0f6James Brister2752. [bug] Locking violation. [RT #20587]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
c35f1e59379ff961b56163dd463b623898e2d0f6James Brister2750. [bug] dig: assertion failure could occur when a server
c35f1e59379ff961b56163dd463b623898e2d0f6James Brister didn't have an address. [RT #20579]
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2749. [bug] ixfr-from-differences generated a non-minimal ixfr
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson for NSEC3 signed zones. [RT #20452]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2748. [func] Identify bad answers from GTLD servers and treat them
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson as referrals. [RT #18884]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2747. [bug] Journal roll forwards failed to set the re-signing
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington time of RRSIGs correctly. [RT #20541]
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson2746. [port] hpux: address signed/unsigned expansion mismatch of
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2745. [bug] configure script didn't probe the return type of
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson gai_strerror(3) correctly. [RT #20573]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2744. [func] Log if a query was over TCP. [RT #19961]
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington for a insecure delegation.
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington --- 9.7.0b2 released ---
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson2742. [cleanup] Clarify some DNSSEC-related log messages in
da527e4ff6a013364826637963e7ac372e024f33David Lawrence2741. [func] Allow the dnssec-keygen progress messages to be
da527e4ff6a013364826637963e7ac372e024f33David Lawrence suppressed (dnssec-keygen -q). Automatically
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews suppress the progress messages when stdin is not
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews a tty. [RT #20474]
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson2740. [placeholder]
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson2739. [cleanup] Clean up API for initializing and clearing trust
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence anchors for a view. [RT #20211]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence test. [RT #20453]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2737. [func] UPDATE requests can leak existance information.
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister2736. [func] Improve the performance of NSEC signed zones with
adade77942b069127a7094df419b3ad39dafb385James Brister more than a normal amount of glue below a delegation.
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2735. [bug] dnssec-signzone could fail to read keys
adade77942b069127a7094df419b3ad39dafb385James Brister that were specified on the command line with
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews full paths, but weren't in the current
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews directory. [RT #20421]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2734. [port] cygwin: arpaname did not compile. [RT #20473]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2732. [func] Add optional filter-aaaa-on-v4 option, available
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson if built with './configure --enable-filter-aaaa'.
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson Filters out AAAA answers to clients connecting
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson via IPv4. (This is NOT recommended for general
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence use.) [RT #20339]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2731. [func] Additional work on change 2709. The key parser
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson will now ignore unrecognized fields when the
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson minor version number of the private key format
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence has been increased. It will reject any key with
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson the major version number increased. [RT #20310]
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson2730. [func] Have dnssec-keygen display a progress indication
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson a la 'openssl genrsa' on standard error. Note
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson when the first '.' is followed by a long stop
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson one has the choice between slow generation vs.
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson poor random quality, i.e., '-r /dev/urandom'.
5096958739769958dd7a6b69356bf41260033873David Lawrence2729. [func] When constructing a CNAME from a DNAME use the DNAME
5096958739769958dd7a6b69356bf41260033873David Lawrence TTL. [RT #20451]
5096958739769958dd7a6b69356bf41260033873David Lawrence2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
5096958739769958dd7a6b69356bf41260033873David Lawrence dnssec-signzone now warn immediately if asked to
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence write into a nonexistent directory. [RT #20278]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence2727. [func] The 'key-directory' option can now specify a relative
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence path. [RT #20154]
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence2726. [func] Added support for SHA-2 DNSSEC algorithms,
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence RSASHA256 and RSASHA512. [RT #20023]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2725. [doc] Added information about the file "managed-keys.bind"
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence to the ARM. [RT #20235]
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews were failing. [RT #20448]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence isc_base64_totext(), didn't always mark regions of
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence memory as fully consumed after conversion. [RT #20445]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington2722. [bug] Ensure that the memory associated with the name of
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson a node in a rbt tree is not altered during the life
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington of the node. [RT #20431]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2721. [port] Have dst__entropy_status() prime the random number
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington generator. [RT #20369]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2720. [bug] RFC 5011 trust anchor updates could trigger an
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington assert if the DNSKEY record was unsigned. [RT #20406]
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington2719. [func] Skip trusted/managed keys for unsupported algorithms.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2718. [bug] The space calculations in opensslrsa_todns() were
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister incorrect. [RT #20394]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2717. [bug] named failed to update the NSEC/NSEC3 record when
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister the last private type record was removed as a result
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister of completing the signing the zone with a key.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister --- 9.7.0b1 released ---
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2715. [bug] Require OpenSSL support to be explicitly disabled.
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2713. [bug] powerpc: atomic operations missing asm("ics") /
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews __isync() calls.
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
96ab25294b028270eb1be867613df8a6c999b332David Lawrence to be fully automated in zones configured for
96ab25294b028270eb1be867613df8a6c999b332David Lawrence dynamic DNS. 'auto-dnssec allow;' permits a zone
96ab25294b028270eb1be867613df8a6c999b332David Lawrence to be signed by creating keys for it in the
96ab25294b028270eb1be867613df8a6c999b332David Lawrence key-directory and using 'rndc sign <zone>'.
