CHANGES revision 2e22f903da490cefb98e0c8b14ac66b466cfe1d9
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews in use after free. [RT #31908]
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington3424. [func] dnssec-dsfromkey now emits the hash without spaces.
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington3423. [bug] "rndc signing -nsec3param" didn't accept the full
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington range of possible values. Address portability issues.
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3422. [bug] Added a clear error message for when the SOA does not
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley match the referral. [RT #31281]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3421. [bug] Named loops when re-signing if all keys are offline.
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3420. [bug] Address VPATH compilation issues. [RT #31879]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence3419. [bug] Memory leak on validation cancel. [RT #31869]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson3418. [func] New XML schema (version 3.0) for the statistics channel
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson adds query type statistics at the zone level, and
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson flattens the XML tree and uses compressed format to
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson optimize parsing. Includes new XSL that permits
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence charting via the Google Charts API on browsers that
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence support javascript in XSL. The old XML schema has been
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence deprecated. [RT #30023]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence3417. [placeholder]
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews dispatches per interface. [RT #31743]
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews3415. [bug] named could die with a REQUIRE failure if a valdation
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews was canceled. [RT #31804]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews3414. [bug] Address locking issues found by Coverity. [RT #31626]
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson3413. [func] Record the number of DNS64 AAAA RRsets that have been
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews synthesized. [RT #27636]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson3412. [bug] Copy timeval structure from control message data.
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington to UDP. [RT #31690]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington3410. [bug] Addressed Coverity warnings. [RT #31626]
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence from X.509 certificates, for use with DANE
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence (DNS-based Authentication of Named Entities).
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence3408. [bug] Some DNSSEC-related options (update-check-ksk,
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence are now legal in slave zones as long as
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence inline-signing is in use. [RT #31078]
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence3407. [placeholder]
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington3406. [bug] mem.c: Fix compilation errors when building with
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence3405. [bug] Handle time going backwards in acache. [RT #31253]
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence3404. [bug] dnssec-signzone: When re-signing a zone, remove
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence RRSIG and NSEC records from nodes that used to be
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson in-zone but are now below a zone cut. [RT #31556]
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson3402. [test] The IPv6 interface numbers used for system
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson tests were incorrect on some platforms. [RT #25085]
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
24c5978e0b32137305c2bef2c6e116ee7680a610Andreas Gustafsson3400. [cleanup] "named -V" can now report a source ID string, defined
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson in the "srcid" file in the build tree and normally set
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington to the most recent git hash. [RT #31494]
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington3399. [port] netbsd: rename 'bool' parameter to avoid namespace
9be0c3d823200bed1286cff6bddf2a8c639f5287Brian Wellington clash. [RT #31515]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence3398. [bug] SOA parameters were not being updated with inline
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence signed zones if the zone was modified while the
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence server was offline. [RT #29272]
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington3396. [bug] OPT records were incorrectly removed from signed,
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington truncated responses. [RT #31439]
732f883c12f171186d7f3331ebdf5d16044b14b0Brian Wellington3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson3394. [bug] Adjust 'successfully validated after lower casing
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson signer' log level and category. [RT #31414]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson3393. [bug] 'host -C' could core dump if REFUSED was received.
f53848e17123569387b279578f0100dca5407da5Mark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington3390. [bug] Silence clang compiler warnings. [RT #30417]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson3388. [bug] Fixed several Coverity warnings. [RT #30996]
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington3387. [func] DS digest can be disabled at runtime with
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington disable-ds-digests. [RT #21581]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson3386. [bug] Address locking violation when generating new NSEC /
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson NSEC3 chains. [RT #31224]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson3385. [bug] named-checkconf didn't detect missing master lists
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson in also-notify clauses. [RT #30810]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson3384. [bug] Improved logging of crypto errors. [RT #30963]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson3383. [security] A certain combination of records in the RBT could
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson cause named to hang while populating the additional
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson section of a response. [RT #31090]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson3382. [bug] SOA query from slave used use-v6-udp-ports range,
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson if set, regardless of the address family in use.
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence3381. [contrib] Update queryperf to support more RR types.
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence3380. [bug] named could die if a non-existant master list was
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence referenced in a also-notify. [RT #31004]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence3379. [bug] isc_interval_zero and isc_time_epoch should be
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence "const (type)* const". [RT #31069]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3378. [bug] Handle missing 'managed-keys-directory' better.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3377. [bug] Removed spurious newline from NSEC3 multiline
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington output. [RT #31044]
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington3376. [bug] Lack of EDNS support was being recorded without a
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington successful response. [RT #30811]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington3374. [bug] isc_parse_uint32 failed to return a range error on
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington systems with 64 bit longs. [RT #30232]
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington3373. [bug] win32: open raw files in binary mode. [RT #30944]
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson3372. [bug] Silence spurious "deleted from unreachable cache"
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson messages. [RT #30501]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson3371. [bug] AD=1 should behave like DO=1 when deciding whether to
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson add NS RRsets to the additional section or not.
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington3370. [bug] Address use after free while shutting down. [RT #30241]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer3369. [bug] nsupdate terminated unexpectedly in interactive mode
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer if built with readline support. [RT #29550]
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence were not C++ safe.
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington3367. [bug] dns_dnsseckey_create() result was not being checked.
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer3366. [bug] Fixed Read-After-Write dependency violation for IA64
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence atomic operations. [RT #25181]
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence3365. [bug] Removed spurious newlines from log messages in
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington3364. [security] Named could die on specially crafted record.
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington3363. [bug] Need to allow "forward" and "fowarders" options
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington in static-stub zones; this had been overlooked.
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington3362. [bug] Setting some option values to 0 in named.conf
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington could trigger an assertion failure on startup.
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington3361. [bug] "rndc signing -nsec3param" didn't work correctly
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington when salt was set to '-' (no salt). [RT #30099]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington3360. [bug] 'host -w' could die. [RT #18723]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson3359. [bug] An improperly-formed TSIG secret could cause a
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson memory leak. [RT #30607]
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington3358. [placeholder]
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington3357. [port] Add support for libxml2-2.8.x [RT #30440]
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson approaching their expiry, so they don't remain
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington in caches after expiry. [RT #26429]
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington3355. [port] Use more portable awk in verify system test.
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson3354. [func] Improve OpenSSL error logging. [RT #29932]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson3353. [bug] Use a single task for task exclusive operations.
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews3352. [bug] Ensure that learned server attributes timeout of the
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews adb cache. [RT #29856]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson memory debugging flags are set. [RT #30243]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3350. [bug] Memory read overrun in isc___mem_reallocate if
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson ISC_MEM_DEBUGCTX memory debugging flag is set.
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews3349. [bug] Change #3345 was incomplete. [RT #30233]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews3348. [bug] Prevent RRSIG data from being cached if a negative
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews record matching the covering type exists at a higher
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson trust level. Such data already can't be retrieved from
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson the cache since change 3218 -- this prevents it
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson being inserted into the cache as well. [RT #26809]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson3347. [bug] dnssec-settime: Issue a warning when writing a new
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson private key file would cause a change in the
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson permissions of the existing file. [RT #27724]
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson3346. [security] Bad-cache data could be used before it was
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews initialized, causing an assert. [RT #30025]
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews3345. [bug] Addressed race condition when removing the last item
483958540f0034d543f0564beb7877326f15a45bMark Andrews or inserting the first item in an ISC_QUEUE.
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson3344. [func] New "dnssec-checkds" command checks a zone to
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson determine which DS records should be published
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson in the parent zone, or which DLV records should be
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson published in a DLV zone, and queries the DNS to
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews ensure that it exists. (Note: This tool depends
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews on python; it will not be built or installed on
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews systems that do not have a python interpreter.)
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews3343. [placeholder]
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews resulting in excessive cpu usage in some cases.
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson chains. [RT #23673]
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington3340. [func] Added new 'fast' zone file format, which is an image
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington of a zone database that can be loaded directly into
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson memory via mmap(), allowing much faster zone loading.
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson (Note: Because of pointer sizes and other
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson considerations, this file format is platform-dependent;
d7e77a9b59138e8a94d3dfa4e41e1852ad51ac25Andreas Gustafsson 'fast' zone files cannot always be transfered from one
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson server to another.) [RT #25419]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson3339. [func] Allow the maximum supported rsa exponent size to be
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson specified: "max-rsa-exponent-size <value>;" [RT #29228]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley3338. [bug] Address race condition in units tests: asyncload_zone
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley and asyncload_zt. [RT #26100]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley3337. [bug] Change #3294 broke support for the multiple keys
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley in controls. [RT #29694]
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley3336. [func] Maintain statistics for RRsets tagged as "stale".
5bbed85a33186db4e629e98f45ca702ac6b09127Brian Wellington3335. [func] nslookup: return a nonzero exit code when unable
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson to get an answer. [RT #29492]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson3334. [bug] Hold a zone table reference while performing a
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson asyncronous load of a zone. [RT #28326]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson3333. [bug] Setting resolver-query-timeout too low can cause
86a4d80e0624a10b1824d25018246e1ea63f55d2Andreas Gustafsson named to not recover if it loses connectivity.
