CHANGES revision 70e041bea19b6ad9522b89c2299ad315a2deaafd
00f83773169d9020a3ddcdaf88b198a27f571ff8Mark Andrews4815. [bug] rbt_test.c:insert_and_delete needed to call
00f83773169d9020a3ddcdaf88b198a27f571ff8Mark Andrews dns_rbt_addnode instead of dns_rbt_addname. [RT #46553]
10e8f96abe072fcf4e0c938548f0970cd26f624cMark Andrews4814. [cleanup] Use AS_HELP_STRING for consistent help text. [RT #46521]
31b7a2fed64e388db772a74742a4adc95d1a21e6Mark Andrews4812. [bug] Minor improvements to stability and consistency of code
5567f54834089be35d0df6afe2ccfaa039ab2233Jeremy Reed handling managed keys. [RT #46468]
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews4810. [test] The chain system test failed if the IPv6 interfaces
ed4efb08050b31571c6b9540a2b78b502c667206Mark Andrews were not configured. [RT #46508]
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews4809. [port] Check at configure time whether -latomic is needed
13f4bdc9b4f7b438cf5c2a071f108211534fae3fMark Andrews for stdatomic.h. [RT #46324]
3efa3f07d51793a0e477d68787c210746b5d4af3Mark Andrews4808. [bug] Properly test for zlib.h. [RT #46504]
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews4805. [bug] TCP4Active and TCP6Active weren't being updated
914eeb33149a0008e26741d9e7d89dcd6f8b6d0bMark Andrews correctly. [RT #46454]
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt4804. [port] win32: access() does not work on directories as
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt required by POSIX. Supply a alternative in
a8673c536b5827d87ef6c50a04afd34af2253fd9Evan Hunt isc_file_isdirwritable. [RT #46394]
616b4544d0228604b1c5169b0c9d742f67567232Tatuya JINMEI 神明達哉4803. [bug] Backport parts of RT #45293 and RT #46267, specifically
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 the fix for RT #46055 and mkeys system test
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 improvements. [RT #46430]
bc4bc3579b92f2e4c6a6a2c5284d1c792c70e264Tatuya JINMEI 神明達哉4800. [bug] When processing delzone, write one zone config per
7781f25078c491a9650dec555bdc86cb0ed49861Tatuya JINMEI 神明達哉 line to the NZF. [RT #46323]
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉4799. [cleanup] Improve clarity of keytable unit tests. [RT #46407]
609f86163a9e80aa5ce0db79b67ee0b6e2a34b34Tatuya JINMEI 神明達哉4792. [bug] Fix map file header correctness check. [RT #38418]
1879dbe0d962f6f929417b02bf07f64ed41b1aabFrancis Dupont4791. [doc] Fixed outdated documentation about export libraries.
b393e55a763d2bb0f326706b3851a2a22fc389d5Francis Dupont4790. [bug] nsupdate could trigger a require when sending a
fa7ef31685393f7c7ba1cec485d8e395bfa28867Francis Dupont update to the second address of the server.
ddb35cf2f301ae1c3fa601792034f6d349efc8c5Mark Andrews4788. [cleanup] When using "update-policy local", log a warning
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 when an update matching the session key is received
4aa174ddd5556f6c1792c69546679b17f1ceec83Tatuya JINMEI 神明達哉 from a remote host. [RT #46213]
09d7358c48bb032566e5bb70703c2c3ea35a0cb2Mark Andrews4787. [cleanup] Turn nsec3param_salt_totext() into a public function,
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 dns_nsec3param_salttotext(), and add unit tests for it.
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉4783. [test] dnssec: 'check that NOTIFY is sent at the end of
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews NSEC3 chain generation failed' required more time
1ee054ca444765a3d1b98208c83115b4f34bebc2Mark Andrews on some machines for the IXFR to complete. [RT #46388]
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉4782. [test] dnssec: 'checking positive and negative validation
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 with negative trust anchors' required more time to
7f658603910358db7ee27ffb9783096250afab62Tatuya JINMEI 神明達哉 complete on some machines. [RT #46386]
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉4781. [maint] B.ROOT-SERVERS.NET is now 199.9.14.201. [RT #45889]
cb30636abd508693d0095e1956c9d91f87513a51Tatuya JINMEI 神明達哉4780. [bug] When answering ANY queries, don't include the NS
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews RRset in the authority section if it was already
8bf0c05627a8175750f941db30e9df2c699aa90aMark Andrews in the answer section. [RT #44543]
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉4779. [bug] Expire NTA at the start of the second. Don't update
10a6f640ed599cbe4a8b98c46b71a61d24e5bbe7Tatuya JINMEI 神明達哉 the expiry value if the record has already expired
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉 after a successful check. [RT #46368]
96465858fa1165860353dfdd4d5db348388d191eTatuya JINMEI 神明達哉4777. [cleanup] Removed a redundant call to configure_view_acl().
47d89fcd4fb850b066f87dc3313afe1cfe92cd99Mark Andrews4776. [bug] Improve portability of ht_test. [RT #46333]
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews4775. [bug] Address Coverity warnings in ht_test.c [RT #46281]
a5746c4ec14e5dbcb6a2431aa86cc86c21387e6bMark Andrews4774. [bug] <isc/util.h> was incorrectly included in several
b06e03490604f5d9b590dad143e65d533918481bMark Andrews header files. [RT #46311]
8684cd3a6f1437a3c1ff6ca852e1db6d40ce6303Mark Andrews4773. [doc] Fixed generating Doxygen documentation for functions
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews annotated using certain macros. Miscellaneous
92241b04f16e1095a53f2c75e7987381dd0773afMark Andrews Doxygen-related cleanups. [RT #46276]
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉4771. [bug] When sending RFC 5011 refresh queries, disregard
43c68170fe528dfbe153e5813049f129e12d0620Tatuya JINMEI 神明達哉 cached DNSKEY rrsets. [RT #46251]
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews4770. [bug] Cache additional data from priming queries as glue.
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews Previously they were ignored as unsigned
69f0cf898e3ca5c701fb34d7074cc9897d71f4a0Mark Andrews non-answer data from a secure zone, and never
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews actually got added to the cache, causing hints
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews to be used frequently for root-server
9908cbc06f89c8d44f092708a43ae3a6e7a4416cMark Andrews addresses, which triggered re-priming. [RT #45241]
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews4769. [bug] Enforce the requirement that the managed keys
2e61d171bc1fa47ea4d551b87546ebcf78f61e4aMark Andrews directory (specified by "managed-keys-directory",
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews and defaulting to the working directory if not
d8fc8514b117e636b791bef429d64a7c7a75a4cfMark Andrews specified) must be writable. [RT #46077]
9935447b51456f598b45246d0114b8006049244dMark Andrews4766. [cleanup] Addresss Coverity warnings. [RT #46150]
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews4763. [contrib] Improve compatibility when building MySQL DLZ
175a8bd2b798bbc568cd912b72c8a026cfca8527Mark Andrews module by using mysql_config if available.
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews4762. [func] "update-policy local" is now restricted to updates
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews from local addresses. (Previously, other addresses
46018d5d233cffdea765b3298ac8153c77b26383Mark Andrews were allowed so long as updates were signed by the
4e59e2e59b17c4e30eef801929bca91800be833eFrancis Dupont local session key.) [RT #45492]
47d9a2bec1fee2f6c7a9cee3ca922140840223eeMark Andrews4761. [protocol] Add support for DOA. [RT #45612]
9019569316e39087410336bb76c02bf185974fe3Mark Andrews4759. [func] Add logging channel "trust-anchor-telementry" to
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews record trust-anchor-telementry in incoming requests.
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews Both _ta-XXXX.<anchor>/NULL and EDNS KEY-TAG options
ac4b736ab20cc1098448028c4ae3db7a50e96123Mark Andrews are logged. [RT #46124]
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉4758. [doc] Remove documentation of unimplemented "topology".
eb8265942b3019d34e365432314b63decc84728fTatuya JINMEI 神明達哉4756. [bug] Interrupting dig could lead to an INSIST failure after
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews certain errors were encountered while querying a host
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews whose name resolved to more than one address. Change
e7ba4d8dc4559ff47f7f8298dad1469275ed0f1eMark Andrews 4537 increased the odds of triggering this issue by
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews causing dig to hang indefinitely when certain error
81e5de17419f2e6f80ce76c333159ca9feb67b8cMark Andrews paths were evaluated. dig now also retries TCP queries
50df1ec60af410fca6b7a85d5c85e8f31bb13bc3Mark Andrews (once) if the server gracefully closes the connection
50df1ec60af410fca6b7a85d5c85e8f31bb13bc3Mark Andrews before sending a response. [RT #42832, #45159]
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews4755. [cleanup] Silence unnecessary log message when NZF file doesn't
da2d57c8cf7e18c8ab1fbcc8e5f2001fb2f02cb1Mark Andrews exist. [RT #46186]
ef4eed2a2a8897bd4e5b19dd94f638e0861ebda5Mark Andrews4754. [bug] dns_zone_setview needs a two stage commit to properly
ef4eed2a2a8897bd4e5b19dd94f638e0861ebda5Mark Andrews handle errors. [RT #45841]
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews4753. [contrib] Software obtainable from known upstream locations
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews (i.e., zkt, nslint, query-loc) has been removed.
7d89c53f6e8dcbac40334156aa999a13e6af189cMark Andrews Links to these and other packages can be found at
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews https://www.isc.org/community/tools [RT #46182]
96b3cb85d3b06d99323a6ea7ae04f4eb3d74e8bcMark Andrews4752. [test] Add unit test for isc_net_pton. [RT #46171]
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews4749. [func] The ISC DLV service has been shut down, and all
dc143a8f5cc8b2893f5b63077224f091f8c51862Mark Andrews DLV records have been removed from dlv.isc.org.
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 - Removed references to ISC DLV in documentation
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 - Removed DLV key from bind.keys
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉 - No longer use ISC DLV by default in delv
f99fd90097c3260a14eca9ee5aa8c4c4d50ebca7Tatuya JINMEI 神明達哉4748. [cleanup] Sprintf to snprintf coversions. [RT #46132]
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews4746. [cleanup] Add configured prefixes to configure summary
582f8b9a8d170a80ef67475bddb8ad5cf7cd7cadMark Andrews output. [RT #46153]
09b45f7b5800c4dbb86846dea35e8aba0a25b0d0Mark Andrews4745. [test] Add color-coded pass/fail messages to system
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews tests when running on terminals that support them.
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews4744. [bug] Suppress trust-anchor-telementry queries if
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews validation is disabled. [RT #46131]
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews4741. [bug] Make isc_refcount_current() atomically read the
f6f1672b4e460571c418e43ae3bd0fae97e4c149Mark Andrews counter value. [RT #46074]
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews4740. [cleanup] Avoid triggering format-truncated warnings. [RT #46107]
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews4739. [cleanup] Address clang static analysis warnings. [RT #45952]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews4738. [port] win32: strftime mishandles %Z. [RT #46039]
a14aff6984062f01b6d88f485f0a3f68d99fc174Mark Andrews4737. [cleanup] Address Coverity warnings. [RT #46012]
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont4736. [cleanup] (a) Added comments to NSEC3-related functions in
7b1a7a098b51381f06277860a40bd7f062c8ec19Francis Dupont lib/dns/zone.c. (b) Refactored NSEC3 salt formatting
bc3b1dbd69840bd7f2f0b6af2610603f334b369bFrancis Dupont code. (c) Minor tweaks to lock and result handling.
c19a57667e9b2ad12cc0df9a370fe0b8e87f0622Mark Andrews4735. [bug] Add @ISC_OPENSSL_LIBS@ to isc-config. [RT #46078]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews4734. [contrib] Added sample configuration for DNS-over-TLS in
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews4731. [bug] Fix use after free when closing an LMDB. [RT #46000]
736e6a6709b778d4d228441d9ac3b366e0dceb99Mark Andrews4730. [bug] Fix out of bounds access in DHCID totext() method.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed4729. [bug] Don't use memset() to wipe memory, as it may be
d1ec77294eb543bbca128d8683bdf9680cbedb61Mark Andrews removed by compiler optimizations when the
9d02618ca6b4d2e1737ba441449f61c1f04be685Mark Andrews memset() occurs on automatic stack allocation
9d02618ca6b4d2e1737ba441449f61c1f04be685Mark Andrews just before function return. [RT #45947]
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews4728. [func] Use C11's stdatomic.h instead of isc_atomic
a21884ae7bec40b6fc2227ff112ecf5a7cffc4fdMark Andrews where available. [RT #40668]
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed4727. [bug] Retransferring an inline-signed slave using NSEC3
d63cfbfbf947d08d67561f4bef3bf7b688dfcbfaJeremy Reed around the time its NSEC3 salt was changed could result
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews in an infinite signing loop. [RT #45080]
86ee7433b38bb023912a73d842bdcef3d4871a90Mark Andrews4726. [port] Prevent setsockopt() errors related to TCP_FASTOPEN
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt from being logged on FreeBSD if the kernel does not
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt support it. Notify the user when the kernel does
06a230fe9fa2087a778ae0f199bda1b8fdd1e05cEvan Hunt support TCP_FASTOPEN, but it is disabled by sysctl.
