CHANGES revision 3975f627fe9c0d3aa02ed135070e3253357daad9
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek3190. [bug] Underflow in error handling in isc_mutexblock_init.
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek3189. [test] Added a summary report after system tests. [RT #25517]
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek3188. [bug] zone.c:zone_refreshkeys() could fail to detach
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek references correctly when errors occurred, causing
4182b3a1f9f6e1823db9832533c6c9e51d13da8eJakub Hrozek a hang on shutdown. [RT #26372]
4182b3a1f9f6e1823db9832533c6c9e51d13da8eJakub Hrozek3187. [port] win32: support for Visual Studio 2008. [RT #26356]
4182b3a1f9f6e1823db9832533c6c9e51d13da8eJakub Hrozek --- 9.9.0b1 released ---
4182b3a1f9f6e1823db9832533c6c9e51d13da8eJakub Hrozek3186. [bug] Version/db mis-match in rpz code. [RT #26180]
9e80079370ff3b943832adc3c5ef430e64be0a0cJakub Hrozek3185. [func] New 'rndc signing' option for auto-dnssec zones:
9e80079370ff3b943832adc3c5ef430e64be0a0cJakub Hrozek - 'rndc signing -list' displays the current
af5a58fc3811af8521721f731d8234d983042ceaJan Cholasta state of signing operations
af5a58fc3811af8521721f731d8234d983042ceaJan Cholasta - 'rndc signing -clear' clears the signing state
af5a58fc3811af8521721f731d8234d983042ceaJan Cholasta records for keys that have fully signed the zone
a8781a38b5fca84647d59199fd0b0b4b2d4624e0Sumit Bose - 'rndc signing -nsec3param' sets the NSEC3
a8781a38b5fca84647d59199fd0b0b4b2d4624e0Sumit Bose parameters for the zone
a8781a38b5fca84647d59199fd0b0b4b2d4624e0Sumit Bose The 'rndc keydone' syntax is removed. [RT #23729]
cb4d5b588e704114b7090678752d33512baa718eJakub Hrozek3184. [bug] named had excessive cpu usage when a redirect zone was
cb4d5b588e704114b7090678752d33512baa718eJakub Hrozek configured. [RT #26013]
54c64aad71e6792edb7cf99988d9a7f4bc2b0c61Jakub Hrozek3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
ba89271f594e5ed381b4dcb876a2d2787cf51902Jakub Hrozek3182. [bug] Auth servers behind firewalls which block packets
ba89271f594e5ed381b4dcb876a2d2787cf51902Jakub Hrozek greater than 512 bytes may cause other servers to
ba89271f594e5ed381b4dcb876a2d2787cf51902Jakub Hrozek perform poorly. Now, adb retains edns information
f199c749197532fd3380fa6f5d9f7a579879c21aJustin Stephenson and caches noedns servers. [RT #23392/24964]
f199c749197532fd3380fa6f5d9f7a579879c21aJustin Stephenson3181. [func] Inline-signing is now supported for master zones.
772464c842968d6e544118ae1aa7c49a7cda2ad6Stephen Gallagher3180. [func] Local copies of slave zones are now saved in raw
772464c842968d6e544118ae1aa7c49a7cda2ad6Stephen Gallagher format by default, to improve startup performance.
772464c842968d6e544118ae1aa7c49a7cda2ad6Stephen Gallagher 'masterfile-format text;' can be used to override
9cd29d64f1c556fd222491a34229393b4462f126Fabiano Fidêncio the default, if desired. [RT #25867]
9cd29d64f1c556fd222491a34229393b4462f126Fabiano Fidêncio3179. [port] kfreebsd: build issues. [RT #26273]
78bb3676fe8326e0fe2b60daad8bf524e4625d4eJakub Hrozek3178. [bug] A race condition introduced by change #3163 could
78bb3676fe8326e0fe2b60daad8bf524e4625d4eJakub Hrozek cause an assertion failure on shutdown. [RT #26271]
78bb3676fe8326e0fe2b60daad8bf524e4625d4eJakub Hrozek3177. [func] 'rndc keydone', remove the indicator record that
f199c749197532fd3380fa6f5d9f7a579879c21aJustin Stephenson named has finished signing the zone with the
9e80079370ff3b943832adc3c5ef430e64be0a0cJakub Hrozek corresponding key. [RT #26206]
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek3176. [doc] Corrected example code and added a README to the
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek sample external DLZ module in contrib/dlz/example.