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson3331. [security] dns_rdataslab_fromrdataset could produce bad
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson rdataslabs. [RT #29644]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson3330. [func] Fix missing signatures on NOERROR results despite
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson RPZ rewriting. Also
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson - add optional "recursive-only yes|no" to the
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence response-policy statement
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence - add optional "max-policy-ttl" to the response-policy
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence statement to limit the false data that
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence "recursive-only no" can introduce into
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence resolvers' caches
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence - add a RPZ performance test to bin/tests/system/rpz
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence when queryperf is available.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence - the encoding of PASSTHRU action to "rpz-passthru".
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence (The old encoding is still accepted.)
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3329. [bug] Handle RRSIG signer-name case consistently: We
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence generate RRSIG records with the signer-name in
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson lower case. We accept them with any case, but if
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington they fail to validate, we try again in lower case.
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington3328. [bug] Fixed inconsistent data checking in dst_parse.c.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson to 'filter-aaaa-on-v4' but applies to IPv6
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington connections. (Use "configure --enable-filter-aaaa"
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington to enable this option.) [RT #27308]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson3326. [func] Added task list statistics: task model, worker
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson threads, quantum, tasks running, tasks ready.
733e928f714c848aa394c2d12b6239bc7780101bMark Andrews3325. [func] Report cache statistics: memory use, number of
733e928f714c848aa394c2d12b6239bc7780101bMark Andrews nodes, number of hash buckets, hit and miss counts.
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson3324. [test] Add better tests for ADB stats [RT #27057]
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington3323. [func] Report the number of buckets the resolver is using.
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson3322. [func] Monitor the number of active TCP and UDP dispatches.
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews3321. [func] Monitor the number of recursive fetches and the
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews number of open sockets, and report these values in
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer the statistics channel. [RT #27054]
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer3320. [func] Added support for monitoring of recursing client
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer count. [RT #27009]
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer3319. [func] Added support for monitoring of ADB entry count and
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer hash size. [RT #27057]
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson3318. [tuning] Reduce the amount of work performed while holding a
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson bucket lock when finshed with a fetch context.
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
4ec1a96d90784f70380bdec66f8a0bd6718a5b71Mark Andrews3316. [tuning] Improved locking performance when recursing.
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews queries; this can improve performance on busy
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington multiprocessor systems by reducing lock contention.
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews3314. [bug] The masters list could be updated while refesh_callback
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews and stub_callback were using it. [RT #26732]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence zone.c:zone_gotwritehandle. [RT #29028]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence3310. [test] Increase table size for mutex profiling. [RT #28809]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence3309. [bug] resolver.c:fctx_finddone() was not threadsafe.
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews3308. [placeholder]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
72fa265baa3d138b43427bcb5c0838740f807045Mark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews3303. [bug] named could die when reloading. [RT #28606]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews keys if the zone name contained character that
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews required special mappings. [RT #28600]
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington3301. [contrib] Update queryperf to build on darwin. Add -R flag
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington for non-recursive queries. [RT #28565]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews but was not compiled in. [RT #28338]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington3298. [bug] Named could dereference a NULL pointer in
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington zmgr_start_xfrin_ifquota if the zone was being removed.
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3297. [bug] Named could die on a malformed master file. [RT #28467]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3296. [bug] Named could die with a INSIST failure in
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson client.c:exit_check. [RT #28346]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington3295. [bug] Adjust isc_time_secondsastimet range check to be more
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington portable. [RT # 26542]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews error. [RT #28265]
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson3292. [func] Log messages in the axfr stream at debug 10.
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3291. [port] Fixed a build error on systems without ENOTSUP.
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3288. [bug] dlz_destroy() function wasn't correctly registered
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley by the DLZ dlopen driver. [RT #28056]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3286. [bug] Managed key maintenance timer could fail to start
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington after 'rndc reconfig'. [RT #26786]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3285. [bug] val-frdataset was incorrectly disassociated in
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley proveunsecure after calling startfinddlvsep.
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3284. [bug] Address race conditions with the handling of
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews failed to load. [RT #27863]
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer of the old NS RRset when replacing it.
8217f91f8d2dd6e94a2bf893284506ea47cd294aAndreas Gustafsson [RT #27792] [RT #27884]
21a170a0cee1ec2df7be0ce334da309f9a892ea9Andreas Gustafsson3281. [bug] SOA refresh queries could be treated as cancelled
588b63e1a86fb707172830e14897da624ed380edMark Andrews despite succeeding over the loopback interface.
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington3280. [bug] Potential double free of a rdataset on out of memory
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington with DNS64. [RT #27762]
452d75b18f9d050086964fa39c326cf388517396Mark Andrews3279. [bug] Hold a internal reference to the zone while performing
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews a asynchronous load. Address potential memory leak
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews if the asynchronous is cancelled. [RT #27750]
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington3278. [bug] Make sure automatic key maintenance is started
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington when "auto-dnssec maintain" is turned on during
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington "rndc reconfig". [RT #26805]
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews safe_open failure. [RT #27696]
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews option had been misspelled as '-clear'. (To avoid
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews future confusion, both options now work.) [RT #27173]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews3274. [placeholder]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews3273. [bug] AAAA responses could be returned in the additional
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer section even when filter-aaaa-on-v4 was in use.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3272. [func] New "rndc zonestatus" command prints information
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer about the specified zone. [RT #21671]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3271. [port] darwin: mksymtbl is not always stable, loop several
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer times before giving up. mksymtbl was using non
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer portable perl to covert 64 bit hex strings. [RT #27653]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer --- 9.9.0rc2 released ---
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3270. [bug] "rndc reload" didn't reuse existing zones correctly
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer when inline-signing was in use. [RT #27650]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson3269. [port] darwin 11 and later now built threaded by default.
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson out the earliest expiry time. [RT #23311]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson3267. [bug] Memory allocation failures could be mis-reported as
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson unexpected error. New ISC_R_UNSET result code.
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington3266. [bug] The maximum number of NSEC3 iterations for a
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews DNSKEY RRset was not being properly computed.
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews inline-signing code. [RT #27557]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews3264. [bug] Automatic regeneration of signatures in an
fce9a9550e8e7a6dff4093d4815ec41fae2d7b55Mark Andrews inline-signing zone could stall when the server
fce9a9550e8e7a6dff4093d4815ec41fae2d7b55Mark Andrews was restarted. [RT #27344]
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson3263. [bug] "rndc sync" did not affect the unsigned side of an
93d5a6b95e88f57b7619d9728f06e3aa5e2f0c65Andreas Gustafsson inline-signing zone. [RT #27337]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3262. [bug] Signed responses were handled incorrectly by RPZ.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3261. [func] RRset ordering now defaults to random. [RT #27174]
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews for some query patterns. [RT #27170/27185]
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington --- 9.9.0rc1 released ---
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington3259. [bug] named-compilezone: Suppress "dump zone to <file>"
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer message when writing to stdout. [RT #27109]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer3258. [test] Add "forcing full sign with unreadable keys" test.
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer3257. [bug] Do not generate a error message when calling fsync()
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer in a pipe or socket. [RT #27109]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson3255. [func] No longer require that a empty zones be explicitly
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson enabled or that a empty zone is disabled for
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson RFC 1918 empty zones to be configured. [RT #27139]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
e412ae947df6de858883564b8676a9650df70d9aMark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
e412ae947df6de858883564b8676a9650df70d9aMark Andrews too long. [RT #26956]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews3252. [bug] When master zones using inline-signing were
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews updated while the server was offline, the source
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews zone could fall out of sync with the signed
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews copy. They can now resynchronize. [RT #26676]
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson memory dns_sdlz_putrr() can allocate per record to
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson prevent run away memory consumption on ISC_R_NOSPACE.
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson3250. [func] 'configure --enable-developer'; turn on various
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson configure options, normally off by default, that
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson we want developers to build and test with. [RT #27103]
0e07026a21dfcaf57dc789e7ece20182dc36029cMark Andrews3249. [bug] Update log message when saving slave zones files for
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson analysis after load failures. [RT #27087]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson3248. [bug] Configure options --enable-fixed-rrset and
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson --enable-exportlib were incompatible with each
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson other. [RT #27087]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson3247. [bug] 'raw' format zones failed to preserve load order
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson breaking 'fixed' sort order. [RT #27087]
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson3246. [bug] Named failed to start with a empty also-notify list.
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson3245. [bug] Don't report a error unchanged serials unless there
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson were other changes when thawing a zone with
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson ixfr-fromdifferences. [RT #26845]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson3244. [func] Added readline support to nslookup and nsupdate.
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson Also simplified nsupdate syntax to make "update"
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson and "prereq" optional. [RT #24659]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington being properly set.
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews3242. [func] Extended the header of raw-format master files to
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews include the serial number of the zone from which
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews they were generated, if different (as in the case
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews of inline-signing zones). This is to be used in
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews inline-signing zones, to track changes between the
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews unsigned and signed versions of the zone, which may
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews have different serial numbers.