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews Add a new configure option, --disable-tcp-fastopen, to
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews disable use of TCP_FASTOPEN altogether. [RT #44754]
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews4725. [bug] Nsupdate: "recvsoa" was incorrectly reported for
6d54a6fc180acaf8772c9447cb925b31f39c7158Mark Andrews failures in sending the update message. The correct
7ca0cdd7ecff4c0396970ed957df7d5d8c639abfMark Andrews location to be reported is "update_completed".
275b170cc47c897d25204fe23169dac810283f79Mark Andrews4723. [bug] Statistics counter DNSTAPdropped was misidentified
455ada05af05e39cdeb63297d60d36a0eca062e1Mark Andrews as DNSSECdropped. [RT #46002]
0d444dc136a1a8df89a329d7ad43c74e1db8dfbeMark Andrews4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
ff30270d6ccc27a7ce45853eb5637b6d69d8a5ebMark Andrews strlcpy() and strlcat() for safety. [RT #45981]
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews4719. [bug] Address PVS static analyzer warnings. [RT #45946]
4e9775118dbf128dd296f01638733ba221f76c34Mark Andrews4717. [bug] Treat replies with QCOUNT=0 as truncated if TC=1,
35378bcc6a6c95495e70bad92f245b6fa9c8292aTatuya JINMEI 神明達哉 FORMERR if TC=0, and log the error correctly.
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉4715. [bug] TreeMemMax was mis-identified as a second HeapMemMax
b05585dcfe270c40e309ff7304cf6b69d7390bdaTatuya JINMEI 神明達哉 in the Json cache statistics. [RT #45980]
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed4714. [port] openbsd/libressl: add support for building with
1f030ca8a3df943d8016cac39bc3018f5952126aJeremy Reed --enable-openssl-hash. [RT #45982]
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews4713. [cleanup] Minor revisions to RPZ code to reduce
698a4dcc8ae5c2a62a254ab2aff7b16d52598cc0Mark Andrews differences with the development branch. [RT #46037]
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews4712. [bug] "dig +domain" and "dig +search" didn't retain the
88674be66567d3c7db91e717cd5972655e2e2488Mark Andrews search domain when retrying with TCP. [RT #45547]
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews4711. [test] Some RR types were missing from genzones.sh.
1f3e0508c2146b473838899429f44e72c52b32f4Mark Andrews4709. [cleanup] Use dns_name_fullhash() to hash names for RRL.
d7896edb4e93c4785a9281ea86afba86b758e813Mark Andrews4703. [bug] BINDInstall.exe was missing some buffer length checks.
0db6bf459f7afa1f9dc0690a521df19955c89dbfJeremy Reed4698. [port] Add --with-python-install-dir configure option to allow
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews specifying a nonstandard installation directory for
99a522dad7623549cd5e32a4968e6de8eca46ff1Mark Andrews Python modules. [RT #45407]
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews4697. [bug] Restore workaround for Microsoft Windows TSIG hash
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews computation bug. [RT #45854]
b90d59882c3b0bbe5dafe27c51c274f0b5912f65Mark Andrews4696. [port] Enable filter-aaaa support by default on Windows
cd6555930b6829ebce8bbf2adc7ba05111edf595Mark Andrews builds. [RT #45883]
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉4695. [bug] cookie-secrets were not being properly checked by
369e148f307a322206a460f9fd470927bcc756d0Tatuya JINMEI 神明達哉 named-checkconf. [RT #45886]
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉4692. [bug] Fix build failures with libressl introduced in 4676.
2be6798f93e7ba1f4c4082e7b0837c7668a06dcaTatuya JINMEI 神明達哉4690. [bug] Command line options -4/-6 were handled inconsistently
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt between tools. [RT #45632]
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt4689. [cleanup] Turn on minimal responses for CDNSKEY and CDS in
b0bf1ad5b0b1d29b4cdf5de9789405aec5e0844cEvan Hunt addition to DNSKEY and DS. Thanks to Tony Finch.
eab4a5c29ddda688d975ad59a55a965b16534432Mark Andrews4688. [protocol] Check and display EDNS KEY TAG options (RFC 8145) in
21d493fc392d472086ad3c7c4563b7cadcb06788Mark Andrews messages. [RT #44804]
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews4686. [bug] dnssec-settime -p could print a bogus warning about
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews key deletion scheduled before its inactivation when a
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews key had an inactivation date set but no deletion date
5737b74d34b1eab413f4a5734714bb176c5cc849Mark Andrews set. [RT #45807]
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews4685. [bug] dnssec-settime incorrectly calculated publication and
19e4588ed76d6832be4de0813b6108a292ef413aMark Andrews activation dates for a successor key. [RT #45806]
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed4684. [bug] delv could send bogus DNS queries when an explicit
48a866144e3b14efa6c51af05ef7641b23c7516dJeremy Reed server address was specified on the command line along
143852efc066b3e3cd16eeec679016adbd450474Mark Andrews with -4/-6. [RT #45804]
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews4683. [bug] Prevent nsupdate from immediately exiting on invalid
6098d364b690cb9dabf96e9664c4689c8559bd2eMark Andrews user input in interactive mode. [RT #28194]
11dbf2fc38eea8c5d3fe7123718bf197a8bb2e6bMark Andrews4682. [bug] Don't report errors on records below a DNAME.
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉4680. [bug] Fix failing over to another master server address when
eeaa2277ead6df7253a8958ee2d786f73e05b8beTatuya JINMEI 神明達哉 nsupdate is used with GSS-API. [RT #45380]
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews4679. [cleanup] Suggest using -o when dnssec-verify finds a SOA record
cfef3799266c3955a3e19df5794b7994d4dd7bdbMark Andrews not at top of zone and -o is not used. [RT #45519]
ce688d65947a05561509aef48c8c240130d443eaMark Andrews4678. [bug] geoip-use-ecs has the wrong type when geoip support
c6c09f77f85860b6e084b0daad066ded08729b3eMark Andrews is disabled at configure time. [RT #45763]
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff4677. [cleanup] Split up the main function in dig to better support
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff the iOS app version. [RT #45508]
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff4676. [cleanup] Allow BIND to be built using OpenSSL 1.0.X with
467e6fd1672fb35968f522e1ef11a7e2e0cb701eMichael Graff deprecated functions removed. [RT #45706]
896f88361ec8a15a20688eb533a65977ee698974Mark Andrews4675. [cleanup] Don't use C++ keyword class. [RT #45726]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt4673. [port] Silence GCC 7 warnings. [RT #45592]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt4671. [bug] Fix a race condition that could cause the
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt resolver to crash with assertion failure when
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt chasing DS in specific conditions with a very
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt short RTT to the upstream nameserver. [RT #45168]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt4670. [cleanup] Ensure that a request MAC is never sent back
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews in an XFR response unless the signature was
8760bb9e0c48dad3765571b6e1ce193548fc5e37Evan Hunt verified. [RT #45494]
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt4668. [bug] Use localtime_r and gmtime_r for thread safety.
b247f77228f00e16dd43b4d570ad0fb15e88f3edMark Andrews4667. [cleanup] Refactor RDATA unit tests. [RT #45610]
aeadcd63196f164b219629a53c0e0925519288f3Evan Hunt4666. [bug] dnssec-keymgr: Domain names beginning with digits (0-9)
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews could cause a parser error when reading the policy
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews file. This now works correctly so long as the domain
baeed3c40fc0a2f30ef399899e16ded472f04c06Evan Hunt name is quoted. [RT #45641]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews4665. [protocol] Added support for ED25519 and ED448 DNSSEC signing
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews algorithms (RFC 8080). (Note: these algorithms
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews depend on code currently in the development branch
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews of OpenSSL which has not yet been released.)
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews4663. [cleanup] Clarify error message printed by dnssec-dsfromkey.
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews4662. [performance] Improve cache memory cleanup of zero TTL records
470212919fb8a92cd7eb621e981905348eb73ccaMark Andrews by putting them at the tail of LRU header lists.
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews4661. [bug] A race condition could occur if a zone was reloaded
e72c1e7e465822fc9b5067b2dd3cf047f6132214Mark Andrews while resigning, triggering a crash in
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews rbtdb.c:closeversion(). [RT #45276]
a8f6b2aa46f882c7c680b7bdab1dfb78a76787eaMark Andrews4660. [bug] Remove spurious "peer" from Windows socket log
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews messages. [RT #45617]
c6a1797aff73b707b4b7a71fdaa303136953d2a3Mark Andrews4659. [bug] Remove spurious log message about lmdb-mapsize
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews not being supported when parsing builtin
1e0209137159d4e16e4459cc8e804d657aad1af1Mark Andrews configuration file. [RT #45618]
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews4658. [bug] Clean up build directory created by "setup.py install"
275b170cc47c897d25204fe23169dac810283f79Mark Andrews immediately. [RT #45628]
5e3f390f057801d245680b07dc2b2d64939183d4Mark Andrews4657. [bug] rrchecker system test result could be improperly
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉 determined. [RT #45602]
ebacb7908afe3d62fe341f7ef9efed63d0c651a2Tatuya JINMEI 神明達哉4656. [bug] Apply "port" and "dscp" values specified in catalog
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews zone's "default-masters" option to the generated
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews configuration of its member zones. [RT #45545]
3dfa202e4fea6b985bcf8761e2d11c176baa40d1Mark Andrews4655. [bug] Lack of seccomp could be falsely reported. [RT #45599]
5ce9206eb95c2b818a7f863dd26d9b7a2c3d9261Evan Hunt4654. [cleanup] Don't use C++ keywords delete, new and namespace.
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt4652. [bug] Nsupdate could attempt to use a zeroed address on
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt server timeout. [RT #45417]
a45f57a2d5fa5a4cb50c4232c09dd7676a256599Evan Hunt4651. [test] Silence coverity warnings in tsig_test.c. [RT #45528]
1bfe8851c0a2eb1d7e15556bfa21291cd62ee2bcMark Andrews --- 9.11.2 released ---
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 --- 9.11.2rc2 released ---
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉4653. [bug] Reorder includes to move @DST_OPENSSL_INC@ and
13d9b8ce94aee267761cd297a583e280df262d60Tatuya JINMEI 神明達哉 @ISC_OPENSSL_INC@ after shipped include directories.
275b170cc47c897d25204fe23169dac810283f79Mark Andrews --- 9.11.2rc1 released ---
691f1f7731d175c7b2e21fbcc8d16a0c323e209aMark Andrews4649. [bug] The wrong zone was logged when a catalog zone is added.
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews4648. [bug] "rndc reconfig" on a slave no longer causes all member
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews zones of configured catalog zones to be removed from
2f420f33bbd5a84eee03b5f9b608e79acf06cb29Mark Andrews configuration. [RT #45310]
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉4647. [bug] Change 4643 broke verification of TSIG signed TCP
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉 message sequences where not all the messages contain
b049b8ce6a70f13f8cc8e33bfb16e1871282f700Tatuya JINMEI 神明達哉 TSIG records. These may be used in AXFR and IXFR
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉 responses. [RT #45509]
e2fe1fda755f24f593406dc26fed87e8ea1bb502Tatuya JINMEI 神明達哉4645. [bug] Fix PKCS#11 RSA parsing when MD5 is disabled.
cf225ed6cd51f9acc901a60520a9368e14224a4dTatuya JINMEI 神明達哉 --- 9.11.2b1 released ---
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉4643. [security] An error in TSIG handling could permit unauthorized
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉 zone transfers or zone updates. (CVE-2017-3142)
52d5489b9563ae7a0b89aafbce6829802255b151Tatuya JINMEI 神明達哉 (CVE-2017-3143) [RT #45383]
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉4642. [cleanup] Add more logging of RFC 5011 events affecting the
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉 status of managed keys: newly observed keys,
515ada69db06a727ca1197e2aa1f6a286d278228Tatuya JINMEI 神明達哉 deletion of revoked keys, etc. [RT #45354]
387bca7a55c0581dc36edb4a5071cb5e1d1c34f6Tatuya JINMEI 神明達哉4641. [cleanup] Parallel builds (make -j) could fail with --with-atf /
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed --enable-developer. [RT #45373]
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉4640. [bug] If query_findversion failed in query_getdb due to
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉 memory failure the error status was incorrectly
cd9bebfc4c225931391c7d9ce1cfd88394b23f20Tatuya JINMEI 神明達哉 discarded. [RT #45331]
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉4639. [bug] Fix a regression in --with-tuning reporting introduced
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉 by change 4488. [RT #45396]
476de6f1566ce5ec057ab39f361907da355296b1Tatuya JINMEI 神明達哉4638. [bug] Reloading or reconfiguring named could fail on
04115a59c176759177545c72376e844e10dc557cMark Andrews some platforms when LMDB was in use. [RT #45203]
b1f7d25ee1792838aa5e5d81f4433b474d4565a2Mark Andrews4636. [bug] Normalize rpz policy zone names when checking for
4db36a15c5716050d40aa8e709e8c8e9475ea25bMark Andrews existence. [RT #45358]
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉4635. [bug] Fix RPZ NSDNAME logging that was logging
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉 failures as NSIP. [RT #45052]
a9579d3386009446d7527ef52fa28251ab8c3c2cTatuya JINMEI 神明達哉4634. [contrib] check5011.pl needs to handle optional space before
146484aced3e6c1b9cc88db5e75b8cbfd166f701Mark Andrews semi-colon in +multi-line output. [RT #45352]
593bb6464621c50ceec0e5550045f4b405558548Evan Hunt4633. [maint] Updated AAAA (2001:500:200::b) for B.ROOT-SERVERS.NET.