b772ceb6e5cdda62aa98d4fc61f4800b9779b74aLukas Slebodnik3175. [bug] Fix how DNSSEC positive wildcard responses from a
4d81fe27ced3d2e96866aeaf61661a925cb8edf1Jakub Hrozek NSEC3 signed zone are validated. Stop sending a
4d81fe27ced3d2e96866aeaf61661a925cb8edf1Jakub Hrozek unnecessary NSEC3 record when generating such
4d81fe27ced3d2e96866aeaf61661a925cb8edf1Jakub Hrozek responses. [RT #26200]
4d81fe27ced3d2e96866aeaf61661a925cb8edf1Jakub Hrozek3174. [bug] Always compute to revoked key tag from scratch.
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek3173. [port] Correctly validate root DS responses. [RT #25726]
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek3172. [port] darwin 10.* and freebsd [89] are now built threaded by
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek3171. [bug] Exclusively lock the task when adding a zone using
97216f0129366ac4850f62dac104b8d280ba517aNoam Meltzer 'rndc addzone'. [RT #25600]
97216f0129366ac4850f62dac104b8d280ba517aNoam Meltzer --- 9.9.0a3 released ---
4b9c236008b35d2155b94635a236ce7770db4728Nikolai Kondrashov3170. [func] RPZ update:
4b9c236008b35d2155b94635a236ce7770db4728Nikolai Kondrashov - fix precedence among competing rules
4b9c236008b35d2155b94635a236ce7770db4728Nikolai Kondrashov - improve ARM text including documenting rule precedence
4b9c236008b35d2155b94635a236ce7770db4728Nikolai Kondrashov - try to rewrite CNAME chains until first hit
2ebb3cf3d7062860343c3db1b53173c9c6547038Jan Cholasta - new "rpz" logging channel
9675aa73c7cb0c918038a7e177895b67ce135bedStephen Gallagher - RDATA for CNAME rules can include wildcards
2ebb3cf3d7062860343c3db1b53173c9c6547038Jan Cholasta - replace "NO-OP" named.conf policy override with
6f51c802311fd81a409a26763ed45b28a3234d0dJakub Hrozek "PASSTHRU" and add "DELETED" override (NO-OP is
8a2a49333b7df3a4b86db42cd20ec8286d2788d3Pavel Březina still recognized)
8a2a49333b7df3a4b86db42cd20ec8286d2788d3Pavel Březina3169. [func] Catch db/version mis-matches when call dns_db_*().
cb4d5b588e704114b7090678752d33512baa718eJakub Hrozek3168. [bug] Nxdomain redirection could trigger an assert with
cb4d5b588e704114b7090678752d33512baa718eJakub Hrozek a ANY query. [RT #26017]
54c64aad71e6792edb7cf99988d9a7f4bc2b0c61Jakub Hrozek3167. [bug] Negative answers from forwarders were not being
54c64aad71e6792edb7cf99988d9a7f4bc2b0c61Jakub Hrozek correctly tagged making them appear to not be cached.
ba89271f594e5ed381b4dcb876a2d2787cf51902Jakub Hrozek3166. [bug] Upgrading a zone to support inline-signing failed.
ba89271f594e5ed381b4dcb876a2d2787cf51902Jakub Hrozek3165. [bug] dnssec-signzone could generate new signatures when
f199c749197532fd3380fa6f5d9f7a579879c21aJustin Stephenson resigning, even when valid signatures were already
f199c749197532fd3380fa6f5d9f7a579879c21aJustin Stephenson present. [RT #26025]
f199c749197532fd3380fa6f5d9f7a579879c21aJustin Stephenson3164. [func] Enable DLZ modules to retrieve client information,
38e8362ba7b0403527403d79b36d03a5dbd621acJakub Hrozek so that responses can be changed depending on the