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews (Note: raw zonefiles generated by this version of
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews BIND are no longer compatble with prior versions.
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews To generate a backward-compatible raw zonefile
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews using dnssec-signzone or named-compilezone, specify
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews output format "raw=0" instead of simply "raw".)
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson3241. [bug] Address race conditions in the resolver code.
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson3240. [bug] DNSKEY state change events could be missed. [RT #26874]
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer timestamp. [RT #26883]
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington3238. [bug] keyrdata was not being reinitialized in
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson lib/dns/rbtdb.c:iszonesecure. [RT#26913]
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson3237. [bug] dig -6 didn't work with +trace. [RT #26906]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington3236. [bug] Backed out changes #3182 and #3202, related to
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington EDNS(0) fallback behavior. [RT #26416]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer3235. [func] dns_db_diffx, a extended dns_db_diff which returns
cc7420cb3b8eb2c48a00384784701bfee37cc96fAndreas Gustafsson the generated diff and optionally writes it to a
8357e90fba97010a86356a41c8a961d5d602d7d0Michael Sawyer journal. [RT #26386]
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
abb38b673379d6dae7cbb495f814d73a4afe5c8bAndreas Gustafsson3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews3232. [bug] Zero zone->curmaster before return in
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson3231. [bug] named could fail to send a uncompressable zone.
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews axfr with a serial of 0. [RT #26796]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews3229. [bug] Fix local variable to struct var assignment
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews found by CLANG warning.
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson3228. [tuning] Dynamically grow symbol table to improve zone
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson loading performance. [RT #26523]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson3227. [bug] Interim fix to make WKS's use of getprotobyname()
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson and getservbyname() self thread safe. [RT #26232]
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley messages. [RT #26507]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley3223. [bug] 'task_test privilege_drop' generated false positives.
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3222. [cleanup] Replace dns_journal_{get,set}_bitws with
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer dns_journal_{get,set}_sourceserial. [RT #26634]
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews3221. [bug] Fixed a potential coredump on shutdown due to
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews referencing fetch context after it's been freed.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley --- 9.9.0b2 released ---
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff could fail to set the database version correctly,
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff causing an assertion failure. [RT #26180]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff3219. [bug] Disable NOEDNS caching following a timeout.
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson3218. [security] Cache lookup could return RRSIG data associated with
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson nonexistent records, leading to an assertion
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson failure. [RT #26590]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
ba43c53451d5c38765f376eeede457178b36951aBob Halley3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews3214. [func] Add 'named -U' option to set the number of UDP
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews listener threads per interface. [RT #26485]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
668278867ba063995988507b6b28724ebb9f9391Mark Andrews list prior to adding a reference to it leading a
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff possible assertion failure. [RT #23219]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson option prints in single-line-per-record format.
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson3210. [bug] Canceling the oldest query due to recursive-client
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson overload could trigger an assertion failure. [RT #26463]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson3208. [bug] 'dig -y' handle unknown tsig alorithm better.
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson3206. [cleanup] Add ISC information to log at start time. [RT #25484]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3205. [func] Upgrade dig's defaults to better reflect modern
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson nameserver behaviour. Enable "dig +adflag" and
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson "dig +edns=0" by default. Enable "+dnssec" when
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson running "dig +trace". [RT #23497]
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson3204. [bug] When a master server that has been marked as
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson unreachable sends a NOTIFY, mark it reachable
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff again. [RT #25960]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff3203. [bug] Increase log level to 'info' for validation failures
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff from expired or not-yet-valid RRSIGs. [RT #21796]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff3202. [bug] NOEDNS caching on timeout was too agressive.
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington3201. [func] 'rndc querylog' can now be given an on/off parameter
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington instead of only being used as a toggle. [RT #18351]
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington3200. [doc] Some rndc functions were undocumented or were
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson missing from 'rndc -h' output. [RT #25555]
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley3199. [func] When logging client information, include the name
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley being queried. [RT #25944]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington3198. [doc] Clarified that dnssec-settime can alter keyfile
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington permissions. [RT #24866]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington3197. [bug] Don't try to log the filename and line number when
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson the config parser can't open a file. [RT #22263]
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson3196. [bug] nsupdate: return nonzero exit code when target zone
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley doesn't exist. [RT #25783]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley3195. [cleanup] Silence "file not found" warnings when loading
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson managed-keys zone. [RT #26340]
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff3194. [doc] Updated RFC references in the 'empty-zones-enable'
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff documentation. [RT #25203]
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson3192. [bug] A query structure could be used after being freed.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff3191. [bug] Print NULL records using "unknown" format. [RT #26392]
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff3190. [bug] Underflow in error handling in isc_mutexblock_init.
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson3189. [test] Added a summary report after system tests. [RT #25517]
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson3188. [bug] zone.c:zone_refreshkeys() could fail to detach
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson references correctly when errors occurred, causing
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson a hang on shutdown. [RT #26372]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson3187. [port] win32: support for Visual Studio 2008. [RT #26356]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson --- 9.9.0b1 released ---
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington3186. [bug] Version/db mis-match in rpz code. [RT #26180]
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington3185. [func] New 'rndc signing' option for auto-dnssec zones:
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington - 'rndc signing -list' displays the current
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson state of signing operations
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson - 'rndc signing -clear' clears the signing state
0d00f4bb92090ff64d49ae803a2e75b3f299f547Andreas Gustafsson records for keys that have fully signed the zone
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson - 'rndc signing -nsec3param' sets the NSEC3
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington parameters for the zone
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington The 'rndc keydone' syntax is removed. [RT #23729]
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson3184. [bug] named had excessive cpu usage when a redirect zone was
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson configured. [RT #26013]
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington3182. [bug] Auth servers behind firewalls which block packets
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington greater than 512 bytes may cause other servers to
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington perform poorly. Now, adb retains edns information
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington and caches noedns servers. [RT #23392/24964]
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson3181. [func] Inline-signing is now supported for master zones.
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson3180. [func] Local copies of slave zones are now saved in raw
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson format by default, to improve startup performance.
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson 'masterfile-format text;' can be used to override
cdc2d4a065b6b1a00f0b07aae94bc7cb380d15bcAndreas Gustafsson the default, if desired. [RT #25867]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson3179. [port] kfreebsd: build issues. [RT #26273]
2c7097eac0aed3b0b3387082cb783db64f2d7765Andreas Gustafsson3178. [bug] A race condition introduced by change #3163 could
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson cause an assertion failure on shutdown. [RT #26271]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson3177. [func] 'rndc keydone', remove the indicator record that
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson named has finished signing the zone with the
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson corresponding key. [RT #26206]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington3176. [doc] Corrected example code and added a README to the
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington sample external DLZ module in contrib/dlz/example.
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson3175. [bug] Fix how DNSSEC positive wildcard responses from a
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson NSEC3 signed zone are validated. Stop sending a
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson unnecessary NSEC3 record when generating such
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson responses. [RT #26200]
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington3174. [bug] Always compute to revoked key tag from scratch.
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington3173. [port] Correctly validate root DS responses. [RT #25726]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson3172. [port] darwin 10.* and freebsd [89] are now built threaded by
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson3171. [bug] Exclusively lock the task when adding a zone using
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson 'rndc addzone'. [RT #25600]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson --- 9.9.0a3 released ---
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson3170. [func] RPZ update:
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson - fix precedence among competing rules
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson - improve ARM text including documenting rule precedence
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson - try to rewrite CNAME chains until first hit
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson - new "rpz" logging channel
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews - RDATA for CNAME rules can include wildcards
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson - replace "NO-OP" named.conf policy override with
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson "PASSTHRU" and add "DISABLED" override ("NO-OP"
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson is still recognized)
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson3169. [func] Catch db/version mis-matches when calling dns_db_*().
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews a ANY query. [RT #26017]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews3167. [bug] Negative answers from forwarders were not being
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews correctly tagged making them appear to not be cached.
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews3165. [bug] dnssec-signzone could generate new signatures when
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews resigning, even when valid signatures were already
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson present. [RT #26025]
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson3164. [func] Enable DLZ modules to retrieve client information,
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson so that responses can be changed depending on the
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson source address of the query. [RT #25768]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson3163. [bug] Use finer-grained locking in client.c to address
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson concurrency problems with large numbers of threads.
e3402551ac9be809eeb3a4b7b30d023ba67dad28Brian Wellington3162. [test] start.pl: modified to allow for "named.args" in
6d3f954c572db02159deedd444373161fda47a88Brian Wellington ns*/ subdirectory to override stock arguments to
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington named. Largely from RT#26044, but no separate ticket.
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington3161. [bug] zone.c:del_sigs failed to always reset rdata leading
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson assertion failures. [RT #25880]
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson3160. [bug] When printing out a NSEC3 record in multiline form
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson the newline was not being printed causing type codes
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson to be run together. [RT #25873]
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence3159. [bug] On some platforms, named could assert on startup
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence when running in a chrooted environment without
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson /proc. [RT #25863]
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington3158. [bug] Recursive servers would prefer a particular UDP
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington socket instead of using all available sockets.