96ab25294b028270eb1be867613df8a6c999b332David Lawrence 'auto-dnssec maintain;' allows that too, plus it
96ab25294b028270eb1be867613df8a6c999b332David Lawrence also keeps the zone's DNSSEC keys up to date
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson according to their timing metadata. [RT #19943]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2711. [port] win32: Add the bin/pkcs11 tools into the full
96ab25294b028270eb1be867613df8a6c999b332David Lawrence build. [RT #20372]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson zone option cause a zone to be signed with only KSKs
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson signing the DNSKEY RRset, not ZSKs. This reduces
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson the size of a DNSKEY answer. [RT #20340]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2709. [func] Added some data fields, currently unused, to the
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington private key file format, to allow implementation
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington of explicit key rollover in a future release
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington without impairing backward or forward compatibility.
845e0b5f968d4ac069ac8b802730467df8cd7136Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
845e0b5f968d4ac069ac8b802730467df8cd7136Mark Andrews update are now fully supported and no longer require
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence defines to enable. We now no longer overload the
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson NSEC3PARAM flag field, nor the NSEC OPT bit at the
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson apex. Secure to insecure changes are controlled by
b6747cf19dea764e5acaa164f23b70d54348d64cMark Andrews by the named.conf option 'secure-to-insecure'.
1318ddb52d8a8a22eae47f7d82137e74b9beacf1Mark Andrews Warning: If you had previously enabled support by
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence adding defines at compile time to BIND 9.6 you should
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence ensure that all changes that are in progress have
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence completed prior to upgrading to BIND 9.7. BIND 9.7
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence is not backwards compatible.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2707. [func] dnssec-keyfromlabel no longer require engine name
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence to be specified in the label if there is a default
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence engine or the -E option has been used. Also, it
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence now uses default algorithms as dnssec-keygen does
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson2706. [bug] Loading a zone with a very large NSEC3 salt could
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson trigger an assert. [RT #20368]
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington2705. [placeholder]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2704. [bug] Serial of dynamic and stub zones could be inconsistent
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson with their SOA serial. [RT #19387]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson2703. [func] Introduce an OpenSSL "engine" argument with -E
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson for all binaries which can take benefit of
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson crypto hardware. [RT #20230]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2701. [doc] Correction to ARM: hmac-md5 is no longer the only
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson supported TSIG key algorithm. [RT #18046]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2700. [doc] The match-mapped-addresses option is discouraged.
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2698. [placeholder]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews S_IFREG are defined after including <isc/stat.h>.
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2696. [bug] named failed to successfully process some valid
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson acl constructs. [RT #20308]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2695. [func] DHCP/DDNS - update fdwatch code for use by
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson DHCP. Modify the api to isc_sockfdwatch_t (the
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson callback funciton for isc_socket_fdwatchcreate)
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson to include information about the direction (read
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson or write) and add isc_socket_fdwatchpoke.
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2693. [port] Add some noreturn attributes. [RT #20257]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2692. [port] win32: 32/64 bit cleanups. [RT #20335]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence chain when re-signing a previously-signed zone.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence Use -u to modify NSEC3 parameters or switch
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence between NSEC and NSEC3. [RT #20304]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2689. [bug] Correctly handle snprintf result. [RT #20306]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence to decide to fetch the destination address. [RT #20305]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence Also, added warnings when revoking a ZSK, as this is
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson not defined by protocol (but is legal). [RT #19943]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2686. [bug] dnssec-signzone should clean the old NSEC chain when
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson signing with NSEC3 and vice versa. [RT #20301]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2684. [cleanup] dig: formalize +ad and +cd as synonyms for
8775909be9fc67180fc480115716f88174e74471James Brister +adflag and +cdflag. [RT #19305]
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the NSEC3 parameters used to sign the zone change.
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2682. [bug] "configure --enable-symtable=all" failed to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence build. [RT #20282]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence decoded. [RT #20269]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2679. [func] dig -k can now accept TSIG keys in named.conf
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence format. [RT #20031]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2678. [func] Treat DS queries as if "minimal-response yes;"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was set. [RT #20258]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2677. [func] Changes to key metadata behavior:
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - Keys without "publish" or "active" dates set will
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence no longer be used for smart signing. However,
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews those dates will be set to "now" by default when
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews a key is created; to generate a key but not use
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence it yet, use dnssec-keygen -G.
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson - New "inactive" date (dnssec-keygen/settime -I)
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson sets the time when a key is no longer used for
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson signing but is still published.
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson - The "unpublished" date (-U) is deprecated in
99524919752c9b9abe1814007732b86592011cc1Brian Wellington favor of "deleted" (-D).