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt4632. [security] The BIND installer on Windows used an unquoted
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt service path, which can enable privilege escalation.
e43b095921450c34288cadc3406f49c84a0e4d46Evan Hunt (CVE-2017-3141) [RT #45229]
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews4631. [security] Some RPZ configurations could go into an infinite
7999db4215b9398d4598ac0156ff097cda40402bMark Andrews query loop when encountering responses with TTL=0.
481e9b573b8233f8678c1dd4549c8c949312e81dMark Andrews (CVE-2017-3140) [RT #45181]
cbb8a1b7cbab933795ddee4f05f4eb5074a68e6cFrancis Dupont4630. [bug] "dyndb" is dependent on dlopen existing / being
cbb8a1b7cbab933795ddee4f05f4eb5074a68e6cFrancis Dupont enabled. [RT #45291]
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont4629. [bug] dns_client_startupdate could not be called with a
bd7e02a3378274436e30beecca33bf7889182776Francis Dupont running client. [RT #45277]
0cdb53f093f5814b40a68848025dd8d7e9ef2e9bTatuya JINMEI 神明達哉4628. [bug] Fixed a potential reference leak in query_getdb().
05b8187cb3cf03fbd75af1afdacc4aefb373e37bTatuya JINMEI 神明達哉4626. [test] Added more tests for handling of different record
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews ordering in CNAME and DNAME responses. [QA #430]
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews4625. [bug] Running "rndc addzone" and "rndc delzone" at close
f5662f41e73c27cc6e7fd29323c8dddf54dff982Mark Andrews to the same time could trigger a deadlock if using
0eeaaaf0ae1ae2856b94886fa80f94c21e6f1bfdMark Andrews LMDB. [RT #45209]
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews4623. [bug] Use --with-protobuf-c and --with-libfstrm to find
9de0f9b0aed432ee357dbba8d1d807525f4b6d4aMark Andrews protoc-c and fstrm_capture. [RT #45187]
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews4622. [bug] Remove unnecessary escaping of semicolon in CAA and
ee6c0ce79e83039c9f8692bfb6196e0bb591ff98Mark Andrews URI records. [RT #45216]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont4621. [port] Force alignment of oid arrays to silence loader
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont warnings. [RT #45131]
2ca30c1774245f3aa7e8a1f3781cb965152373d8Evan Hunt4620. [port] Handle EPFNOSUPPORT being returned when probing
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont to see if a socket type is supported. [RT #45214]
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont4619. [bug] Call isc_mem_put instead of isc_mem_free in
07d0f86c8a1591c0ee785d6728af69cb40f1da61Francis Dupont bin/named/server.c:setup_newzones. [RT #45202]
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt4618. [bug] Check isc_mem_strdup results in dns_view_setnewzones.
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt Add logging for lmdb call failures. [RT #45204]
3d8b9b9956b64aba0d105f955ac0354fbcf5baa9Tatuya JINMEI 神明達哉4617. [test] Update rndc system test to be more delay tolerant.
2f76108082f11d4979048f1c22602391c5733c88Tatuya JINMEI 神明達哉4616. [bug] When using LMDB, zones deleted using "rndc delzone"
7ed4399c6598276b76df95e6dc91ed7b2834abc6Evan Hunt were not correctly removed from the new-zone
c6678b68efae57ecaec97f489f6d9104f85ed0a8Mark Andrews database. [RT #45185]
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉4615. [bug] AD could be set on truncated answer with no records
7c60401dbd4dce617dffc685c269fca224c589adTatuya JINMEI 神明達哉 present in the answer and authority sections.
d923262186a3111a6ac7aae5dcd9996e01115a44Mark Andrews4614. [test] Fixed an error in the sockaddr unit test. [RT #45146]
f92c897cb69fbb8b7400a5df93271b0743fe9adeTatuya JINMEI 神明達哉4612. [bug] Silence 'may be use uninitalised' warning and simplify
f92c897cb69fbb8b7400a5df93271b0743fe9adeTatuya JINMEI 神明達哉 the code in lwres/getaddinfo:process_answer.
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉4611. [bug] The default LMDB mapsize was too low and caused
77514242b09538db8f3a8f96f7f3d368cff6ebbaTatuya JINMEI 神明達哉 errors after few thousand zones were added using
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 rndc addzone. A new config option "lmdb-mapsize"
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 has been introduced to configure the LMDB
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉 mapsize depending on operational needs.
05e2cc844530031e4dd4e25b3826bece7a183ee1Tatuya JINMEI 神明達哉4609. [cleanup] Rearrange makefiles to enable parallel execution
0f39ff74a85e16cbfd30354e24403b1ee50e1104Tatuya JINMEI 神明達哉 (i.e. "make -j"). [RT #45078]
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews4608. [func] DiG now warns about .local queries which are reserved
7ecbfb6c0f566894fb7050e021cded6822771789Mark Andrews for Multicast DNS. [RT #44783]
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews4606. [port] Stop using experimental "Experimental keys on scalar"
8ef7b7f3f68a26cb60f98da398562f8d1c616f96Mark Andrews feature of perl as it has been removed. [RT #45012]
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews4604. [bug] Don't use ERR_load_crypto_strings() when building
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews with OpenSSL 1.1.0. [RT #45117]
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews4603. [doc] Automatically generate named.conf(5) man page
538a0a40a2c308a004ea40a9efd31c9aecb0f041Mark Andrews from doc/misc/options. Thanks to Tony Finch.
250dcb4cf5c356bb492c849edff5fe3c81f61f77Tatuya JINMEI 神明達哉4602. [func] Threads are now set to human-readable
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 names to assist debugging, when supported by
4875b50dca297a5d2082f503da31eaab896b3a8fTatuya JINMEI 神明達哉 the OS. [RT #43234]
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews4601. [bug] Reject incorrect RSA key lengths during key
d87ad693fc0e91168da01f887cc6ae318b6b7f3eMark Andrews generation and and sign/verify context
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews creation. [RT #45043]
8aae2264818e1511fa30c3ef5c3dc7669e347d3cTatuya JINMEI 神明達哉4600. [bug] Adjust RPZ trigger counts only when the entry
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews being deleted exists. [RT #43386]
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt4599. [bug] Fix inconsistencies in inline signing time
080a964a3f0622f2e343f114aa1cc066372c06caEvan Hunt comparison that were introduced with the
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews introduction of rdatasetheader->resign_lsb.
d230b29aba3ce1d0362194801c34321ed22f5aa5Evan Hunt4597. [bug] The validator now ignores SHA-1 DS digest type
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews when a DS record with SHA-384 digest type is
5a17fe2916ce37793c12b243ab08c16095a59cf7Evan Hunt present and is a supported digest type.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews4596. [bug] Validate glue before adding it to the additional
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews section. This also fixes incorrect TTL capping
c72279e756e6578dc8f09ceac5158d80a8a61ce5Evan Hunt when the RRSIG expired earlier than the TTL.
e1aeb1569a0ae08c97dd76acb00376e4246e59b8Mark Andrews4593. [doc] Update README using markdown, remove outdated FAQ
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews file in favor of the knowledge base.
0415ca35ada2cac6a86127eaca64f3a997aea121Evan Hunt4592. [bug] A race condition on shutdown could trigger an
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews assertion failure in dispatch.c. [RT #43822]
69ec1b7eb3be37f06b53f572f6c33622e95a7935Evan Hunt4591. [port] Addressed some python 3 compatibility issues.
816496b22114ee7c2c15321c2c6cc4be77fdf822Mark Andrews Thanks to Ville Skytta. [RT #44955] [RT #44956]
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews4590. [bug] Support for PTHREAD_MUTEX_ADAPTIVE_NP was not being
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews properly detected. [RT #44871]
229442301442890aee044a0df54d3787acd68e65Mark Andrews4589. [cleanup] "configure -q" is now silent. [RT #44829]
229442301442890aee044a0df54d3787acd68e65Mark Andrews4588. [bug] nsupdate could send queries for TKEY to the wrong
8b56b8956fc1e6c70efacb4f71db28d0d1f0c577Mark Andrews server when using GSSAPI. Thanks to Tomas Hozza.
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews4587. [bug] named-checkzone failed to handle occulted data below
ae6942e3d1fc7327ba5df9d638e0af15a908f8fbMark Andrews DNAMEs correctly. [RT #44877]
2284b84d74cdfd62ecb962feb850de981bbc2196Evan Hunt4586. [func] dig, host and nslookup now use TCP for ANY queries.
bf64a0d5d9469c42622401bc5d55cf9888eeef44Tatuya JINMEI 神明達哉4585. [port] win32: Set CompileAS value. [RT #42474]
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff4584. [bug] A number of memory usage statistics were not properly
00c93a6214214772d4952cd4327aa34670c763bcMichael Graff reported when they exceeded 4G. [RT #44750]
375e2c913a21cb852310418785f359a6b21b851dMark Andrews4574. [bug] Dig leaked memory with multiple +subnet options.
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews4555. [func] dig +ednsopt: EDNS options can now be specified by
0f4a4d46abe13df2c367aa8dffaad685c20eaadaMark Andrews name in addition to numeric value. [RT #44461]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews --- 9.11.1 released ---
c4fadc88619959582ac89b841c489be0519ae79dTatuya JINMEI 神明達哉 --- 9.11.1rc3 released ---
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews4582. [security] 'rndc ""' could trigger a assertion failure in named.
8907d8fa04fdaa65baf0bc6b01230b2ebde93106Mark Andrews (CVE-2017-3138) [RT #44924]
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews4581. [port] Linux: Add getpid and getrandom to the list of system
d904beeb3bf62d60e25f76e1ac9c4b78278c14edMark Andrews calls named uses for seccomp. [RT #44883]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews4580. [bug] 4578 introduced a regression when handling CNAME to
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews referral below the current domain. [RT #44850]
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews --- 9.11.1rc2 released ---
db30f4bdcb66afb7eb1ab0c6882cc70be9a53d79Mark Andrews4578. [security] Some chaining (CNAME or DNAME) responses to upstream
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews queries could trigger assertion failures.
887ef2682c6f66f9dcd6604c4ccf8f87894ef2a9Mark Andrews (CVE-2017-3137) [RT #44734]
420ed91d3ed516bc9d5edf2e942ae792d17d11b4Mark Andrews4575. [security] DNS64 with "break-dnssec yes;" can result in an
07555e64d9102eae058efd58f872b4a3b9ddff61Mark Andrews assertion failure. (CVE-2017-3136) [RT #44653]
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews --- 9.11.1rc1 released ---
a76b380643a22f23a67a9df284e86cd7ef7608c1Mark Andrews4571. [bug] Out-of-tree builds of backtrace_test failed.
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont4570. [cleanup] named did not correctly fall back to the built-in
8d460bed78e2684fbb0cb150bbf800dcc4d29c54Mark Andrews initializing keys if the bind.keys file was present
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews but empty. [RT #44531]
fe3f310e2ed5cc5d7401ddfa5d222730a405dcf5Mark Andrews4569. [func] Store both local and remote addresses in dnstap
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont logging, and modify dnstap-read output format to
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont print them. [RT #43595]
4a253e12fc611763cd7c1b793e78a00d47894399Francis Dupont4568. [contrib] Added a --with-bind option to the dnsperf configure
cffe96e26744abcf33494837b234219046a631d8Mark Andrews script to specify BIND prefix path.
cffe96e26744abcf33494837b234219046a631d8Mark Andrews4567. [port] Call getprotobyname and getservbyname prior to calling
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews chroot so that shared libraries get loaded. [RT #44537]
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews4565. [cleanup] The inline macro versions of isc_buffer_put*()
f703353673abc17ef76c89561a1fbf3555d38927Mark Andrews did not implement automatic buffer reallocation.
7e26a2a646877bcd5e03fce6d7347e88f059011eMark Andrews4564. [maint] Update the built in managed keys to include the
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉 upcoming root KSK. [RT #44579]
a95a9de45ca739dab17ec1263186dbaaaba50d97Tatuya JINMEI 神明達哉4563. [bug] Modified zones would occasionally fail to reload.