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington the config file before pausing the server. [RT #21373]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington3156. [placeholder]
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington --- 9.9.0a2 released ---
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson3155. [bug] Fixed a build failure when using contrib DLZ
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson drivers (e.g., mysql, postgresql, etc). [RT #25710]
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence3154. [bug] Attempting to print an empty rdataset could trigger
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews an assert. [RT #25452]
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson3153. [func] Extend request-ixfr to zone level and remove the
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson side effect of forcing an AXFR. [RT #25156]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington3152. [cleanup] Some versions of gcc and clang failed due to
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington incorrect use of __builtin_expect. [RT #25183]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson3151. [bug] Queries for type RRSIG or SIG could be handled
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson incorrectly. [RT #21050]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson3150. [func] Improved startup and reconfiguration time by
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson enabling zones to load in multiple threads. [RT #25333]
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson3149. [placeholder]
d403e27f2b1c94f2b9349ddb68f50a141ae8d26dAndreas Gustafsson3148. [bug] Processing of normal queries could be stalled when
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson forwarding a UPDATE message. [RT #24711]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson3147. [func] Initial inline signing support. [RT #23657]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson --- 9.9.0a1 released ---
e0a9b524614889ca9b75f846cb6101fc448a60dcAndreas Gustafsson3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
385a9cb48a70b329e507c39d043fa9a44c659913James Brister there were any errors while running them. [RT #25527]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister3144. [bug] dns_dbiterator_seek() could trigger an assert when
385a9cb48a70b329e507c39d043fa9a44c659913James Brister used with a nonexistent database node. [RT #25358]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister3143. [bug] Silence clang compiler warnings. [RT #25174]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington3142. [bug] NAPTR is class agnostic. [RT #25429]
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence3141. [bug] Silence spurious "zone serial (0) unchanged" messages
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer associated with empty zones. [RT #25079]
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence3140. [func] New command "rndc flushtree <name>" clears the
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer specified name from the server cache along with
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington all names under it. [RT #19970]
47ddde42728034854444cf17e278cebaea06f666Michael Graff3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
47ddde42728034854444cf17e278cebaea06f666Michael Graff for the hashing algorithms (md5, sha1 - sha512, and
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence their hmac counterparts). [RT #25067]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence3138. [bug] Address memory leaks and out-of-order operations when
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence shutting named down. [RT #25210]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence3137. [func] Improve hardware scalability by allowing multiple
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence worker threads to process incoming UDP packets.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence This can significantly increase query throughput
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence on some systems. [RT #22992]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence3136. [func] Add RFC 1918 reverse zones to the list of built-in
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence empty zones switched on by the 'empty-zones-enable'
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence option. [RT #24990]
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
529a6b5224d751504027293a766a4c8b81241869Brian Wellington See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson3134. [bug] Improve the accuracy of dnssec-signzone's signing
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson statistics. [RT #16030]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington3133. [bug] Change #3114 was incomplete. [RT #24577]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington3132. [placeholder]
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence3131. [tuning] Improve scalability by allocating one zone task
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson per 100 zones at startup time, rather than using a
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson fixed-size task table. [RT #24406]
05f6d0c0381d19eec721e11f6fd88caef25dacd8Andreas Gustafsson3130. [func] Support alternate methods for managing a dynamic
c9b176a5281c8232eec0f2056ce10ea249afc4a3Mark Andrews zone's serial number. Two methods are currently
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington defined using serial-update-method, "increment"
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson (default) and "unixtime". [RT #23849]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson3129. [bug] Named could crash on 'rndc reconfig' when
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington allow-new-zones was set to yes and named ACLs
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington were used. [RT #22739]
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson3128. [func] Inserting an NSEC3PARAM via dynamic update in an
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson auto-dnssec zone that has not been signed yet
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson will cause it to be signed with the specified NSEC3
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson parameters when keys are activated. The
ffea7c2e73a0771c80b32df93cf4547fcea64eaeAndreas Gustafsson NSEC3PARAM record will not appear in the zone until
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington it is signed, but the parameters will be stored.
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson3127. [bug] 'rndc thaw' will now remove a zone's journal file
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson if the zone serial number has been changed and
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister ixfr-from-differences is not in use. [RT #24687]
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer3126. [security] Using DNAME record to generate replacements caused
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer RPZ to exit with a assertion failure. [RT #24766]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer3125. [security] Using wildcard CNAME records as a replacement with
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer RPZ caused named to exit with a assertion failure.
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer3124. [bug] Use an rdataset attribute flag to indicate
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer negative-cache records rather than using rrtype 0;
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer this will prevent problems when that rrtype is
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson used in actual DNS packets. [RT #24777]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3123. [security] Change #2912 exposed a latent flaw in
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson dns_rdataset_totext() that could cause named to
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson crash with an assertion failure. [RT #24777]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson3121. [security] An authoritative name server sending a negative
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson response containing a very large RRset could
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson trigger an off-by-one error in the ncache code
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson and crash named. [RT #24650]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson3120. [bug] Named could fail to validate zones listed in a DLV
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence that validated insecure without using DLV and had
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence DS records in the parent zone. [RT #24631]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3119. [bug] When rolling to a new DNSSEC key, a private-type
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence record could be created and never marked complete.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3118. [bug] nsupdate could dump core on shutdown when using
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson SIG(0) keys. [RT #24604]
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson3117. [cleanup] Remove doc and parser references to the
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson never-implemented 'auto-dnssec create' option.
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson3116. [func] New 'dnssec-update-mode' option controls updates
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington of DNSSEC records in signed dynamic zones. Set to
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington 'no-resign' to disable automatic RRSIG regeneration
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson while retaining the ability to sign new or changed
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson data. [RT #24533]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson3115. [bug] Named could fail to return requested data when
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson following a CNAME that points into the same zone.
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington3114. [bug] Retain expired RRSIGs in dynamic zones if key is
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington inactive and there is no replacement key. [RT #23136]
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington3113. [doc] Document the relationship between serial-query-rate
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington and NOTIFY messages.
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson3112. [doc] Add missing descriptions of the update policy name
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson types "ms-self", "ms-subdomain", "krb5-self" and
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson "krb5-subdomain", which allow machines to update
da527e4ff6a013364826637963e7ac372e024f33David Lawrence their own records, to the BIND 9 ARM.
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews dnssec-validation, added test cases to the
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson checkconf system test. [RT #24398]
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson3110. [bug] dnssec-signzone: Wrong error message could appear
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson when attempting to sign with no KSK. [RT #24369]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence3109. [func] The also-notify option now uses the same syntax
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence as a zone's masters clause. This means it is
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence now possible to specify a TSIG key to use when
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence sending notifies to a given server, or to include
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence an explicit named masters list in an also-notfiy
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister statement. [RT #23508]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister3108. [cleanup] dnssec-signzone: Clarified some error and
adade77942b069127a7094df419b3ad39dafb385James Brister warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
adade77942b069127a7094df419b3ad39dafb385James Brister code (use -P instead). [RT #20852]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence3107. [bug] dnssec-signzone: Report the correct number of ZSKs
adade77942b069127a7094df419b3ad39dafb385James Brister when using -x. [RT #20852]
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews3106. [func] When logging client requests, include the name of
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson the TSIG key if any. [RT #23619]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson3105. [bug] GOST support can be suppressed by "configure
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson --without-gost" [RT #24367]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3104. [bug] Better support for cross-compiling. [RT #24367]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson3103. [bug] Configuring 'dnssec-validation auto' in a view
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson instead of in the options statement could trigger
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence an assertion failure in named-checkconf. [RT #24382]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson3102. [func] New 'dnssec-loadkeys-interval' option configures
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson how often, in minutes, to check the key repository
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson for updates when using automatic key maintenance.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence Default is every 60 minutes (formerly hard-coded
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson to 12 hours). [RT #23744]
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson3101. [bug] Zones using automatic key maintenance could fail
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson to check the key repository for updates. [RT #23744]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson3100. [security] Certain response policy zone configurations could
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson trigger an INSIST when receiving a query of type
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson RRSIG. [RT #24280]
5096958739769958dd7a6b69356bf41260033873David Lawrence3099. [test] "dlz" system test now runs but gives R:SKIPPED if
5096958739769958dd7a6b69356bf41260033873David Lawrence not compiled with --with-dlz-filesystem. [RT #24146]
5096958739769958dd7a6b69356bf41260033873David Lawrence3098. [bug] DLZ zones were answering without setting the AA bit.
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence3097. [test] Add a tool to test handling of malformed packets.
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence3096. [bug] Set KRB5_KTNAME before calling log_cred() in
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence dst_gssapi_acceptctx(). [RT #24004]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence3095. [bug] Handle isolated reserved ports in the port range.
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews3094. [doc] Expand dns64 documentation.