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2676. [bug] --with-export-installdir should have been
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson --with-export-includedir. [RT #20252]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2675. [bug] dnssec-signzone could crash if the key directory
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson did not exist. [RT #20232]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson --- 9.7.0a3 released ---
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2674. [bug] "dnssec-lookaside auto;" crashed if named was built
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington without openssl. [RT #20231]
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington2673. [bug] The managed-keys.bind zone file could fail to
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews load due to a spurious result from sync_keyzone()
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2672. [bug] Don't enable searching in 'host' when doing reverse
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson lookups. [RT #20218]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2671. [bug] Add support for PKCS#11 providers not returning
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson the public exponent in RSA private keys
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson (OpenCryptoki for instance) in
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson dnssec-keyfromlabel. [RT #19294]
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer2670. [bug] Unexpected connect failures failed to log enough
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson information to be useful. [RT #20205]
8ae26e9f87560f9d2e495328d573c25af81c49beMark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2668. [func] Several improvements to dnssec-* tools, including:
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews - dnssec-keygen and dnssec-settime can now set key
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews metadata fields 0 (to unset a value, use "none")
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews - dnssec-revoke sets the revocation date in
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews addition to the revoke bit
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister - dnssec-settime can now print individual metadata
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister fields instead of always printing all of them,
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister and can print them in unix epoch time format for
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister use by scripts
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2667. [func] Add support for logging stack backtrace on assertion
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson failure (not available for all platforms). [RT #19780]
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews (API change from 9.7.0a2). [RT #20196]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington2665. [func] Clarify syntax for managed-keys {} statement, add
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington ARM documentation about RFC 5011 support. [RT #19874]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2664. [bug] create_keydata() and minimal_update() in zone.c
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister didn't properly check return values for some
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister functions. [RT #19956]
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister2663. [func] win32: allow named to run as a service using
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister "NT AUTHORITY\LocalService" as the account. [RT #19977]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence returned a misleading error code when lwresd was
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson down. [RT #20028]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson creating lwres context. [RT #20029]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2660. [func] Add a new set of DNS libraries for non-BIND9
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson applications. See README.libdns. [RT #19369]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2659. [doc] Clarify dnssec-keygen doc: key name must match zone
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews name for DNSSEC keys. [RT #19938]
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson2658. [bug] dnssec-settime and dnssec-revoke didn't process
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson key file paths correctly. [RT #20078]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2657. [cleanup] Lower "journal file <path> does not exist, creating it"
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister log level to debug 1. [RT #20058]
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence2656. [func] win32: add a "tools only" check box to the installer
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister which causes it to only install dig, host, nslookup,
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister nsupdate and relevant DLLs. [RT #19998]
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson2655. [doc] Document that key-directory does not affect
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister bind.keys, rndc.key or session.key. [RT #20155]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2654. [bug] Improve error reporting on duplicated names for
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister deny-answer-xxx. [RT #20164]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2653. [bug] Treat ENGINE_load_private_key() failures as key
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister not found rather than out of memory. [RT #18033]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2652. [func] Provide more detail about what record is being
47c196192afa37b2dea728e52579779f190bf07fJames Brister deleted. [RT #20061]
29196ffb72a1337c72ffd6d52f1c8348f84c644eJames Brister2651. [bug] Dates could print incorrectly in K*.key files on
47c196192afa37b2dea728e52579779f190bf07fJames Brister 64-bit systems. [RT #20076]
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington2650. [bug] Assertion failure in dnssec-signzone when trying
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson to read keyset-* files. [RT #20075]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2649. [bug] Set the domain for forward only zones. [RT #19944]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington2647. [bug] Remove unnecessary SOA updates when a new KSK is
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister added. [RT #19913]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister which default to 64 bits. [RT #19927]
0380c44d0238a88e167526954d630d071739ed28Mark Andrews --- 9.7.0a2 released ---
0380c44d0238a88e167526954d630d071739ed28Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews named was unable to write the PID file and would
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews fail on startup. [RT #20001]
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence2643. [bug] Stub zones interacted badly with NSEC3 support.
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2642. [bug] nsupdate could dump core on solaris when reading
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence improperly formatted key files. [RT #20015]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2641. [bug] Fixed an error in parsing update-policy syntax,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence added a regression test to check it. [RT #20007]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2640. [security] A specially crafted update packet will cause named
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence to exit. [RT #20000]
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson2638. [bug] Install arpaname. [RT #19957]
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2636. [func] Simplify zone signing and key maintenance with the
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence dnssec-* tools. Major changes:
d5399cc351a549db957185993b320a3bffa40e41James Brister - all dnssec-* tools now take a -K option to
d5399cc351a549db957185993b320a3bffa40e41James Brister specify a directory in which key files will be
d5399cc351a549db957185993b320a3bffa40e41James Brister - DNSSEC can now store metadata indicating when
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister they are scheduled to be published, activated,
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister revoked or removed; these values can be set by
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister dnssec-keygen or overwritten by the new
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews dnssec-settime command
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews - dnssec-signzone -S (for "smart") option reads key
69b691c9624f31e59b8d128ada902a82127c15a3James Brister metadata and uses it to determine automatically
69b691c9624f31e59b8d128ada902a82127c15a3James Brister which keys to publish to the zone, use for
69b691c9624f31e59b8d128ada902a82127c15a3James Brister signing, revoke, or remove from the zone
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2634. [port] win32: Add support for libxml2, enable
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister statschannel. [RT #19773]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2633. [bug] Handle 15 bit rand() functions. [RT #19783]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2632. [func] util/kit.sh: warn if documentation appears to be out of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence date. [RT #19922]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence2630. [func] Improved syntax for DDNS autoconfiguration: use
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence "update-policy local;" to switch on local DDNS in a
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson zone. (The "ddns-autoconf" option has been removed.)