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews4561. [port] Silence a warning in strict C99 compilers. [RT #44414]
55f580c7fc4b99316a54ef54ed79c58efca5fff1Mark Andrews4560. [bug] mdig: add -m option to enable memory debugging rather
d9936b218d9d0fd7c6a1a418e5b91b356190ea12Mark Andrews than having it on all the time. [RT #44509]
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews4559. [bug] openssl_link.c didn't compile if ISC_MEM_TRACKLINES
4074b8e7342618ff38ffe3773a2699ee1734f1adMark Andrews was turned off. [RT #44509]
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews4558. [bug] Synthesised CNAME before matching DNAME was still
664e11f0b14c78cef7cf6b8c70323a1da494e351Mark Andrews being cached when it should not have been. [RT #44318]
016c4317500eb565b82b27d00ba6b621c6e29110Mark Andrews4557. [security] Combining dns64 and rpz can result in dereferencing
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews a NULL pointer (read). (CVE-2017-3135) [RT#44434]
ce9c1558a6c81b49a5cedf55d168f889aeb5d310Mark Andrews4554. [bug] Remove double unlock in dns_dispatchmgr_setudp.
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews4553. [bug] Named could deadlock there were multiple changes to
0f3264c8d1b66de8dedd137d53615b8a8556adfaMark Andrews NSEC/NSEC3 parameters for a zone being processed at
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews the same time. [RT #42770]
0e30609d7b3e31e3ff249d185041b9140b5410baMark Andrews4552. [bug] Named could trigger a assertion when sending notify
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews messages. [RT #44019]
9e8947d9e606b967d0792d0ab1ee7afac5e5f39dMark Andrews4551. [test] Add system tests for integrity checks of MX and
3cff31d890bf0815b6b2c7603d1e5c37dc3f26b7Mark Andrews SRV records. [RT #43953]
2005c3b37bb39a37dc0b034bb2149006df7e3759Mark Andrews4550. [cleanup] Increased the number of available master file
aef875b27e94586a1f3644d53705e6f5ea4b5dafMark Andrews output style flags from 32 to 64. [RT #44043]
c09c2bf800ba0f5e6efe6b47ba72f43e4a61ca7dMark Andrews4547. [port] Add support for --enable-native-pkcs11 on the AEP
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews Keyper HSM. [RT #42463]
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews --- 9.11.1b1 released ---
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews4545. [func] Expand YAML output from dnstap-read to include
9a7d202077fae00fbdca610d8a8d90689e30f331Mark Andrews a detailed breakdown of the DNS message contents.
4a5b30c24ca7ceefec4ca142069b886f3d4ab9f9Mark Andrews4544. [bug] Add message/payload size to dnstap-read YAML output.
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews4543. [bug] dns_client_startupdate now delays sending the update
f1d6c77eccf502398ae5954fb884bde70764a047Mark Andrews request until isc_app_ctxrun has been called.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4541. [bug] rndc addzone should properly reject non master/slave
7adca0ea2fcd44641861523b718d6980c0666103Mark Andrews zones. [RT #43665]
5badfc7e00b2ec2c7b93657906b8609114ee00ccMark Andrews4540. [bug] Correctly handle ecs entries in dns_acl_isinsecure.
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews4539. [bug] Referencing a nonexistent zone with RPZ could lead
dc2a0aa7aaa8b85398ae183c7274c0eeec5009afMark Andrews to a assertion failure when configuring. [RT #43787]
1fa2ce7eaef0c17d554495220565b681639b2ce5Mark Andrews4538. [bug] Call dns_client_startresolve from client->task.
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉4537. [bug] Handle timeouts better in dig/host/nslookup. [RT #43576]
7ae2fa27e921ff5a2de4b0bb3aef5013315e92a8Tatuya JINMEI 神明達哉4536. [bug] ISC_SOCKEVENTATTR_USEMINMTU was not being cleared
7fe86a54252bab063030512a0e4150e1b7814effMark Andrews when reusing the event structure. [RT #43885]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4535. [bug] Address race condition in setting / testing of
1c3ed2a83d176d9023b51b60dfc96c133f678362Tatuya JINMEI 神明達哉 DNS_REQUEST_F_SENDING. [RT #43889]
e951a79d901cc9b72a4882c38f02b568eed6bf24Mark Andrews4534. [bug] Only set RD, RA and CD in QUERY responses. [RT #43879]
e951a79d901cc9b72a4882c38f02b568eed6bf24Mark Andrews4533. [bug] dns_client_update should terminate on prerequisite
9a727082a0f4959d4ad5ee91c171c2fad92ac996Mark Andrews failures (NXDOMAIN, YXDOMAIN, NXRRSET, YXRRSET)
a59640bf27db16e02e01484297e36b7456e163bbMark Andrews and also on BADZONE. [RT #43865]
4462e590791925b6a5efceacbff054a6b5fe35edMark Andrews4532. [contrib] Make gen-data-queryperf.py python 3 compatible.
9925249931480c9e422b70c948b2665264ec46f5Mark Andrews4531. [security] 'is_zone' was not being properly updated by redirect2
fc7043d7d1294478c9988c10af9a7fb8fd810338Evan Hunt and subsequently preserved leading to an assertion
fc7043d7d1294478c9988c10af9a7fb8fd810338Evan Hunt failure. (CVE-2016-9778) [RT #43837]
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews4530. [bug] Change 4489 broke the handling of CNAME -> DNAME
cef715b6556ca1207b85aa1eac6ce817af2be44eMark Andrews in responses resulting in SERVFAIL being returned.
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews4529. [cleanup] Silence noisy log warning when DSCP probe fails
5497de6931b5ac26f65c2343b0318614f73933baMark Andrews due to firewall rules. [RT #43847]
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews4528. [bug] Only set the flag bits for the i/o we are waiting
f86c5d30de5d2bf4a4aab98f72295309d62e92eeMark Andrews for on EPOLLERR or EPOLLHUP. [RT #43617]
262c39b2366bf79062f7f86b218947523dd1cbacEvan Hunt4527. [doc] Support DocBook XSL Stylesheets v1.79.1. [RT #43831]
1ff207c2fa4182156932f3f5c982170385a19225Mark Andrews4526. [doc] Corrected errors and improved formatting of
b1e32169ac5cf21fca540fa122a546db71090491Mark Andrews grammar definitions in the ARM. [RT #43739]
1aba9fe67899522364a9dbc3ee5a14da081f0314Evan Hunt4525. [doc] Fixed outdated documentation on managed-keys.
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews4524. [bug] The net zero test was broken causing IPv4 servers
546c2bf791782df1077217bdaf1865235fa95a93Mark Andrews with addresses ending in .0 to be rejected. [RT #43776]
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews4523. [doc] Expand config doc for <querysource4> and
6c7f722d31d12cf83964c8132f0a59ef70e34cb5Mark Andrews <querysource6>. [RT #43768]
fcc2a57e13fbecf085e9d11702709b3d5a49b043Mark Andrews4522. [bug] Handle big gaps in log file version numbers better.
fcdafc1e30dd4d10184b56201ea2fc3bab711e5eMark Andrews4521. [cleanup] Log it as an error if an entropy source is not
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews found and there is no fallback available. [RT #43659]
f1263d2aa405087e74caf001cd443079f50ee903Mark Andrews4520. [cleanup] Alphabetize more of the grammar when printing it
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews out. Fix unbalanced indenting. [RT #43755]
b1d21f6c93c93bd27492fc41f1c3205c39ab2167Mark Andrews4519. [port] win32: handle ERROR_MORE_DATA. [RT #43534]
efb3fa669f00ccfd9aada997b426616b6b0ce044Mark Andrews4517. [security] Named could mishandle authority sections that were
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews missing RRSIGs triggering an assertion failure.
034f775ae1bbc260d88bc372f01fdf4b50554514Mark Andrews (CVE-2016-9444) [RT # 43632]
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews4516. [bug] isc_socketmgr_renderjson was missing from the
80f20cb452989a423ed0ab84cfbf67d258b92247Mark Andrews windows build. [RT #43602]
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews4515. [port] FreeBSD: Find readline headers when they are in
93ee06cbe34294c300834d383ff89162ad5c241aMark Andrews edit/readline/ instead of readline/. [RT #43658]
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews4514. [port] NetBSD: strip -WL, from ld command line. [RT #43204]
494143860bbe118050f46ecac3d196c779d4b7b0Mark Andrews4513. [cleanup] Minimum Python versions are now 2.7 and 3.2.
400a1b6604ede895cc8d67a7aa66796a5dbc75e4Mark Andrews4512. [bug] win32: @GEOIP_INC@ missing from delv.vcxproj.in.
c0fb34e8156aea6b7fde8488e7440524c703f22eMark Andrews4511. [bug] win32: mdig.exe-BNFT was missing Configure. [RT #43554]
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews4510. [security] Named mishandled some responses where covering RRSIG
48fa5940280d65a83b020cca12769b4cd0422e91Mark Andrews records are returned without the requested data
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉 resulting in a assertion failure. (CVE-2016-9147)
bfcc5ae79a46c5c55e6cf1a9fe4d70a957712d2bTatuya JINMEI 神明達哉4509. [test] Make the rrl system test more reliable on slower
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews machines by using mdig instead of dig. [RT #43280]
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews4508. [security] Named incorrectly tried to cache TKEY records which
1c9f629c181dfd14bb429a6699d22c3c023aa218Mark Andrews could trigger a assertion failure when there was
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews a class mismatch. (CVE-2016-9131) [RT #43522]
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews4507. [bug] Named could incorrectly log 'allows updates by IP
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews address, which is insecure' [RT #43432]
f61a7c87bf36b189d8f04ea4c8ab3ec55778355cMark Andrews4505. [port] Use IP_PMTUDISC_OMIT if available. [RT #35494]
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews4504. [security] Allow the maximum number of records in a zone to
2678fccde3453facce53f857d95fec30ca4a284fMark Andrews be specified. This provides a control for issues
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews raised in CVE-2016-6170. [RT #42143]
562460463b6f4c4d6f815c58c129451c82d66823Mark Andrews4503. [cleanup] "make uninstall" now removes files installed by
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews BIND. (This currently excludes Python files
577272cf7935770fa2ea817e656a572cdcd94eccMark Andrews due to lack of support in setup.py.) [RT #42192]
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews4502. [func] Report multiple and experimental options when printing
8486ce1efa5deded85415d21d5696e5a51c63357Mark Andrews grammar. [RT #43134]
92f60809e854ccf5f115883c6347e370da048848Mark Andrews4500. [bug] Support modifier I64 in isc__print_printf. [RT #43526]
92f60809e854ccf5f115883c6347e370da048848Mark Andrews4499. [port] MacOSX: silence deprecated function warning
92f60809e854ccf5f115883c6347e370da048848Mark Andrews by using arc4random_stir() when available
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews instead of arc4random_addrandom(). [RT #43503]
f5d0f495847eb4eb9f0058e73051f855800bee0bMark Andrews4498. [test] Simplify prerequisite checks in system tests.
dc0ecf08dbea81b6ebfcd3a18b52aa974472b1baMark Andrews4497. [port] Add support for OpenSSL 1.1.0. [RT #41284]
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews4496. [func] dig: add +idnout to control whether labels are
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews display in punycode or not. Requires idn support
dc19dcbc236bc876a6cdb426ec7c5fab964f8dfcMark Andrews to be enabled at compile time. [RT #43398]
114c14f8adfc249cf2e5cdcb9007af46fed257e3Mark Andrews4495. [bug] A isc_mutex_init call was not being checked.
3d78993c6d415f600f57520d1566627b5535d715Mark Andrews4494. [bug] Look for <editline/readline.h>. [RT #43429]
8c850a29eda020642c84038e449d60f124c6123bMark Andrews4493. [bug] bin/tests/system/dyndb/driver/Makefile.in should use
8c850a29eda020642c84038e449d60f124c6123bMark Andrews SO_TARGETS. [RT# 43336]
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews4492. [bug] irs_resconf_load failed to initialize sortlistnxt
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews causing bad writes if resolv.conf contained a
da31aff2f2a2163dafeea65c63f16d8f3fca05c5Mark Andrews sortlist directive. [RT #43459]
e8ca2abed76b550fd3baddcfb17f2c9a630d6b71Mark Andrews4491. [bug] Improve message emitted when testing whether sendmsg
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews works with TOS/TCLASS fails. [RT #43483]
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews4490. [maint] Added AAAA (2001:500:12::d0d) for G.ROOT-SERVERS.NET.