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews3092. [bug] Signatures for records at the zone apex could go
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence stale due to an incorrect timer setting. [RT #23769]
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister3091. [bug] Fixed a bug in which zone keys that were published
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington and then subsequently activated could fail to trigger
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson automatic signing. [RT #22911]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington3090. [func] Make --with-gssapi default [RT #23738]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington3089. [func] dnssec-dsfromkey now supports reading keys from
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington standard input "dnssec-dsfromkey -f -". [RT# 20662]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington and add setup.sh in order to resolve changing
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington named.conf issue. [RT #23687]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3087. [bug] DDNS updates using SIG(0) with update-policy match
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister type "external" could cause a crash. [RT #23735]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3086. [bug] Running dnssec-settime -f on an old-style key will
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister now force an update to the new key format even if no
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister other change has been specified, using "-P now -A now"
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister as default values. [RT #22474]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister3085. [func] New '-R' option in dnssec-signzone forces removal
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister of signatures which have not yet expired but
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister were generated by a key that no longer exists.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3084. [func] A new command "rndc sync" dumps pending changes in
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson a dynamic zone to disk; "rndc sync -clean" also
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson removes the journal file after syncing. Also,
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson "rndc freeze" no longer removes journal files.
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson3083. [bug] NOTIFY messages were not being sent when generating
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews a NSEC3 chain incrementally. [RT #23702]
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews3082. [port] strtok_r is threads only. [RT #23747]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence3081. [bug] Failure of DNAME substitution did not return
96ab25294b028270eb1be867613df8a6c999b332David Lawrence YXDOMAIN. [RT #23591]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
e68de4a7dbf5b6a1b2ff3f4f4dd8adf80b80525bBrian Wellington3079. [bug] Handle isc_event_allocate failures in t_tasks.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3078. [func] Added a new include file with function typedefs
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson for the DLZ "dlopen" driver. [RT #23629]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson3077. [bug] zone.c:zone_refreshkeys() incorrectly called
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson dns_zone_attach(), use zone->irefs instead. [RT #23303]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington dnssec-keyfromlabel sets the default TTL of the
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington key. When possible, automatic signing will use that
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington TTL when the key is published. [RT #23304]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
845e0b5f968d4ac069ac8b802730467df8cd7136Mark Andrews timestamp when determining which keys are active.
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson3074. [bug] Make the adb cache read through for zone data and
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson glue learn for zone named is authoritative for.
1318ddb52d8a8a22eae47f7d82137e74b9beacf1Mark Andrews3073. [bug] managed-keys changes were not properly being recorded.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence3071. [bug] has_nsec could be used unintialised in
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence update.c:next_active. [RT #20256]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence3070. [bug] dnssec-signzone potential NULL pointer dereference.
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson3069. [cleanup] Silence warnings messages from clang static analysis.
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson3068. [bug] Named failed to build with a OpenSSL without engine
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington support. [RT #23473]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson3067. [bug] ixfr-from-differences {master|slave}; failed to
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson select the master/slave zones. [RT #23580]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson3066. [func] The DLZ "dlopen" driver is now built by default,
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson no longer requiring a configure option. To
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson disable it, use "configure --without-dlopen".
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson Driver also supported on win32. [RT #23467]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson3065. [bug] RRSIG could have time stamps too far in the future.
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson3064. [bug] powerpc: add sync instructions to the end of atomic
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson operations. [RT #23469]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews3062. [func] Made several changes to enhance human readability
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews of DNSSEC data in dig output and in generated
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence - DNSKEY record comments are more verbose, no
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews longer used in multiline mode only
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson - multiline RRSIG records reformatted
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson - multiline output mode for NSEC3PARAM records
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson - "dig +norrcomments" suppresses DNSKEY comments
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson - "dig +split=X" breaks hex/base64 records into
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson fields of width X; "dig +nosplit" disables this.
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson3061. [func] New option "dnssec-signzone -D", only write out
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson generated DNSSEC records. [RT #22896]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson3060. [func] New option "dnssec-signzone -X <date>" allows
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson specification of a separate expiration date
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3059. [test] Added a regression test for change #3023.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3058. [bug] Cause named to terminate at startup or rndc reconfig/
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence reload to fail, if a log file specified in the conf
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence file isn't a plain file. [RT #22771]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3057. [bug] "rndc secroots" would abort after the first error
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence and so could miss some views. [RT #23488]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3056. [func] Added support for URI resource record. [RT #23386]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence3055. [placeholder]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson3054. [bug] Added elliptic curve support check in
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson GOST OpenSSL engine detection. [RT #23485]
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence3053. [bug] Under a sustained high query load with a finite
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence max-cache-size, it was possible for cache memory
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson to be exhausted and not recovered. [RT #23371]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson3052. [test] Fixed last autosign test report. [RT #23256]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson3051. [bug] NS records obsure DNAME records at the bottom of the
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson zone if both are present. [RT #23035]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson3050. [bug] The autosign system test was timing dependent.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence Wait for the initial autosigning to complete
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence before running the rest of the test. [RT #23035]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence3049. [bug] Save and restore the gid when creating creating
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister named.pid at startup. [RT #23290]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington3048. [bug] Fully separate view key mangement. [RT #23419]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington3047. [bug] DNSKEY NODATA responses not cached fixed in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence validator.c. Tests added to dnssec system test.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3046. [bug] Use RRSIG original TTL to compute validated RRset
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence and RRSIG TTL. [RT #23332]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3045. [removed] Replaced by change #3050.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3044. [bug] Hold the socket manager lock while freeing the socket.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3043. [test] Merged in the NetBSD ATF test framework (currently
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence version 0.12) for development of future unit tests.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Use configure --with-atf to build ATF internally
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence or configure --with-atf=prefix to use an external
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence copy. [RT #23209]
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence addresses on systems with only IPv4 connectivity.
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson3041. [bug] dnssec-signzone failed to generate new signatures on
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson ttl changes. [RT #23330]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson3040. [bug] Named failed to validate insecure zones where a node
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson with a CNAME existed between the trust anchor and the
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson top of the zone. [RT #23338]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson3039. [func] Redirect on NXDOMAIN support. [RT #23146]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson3038. [bug] Install <dns/rpz.h>. [RT #23342]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson3037. [doc] Update COPYRIGHT to contain all the individual
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson copyright notices that cover various parts.
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington3036. [bug] Check built-in zone arguments to see if the zone
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington is re-usable or not. [RT #21914]
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews3035. [cleanup] Simplify by using strlcpy. [RT #22521]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3029. [bug] isc_netaddr_format() handle a zero sized buffer.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister catch NULL pointer dereferences before they happen.
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister3026. [bug] lib/isc/httpd.c: check that we have enough space
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister after calling grow_headerspace() and if not
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister re-call grow_headerspace() until we do. [RT #22521]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson3025. [bug] Fixed a possible deadlock due to zone resigning.
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews3024. [func] RTT Banding removed due to minor security increase
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington but major impact on resolver latency. [RT #23310]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington3023. [bug] Named could be left in an inconsistent state when
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington receiving multiple AXFR response messages that were
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister not all TSIG-signed. [RT #23254]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister3021. [bug] Change #3010 was incomplete. [RT #22296]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson3020. [bug] auto-dnssec failed to correctly update the zone when
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence changing the DNSKEY RRset. [RT #23232]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson3019. [test] Test: check apex NSEC3 records after adding DNSKEY
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson record via UPDATE. [RT #23229]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson3018. [bug] Named failed to check for the "none;" acl when deciding
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson if a zone may need to be re-signed. [RT #23120]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson3017. [doc] dnssec-keyfromlabel -I was not properly documented.
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister3014. [placeholder]
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence3013. [bug] The DNS64 ttl was not always being set as expected.
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson3012. [bug] Remove DNSKEY TTL change pairs before generating
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson signing records for any remaining DNSKEY changes.
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister3011. [func] Change the default query timeout from 30 seconds
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister to 10. Allow setting this in named.conf using the new
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister 'resolver-query-timeout' option, which specifies a max
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister time in seconds. 0 means 'default' and anything longer
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister than 30 will be silently set to 30. [RT #22852]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
47c196192afa37b2dea728e52579779f190bf07fJames Brister for refreshing managed-keys. [RT #22296]
29196ffb72a1337c72ffd6d52f1c8348f84c644eJames Brister3009. [bug] clients-per-query code didn't work as expected with
47c196192afa37b2dea728e52579779f190bf07fJames Brister particular query patterns. [RT #22972]
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington --- 9.8.0b1 released ---
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington3008. [func] Response policy zones (RPZ) support. [RT #21726]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson3007. [bug] Named failed to preserve the case of domain names in
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson rdata which is not compressible when writing master
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson files. [RT #22863]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister3006. [func] Allow dynamically generated TSIG keys to be preserved
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister across restarts of named. Initially this is for
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister TSIG keys generated using GSSAPI. [RT #22639]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister3005. [port] Solaris: Work around the lack of
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister gsskrb5_register_acceptor_identity() by setting
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister the KRB5_KTNAME environment variable to the
0380c44d0238a88e167526954d630d071739ed28Mark Andrews contents of tkey-gssapi-keytab. Also fixed
0380c44d0238a88e167526954d630d071739ed28Mark Andrews test errors on MacOSX. [RT #22853]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews3004. [func] DNS64 reverse support. [RT #22769]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews3003. [experimental] Added update-policy match type "external",
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence enabling named to defer the decision of whether to
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington allow a dynamic update to an external daemon.