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2629. [port] Check for seteuid()/setegid(), use setresuid()/
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence setresgid() if not present. [RT #19932]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2628. [port] linux: Allow /var/run/named/named.pid to be opened
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence at startup with reduced capabilities in operation.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2627. [bug] Named aborted if the same key was included in
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence trusted-keys more than once. [RT #19918]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2626. [bug] Multiple trusted-keys could trigger an assertion
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failure. [RT #19914]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson2624. [func] 'named-checkconf -p' will print out the parsed
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson configuration. [RT #18871]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2621. [doc] Made copyright boilterplate consistent. [RT #19833]
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2620. [bug] Delay thawing the zone until the reload of it has
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington completed successfully. [RT #19750]
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington2619. [func] Add support for RFC 5011, automatic trust anchor
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington maintenance. The new "managed-keys" statement can
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington be used in place of "trusted-keys" for zones which
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson support this protocol. (Note: this syntax is
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson expected to change prior to 9.7.0 final.) [RT #19248]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2618. [bug] The sdb and sdlz db_interator_seek() methods could
b092aef75539b462d24b460b67ac49edb79aaff8Andreas Gustafsson loop infinitely. [RT #19847]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2617. [bug] ifconfig.sh failed to emit an error message when
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson run from the wrong location. [RT #19375]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2616. [bug] 'host' used the nameservers from resolv.conf even
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when a explicit nameserver was specified. [RT #19852]
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson2615. [bug] "__attribute__((unused))" was in the wrong place
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence for ia64 gcc builds. [RT #19854]
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington2614. [port] win32: 'named -v' should automatically be executed
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence in the foreground. [RT #19844]
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington2613. [placeholder]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson --- 9.7.0a1 released ---
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2612. [func] Add default values for the arguments to
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson dnssec-keygen. Without arguments, it will now
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson generate a 1024-bit RSASHA1 zone-signing key,
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson or with the -f KSK option, a 2048-bit RSASHA1
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson key-signing key. [RT #19300]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2611. [func] Add -l option to dnssec-dsfromkey to generate
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence DLV records instead of DS records. [RT #19300]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2610. [port] sunos: Change #2363 was not complete. [RT #19796]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2609. [func] Simplify the configuration of dynamic zones:
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington - add ddns-confgen command to generate
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington configuration text for named.conf
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - add zone option "ddns-autoconf yes;", which
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence causes named to generate a TSIG session key
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and allow updates to the zone using that key
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - add '-l' (localhost) option to nsupdate, which
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence causes nsupdate to connect to a locally-running
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence named process using the session key generated
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2608. [func] Perform post signing verification checks in
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence dnssec-signzone. These can be disabled with -P.
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington The post sign verification test ensures that for each
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington algorithm in use there is at least one non revoked
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence self signed KSK key. That all revoked KSK keys are
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence self signed. That all records in the zone are signed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence by the algorithm. [RT #19653]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2607. [bug] named could incorrectly delete NSEC3 records for
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson empty nodes when processing a update request.
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson2606. [bug] "delegation-only" was not being accepted in
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson delegation-only type zones. [RT #19717]
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2605. [bug] Accept DS responses from delegation only zones.
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2604. [func] Add support for DNS rebinding attack prevention through
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson new options, deny-answer-addresses and
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson deny-answer-aliases. Based on contributed code from
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson JD Nurmi, Google. [RT #18192]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2603. [port] win32: handle .exe extension of named-checkzone and
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff named-comilezone argv[0] names under windows.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2602. [port] win32: fix debugging command line build of libisccfg.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2601. [doc] Mention file creation mode mask in the
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff named manual page.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2600. [doc] ARM: miscellaneous reformatting for different
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson page widths. [RT #19574]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2599. [bug] Address rapid memory growth when validation fails.
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2598. [func] Reserve the -F flag. [RT #19657]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2597. [bug] Handle a validation failure with a insecure delegation
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence from a NSEC3 signed master/slave zone. [RT #19464]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister long, leading to inefficient memory usage or rejecting
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister newer cache entries in the worst case. [RT #19563]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence2594. [func] Have rndc warn if using its default configuration
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence file when the key file also exists. [RT #19424]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2591. [bug] named could die when processing a update in
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson removed_orphaned_ds(). [RT #19507]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2590. [func] Report zone/class of "update with no effect".