81d9d7a10e52b421d7f4784c48ae995b13203c59Mark Andrews4489. [security] It was possible to trigger assertions when processing
301f6ffbbeabcbf765f8163f4ffb7f6f0146b926Mark Andrews a response containing a DNAME answer. (CVE-2016-8864)
9e4b25fc3eb5777202147634d789345d893b4539Mark Andrews4488. [port] Darwin: use -framework for Kerberos. [RT #43418]
28c49640dcb25102e5040b8d957edd905ddf82f8Mark Andrews4487. [test] Make system tests work on Windows. [RT #42931]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4486. [bug] Look in $prefix/lib/pythonX.Y/site-packages for
541b9722d8031485922ab11221c2e747c0262cf5Mark Andrews the python modules we install. [RT #43330]
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews4485. [bug] Failure to find readline when requested should be
ddaeaddf2b9148ce3e6ec5fecc48f64ea5826faeMark Andrews fatal to configure. [RT #43328]
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff4484. [func] Check prefixes in acls to make sure the address and
a6f7fdcc039de75e9a20da90044caa814f0357a3Michael Graff prefix lengths are consistent. Warn only in
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews BIND 9.11 and earlier. [RT #43367]
d7e8610d31d83ff863e8b2dc05c238376c35e949Mark Andrews4483. [bug] Address use before require check and remove extraneous
7e8214191899dc8043babdfbe9235ba14c825005Mark Andrews dns_message_gettsigkey call in dns_tsig_sign.
c4dc5966e0a66f4d75677f1634eff3b45baf988eMark Andrews4482. [cleanup] Change #4455 was incomplete. [RT #43252]
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt4478. [func] Add +continue option to mdig, allow continue on socket
9429f5a8318bd2142280c949d4af05998ca348a2Evan Hunt errors. [RT #43281]
0899d16ebd6a70bb027e7899c53e7f542ebc987bEvan Hunt4477. [test] Fix mkeys test timing issues. [RT #41028]
0899d16ebd6a70bb027e7899c53e7f542ebc987bEvan Hunt4476. [test] Fix reclimit test on slower machines. [RT #43283]
d2e440ca30f27468443ccc7e21db0b8e10c4faf8Mark Andrews4475. [doc] Update named-checkconf documentation. [RT #43153]
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews4474. [bug] win32: call WSAStartup in fromtext_in_wks so that
404df30f4fcbd318dd1e3cc027d2b5abff3ab6d5Mark Andrews getprotobyname and getservbyname work. [RT #43197]
544d0efa38490d67e458aa9c23a7dac2a9d546bfMark Andrews4473. [bug] Only call fsync / _commit on regular files. [RT #43196]
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews4472. [bug] Named could fail to find the correct NSEC3 records when
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews a zone was updated between looking for the answer and
1f2635d3f7b3f0b3bf0d0310fe880d95e84f09fcMark Andrews looking for the NSEC3 records proving nonexistence
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews of the answer. [RT #43247]
802760773ca5224b29a610741a7f2e0a7d6e031bMark Andrews --- 9.11.0 released ---
b6d496d53851e5ab5ba82e800062a431b05310cbEvan Hunt --- 9.11.0rc3 released ---
d55494b8e9887e7ff7cdf1ec96a9dc5e8afe3c94Shane Kerr4471. [cleanup] Render client/query logging format consistent for
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews ease of log file parsing. (Note that this affects
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr "querylog" format: there is now an additional field
67213ca3d0594588a6fac32d8188efc68b0ad572Shane Kerr indicating the client object address.) [RT #43238]
d813808a01d5629110b8df483ccc2dff9ec2a84fMark Andrews4470. [bug] Reset message with intent parse before
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews calling dns_dispatch_getnext. [RT #43229]
33170a4b2b2765583df543efbb13a01e7b664037Mark Andrews --- 9.11.0rc2 released ---
2cc262c0932a193b261e6e6a172855bd8f898c6dMark Andrews4468. [bug] Address ECS option handling issues. [RT #43191]
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews4467. [security] It was possible to trigger an assertion when
76a378884f628f9b23bff16490e39dcd69b6ef0eMark Andrews rendering a message. (CVE-2016-2776) [RT #43139]
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews4466. [bug] Interface scanning didn't work on a Windows system
03745451370778a867e46fdbe315eb958745a391Mark Andrews without a non local IPv6 addresses. [RT #43130]
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews4465. [bug] Don't use "%z" as Windows doesn't support it.
f183f4c0cd40354f423bdb129e7a0c9badb5082cMark Andrews4464. [bug] Fix windows python support. [RT #43173]
71f4918fd8a5ec4f0a05aac657b614fdf2467bebMark Andrews4463. [bug] The dnstap system test failed on some systems.
dabe7f50bb61d75841b535b91edb8f323f82f826Evan Hunt4462. [bug] Don't describe a returned EDNS COOKIE as "good"
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews when there isn't a valid server cookie. [RT #43167]
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews4461. [bug] win32: not all external data was properly marked
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews as external data for windows dll. [RT #43161]
a1e2170ad5c5018fbe8f7b8449d8885d5d298e88Mark Andrews --- 9.11.0rc1 released ---
05d2776f6fa8e3628555463b06cb43288c9ee68eEvan Hunt4460. [test] Add system test for dnstap using unix domain sockets.
8327cdb88fdbf306eb4c37fe00a29aac4c2f55c5Evan Hunt4459. [bug] TCP client objects created to handle pipeline queries
8327cdb88fdbf306eb4c37fe00a29aac4c2f55c5Evan Hunt were not cleaned up correctly, causing uncontrolled
f2d8c4a4c3dfa212ddcf5b86d4c5fced4965e52eMark Andrews memory growth. [RT #43106]
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews4458. [cleanup] Update assertions to be more correct, and also remove
8c76634f88c5b3169b61505925e10b997ea08e54Mark Andrews use of a reserved word. [RT #43090]
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews4457. [maint] Added AAAA (2001:500:a8::e) for E.ROOT-SERVERS.NET.
8bedd9647f4d6894e12a8c94d3ccc624dddcee50Mark Andrews4456. [doc] Add DOCTYPE and lang attribute to <html> tags.
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews4455. [cleanup] Allow dyndb modules to correctly log the filename
ca84283333d22c64abfbcb87872dd5e6d9172c5aMark Andrews and line number when processing configuration text
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr from named.conf. [RT #43050]
e6555b046798b1900e93c3208d26301872f50ca5Shane Kerr4454. [bug] 'rndc dnstap -reopen' had a race issue. [RT #43089]
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews4453. [bug] Prefetching of DS records failed to update their
9a41f786b167a2a6df498d5e9c699f9835e1e9dcMark Andrews RRSIGs. [RT #42865]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4452. [bug] The default key manager policy file is now
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews <sysdir>/dnssec-policy.conf (usually
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews4451. [cleanup] Log more useful information if a PKCS#11 provider
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews library cannot be loaded. [RT #43076]
bf98702c1941f368e54c499dd1ff59ee684cf125Mark Andrews4450. [port] Provide more nuanced HSM support which better matches
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews the specific PKCS11 providers capabilities. [RT #42458]
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews4449. [test] Fix catalog zones test on slower systems. [RT #42997]
e2c3f8059e77a8e11c4378d22e5d8e78b423a28fMark Andrews4448. [bug] win32: ::1 was not being found when iterating
a7b7a4ebc38ec7460e95da6d3d70ffe7b59573b8Mark Andrews interfaces. [RT #42993]
1ca168b58e02fda534cad741a248e549e0f98d4dMark Andrews4447. [tuning] Allow the fstrm_iothr_init() options to be set using
6f1b09965f26ab0d6c38dec4a38f67bb34ebddceMark Andrews named.conf to control how dnstap manages the data
23450c23fd19138cfad95b6c7728e2965abfc154Mark Andrews flow. [RT #42974]
de05f7d061abfe0ce555e0d0f2089f1261b031b6Mark Andrews4446. [bug] The cache_find() and _findrdataset() functions
d468b1b7b2ccfdf132df15f600be48dccf447eb1Evan Hunt could find rdatasets that had been marked stale.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4445. [cleanup] isc_errno_toresult() can now be used to call the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews formerly private function isc__errno2result().
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews4444. [bug] Fixed some issues related to dyndb: A bug caused
85db2b5fb360ccd2aeec1e6e22336b3d654bb39aMark Andrews braces to be omitted when passing configuration text
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews from named.conf to a dyndb driver, and there was a
a0749e59c0356381fdaea0fefe66256589ec8c99Mark Andrews use-after-free in the sample dyndb driver. [RT #43050]
709220567fb820cf7e7625925449dadf86317629Mark Andrews4443. [func] Set TCP_MAXSEG in addition to IPV6_USE_MIN_MTU on
709220567fb820cf7e7625925449dadf86317629Mark Andrews TCP sockets. [RT #42864]
fe6b6eebd74f7c5c20088f67081ae690228f9744Mark Andrews4442. [bug] Fix RPZ CIDR tree insertion bug that corrupted
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews tree data structure with overlapping networks
adc3f2c0fdcc0a2bee469ffb0e7ae41b83cbf403Mark Andrews (longest prefix match was ineffective).
8731a2bd2f5483f50d82cf28e315090b7ceeed54Mark Andrews4441. [cleanup] Alphabetize host's help output. [RT #43031]
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews4440. [func] Enable TCP fast open support when available on the
2de90cd1e20061bde684a21c3d852056a2e290d0Mark Andrews server side. [RT #42866]
8a45eeebb8bdd4633bccfd9d77d9b50c1d337d54Mark Andrews4439. [bug] Address race conditions getting ownernames of nodes.
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews4438. [func] Use LIFO rather than FIFO when processing startup
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews notify and refresh queries. [RT #42825]
d4034b48fd112ef43933f1455b194b5249a88ee6Mark Andrews4437. [func] Minimal-responses now has two additional modes
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews no-auth and no-auth-recursive which suppress
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews adding the NS records to the authority section
ee4bbc8454cc0cb36a25a7d26c5b47370f96d9b2Mark Andrews as well as the associated address records for the
f568dad6c7ddaa732e6562a4b89fd2ac922d263bMark Andrews nameservers. [RT #42005]
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews4436. [func] Return TLSA records as additional data for MX and SRV
03ec481ee88f4ab72af6abb4efe096fe2c661d60Mark Andrews lookups. [RT #42894]
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews4435. [tuning] Only set IPV6_USE_MIN_MTU for UDP when the message
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews will not fit into a single IPv4 encapsulated IPv6
8e74bfb6045d78af71b54a2934823b334b3e423aMark Andrews UDP packet when transmitted over a Ethernet link.
d91df50b670d92d0ab784b741e2ee9af7f2dc4a1Mark Andrews4434. [protocol] Return EDNS EXPIRE option for master zones in addition
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews to slave zones. [RT #43008]
3eab85ca54b681504d772b1d6bb3ccf4f08d4305Mark Andrews4433. [cleanup] Report an error when passing an invalid option or
c5adbd722da0908f91be4fb710c082b4b68ec782Mark Andrews view name to "rndc dumpdb". [RT #42958]
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews4432. [test] Hide rndc output on expected failures in logfileconfig
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews system test. [RT #27996]
c60eaaf9b3c6bb4d693cdb5f68acdfacf076e1fdMark Andrews4431. [bug] named-checkconf now checks the rate-limit clause.
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews4430. [bug] Lwresd died if a search list was not defined.
634a4da58460979fa0fcad5304b810d189f9cf49Mark Andrews Found by 0x710DDDD At Alibaba Security. [RT #42895]
c0720b90ed6e673264b17eb752d873a89cbd6db5Mark Andrews4429. [bug] Address potential use after free on fclose() error.
576e48e28aae9f28b8e6daa2aabc839bb5c520e3Mark Andrews4428. [bug] The "test dispatch getnext" unit test could fail
c06cb907737eb7ce128c92dd729c73798733f37aMark Andrews in a threaded build. [RT #42979]
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews4427. [bug] The "query" and "response" parameters to the
6e5e27c38d86f2338688f5123d2ff84558956dd0Mark Andrews "dnstap" option had their functions reversed.
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews --- 9.11.0b3 released ---
5059b393e80cda6beffb74f2f30d7329502c41e6Mark Andrews4426. [bug] Addressed Coverity warnings. [RT #42908]
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews4425. [bug] arpaname, dnstap-read and named-rrchecker were not
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews being installed into ${prefix}/bin. Tidy up
c16aed9c469a986f1b84e457db4a8c4d2da01ca3Mark Andrews installation issues with CHANGE 4421. [RT #42910]
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews4424. [experimental] Named now sends _ta-XXXX.<trust-anchor>/NULL queries
dd19fbaf817f974c24ddfa1d276d7594d5b18750Mark Andrews to provide feedback to the trust-anchor administrators
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews about how key rollovers are progressing as per
f408773d47b25594d1302525a4db6efb84b1843cMark Andrews draft-ietf-dnsop-edns-key-tag-02. This can be
cd315d4cf631753c94f27fabaa42a37a27d30530Mark Andrews disabled using 'trust-anchor-telemetry no;'.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews4423. [maint] Added missing IPv6 address 2001:500:84::b for
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews4422. [port] Silence clang warnings in dig.c and dighost.c.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews4421. [func] When built with LMDB (Lightning Memory-mapped
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews Database), named will now use a database to store
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews the configuration for zones added by "rndc addzone"
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews instead of using a flat NZF file. This improves
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews performance of "rndc delzone" and "rndc modzone"
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews significantly. Existing NZF files will
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews automatically by converted to NZD databases.
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews To view the contents of an NZD or to roll back to
69826a6a2f89ecb2b280eeb6d4adb4826bf0db72Mark Andrews NZF format, use "named-nzd2nzf". To disable
5888f62c204a99da60d7854fe01eda4960fb3b36Mark Andrews this feature, use "configure --without-lmdb".
fd23bc509d5fddb91247a2a1ca52d432969067e5Mark Andrews4420. [func] nslookup now looks for AAAA as well as A by default.