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington (Contributed by Andrew Tridgell.) [RT #22758]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence3001. [func] Added a default trust anchor for the root zone, which
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence can be switched on by setting "dnssec-validation auto;"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in the named.conf options. [RT #21727]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson3000. [bug] More TKEY/GSS fixes:
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence - nsupdate can now get the default realm from
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence the user's Kerberos principal
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson - corrected gsstest compilation flags
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister - improved documentation
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister - fixed some NULL dereferences
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2999. [func] Add GOST support (RFC 5933). [RT #20639]
d5399cc351a549db957185993b320a3bffa40e41James Brister2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
d5399cc351a549db957185993b320a3bffa40e41James Brister to the task api. [RT #22776]
d5399cc351a549db957185993b320a3bffa40e41James Brister2997. [func] named -V now reports the OpenSSL and libxml2 verions
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister it was compiled against. [RT #22687]
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister2996. [security] Temporarily disable SO_ACCEPTFILTER support.
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2995. [bug] The Kerberos realm was not being correctly extracted
69b691c9624f31e59b8d128ada902a82127c15a3James Brister from the signer's identity. [RT #22770]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
69b691c9624f31e59b8d128ada902a82127c15a3James Brister do not use threads on earlier versions. Also kill
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington the unproven-pthreads, mit-pthreads, and ptl2 support.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2993. [func] Dynamically grow adb hash tables. [RT #21186]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister for looking at a secure delegation. [RT #22059]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister dynamic zones. [RT #22365]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2990. [bug] 'dnssec-settime -S' no longer tests prepublication
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence interval validity when the interval is set to 0.
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence2989. [func] Added support for writable DLZ zones. (Contributed
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence by Andrew Tridgell of the Samba project.) [RT #22629]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of external DLZ drivers that can be loaded as
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence shared objects at runtime rather than linked with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence named. Currently this is switched on via a
0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence compile-time option, "configure --with-dlz-dlopen".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Note: the syntax for configuring DLZ zones
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is likely to be refined in future releases.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence (Contributed by Andrew Tridgell of the Samba
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence project.) [RT #22629]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2987. [func] Improve ease of configuring TKEY/GSS updates by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence adding a "tkey-gssapi-keytab" option. If set,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence updates will be allowed with any key matching
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a principal in the specified keytab file.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "tkey-gssapi-credential" is no longer required
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence and is expected to be deprecated. (Contributed
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson by Andrew Tridgell of the Samba project.)
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2986. [func] Add new zone type "static-stub". It's like a stub
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson zone, but the nameserver names and/or their IP
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson addresses are statically configured. [RT #21474]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2985. [bug] Add a regression test for change #2896. [RT #21324]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2984. [bug] Don't run MX checks when the target of the MX record
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington is ".". [RT #22645]
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington --- 9.8.0a1 released ---
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson2982. [bug] Reference count dst keys. dst_key_attach() can be used
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson increment the reference count.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence Note: dns_tsigkey_createfromkey() callers should now
b092aef75539b462d24b460b67ac49edb79aaff8Andreas Gustafsson always call dst_key_free() rather than setting it
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson to NULL on success. [RT #22672]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2980. [bug] named didn't properly handle UPDATES that changed the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence TTL of the NSEC3PARAM RRset. [RT #22363]
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson2979. [bug] named could deadlock during shutdown if two
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence "rndc stop" commands were issued at the same
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington time. [RT #22108]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2978. [port] hpux: look for <devpoll.h> [RT #21919]
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington2977. [bug] 'nsupdate -l' report if the session key is missing.
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2976. [bug] named could die on exit after negotiating a GSS-TSIG
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson key. [RT #22573]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson wrong lock which could lead to server deadlock.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2974. [bug] Some valid UPDATE requests could fail due to a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence consistency check examining the existing version
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence of the zone rather than the new version resulting
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence from the UPDATE. [RT #22413]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2973. [bug] bind.keys.h was being removed by the "make clean"
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington at the end of configure resulting in build failures
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington where there is very old version of perl installed.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Move it to "make maintainer-clean". [RT #22230]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2972. [bug] win32: address windows socket errors. [RT #21906]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2971. [bug] Fixed a bug that caused journal files not to be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence compacted on Windows systems as a result of
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence non-POSIX-compliant rename() semantics. [RT #22434]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2970. [security] Adding a NO DATA negative cache entry failed to clear
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence any matching RRSIG records. A subsequent lookup of
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence of NO DATA cache entry could trigger a INSIST when the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence unexpected RRSIG was also returned with the NO DATA
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence CVE-2010-3613, VU#706148. [RT #22288]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2969. [security] Fix acl type processing so that allow-query works
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence in options and view statements. Also add a new
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson set of tests to verify proper functioning.
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson CVE-2010-3615, VU#510208. [RT #22418]
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson2968. [security] Named could fail to prove a data set was insecure
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson before marking it as insecure. One set of conditions
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson that can trigger this occurs naturally when rolling
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson DNSKEY algorithms.
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson CVE-2010-3614, VU#837744. [RT #22309]
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2967. [bug] 'host -D' now turns on debugging messages earlier.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2966. [bug] isc_print_vsnprintf() failed to check if there was
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence space available in the buffer when adding a left
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff justified character with a non zero width,
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff (e.g. "%-1c"). [RT #22270]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2965. [func] Test HMAC functions using test data from RFC 2104 and
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff RFC 4634. [RT #21702]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2964. [placeholder]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2963. [security] The allow-query acl was being applied instead of the
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff allow-query-cache acl to cache lookups. [RT #22114]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2962. [port] win32: add more dependencies to BINDBuild.dsw.
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2961. [bug] Be still more selective about the non-authoritative
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson answers we apply change 2748 to. [RT #22074]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2960. [func] Check that named accepts non-authoritative answers.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2959. [func] Check that named starts with a missing masterfile.
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister2958. [bug] named failed to start with a missing master file.
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence2957. [bug] entropy_get() and entropy_getpseudo() failed to match
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence the API for RAND_bytes() and RAND_pseudo_bytes()
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson respectively. [RT #21962]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2955. [func] Provide more detail in the recursing log. [RT #22043]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson build_sqldbinstance failure. [RT #21623]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2953. [bug] Silence spurious "expected covering NSEC3, got an
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson exact match" message when returning a wildcard
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson no data response. [RT #21744]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2952. [port] win32: named-checkzone and named-checkconf failed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to initialise winsock. [RT #21932]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2951. [bug] named failed to generate a correct signed response
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in a optout, delegation only zone with no secure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence delegations. [RT #22007]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2950. [bug] named failed to perform a SOA up to date check when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence falling back to TCP on UDP timeouts when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ixfr-from-differences was set. [RT #21595]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2949. [bug] dns_view_setnewzones() contained a memory leak if
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence it was called multiple times. [RT #21942]
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson2948. [port] MacOS: provide a mechanism to configure the test
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson interfaces at reboot. See bin/tests/system/README
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews for details.
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews2947. [placeholder]
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews2946. [doc] Document the default values for the minimum and maximum
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews zone refresh and retry values in the ARM. [RT #21886]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2945. [doc] Update empty-zones list in ARM. [RT #21772]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2944. [maint] Remove ORCHID prefix from built in empty zones.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2943. [func] Add support to load new keys into managed zones
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence without signing immediately with "rndc loadkeys".
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence Add support to link keys with "dnssec-keygen -S"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and "dnssec-settime -S". [RT #21351]
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence2942. [contrib] zone2sqlite failed to setup the entropy sources.
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington2941. [bug] sdb and sdlz (dlz's zone database) failed to support
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington DNAME at the zone apex. [RT #21610]
34b394b43e2207e8f8f3703f0402422121455638David Lawrence2940. [port] Remove connection aborted error message on
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister Windows. [RT #21549]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2939. [func] Check that named successfully skips NSEC3 records
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister that fail to match the NSEC3PARAM record currently
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister in use. [RT# 21868]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2938. [bug] When generating signed responses, from a signed zone
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister that uses NSEC3, named would use a uninitialised
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister pointer if it needed to skip a NSEC3 record because
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister it didn't match the selected NSEC3PARAM record for
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister zone. [RT# 21868]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2937. [bug] Worked around an apparent race condition in over
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence memory conditions. Without this fix a DNS cache DB or
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence ADB could incorrectly stay in an over memory state,
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister effectively refusing further caching, which
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister subsequently made a BIND 9 caching server unworkable.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister This fix prevents this problem from happening by
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister polling the state of the memory context, rather than
c0b06c8275c5ea3cde8cc67f3a6f9cab1bd55d65James Brister making a copy of the state, which appeared to cause
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister a race. This is a "workaround" in that it doesn't
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence solve the possible race per se, but several experiments
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson proved this change solves the symptom. Also, the
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson polling overhead hasn't been reported to be an issue.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence This bug should only affect a caching server that
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson specifies a finite max-cache-size. It's also quite
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson likely that the bug happens only when enabling threads,
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson but it's not confirmed yet. [RT #21818]
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson2936. [func] Improved configuration syntax and multiple-view
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson support for addzone/delzone feature (see change
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson #2930). Removed "new-zone-file" option, replaced
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence with "allow-new-zones (yes|no)". The new-zone-file
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson for each view is now created automatically, with
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson a filename generated from a hash of the view name.