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2588. [bug] SO_REUSEADDR could be set unconditionally after failure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of bind(2) call. This should be rare and mostly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence harmless, but may cause interference with other
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence processes that happen to use the same port. [RT #19642]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2587. [func] Improve logging by reporting serial numbers for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when zone serial has gone backwards or unchanged.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence or SDB. [RT #19577]
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson2585. [bug] Uninitialized socket name could be referenced via a
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson statistics channel, triggering an assertion failure in
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson XML rendering. [RT #19427]
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews2583. [port] netbsd: provide a control to not add the compile
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews date to the version string, -DNO_VERSION_DATE.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2582. [bug] Don't emit warning log message when we attempt to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence remove non-existent journal. [RT #19516]
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Requires MySQL 5.0.19 or later. [RT #19084]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2580. [bug] UpdateRej statistics counter could be incremented twice
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence for one rejection. [RT #19476]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2579. [bug] DNSSEC lookaside validation failed to handle unknown
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence algorithms. [RT #19479]
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington2578. [bug] Changed default sig-signing-type to 65534, because
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington 65535 turns out to be reserved. [RT #19477]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2577. [doc] Clarified some statistics counters. [RT #19454]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2576. [bug] NSEC record were not being correctly signed when
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister a zone transitions from insecure to secure.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister Handle such incorrectly signed zones. [RT #19114]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2575. [func] New functions dns_name_fromstring() and
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister dns_name_tostring(), to simplify conversion
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister of a string to a dns_name structure and vice
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister versa. [RT #19451]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2574. [doc] Document nsupdate -g and -o. [RT #19351]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2573. [bug] Replacing a non-CNAME record with a CNAME record in a
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister single transaction in a signed zone failed. [RT #19397]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2572. [func] Simplify DLV configuration, with a new option
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister "dnssec-lookaside auto;" This is the equivalent
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister of "dnssec-lookaside . trust-anchor dlv.isc.org;"
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister plus setting a trusted-key for dlv.isc.org.
c0b06c8275c5ea3cde8cc67f3a6f9cab1bd55d65James Brister Note: The trusted key is hard-coded into named,
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister but is also stored in (and can be overridden
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence by) $sysconfdir/bind.keys. As the ISC DLV key
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson rolls over it can be kept up to date by replacing
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson the bind.keys file with a key downloaded from
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence https://www.isc.org/solutions/dlv. [RT #18685]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson2571. [func] Add a new tool "arpaname" which translates IP addresses
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson2570. [func] Log the destination address the query was sent to.
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson2569. [func] Move journalprint, nsec3hash, and genrandom
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson "make install" will put them in $sbindir. [RT #19301]
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson2568. [bug] Report when the write to indicate a otherwise
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson successful start fails. [RT #19360]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews write_public_key() could miss write errors.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews dnssec-dsfromkey could miss write errors.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews response arrives from a zone thought to be secure:
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews "insecurity proof failed" instead of "not
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews insecure". [RT #19400]
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2565. [func] Add support for HIP record. Includes new functions
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson dns_rdata_hip_first(), dns_rdata_hip_next()
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson and dns_rdata_hip_current(). [RT #19384]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews to exit. [RT #19359]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson and some new content.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence2559. [bug] dnssec-dsfromkey could compute bad DS records when
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence reading from a K* files. [RT #19357]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2558. [func] Set the ownership of missing directories created
f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence for pid-file if -u has been specified on the command
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson line. [RT #19328]
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence2557. [cleanup] PCI compliance:
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister * new libisc log module file
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister * isc_dir_chroot() now also changes the working
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews directory to "/".
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews * additional INSISTs
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews * additional logging when files can't be removed.
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister error checks in the correct order resulting in the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence wrong error code sometimes being returned. [RT #19249]
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2555. [func] dig: when emitting a hex dump also display the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence corresponding characters. [RT #19258]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2554. [bug] Validation of uppercase queries from NSEC3 zones could
e411a986b94276c28e6a971f9c3b61d45c635456James Brister fail. [RT #19297]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honoured.
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson2551. [bug] Potential Reference leak on return. [RT #19341]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence2549. [port] linux: define NR_OPEN if not currently defined.
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2547. [bug] openssl_link.c:mem_realloc() could reference an
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence out-of-range area of the source buffer. New public
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson function isc_mem_reallocate() was introduced to address
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson this bug. [RT #19313]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2546. [func] Add --enable-openssl-hash configure flag to use
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister OpenSSL (in place of internal routine) for hash
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister functions (MD5, SHA[12] and HMAC). [RT #18815]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2545. [doc] ARM: Legal hostname checking (check-names) is
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister for SRV RDATA too. [RT #19304]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2542. [doc] Update the description of dig +adflag. [RT #19290]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2541. [bug] Conditionally update dispatch manager statistics.