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews4419. [bug] Don't cause undefined result if the label of an
07072c9456f1112705db701bb35f12dbdcb217b0Mark Andrews entry in catalog zone is changed. [RT #42708]
afd002e89aadf30181155566544480349e70339dMark Andrews4418. [bug] Fix a compiler warning in GSSAPI code. [RT #42879]
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews4417. [bug] dnssec-keymgr could fail to create successor keys
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews if the prepublication interval was set to a value
ba5d2a97ee0cd2cc9d4b9e7e344ae8f607cc2994Mark Andrews smaller than the default. [RT #42820]
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews4416. [bug] dnssec-keymgr: Domain names in policy files could
6133734cecb05630e32edb63031b95d333df8e48Mark Andrews fail to match due to trailing dots. [RT #42807]
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews4415. [bug] dnssec-keymgr: Expired/deleted keys were not always
47ee25b1f58a5924c51b59194b84621b9b7b6ba5Mark Andrews excluded. [RT #42884]
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews4414. [bug] Corrected a bug in the MIPS implementation of
32391301db6f532ad17033f188d4540ae3f409f1Mark Andrews isc_atomic_xadd(). [RT #41965]
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews4413. [bug] GSSAPI negotiation could fail if GSS_S_CONTINUE_NEEDED
0cedbe4ab56e00d5827941697418476318cbdeb3Mark Andrews was returned. [RT #42733]
f05a4bf2bfac3aaff0462560b2793cd99a85a297Mark Andrews --- 9.11.0b2 released ---
f05a4bf2bfac3aaff0462560b2793cd99a85a297Mark Andrews4412. [cleanup] Make fixes for GCC 6. ISC_OFFSET_MAXIMUM macro was
bf45f72ed319628eebce60c368177320943d001fMark Andrews removed. [RT #42721]
bf45f72ed319628eebce60c368177320943d001fMark Andrews4411. [func] "rndc dnstap -roll" automatically rolls the
e078f002c06b6b26e2d7749a4f9e3907f3e85de3Mark Andrews dnstap output file; the previous version is
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews saved with ".0" suffix, and earlier versions
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews with ".1" and so on. An optional numeric argument
af1e00675fa573fec779e9a01aac5bedb99f0fd6Mark Andrews indicates how many prior files to save. [RT #42830]
d1199d9c06ba470fa4779981bea2f8f7403e8eabMark Andrews4410. [bug] Address use after free and memory leak with dnstap.
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews4409. [bug] DNS64 should exclude mapped addresses by default when
7c5dfcc60a7ee41ae5ba15a3e1fe337af3bef1a9Mark Andrews an exclude acl is not defined. [RT #42810]
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews4408. [func] Continue waiting for expected response when we the
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews response we get does not match the request. [RT #41026]
fc8197c3ce31d81cd5e23703680572fac09a2e8aMark Andrews4407. [performance] Use GCC builtin for clz in RPZ lookup code.
0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350Mark Andrews4406. [security] getrrsetbyname with a non absolute name could
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews trigger an infinite recursion bug in lwresd
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews and named with lwres configured if when combined
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews with a search list entry the resulting name is
bc6af069c80ca33a5619d71d57859724cab1f4c4Mark Andrews too long. (CVE-2016-2775) [RT #42694]
4bb0f1046f3f3c26539ff91e28b3c8872519df17Mark Andrews4405. [bug] Change 4342 introduced a regression where you could
68df4d65c624a9ca06e94fc67ef915adf2ec97beMark Andrews not remove a delegation in a NSEC3 signed zone using
ab6e5af4cd644b174709f95c2702ec4c442aa755Mark Andrews OPTOUT via nsupdate. [RT #42702]
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews4404. [misc] Allow krb5-config to be used when configuring gssapi.
f3139b9d763cbfd3f8dbf1062191a688ed5195e4Mark Andrews4403. [bug] Rename variables and arguments that shadow: basename,
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews clone and gai_error.
79e3817e2c0f1b017643638dc3876ba41da94335Mark Andrews4402. [bug] protoc-c is now a hard requirement for --enable-dnstap.
2d78cc9624dd735ffdc634e6c39dd30bddfb95f7Mark Andrews --- 9.11.0b1 released ---
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews4401. [misc] Change LICENSE to MPL 2.0.
eea8cd8d1a9b2762480fab793972d1cefbc7cf90Mark Andrews4400. [bug] ttl policy was not being inherited in policy.py.
9860862cedd41ffaf69e7806e8f8959263552721Mark Andrews4399. [bug] policy.py 'ECCGOST', 'ECDSAP256SHA256', and
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews 'ECDSAP384SHA384' don't have settable keysize.
25e2824175eb0c186df3ab0737c83d322410594cMark Andrews4398. [bug] Correct spelling of ECDSAP256SHA256 in policy.py.
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews4397. [bug] Update Windows python support. [RT #42538]
fe3220466e3c23cd2c22a59a4db46bc97ce0827dMark Andrews4396. [func] dnssec-keymgr now takes a '-r randomfile' option.
40aadb6a143e0f2d351e743dce43cfc894d4d855Mark Andrews4395. [bug] Improve out-of-tree installation of python modules.
65b26a4dc8c6c16d0a5ccb03b67cf968c77d6570Mark Andrews4394. [func] Add rndc command "dnstap-reopen" to close and
c58821f7100821e1d4e4bbace727b988bb3e0623Mark Andrews reopen dnstap output files. [RT #41803]
77397daf05511dc737eeec159badc05f11bfadddMark Andrews4393. [bug] Address potential NULL pointer dereferences in
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews dnstap code.
337e70ead93aafec305ac0a7a62090339543b8d1Mark Andrews4392. [func] Collect statistics for RSSAC02v3 traffic-volume,
f0a1b8c85792d4e04716f995a2b2a8ca73f8367dMark Andrews traffic-sizes and rcode-volume reporting. [RT #41475]
a5d7c242b564cbd3cebc0dd27c19d9093d38b3abMark Andrews4391. [contrib] Fix leaks in contrib DLZ code. [RT #42707]
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews4390. [doc] Description of masters with TSIG, allow-query and
1de5f8f80930dc322688010740c7dfe56eb035b0Mark Andrews allow-transfer options in catalog zones. [RT #42692]
7a253b705ccbc30821253e7a124658623f10c499Mark Andrews4389. [test] Rewritten test suite for catalog zones. [RT #42676]
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews4388. [func] Support for master entries with TSIG keys in catalog
f6476fa52240e3c8278ac4a27fa2cc8a5b7a3e3bMark Andrews zones. [RT #42577]
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews4387. [bug] Change 4336 was not complete leading to SERVFAIL
cd1e58c339b2a6709d543a525de0c995bf8b5868Mark Andrews being return as NS records expired. [RT #42683]
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews4386. [bug] Remove shadowed overmem function/variable. [RT #42706]
a05f23d07e1b60a1d88119678111a47014480611Mark Andrews4385. [func] Add support for allow-query and allow-transfer ACLs
429e23d2f56d28d86439f75c13cda2b4ac5ab67bMark Andrews to catalog zones. [RT #42578]
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews4384. [bug] Change 4256 accidentally disabled logging of the
c5c825bf07a00a2478afd9400e9f8534457980b0Mark Andrews rndc command. [RT #42654]
aaa42824d2d1f5cc4add01f0191e3784ee0f7396Mark Andrews4383. [bug] Correct spelling error in stats channel description of
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews "EDNS client subnet option received". [RT #42633]
43da7565913277c020ded34d6ee2139998b743b6Mark Andrews4382. [bug] rndc {addzone,modzone,delzone,showzone} should all
c1297b6025bf8ccdc832b7bca705da1d4cf2944eMark Andrews compare the zone name using a canonical format.
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt4381. [bug] Missing "zone-directory" option in catalog zone
25820cf1d110ec22cec5f6be5257aabe6853ca92Evan Hunt definition caused BIND to crash. [RT #42579]
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt --- 9.11.0a3 released ---
99cce386a489671727a737b3748937cf3a0676e8Evan Hunt4380. [experimental] Added a "zone-directory" option to "catalog-zones"
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews syntax, allowing local masterfiles for slaves
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews that are provisioned by catalog zones to be stored
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews in a directory other than the server's working
819b98479eff49ed93f57f4d65eb0ffe72136adcMark Andrews directory. [RT #42527]
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews4379. [bug] An INSIST could be triggered if a zone contains
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews RRSIG records with expiry fields that loop
113e0b7819103f02d5a16bad1b7356587d866ac2Mark Andrews using serial number arithmetic. [RT #40571]
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews4378. [contrib] #include <isc/string.h> for strlcat in zone2ldap.c.
6dfc78fab61fafc9bffdc3cbc331cc996bfa2198Mark Andrews4377. [bug] Don't reuse zero TTL responses beyond the current
65085946d4f92481699678e276e3ced04bcfdafbMark Andrews client set (excludes ANY/SIG/RRSIG queries).
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews4376. [experimental] Added support for Catalog Zones, a new method for
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews provisioning secondary servers in which a list of
b5f690e1618cffeec15b3bcb9525443206fb7007Mark Andrews zones to be served is stored in a DNS zone and can
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews be propagated to slaves via AXFR/IXFR. [RT #41581]
37d373d88631c7be57a30bf4a49c824a9195781fMark Andrews4375. [func] Add support for automatic reallocation of isc_buffer
b130bf8b4ebdabd5c94eb5c6522a9971997b6ac9Mark Andrews to isc_buffer_put* functions. [RT #42394]
072eaf055b7fa0d8abe96146fbb9152b14946c84Mark Andrews4374. [bug] Use SAVE/RESTORE macros in query.c to reduce the
072eaf055b7fa0d8abe96146fbb9152b14946c84Mark Andrews probability of reference counting errors as seen
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews in 4365. [RT #42405]
7a3c2d189e811933c48aace1900a868dffd42f5fMark Andrews4373. [bug] Address undefined behavior in getaddrinfo. [RT #42479]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews4372. [bug] Address undefined behavior in libt_api. [RT #42480]
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews4371. [func] New "minimal-any" option reduces the size of UDP
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews responses for qtype ANY by returning a single
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews arbitrarily selected RRset instead of all RRsets.
a56f5ada432128085e4a06815328023ee0c9610dMark Andrews Thanks to Tony Finch. [RT #41615]
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews4370. [bug] Address python3 compatibility issues with RNDC module.
4259095c8058beb9b475f1884dbeda375979e6f6Mark Andrews [RT #42499] [RT #42506]
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews --- 9.11.0a2 released ---
c53a5699c8242636fd913a4d07b4447efebe3bbfMark Andrews4369. [bug] Fix 'make' and 'make install' out-of-tree python
8c731c1219f1698f15bf5b1fcf6bc301cfd9bc42Mark Andrews support. [RT #42484]
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews4368. [bug] Fix a crash when calling "rndc stats" on some
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews Windows builds because some Visual Studio compilers
a630d60b8b628cb2ce46b906dc7b1a5b83b74ed5Mark Andrews generated crashing code for the "%z" printf()
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews format specifier. [RT #42380]
b53871d8592a0bfeacdd06ccba46d75aa96e4fecMark Andrews4367. [bug] Remove unnecessary assignment of loadtime in
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews zone_touched. [RT #42440]
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews4366. [bug] Address race condition when updating rbtnode bit
9dabd0455ca923b5b02f74c1e999702ddc9c6fd2Mark Andrews fields. [RT #42379]
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews4365. [bug] Address zone reference counting errors involving
58f32ac26ea330054f7b85579cd93a6376168fe7Mark Andrews nxdomain-redirect. [RT #42258]
bde20a0436dff13e2299cfd4230ddec54d396d02Mark Andrews4364. [port] freebsd: add -Wl,-E to loader flags [RT #41690]
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews4363. [port] win32: Disable explicit triggering UAC when running
0deee29113e5919c88f341ec3a181b70f7c905ccMark Andrews BINDInstall.
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews4362. [func] Changed rndc reconfig behavior so that newly added
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews zones are loaded asynchronously and the loading does
340a05967aaad53d90694426c33d81b490b0f915Mark Andrews not block the server. [RT #41934]
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews4361. [cleanup] Where supported, file modification times returned
394f4aec2189750d7f861d00f97fe28ffcd9f659Mark Andrews by isc_file_getmodtime() are now accurate to the
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews nanosecond. [RT #41968]
2e676167cc8cbb2e6dbb54e9859098dd5b9cd5c8Mark Andrews4360. [bug] Silence spurious 'bad key type' message when there is
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews a existing TSIG key. [RT #42195]
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews4359. [bug] Inherited 'also-notify' lists were not being checked
4098271a81b3e965da14f77c893232a0b6be22f3Mark Andrews by named-checkconf. [RT #42174]
7228a4d9ca1f1b868e257a28de86c6a1f21e9ffeMark Andrews4358. [test] Added American Fuzzy Lop harness that allows
7228a4d9ca1f1b868e257a28de86c6a1f21e9ffeMark Andrews feeding fuzzed packets into BIND.