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson It is no longer necessary to "include" the
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson new-zone-file in named.conf; this happens
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson automatically. Zones that were not added via
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson "rndc addzone" can no longer be removed with
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews "rndc delzone". [RT #19447]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews scope. This could potentially result in a unknown,
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews potentially malformed, EDNS option being sent instead
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson of the desired NSID option. [RT #21781]
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2932. [cleanup] Corrected a numbering error in the "dnssec" test.
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2931. [bug] Temporarily and partially disable change 2864
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews because it would cause infinite attempts of RRSIG
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews queries. This is an urgent care fix; we'll
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews revisit the issue and complete the fix later.
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson2930. [experimental] New "rndc addzone" and "rndc delzone" commads
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence allow dynamic addition and deletion of zones.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence To enable this feature, specify a "new-zone-file"
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson option at the view or options level in named.conf.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Zone configuration information for the new zones
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence will be written into that file. To make the new
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence zones persist after a restart, "include" the file
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence into named.conf in the appropriate view. (Note:
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson This feature is not yet documented, and its syntax
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is expected to change.) [RT #19447]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson2929. [bug] Improved handling of GSS security contexts:
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - added LRU expiration for generated TSIGs
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence - added the ability to use a non-default realm
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister - added new "realm" keyword in nsupdate
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister - limited lifetime of generated keys to 1 hour
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews or the lifetime of the context (whichever is
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister2928. [bug] Be more selective about the non-authoritative
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister answer we apply change 2748 to. [RT #21594]
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2927. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2926. [placeholder]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2925. [bug] Named failed to accept uncachable negative responses
e411a986b94276c28e6a971f9c3b61d45c635456James Brister from insecure zones. [RT# 21555]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2924. [func] 'rndc secroots' dump a combined summary of the
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews current managed keys combined with trusted keys.
76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson2923. [bug] 'dig +trace' could drop core after "connection
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson timeout". [RT #21514]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2922. [contrib] Update zkt to version 1.0.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2921. [bug] The resolver could attempt to destroy a fetch context
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence too soon. [RT #19878]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2917. [func] Virtual time test framework. [RT #20801]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2916. [func] Add framework to use IPv6 in tests.
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2915. [cleanup] Be smarter about which objects we attempt to compile
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister based on configure options. [RT #21444]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2914. [bug] Make the "autosign" system test more portable.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2913. [func] Add pkcs#11 system tests. [RT #20784]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2912. [func] Windows clients don't like UPDATE responses that clear
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the zone section. [RT #20986]
36357e4304862fb47e9fae03c704cb6720310c45James Brister2911. [bug] dnssec-signzone didn't handle out of zone records well.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2910. [func] Sanity check Kerberos credentials. [RT #20986]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2909. [bug] named-checkconf -p could die if "update-policy local;"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was specified in named.conf. [RT #21416]
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence2908. [bug] It was possible for re-signing to stop after removing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a DNSKEY. [RT #21384]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2907. [bug] The export version of libdns had undefined references.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence2905. [port] aix: set use_atomic=yes with native compiler.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2904. [bug] When using DLV, sub-zones of the zones in the DLV,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence could be incorrectly marked as insecure instead of
b99d080717fdd741961d736581270d37bad8bec0David Lawrence secure leading to negative proofs failing. This was
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson a unintended outcome from change 2890. [RT# 21392]
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson2903. [bug] managed-keys-directory missing from namedconf.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2902. [func] Add regression test for change 2897. [RT #21040]
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2900. [bug] The placeholder negative caching element was not
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence properly constructed triggering a INSIST in
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence dns_ncache_towire(). [RT #21346]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2899. [port] win32: Support linking against OpenSSL 1.0.0.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2898. [bug] nslookup leaked memory when -domain=value was
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence specified. [RT #21301]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2897. [bug] NSEC3 chains could be left behind when transitioning
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to insecure. [RT #21040]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2896. [bug] "rndc sign" failed to properly update the zone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when adding a DNSKEY for publication only. [RT #21045]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2895. [func] genrandom: add support for the generation of multiple
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence files. [RT #20917]
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence2893. [bug] Improve managed keys support. New named.conf option
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence managed-keys-directory. [RT #20924]
eefea43215016bce437ab4a7441b2851fd182960David Lawrence2892. [bug] Handle REVOKED keys better. [RT #20961]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2891. [maint] Update empty-zones list to match
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2890. [bug] Handle the introduction of new trusted-keys and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence DS, DLV RRsets better. [RT #21097]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2889. [bug] Elements of the grammar where not properly reported.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2888. [bug] Only the first EDNS option was displayed. [RT #21273]
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence2887. [bug] Report the keytag times in UTC in the .key file,
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley local time is presented as a comment within the
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley comment. [RT #21223]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2886. [bug] ctime() is not thread safe. [RT #21223]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2885. [bug] Improve -fno-strict-aliasing support probing in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence configure. [RT #21080]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2884. [bug] Insufficient validation in dns_name_getlabelsequence().
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence2883. [bug] 'dig +short' failed to handle really large datasets.
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington2882. [bug] Remove memory context from list of active contexts
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington before clearing 'magic'. [RT #21274]
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence2881. [bug] Reduce the amount of time the rbtdb write lock
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is held when closing a version. [RT #21198]
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence consistent. [RT #21078]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2878. [func] Incrementally write the master file after performing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a AXFR. [RT #21010]
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence2877. [bug] The validator failed to skip obviously mismatching
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews RRSIGs. [RT #21138]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff from unsigned zones. [RT #21131]
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2875. [bug] dns_time64_fromtext() could accept non digits.
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews2874. [bug] Cache lack of EDNS support only after the server
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence successfully responds to the query using plain DNS.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2873. [bug] Cancelling a dynamic update via the dns/client module
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence could trigger an assertion failure. [RT #21133]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2872. [bug] Modify dns/client.c:dns_client_createx() to only
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence require one of IPv4 or IPv6 rather than both.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2871. [bug] Type mismatch in mem_api.c between the definition and
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence the header file, causing build failure with
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer --enable-exportlib. [RT #21138]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2868. [cleanup] Run "make clean" at the end of configure to ensure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence any changes made by configure are integrated.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Use --with-make-clean=no to disable. [RT #20994]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence don't like it. [RT #20986]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2866. [bug] Windows does not like the TSIG name being compressed.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2865. [bug] memset to zero event.data. [RT #20986]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2862. [bug] nsupdate didn't default to the parent zone when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence updating DS records. [RT #20896]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2861. [doc] dnssec-settime man pages didn't correctly document the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence inactivation time. [RT #21039]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2860. [bug] named-checkconf's usage was out of date. [RT #21039]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2859. [bug] When cancelling validation it was possible to leak
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence memory. [RT #20800]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2858. [bug] RTT estimates were not being adjusted on ICMP errors.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2857. [bug] named-checkconf did not fail on a bad trusted key.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2856. [bug] The size of a memory allocation was not always properly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence recorded. [RT #20927]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2855. [func] nsupdate will now preserve the entered case of domain
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence names in update requests it sends. [RT #20928]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2854. [func] dig: allow the final soa record in a axfr response to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence be suppressed, dig +onesoa. [RT #20929]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2851. [doc] nslookup.1, removed <informalexample> from the docbook
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence source as it produced bad nroff. [RT #21007]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2850. [bug] If isc_heap_insert() failed due to memory shortage
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the heap would have corrupted entries. [RT #20951]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2849. [bug] Don't treat errors from the xml2 library as fatal.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence README.rfc5011 into the ARM. [RT #20899]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2846. [bug] EOF on unix domain sockets was not being handled
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence correctly. [RT #20731]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson2844. [doc] notify-delay default in ARM was wrong. It should have
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence been five (5) seconds.
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence creating key files if there is a chance that the new
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence key ID will collide with an existing one after
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence either of the keys has been revoked. (To override
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence this in the case of dnssec-keyfromlabel, use the -y
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence option. dnssec-keygen will simply create a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence different, non-colliding key, so an override is
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence not necessary.) [RT #20838]
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson2842. [func] Added "smartsign" and improved "autosign" and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "dnssec" regression tests. [RT #20865]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2841. [bug] Change 2836 was not complete. [RT #20883]
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence2840. [bug] Temporary fixed pkcs11-destroy usage check.