36357e4304862fb47e9fae03c704cb6720310c45James Brister2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2539. [security] Update the interaction between recursion, allow-query,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence allow-query-cache and allow-recursion. [RT #19198]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2538. [bug] cache/ADB memory could grow over max-cache-size,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence especially with threads and smaller max-cache-size
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence values. [RT #19240]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2537. [func] Added more statistics counters including those on socket
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence I/O events and query RTT histograms. [RT #18802]
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence2536. [cleanup] Silence some warnings when -Werror=format-security is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence specified. [RT #19083]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2534. [func] Check NAPTR records regular expressions and
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson replacement strings to ensure they are syntactically
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence valid and consistant. [RT #18168]
b99d080717fdd741961d736581270d37bad8bec0David Lawrence2533. [doc] ARM: document @ (at-sign). [RT #17144]
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson2532. [bug] dig: check the question section of the response to
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson see if it matches the asked question. [RT #18495]
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence2531. [bug] Change #2207 was incomplete. [RT #19098]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2530. [bug] named failed to reject insecure to secure transitions
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence via UPDATE. [RT #19101]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2529. [cleanup] Upgrade libtool to silence complaints from recent
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence version of autoconf. [RT #18657]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2528. [cleanup] Silence spurious configure warning about
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --datarootdir [RT #19096]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2527. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2526. [func] New named option "attach-cache" that allows multiple
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence views to share a single cache to save memory and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence improve lookup efficiency. Based on contributed code
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence from Barclay Osborn, Google. [RT #18905]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2525. [func] New logging category "query-errors" to provide detailed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence internal information about query failures, especially
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence about server failures. [RT #19027]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2523. [bug] Random type rdata freed by dns_nsec_typepresent().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2521. [bug] Improve epoll cross compilation support. [RT #19047]
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence2520. [bug] Update xml statistics version number to 2.0 as change
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence #2388 made the schema incompatible to the previous
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence version. [RT #19080]
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence2519. [bug] dig/host with -4 or -6 didn't work if more than two
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence nameserver addresses of the excluded address family
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson preceded in resolv.conf. [RT #19081]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2518. [func] Add support for the new CERT types from RFC 4398.
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2517. [bug] dig +trace with -4 or -6 failed when it chose a
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley nameserver address of the excluded address type.
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2516. [bug] glue sort for responses was performed even when not
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley needed. [RT #19039]
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence a nameserver of the excluded address family.
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington2513. [bug] Fix windows cli build. [RT #19062]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2512. [func] Print a summary of the cached records which make up
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence the negative response. [RT #18885]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence2509. [bug] Specifying a fixed query source port was broken.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2508. [placeholder]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews2507. [func] Log the recursion quota values when killing the
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews oldest query or refusing to recurse due to quota.
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2506. [port] solaris: Check at configure time if
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff hack_shutup_pthreadonceinit is needed. [RT #19037]
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews atomic operation support. [RT #19031]
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews2504. [bug] Address race condition in the socket code. [RT #18899]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2503. [port] linux: improve compatibility with Linux Standard
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Base. [RT #18793]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2502. [cleanup] isc_radix: Improve compliance with coding style,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence document function in <isc/radix.h>. [RT #18534]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2501. [func] $GENERATE now supports all rdata types. Multi-field
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence rdata types need to be quoted. See the ARM for
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence details. [RT #18368]
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence function. [RT #18582]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --- 9.6.0rc1 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2498. [bug] Removed a bogus function argument used with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ISC_SOCKET_USE_POLLWATCH: it could cause compiler
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence warning or crash named with the debug 1 level
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of logging. [RT #18917]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2496. [bug] Add sanity length checks to NSID option. [RT #18813]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2495. [bug] Tighten RRSIG checks. [RT #18795]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence installed. [RT #18826]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2493. [bug] The linux capabilities code was not correctly cleaning
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence up after itself. [RT #18767]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2492. [func] Rndc status now reports the number of cpus discovered
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and the number of worker threads when running
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence multi-threaded. [RT #18273]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2491. [func] Attempt to re-use a local port if we are already using
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the port. [RT #18548]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is cleared when IPV6_V6ONLY is set. [RT #18785]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2489. [port] solaris: Workaround Solaris's kernel bug about
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Define ISC_SOCKET_USE_POLLWATCH at build time to enable
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence this workaround. [RT #18870]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence from keyset and .key files. [RT #18694]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2487. [bug] Give TCP connections longer to complete. [RT #18675]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2486. [func] The default locations for named.pid and lwresd.pid
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence This allows the owner of the containing directory