5dcc67a0fff89e7ebf051f64b6b987862c331a04Mark Andrews4357. [func] Add the python RNDC module. [RT #42093]
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews4356. [func] Add the ability to specify whether to wait for
8363ddb32da86811663d12d0b2c61a8ea2fa0eaeMark Andrews nameserver addresses to be looked up or not to
cc2720da38bb7bab2bf283de56dd90e9093d7f00Mark Andrews RPZ with a new modifying directive 'nsip-wait-recurse'.
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews4355. [func] "pkcs11-list" now displays the extractability
10fc76d48aa7ecb8a7242970585ba154b368f97eMark Andrews attribute of private or secret keys stored in
5cc6a0f7dae472e5c2022b2cbb5343ec9f7f4942Mark Andrews an HSM, as either "true", "false", or "never"
4490e14feb50cd59a62ce9f348ff53b68a0594ebMark Andrews Thanks to Daniel Stirnimann. [RT #36557]
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews4354. [bug] Check that the received HMAC length matches the
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews expected length prior to check the contents on the
1e70c9a36639bb1e8d537dcefa3cd12a7bb39db0Mark Andrews control channel. This prevents a OOB read error.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews This was reported by Lian Yihan, <lianyihan@360.cn>.
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews4353. [cleanup] Update PKCS#11 header files. [RT #42175]
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews4352. [cleanup] The ISC DNSSEC Lookaside Validation (DLV) service
f31446e6b5925395fce4f62adf71f7ad70cea6ceMark Andrews is scheduled to be disabled in 2017. A warning is
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews now logged when named is configured to use it,
0961ac0868e7d60e7cb665160f6d3717e1da5228Mark Andrews either explicitly or via "dnssec-lookaside auto;"
3d697a7eddf375586435f8fb6e1440fb3ce9058dMark Andrews4351. [bug] 'dig +noignore' didn't work. [RT #42273]
8943ff626fa337419cbffad6a4a910c7d99509f4Mark Andrews4350. [contrib] Declare result in dlz_filesystem_dynamic.c.
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews4349. [contrib] kasp2policy: A python script to create a DNSSEC
281bab0f36eaedc56f859721fbdf45568b71cd60Mark Andrews policy file from an OpenDNSSEC KASP XML file.
5cd4555ad444fd391002ae32450572054369fd42Rob Austein4348. [func] dnssec-keymgr: A new python-based DNSSEC key
5cd4555ad444fd391002ae32450572054369fd42Rob Austein management utility, which reads a policy definition
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews file and can create or update DNSSEC keys as needed
8eb4eca37538183edb36db88580b5232f15931b0Mark Andrews to ensure that a zone's keys match policy, roll over
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews correctly on schedule, etc. Thanks to Sebastian
305227476756aecb11cebbc811dba88a2d147b34Mark Andrews Castro for assistance in development. [RT #39211]
e7d32e57a5c8600893f91ec08f74117c983f8b8dMark Andrews4347. [port] Corrected a build error on x86_64 Solaris. [RT #42150]
fa3d0b9991ea0d8344881c5dd4609d9c33314b9bMark Andrews4346. [bug] Fixed a regression introduced in change #4337 which
e3f66e1617f9fca7313e4005b8c3c611551906d1Mark Andrews caused signed domains with revoked KSKs to fail
ed954ce73b1c712b24eab945190028871433f803Mark Andrews validation. [RT #42147]
ed954ce73b1c712b24eab945190028871433f803Mark Andrews4345. [contrib] perftcpdns mishandled the return values from
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews clock_nanosleep. [RT #42131]
29747dfe5e073a299b3681e01f5c55540f8bfed7Mark Andrews4344. [port] Address openssl version differences. [RT #42059]
186e7f37c9fc985a7a7264cc8170e48a25bed434Mark Andrews4343. [bug] dns_dnssec_syncupdate mis-declared in <dns/dnssec.h>.
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews4342. [bug] 'rndc flushtree' could fail to clean the tree if there
1372e172d0e0b08996376b782a9041d1e3542489Mark Andrews wasn't a node at the specified name. [RT #41846]
8d709e3ee443222cd35e44eadc9a4c0a8d92fec2Rob Austein --- 9.11.0a1 released ---
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews4341. [bug] Correct the handling of ECS options with
23235c00eda9089f38ace0a1371fed9a466ea5ddMark Andrews address family 0. [RT #41377]
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews4340. [performance] Implement adaptive read-write locks, reducing the
514aeac2acbbe2b77ff3c4e310617523cf5651c5Mark Andrews overhead of locks that are only held briefly.
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews4339. [test] Use "mdig" to test pipelined queries. [RT #41929]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews4338. [bug] Reimplement change 4324 as it wasn't properly doing
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews all the required book keeping. [RT #41941]
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews4337. [bug] The previous change exposed a latent flaw in
1ea2595e1b33cc63ea73ee1d54b580b717d7d155Mark Andrews key refresh queries for managed-keys when
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews a cached DNSKEY had TTL 0. [RT #41986]
e60f01cdd29c71e9224273214521b15aef4d4555Mark Andrews4336. [bug] Don't emit records with zero ttl unless the records
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews were learnt with a zero ttl. [RT #41687]
13290782cb83ee43c4dc942d186761a46c4a2692Mark Andrews4335. [bug] zone->view could be detached too early. [RT #41942]
895ae38da194143331d667289affd3b43c5bfc14Mark Andrews4334. [func] 'named -V' now reports zlib version. [RT #41913]
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews4333. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42 and
bca16e31b457598cd1dbbf0cdc7a26a6d2ec3753Mark Andrews 2001:500:9f::42.
58ea8fb1dfc8c055a7d4ad74d65e345436ede790Mark Andrews4332. [placeholder]
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews4331. [func] When loading managed signed zones detect if the
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews RRSIG's inception time is in the future and regenerate
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews the RRSIG immediately. [RT #41808]
1a8efeab76d34327a699894a6a404f97b341c57aMark Andrews4330. [protocol] Identify the PAD option as "PAD" when printing out
f041bef2c60a092ab4dcae475451729a5345830fMark Andrews4329. [func] Warn about a common misconfiguration when forwarding
a7dd5f21e996b01262a3d564dae9561cb3f8e717Mark Andrews RFC 1918 zones. [RT #41441]
92d23165938a5e595f80b2e3fb5d8cb918ac7dacMark Andrews4328. [performance] Add dns_name_fromwire() benchmark test. [RT #41694]
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews4327. [func] Log query and depth counters during fetches when
1cbb3a4df30777791ce27a0d2349420808c013d8Mark Andrews querytrace (./configure --enable-querytrace) is
289ae548d52bc8f982d9823af64cafda7bd92232Mark Andrews enabled (helps in diagnosing). [RT #41787]
4ccea866e64a8ec8525ad4bf7d57606bcd2fc15dMark Andrews4326. [protocol] Add support for AVC. [RT #41819]
4cf228853d658a742a826393f341e2486c629f7bMark Andrews4325. [func] Add a line to "rndc status" indicating the
4cf228853d658a742a826393f341e2486c629f7bMark Andrews hostname and operating system details. [RT #41610]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4324. [bug] When deleting records from a zone database, interior
1672cc63c190e073706a742ebaabc20ac4d2c916Mark Andrews nodes could be left empty but not deleted, damaging
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews search performance afterward. [RT #40997]
6805e4e2c46ad3c5a4aa941b5e9a29d34579641eMark Andrews4323. [bug] Improve HTTP header processing on statschannel.
1afb6c548d9bbfcfb00d0799077faa17ad9a4f59Mark Andrews4322. [security] Duplicate EDNS COOKIE options in a response could
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews trigger an assertion failure. (CVE-2016-2088)
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews4321. [bug] Zones using mapped files containing out-of-zone data
a1210da03636eca13c70502a2b132ead22481b70Mark Andrews could return SERVFAIL instead of the expected NODATA
ef54920b4c82a0ea41972d1dc21a0dc96fa791fbTatuya JINMEI 神明達哉 or NXDOMAIN results. [RT #41596]
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews4320. [bug] Insufficient memory allocation when handling
a473029e76dfc68db00505f40065607b4ea1e0f5Mark Andrews "none" ACL could cause an assertion failure in
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews named when parsing ACL configuration. [RT #41745]
411118a594dbcee68cd6adf5f6bd1b9db0ff9190Mark Andrews4319. [security] Fix resolver assertion failure due to improper
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews DNAME handling when parsing fetch reply messages.
7c0946e74be897d02aaaf980ac146bcb500c2c8cMark Andrews (CVE-2016-1286) [RT #41753]
09cbf84907de2bd088b4ce8bd1307938bf0e81baMark Andrews4318. [security] Malformed control messages can trigger assertions
09cbf84907de2bd088b4ce8bd1307938bf0e81baMark Andrews in named and rndc. (CVE-2016-1285) [RT #41666]
9e2789fd70b954df426b80301b62388497692481Mark Andrews4317. [bug] Age all unused servers on fetch timeout. [RT #41597]
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews4316. [func] Add option to tools to print RRs in unknown
b1163a6fe91e6e7a14e40cd5d33108c4deb38312Mark Andrews presentation format [RT #41595].
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews4315. [bug] Check that configured view class isn't a meta class.
8af4bf165e9a6aa111e0b6bfcbcc7f4a741a8ae5Mark Andrews [RT #41572].
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews4314. [contrib] Added 'dnsperf-2.1.0.0-1', a set of performance
5cf0c559489d741ee5c7943ece47e40567bb0ba9Mark Andrews testing tools provided by Nominum, Inc.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews4313. [bug] Handle ns_client_replace failures in test mode.
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews4312. [bug] dig's unknown DNS and EDNS flags (MBZ value) logging
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews was not consistent. [RT #41600]
fda0a038810529d6e45b17822ddcc61d82964e83Mark Andrews4311. [bug] Prevent "rndc delzone" from being used on
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews response-policy zones. [RT #41593]
53d3679913d715cce0dc7e8be04662366eab4842Mark Andrews4310. [performance] Use __builtin_expect() where available to annotate
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews conditions with known behavior. [RT #41411]
755df9a92a13310eec4b1baeb297c93674a70417Mark Andrews4309. [cleanup] Remove the spurious "none" filename from log messages
e3582ce43119a95448ccc06ea2586f6547c92967Mark Andrews when processing built-in configuration. [RT #41594]
2952abf7cbbba6c6f821ee18579ca29d87549574Mark Andrews4308. [func] Added operating system details to "named -V"
2952abf7cbbba6c6f821ee18579ca29d87549574Mark Andrews output. [RT #41452]
efb82ed87e916c82b481bee4aa6651f2dbd4cedaMark Andrews4307. [bug] "dig +subnet" and "mdig +subnet" could send
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews incorrectly-formatted Client Subnet options
7c693bfdbe488ca8fa4f0831c71f5809972f6cc7Mark Andrews if the prefix length was not divisible by 8.
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews Also fixed a memory leak in "mdig". [RT #45178]
7092864f71e0bbb108041ef01ac3d2b41f90c4a9Mark Andrews4306. [maint] Added a PKCS#11 openssl patch supporting
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews version 1.0.2f [RT #38312]
24ee607afa66e5ba5fa8b2f18c34a5c430b8a3feMark Andrews4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews from the zone's apex. [RT #41483]
2113dfd6e20a9ca16000ed226517b4660087c1f2Mark Andrews4304. [port] xfer system test failed as 'tail -n +value' is not
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews portable. [RT #41315]
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews4303. [bug] "dig +subnet" was unable to send a prefix length of
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews zero, as it was incorrectly changed to 32 for v4
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews prefixes or 128 for v6 prefixes. In addition to
2dafa707cc9af9cca66d68c1d2c3af0c768c2900Mark Andrews fixing this, "dig +subnet=0" has been added as a
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews short form for 0.0.0.0/0. The same changes have
c7817270552b2faab56466b89731b6f290b352a4Mark Andrews also been made in "mdig". [RT #41553]
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews4302. [port] win32: fixed a build error in VS 2015. [RT #41426]
22e5a52c3b5bfef7e75d95629e08cab7592fee5cMark Andrews4301. [bug] dnssec-settime -p [DP]sync was not working. [RT #41534]
240e57ab983296e6d52031a594d3345728191b48Mark Andrews4300. [bug] A flag could be set in the wrong field when setting
240e57ab983296e6d52031a594d3345728191b48Mark Andrews up non-recursive queries; this could cause the
240e57ab983296e6d52031a594d3345728191b48Mark Andrews SERVFAIL cache to cache responses it shouldn't.