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence2839. [bug] A KSK revoked by named could not be deleted.
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson2838. [placeholder]
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence2837. [port] Prevent Linux spurious warnings about fwrite().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2836. [bug] Keys that were scheduled to become active could
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence be delayed. [RT #20874]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2835. [bug] Key inactivity dates were inadvertently stored in
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence the private key file with the outdated tag
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "Unpublish" rather than "Inactive". This has been
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence fixed; however, any existing keys that had Inactive
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence dates set will now need to have them reset, using
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'dnssec-settime -I'. [RT #20868]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2834. [bug] HMAC-SHA* keys that were longer than the algorithm
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley digest length were used incorrectly, leading to
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley interoperability problems with other DNS
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley implementations. This has been corrected.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley (Note: If an oversize key is in use, and
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley compatibility is needed with an older release of
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley BIND, the new tool "isc-hmac-fixup" can convert
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley the key secret to a form that will work with all
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley versions.) [RT #20751]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to avoid redefinition in some OSs [RT 20831]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2831. [security] Do not attempt to validate or cache
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence out-of-bailiwick data returned with a secure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence answer; it must be re-fetched from its original
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence source and validated in that context. [RT #20819]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2830. [bug] Changing the OPTOUT setting could take multiple
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence passes. [RT #20813]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2829. [bug] Fixed potential node inconsistency in rbtdb.c.
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington2828. [security] Cached CNAME or DNAME RR could be returned to clients
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence without DNSSEC validation. [RT #20737]
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
77f372eed39827f5efef476602de7c0505f99b91David Lawrence being released. [RT #20740]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was in the process of being created was not properly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence recorded in the zone. [RT #20786]
8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence2824. [bug] "rndc sign" was not being run by the correct task.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence2822. [bug] rbtdb.c:loadnode() could return the wrong result.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2821. [doc] Add note that named-checkconf doesn't automatically
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2820. [func] Handle read access failure of OpenSSL configuration
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence file more user friendly (PKCS#11 engine patch).
e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff2818. [cleanup] rndc could return an incorrect error code
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff when a zone was not found. [RT #20767]
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson2816. [bug] previous_closest_nsec() could fail to return
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson data for NSEC3 nodes [RT #29730]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2815. [bug] Exclusively lock the task when freezing a zone.
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence2814. [func] Provide a definitive error message when a master
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews zone is not loaded. [RT #20757]
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff2812. [bug] Make sure updates can't result in a zone with
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff NSEC-only keys and NSEC3 records. [RT #20748]
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff output. [RT #20733]
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley2810. [doc] Clarified the process of transitioning an NSEC3 zone
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley to insecure. [RT #20746]
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley2809. [cleanup] Restored accidentally-deleted text in usage output
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in dnssec-settime and dnssec-revoke [RT #20739]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2808. [bug] Remove the attempt to install atomic.h from lib/isc.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington atomic.h is correctly installed by the architecture
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington specific subdirectories. [RT #20722]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2807. [bug] Fixed a possible ASSERT when reconfiguring zone
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington keys. [RT #20720]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson --- 9.7.0rc1 released ---
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson when it had changed. [RT #20703]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2805. [bug] Fixed namespace problems encountered when building
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews external programs using non-exported BIND9 libraries
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson (i.e., built without --enable-exportlib). [RT #20679]
4716e94840921878b26e493576f84afe4fe08752Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence or as a result of a scheduled key change. [RT #20700]
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and genrandom under windows. [RT #20670]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley2801. [func] Detect and report records that are different according
3886e748a4086b813e3453232a742903762fedadBob Halley to DNSSEC but are semantically equal according to plain
3886e748a4086b813e3453232a742903762fedadBob Halley DNS. Apply plain DNS comparisons rather than DNSSEC
3886e748a4086b813e3453232a742903762fedadBob Halley comparisons when processing UPDATE requests.
3886e748a4086b813e3453232a742903762fedadBob Halley dnssec-signzone now removes such semantically duplicate
3886e748a4086b813e3453232a742903762fedadBob Halley records prior to signing the RRset.
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley named-checkzone -r {ignore|warn|fail} (default warn)
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley named-compilezone -r {ignore|warn|fail} (default warn)
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley named.conf: check-dup-records {ignore|warn|fail};
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2800. [func] Reject zones which have NS records which refer to
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington CNAMEs, DNAMEs or don't have address record (class IN
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington only). Reject UPDATEs which would cause the zone
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington to fail the above checks if committed. [RT #20678]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2799. [cleanup] Changed the "secure-to-insecure" option to
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington "dnssec-secure-to-insecure", and "dnskey-ksk-only"
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson2798. [bug] Addressed bugs in managed-keys initialization
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley and rollover. [RT #20683]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2797. [bug] Don't decrement the dispatch manager's maxbuffers.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2796. [bug] Missing dns_rdataset_disassociate() call in
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson dns_nsec3_delnsec3sx(). [RT #20681]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson2795. [cleanup] Add text to differentiate "update with no effect"
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence log messages. [RT #18889]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson2794. [bug] Install <isc/namespace.h>. [RT #20677]
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington2793. [func] Add "autosign" and "metadata" tests to the
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence automatic tests. [RT #19946]
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson2792. [func] "filter-aaaa-on-v4" can now be set in view
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson options (if compiled in). [RT #20635]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2791. [bug] The installation of isc-config.sh was broken.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2790. [bug] Handle DS queries to stub zones. [RT #20440]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2788. [bug] dnssec-signzone could sign with keys that were
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence not requested [RT #20625]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2787. [bug] Spurious log message when zone keys were
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence dynamically reconfigured. [RT #20659]
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence2786. [bug] Additional could be promoted to answer. [RT #20663]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister --- 9.7.0b3 released ---
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2785. [bug] Revoked keys could fail to self-sign [RT #20652]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2784. [bug] TC was not always being set when required glue was
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister dropped. [RT #20655]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
6253eaa03c49aac035bdd8b1d9ec4853b45e94a0Andreas Gustafsson buffer size of 512 or less. [RT #20654]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2782. [port] win32: use getaddrinfo() for hostname lookups.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2781. [bug] Inactive keys could be used for signing. [RT #20649]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2780. [bug] dnssec-keygen -A none didn't properly unset the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence activation date in all cases. [RT #20648]
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence2779. [bug] Dynamic key revocation could fail. [RT #20644]
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister2778. [bug] dnssec-signzone could fail when a key was revoked
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson without deleting the unrevoked version. [RT #20638]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2776. [bug] Change #2762 was not correct. [RT #20647]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson in dnssec-keyfromlabel. [RT #20643]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2774. [bug] Existing cache DB wasn't being reused after
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington reconfiguration. [RT #20629]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2773. [bug] In autosigned zones, the SOA could be signed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence with the KSK. [RT #20628]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2772. [security] When validating, track whether pending data was from
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the additional section or not and only return it if
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence validates as secure. [RT #20438]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2771. [bug] dnssec-signzone: DNSKEY records could be
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington corrupted when importing from key files [RT #20624]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2770. [cleanup] Add log messages to resolver.c to indicate events
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley causing FORMERR responses. [RT #20526]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2769. [cleanup] Change #2742 was incomplete. [RT #19589]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2767. [bug] named could crash on startup if a zone was
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence configured with auto-dnssec and there was no
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister key-directory. [RT #20615]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2766. [bug] isc_socket_fdwatchpoke() should only update the
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley socketmgr state if the socket is not pending on a
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley read or write. [RT #20603]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2765. [bug] Skip masters for which the TSIG key cannot be found.
be768c2e952c34438025999125f984995a2c675fBob Halley2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2762. [bug] DLV validation failed with a local slave DLV zone.
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2761. [cleanup] Enable internal symbol table for backtrace only for
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence systems that are known to work. Currently, BSD
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley variants, Linux and Solaris are supported. [RT# 20202]
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister2759. [doc] Add information about .jbk/.jnw files to
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister the ARM. [RT #20303]
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson2758. [bug] win32: Added a workaround for a windows 2008 bug
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson that could cause the UDP client handler to shut
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence down. [RT #19176]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2757. [bug] dig: assertion failure could occur in connect
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence timeout. [RT #20599]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2755. [placeholder]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2754. [bug] Secure-to-insecure transitions failed when zone
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley was signed with NSEC3. [RT #20587]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2753. [bug] Removed an unnecessary warning that could appear when
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley building an NSEC chain. [RT #20589]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2752. [bug] Locking violation. [RT #20587]
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington2750. [bug] dig: assertion failure could occur when a server
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington didn't have an address. [RT #20579]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2749. [bug] ixfr-from-differences generated a non-minimal ixfr
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley for NSEC3 signed zones. [RT #20452]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2748. [func] Identify bad answers from GTLD servers and treat them
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley as referrals. [RT #18884]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2747. [bug] Journal roll forwards failed to set the re-signing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence time of RRSIGs correctly. [RT #20541]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2746. [port] hpux: address signed/unsigned expansion mismatch of
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which