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to be set, for "named -u" support, and allows there
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to be a permanent symbolic link in the path, for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "named -t" support. [RT #18306]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2485. [bug] Change update's the handling of obscured RRSIG
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence records. Not all orphaned DS records were being
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence removed. [RT #18828]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2484. [bug] It was possible to trigger a REQUIRE failure when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence adding NSEC3 proofs to the response in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence query_addwildcardproof(). [RT #18828]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2483. [port] win32: chroot() is not supported. [RT #18805]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2482. [port] libxml2: support versions 2.7.* in addition
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to 2.6.*. [RT #18806]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --- 9.6.0b1 released ---
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson collisions. [RT #18812]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2480. [bug] named could fail to emit all the required NSEC3
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence records. [RT #18812]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence2478. [bug] 'addresses' could be used uninitialized in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence configure_forward(). [RT #18800]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2477. [bug] dig: the global option to print the command line is
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence +cmd not print_cmd. Update the output to reflect
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence this. [RT #17008]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2476. [doc] ARM: improve documentation for max-journal-size and
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence ixfr-from-differences. [RT #15909] [RT #18541]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2475. [bug] LRU cache cleanup under overmem condition could purge
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence particular entries more aggressively. [RT #17628]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2474. [bug] ACL structures could be allocated with insufficient
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence space, causing an array overrun. [RT #18765]
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson2473. [port] linux: raise the limit on open files to the possible
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson maximum value before spawning threads; 'files'
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence specified in named.conf doesn't seem to work with
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence threads as expected. [RT #18784]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2472. [port] linux: check the number of available cpu's before
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence calling chroot as it depends on "/proc". [RT #16923]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2471. [bug] named-checkzone was not reporting missing mandatory
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence glue when sibling checks were disabled. [RT #18768]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2470. [bug] Elements of the isc_radix_node_t could be incorrectly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence overwritten. [RT# 18719]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2469. [port] solaris: Work around Solaris's select() limitations.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2468. [bug] Resolver could try unreachable servers multiple times.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2465. [bug] Adb's handling of lame addresses was different
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley for IPv4 and IPv6. [RT #18738]
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence2464. [port] linux: check that a capability is present before
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence trying to set it. [RT #18135]
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence API and glibc hides parts of the IPv6 Advanced Socket
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence API as a result. This is stupid as it breaks how the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence two halves (Basic and Advanced) of the IPv6 Socket API
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence were designed to be used but we have to live with it.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence API. [RT #18388]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2462. [doc] Document -m (enable memory usage debugging)
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence option for dig. [RT #18757]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2461. [port] sunos: Change #2363 was not complete. [RT #17513]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --- 9.6.0a1 released ---
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
77f372eed39827f5efef476602de7c0505f99b91David Lawrence2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2458. [doc] ARM: update and correction for max-cache-size.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2457. [tuning] max-cache-size is reverted to 0, the previous
8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence default. It should be safe because expired cache
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence entries are also purged. [RT #18684]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence address, regardless of family. They now correctly
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence distinguish IPv4 from IPv6. [RT #18559]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2455. [bug] Stop metadata being transferred via axfr/ixfr.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2453. [bug] Remove NULL pointer dereference in dns_journal_print().
e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington2452. [func] Improve bin/test/journalprint. [RT #18316]
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff2451. [port] solaris: handle runtime linking better. [RT #18356]
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff2450. [doc] Fix lwresd docbook problem for manual page.
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington2449. [placeholder]
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson2448. [func] Add NSEC3 support. [RT #15452]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2447. [cleanup] libbind has been split out as a separate product.
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2446. [func] Add a new log message about build options on startup.
d111a46c88adda33a93839f4934e127b6147d87dBob Halley A new command-line option '-V' for named is also
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence provided to show this information. [RT# 18645]
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence2445. [doc] ARM out-of-date on empty reverse zones (list includes
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews RFC1918 address, but these are not yet compiled in).
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff (clear DF) for UDP responses and requests.
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff2443. [bug] win32: UDP connect() would not generate an event,
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff and so connected UDP sockets would never clean up.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington Fix this by doing an immediate WSAConnect() rather
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley than an io completion port type for UDP.
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley2442. [bug] A lock could be destroyed twice. [RT# 18626]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2441. [bug] isc_radix_insert() could copy radix tree nodes
53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington incompletely. [RT #18573]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2440. [bug] named-checkconf used an incorrect test to determine
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington if an ACL was set to none.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2438. [bug] Timeouts could be logged incorrectly under win32.
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2437. [bug] Sockets could be closed too early, leading to
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson inconsistent states in the socket module. [RT #18298]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2435. [bug] Fixed an ACL memory leak affecting win32.
4716e94840921878b26e493576f84afe4fe08752Mark Andrews2434. [bug] Fixed a minor error-reporting bug in
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence2433. [tuning] Set initial timeout to 800ms.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2432. [bug] More Windows socket handling improvements. Stop
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley using I/O events and use IO Completion Ports
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley throughout. Rewrite the receive path logic to make
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley it easier to support multiple simultaneous
3886e748a4086b813e3453232a742903762fedadBob Halley requesters in the future. Add stricter consistency
3886e748a4086b813e3453232a742903762fedadBob Halley checking as a compile-time option (define
3886e748a4086b813e3453232a742903762fedadBob Halley ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
3886e748a4086b813e3453232a742903762fedadBob Halley2431. [bug] Acl processing could leak memory. [RT #18323]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2430. [bug] win32: isc_interval_set() could round down to
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley zero if the input was less than NS_INTERVAL
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley nanoseconds. Round up instead. [RT #18549]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2429. [doc] nsupdate should be in section 1 of the man pages.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2428. [bug] dns_iptable_merge() mishandled merges of negative
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington tables. [RT #18409]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington was set. [RT #18528]
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson2426. [bug] libbind: inet_net_pton() can sometimes return the
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson wrong value if excessively large net masks are
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley supplied. [RT #18512]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2425. [bug] named didn't detect unavailable query source addresses
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley at load time. [RT #18536]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2424. [port] configure now probes for a working epoll
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson implementation. Allow the use of kqueue,
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson epoll and /dev/poll to be selected at compile
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson time. [RT #18277]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson2423. [security] Randomize server selection on queries, so as to
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson make forgery a little more difficult. Instead of
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington always preferring the server with the lowest RTT,
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington pick a server with RTT within the same 128
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence millisecond band. [RT #18441]
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson2422. [bug] Handle the special return value of a empty node as
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson if it was a NXRRSET in the validator. [RT #18447]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2421. [func] Add new command line option '-S' for named to specify
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the max number of sockets. [RT #18493]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Use caution: this option may not work for some
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence operating systems without rebuilding named.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2420. [bug] Windows socket handling cleanup. Let the io
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson completion event send out canceled read/write
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence done events, which keeps us from writing to memory
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence we no longer have ownership of. Add debugging
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence socket_log() function. Rework TCP socket handling
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to not leak sockets.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence should not be used for isc_sockettype_fdwatch sockets.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2417. [bug] Connecting UDP sockets for outgoing queries could
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister unexpectedly fail with an 'address already in use'
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister error. [RT #18411]
6253eaa03c49aac035bdd8b1d9ec4853b45e94a0Andreas Gustafsson2416. [func] Log file descriptors that cause exceeding the
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister internal maximum. [RT #18460]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2415. [bug] 'rndc dumpdb' could trigger various assertion failures
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence in rbtdb.c. [RT #18455]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2414. [bug] A masterdump context held the database lock too long,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence causing various troubles such as dead lock and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence recursive lock acquisition. [RT #18311, #18456]
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister2412. [bug] win32: address a resource leak. [RT #18374]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson at compilation time. [RT #18433]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson Note: with changes #2469 and #2421 above, there is no
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2410. [bug] Correctly delete m_versionInfo. [RT #18432]
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington2409. [bug] Only log that we disabled EDNS processing if we were
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence subsequently successful. [RT #18029]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2408. [bug] A duplicate TCP dispatch event could be sent, which
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence could then trigger an assertion failure in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence resquery_response(). [RT #18275]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2406. [placeholder]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2405. [cleanup] The default value for dnssec-validation was changed to
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley "yes" in 9.5.0-P1 and all subsequent releases; this
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley was inadvertently omitted from CHANGES at the time.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2404. [port] hpux: files unlimited support.
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2403. [bug] TSIG context leak. [RT #18341]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2402. [port] Support Solaris 2.11 and over. [RT #18362]
be768c2e952c34438025999125f984995a2c675fBob Halley2401. [bug] Expect to get E[MN]FILE errno internal_accept()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence (from accept() or fcntl() system calls). [RT #18358]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2399. [placeholder]
be768c2e952c34438025999125f984995a2c675fBob Halley2398. [bug] Improve file descriptor management. New,
be768c2e952c34438025999125f984995a2c675fBob Halley temporary, named.conf option reserved-sockets,
f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister default 512. [RT #18344]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2397. [bug] gssapi_functions had too many elements. [RT #18355]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2396. [bug] Don't set SO_REUSEADDR for randomized ports.
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley2395. [port] Avoid warning and no effect from "files unlimited"
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley on Linux when running as root. [RT #18335]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2394. [bug] Default configuration options set the limit for
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister open files to 'unlimited' as described in the
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister documentation. [RT #18331]
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson2393. [bug] nested acls containing keys could trigger an
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson assertion in acl.c. [RT #18166]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2392. [bug] remove 'grep -q' from acl test script, some platforms
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence don't support it. [RT #18253]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2391. [port] hpux: cover additional recvmsg() error codes.
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2390. [bug] dispatch.c could make a false warning on 'odd socket'.
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2389. [bug] Move the "working directory writable" check to after
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley the ns_os_changeuser() call. [RT #18326]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2388. [bug] Avoid using tables for layout purposes in
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley statistics XSL [RT #18159].
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington2387. [bug] Silence compiler warnings in lib/isc/radix.c.
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington [RT #18147] [RT #18258]
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington2386. [func] Add warning about too small 'open files' limit.
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2385. [bug] A condition variable in socket.c could leak in
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley rare error handling [RT #17968].
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2384. [security] Fully randomize UDP query ports to improve
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley forgery resilience. [RT #17949, #18098]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2383. [bug] named could double queries when they resulted in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence SERVFAIL due to overkilling EDNS0 failure detection.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which