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews New querytrace logging has been added which
cdb674387ca19dc8550553d90d8f9731befb6f1fMark Andrews identified this error. [RT #41155]
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews4299. [bug] Check that exactly totallen bytes are read when
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews reading a RRset from raw files in both single read
02ced31b6aa999099214d2688b1a80ac5d93c57bMark Andrews and incremental modes. [RT #41402]
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews4298. [bug] dns_rpz_add errors in loadzone were not being
728156dfbdced7bc18b1f88227cced9d426a70e7Mark Andrews propagated up the call stack. [RT #41425]
d4f5efb4d63e2e17081a49a3457f05fe06fbb5abMark Andrews4297. [test] Ensure delegations in RPZ zones fail robustly.
e560f615b2592deea69c49bfc74acbb56f4fd913Mark Andrews4296. [bug] TCP packet sizes were calculated incorrectly in the
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews stats channel; they could be counted in the wrong
cfaf65f53fb0c1779e7b2e07216e5fbfd3a2d52eMark Andrews histogram bucket. [RT #40587]
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews4295. [bug] An unchecked result in dns_message_pseudosectiontotext()
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews could allow incorrect text formatting of EDNS EXPIRE
f07fe5a1ac9d1345eb7a36a0bc38716a03e25f61Mark Andrews options. [RT #41437]
dbfc2232ef5b6e5572480070ab87a4d67c18aa39Mark Andrews4294. [bug] Fixed a regression in which "rndc stop -p" failed
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews to print the PID. [RT #41513]
ce8cd4a3efd27ef145847216d513bb341bfe208cMark Andrews4293. [bug] Address memory leak on priming query creation failure.
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews4292. [placeholder]
854dac0f186e5b491d65f6d73dd6e440e7a2c227Mark Andrews4291. [cleanup] Added a required include to dns/forward.h. [RT #41474]
431fd1b0b5c3c049f9397ed4be8915715ead9cdbMark Andrews4290. [func] The timers returned by the statistics channel
431fd1b0b5c3c049f9397ed4be8915715ead9cdbMark Andrews (indicating current time, server boot time, and
cc7d91bd5c6b9be5a3c67a99112b885602c24873Mark Andrews most recent reconfiguration time) are now reported
cc7d91bd5c6b9be5a3c67a99112b885602c24873Mark Andrews with millisecond accuracy. [RT #40082]
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews4289. [bug] The server could crash due to memory being used
39ef7dddef12152afa3a2fc1c1962cdf6d30b5cbMark Andrews after it was freed if a zone transfer timed out.
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews4288. [bug] Fixed a regression in resolver.c:possibly_mark()
3b572928731d3595990fe360c80977a2d043eb02Tatuya JINMEI 神明達哉 which caused known-bogus servers to be queried
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews anyway. [RT #41321]
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews4287. [bug] Silence an overly noisy log message when message
84f5576c149ed0cf18555bcd7cf1ffbe491bb08fMark Andrews parsing fails. [RT #41374]
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews4286. [security] render_ecs errors were mishandled when printing out
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews a OPT record resulting in a assertion failure.
6953fd6e20fddcb6389e642aa872cb7425a95f6dMark Andrews (CVE-2015-8705) [RT #41397]
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews4285. [security] Specific APL data could trigger a INSIST.
2b67af24fa02867fbc703e89277400b10d0c8b92Mark Andrews (CVE-2015-8704) [RT #41396]
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews4284. [bug] Some GeoIP options were incorrectly documented
f02b985650a6f1277a3a45f18561d519916c1890Mark Andrews using abbreviated forms which were not accepted by
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews named. The code has been updated to allow both
c870001ae1bff0e38f622c4ed56872c7f1d2d336Mark Andrews long and abbreviated forms. [RT #41381]
0b5d8941bb41edbe1296619485c16df536ecc05fMark Andrews4283. [bug] OPENSSL_config is no longer re-callable. [RT #41348]
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews4282. [func] 'dig +[no]mapped' determine whether the use of mapped
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews IPv4 addresses over IPv6 is permitted or not. The
bcdf37e0ff7d73310b7bf247d755194a5718ba38Mark Andrews default is +mapped. [RT #41307]
a34d19803a206febe10866394393ec1c09b28984Mark Andrews4281. [bug] Teach dns_message_totext about BADCOOKIE. [RT #41257]
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews4280. [performance] Use optimal message sizes to improve compression
cbef026164ceabccb2e85403434b722d77f7b5eeMark Andrews in AXFRs. This reduces network traffic. [RT #40996]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4279. [test] Don't use fixed ports when unit testing. [RT #41194]
2db8db63992d081c75d664340866e2a21913705dMark Andrews4278. [bug] 'delv +short +[no]split[=##]' didn't work as expected.
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews4277. [performance] Improve performance of the RBT, the central zone
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews datastructure: The aux hashtable was improved,
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews hash function was updated to perform more
7076f000ea3487299a9da9318915d042aaba62c5Mark Andrews uniform mapping, uppernode was added to
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews dns_rbtnode, and other cleanups and performance
8626c376a038da969de1ee6c158957dfe638daacMark Andrews improvements were made. [RT #41165]
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉4276. [protocol] Add support for SMIMEA. [RT #40513]
c6ee5082db1e40ab64e08a540620da79996efa9cTatuya JINMEI 神明達哉4275. [performance] Lazily initialize dns_compress->table only when
f22ef4dfb973c4714eedd3818050fde74fb20e48Mark Andrews compression is enabled. [RT #41189]
f5a156fa25e6d341e703782de6368fbe9e256ddeTatuya JINMEI 神明達哉4274. [performance] Speed up typemap processing from text. [RT #41196]
78ff0e94eae96f2cf8bf94454d8ff01ba280d30dMark Andrews4273. [bug] Only call dns_test_begin() and dns_test_end() once each
5a9efbf6bf951267e0844990f5b2cb69f5d5f01fTatuya JINMEI 神明達哉 in nsec3_test as it fails with GOST if called multiple
08eadd404a59a6befcf51cb13695abee5d03456dMark Andrews4272. [bug] dig: the +norrcomments option didn't work with +multi.
c55dd77de4ce71b858afb291e44577b51be8b780Mark Andrews4271. [test] Unit tests could deadlock in isc__taskmgr_pause().
eca38a9d43391482bfa22e2eb7b86e19be8bf461Mark Andrews4270. [security] Update allowed OpenSSL versions as named is
d79296d147cd4c35784dd3efd7ed7f09d976ee61Mark Andrews potentially vulnerable to CVE-2015-3193.
4f5a43c5f084290054ddf212add7b4c2abe6edc5Tatuya JINMEI 神明達哉4269. [bug] Zones using "map" format master files currently
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews don't work as policy zones. This limitation has
46390a96dd5f15c9a0b3663bdb7791bdecec3052Mark Andrews now been documented; attempting to use such zones
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews in "response-policy" statements is now a
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews configuration error. [RT #38321]
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews4268. [func] "rndc status" now reports the path to the
9a482d1fcead22ab0d639c463c77672846485f3eMark Andrews configuration file. [RT #36470]
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews4267. [test] Check sdlz error handling. [RT #41142]
d48f9877255f41b6074777da0639b6bc2bfad388Mark Andrews4266. [placeholder]
5d51f534831bd648436d22e4faf203fb9abdf3d4Mark Andrews4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews4264. [bug] Check const of strchr/strrchr assignments match
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews argument's const status. [RT #41150]
a45a6ea2b03448751d7c44931e8ac7666e7cc2ceMark Andrews4263. [contrib] Address compiler warnings in mysqldyn module.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4262. [bug] Fixed a bug in epoll socket code that caused
b5205d860b1672c405c57004e6823af873799b42Mark Andrews sockets to not be registered for ready
b5205d860b1672c405c57004e6823af873799b42Mark Andrews notification in some cases, causing named to not
9a1e8f1baf3e5c53d6b6bfa97d7f60cb3358e404Mark Andrews read from or write to them, resulting in what
9a1e8f1baf3e5c53d6b6bfa97d7f60cb3358e404Mark Andrews appear to the user as blocked connections.
c79e85f7d77317a9b5c34b4bb94eaf1779fc0b6eMark Andrews4261. [maint] H.ROOT-SERVERS.NET is 198.97.190.53 and 2001:500:1::53.
12b1bf8b14ac3b6ec4de9cae6fea10f389b5e5dbMark Andrews4260. [security] Insufficient testing when parsing a message allowed
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews records with an incorrect class to be be accepted,
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews triggering a REQUIRE failure when those records
e22bd3c4bc0de0b96531fab5c2c944251e02e975Mark Andrews were subsequently cached. (CVE-2015-8000) [RT #40987]
529035492ea0a427cc8d007cd743934d4494d9d3Mark Andrews4259. [func] Add an option for non-destructive control channel
529035492ea0a427cc8d007cd743934d4494d9d3Mark Andrews access using a "read-only" clause. In such
ff6bd86d5778de50cb1b4e93591e22354062ee17Mark Andrews cases, a restricted set of rndc commands are
11e43ff752bab2983d9328b6624bbcef613a93e1Mark Andrews allowed for querying information from named.
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews4258. [bug] Limit rndc query message sizes to 32 KiB. This should
cd6d8d61b076eea02826596334a105b918393627Mark Andrews not break any legitimate rndc commands, but will
cd6d8d61b076eea02826596334a105b918393627Mark Andrews prevent a rogue rndc query from allocating too
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews much memory. [RT #41073]
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews4257. [cleanup] Python scripts reported incorrect version. [RT #41080]
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews4256. [bug] Allow rndc command arguments to be quoted so as
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews to allow spaces. [RT #36665]
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews4255. [performance] Add 'message-compression' option to disable DNS
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews compression in responses. [RT #40726]
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews4254. [bug] Address missing lock when getting zone's serial.
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews4253. [security] Address fetch context reference count handling error
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews on socket error. (CVE-2015-8461) [RT#40945]
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews4252. [func] Add support for automating the generation CDS and
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews CDNSKEY rrsets to named and dnssec-signzone.
7b68fa6229f1edadac44c7ec459c9ed77a8368c8Mark Andrews4251. [bug] NTAs were deleted when the server was reconfigured
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews or reloaded. [RT #41058]
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews4250. [func] Log the TSIG key in use during inbound zone
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews transfers. [RT #41075]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4249. [func] Improve error reporting of TSIG / SIG(0) records in
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews the wrong location. [RT #41030]
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews4248. [performance] Add an isc_atomic_storeq() function, use it in
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews stats counters to improve performance.
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr [RT #39972] [RT #39979]
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr4247. [port] Require both HAVE_JSON and JSON_C_VERSION to be
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews defined to report json library version. [RT #41045]
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews4246. [test] Ensure the statschannel system test runs when BIND
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews is not built with libjson. [RT #40944]
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews4245. [placeholder]
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins4244. [bug] The parser was not reporting that use-ixfr is obsolete.
f19353d73186913a6e0f0f766c1f72e5f4c5e9e1Tatuya JINMEI 神明達哉4243. [func] Improved stats reporting from Timothe Litt. [RT #38941]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4242. [bug] Replace the client if not already replaced when
84910d09ee8244027c7031e03999bc60a3d63adbMark Andrews prefetching. [RT #41001]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews4241. [doc] Improved the TSIG, TKEY, and SIG(0) sections in
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews the ARM. [RT #40955]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews4240. [port] Fix LibreSSL compatibility. [RT #40977]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews4239. [func] Changed default servfail-ttl value to 1 second from 10.
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews Also, the maximum value is now 30 instead of 300.
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews4238. [bug] Don't send to servers on net zero (0.0.0.0/8).
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews4237. [doc] Upgraded documentation toolchain to use DocBook 5
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews and dblatex. [RT #40766]
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews4236. [performance] On machines with 2 or more processors (CPU), the
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews default value for the number of UDP listeners
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews has been changed to the number of detected
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews processors minus one. [RT #40761]
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews4235. [func] Added support in named for "dnstap", a fast method of
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews capturing and logging DNS traffic, and a new command
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews "dnstap-read" to read a dnstap log file. Use
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews "configure --enable-dnstap" to enable this
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews feature (note that this requires libprotobuf-c
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews and libfstrm). See the ARM for configuration details.
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews Thanks to Robert Edmonds of Farsight Security.
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews4234. [func] Add deflate compression in statistics channel HTTP
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews server. [RT #40861]
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews4233. [test] Add tests for CDS and CDNSKEY with delegation-only.
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews4232. [contrib] Address unchecked memory allocation calls in
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews query-loc and zone2ldap. [RT #40789]
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews4231. [contrib] Address unchecked calloc call in dlz_mysqldyn_mod.c.
d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews4230. [contrib] dlz_wildcard_dynamic.c:dlz_create could return a
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews uninitialized result. [RT #40839]
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews4229. [bug] A variable could be used uninitialized in
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews dns_update_signaturesinc. [RT #40784]
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews4228. [bug] Address race condition in dns_client_destroyrestrans.
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews4227. [bug] Silence static analysis warnings. [RT #40828]
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews4226. [bug] Address a theoretical shutdown race in
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews zone.c:notify_send_queue(). [RT #38958]
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews4225. [port] freebsd/openbsd: Use '${CC} -shared' for building
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews shared libraries. [RT #39557]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4224. [func] Added support for "dyndb", a new interface for loading
7042126e8a10315255144989f7723f0510558928Mark Andrews zone data from an external database, developed by
7042126e8a10315255144989f7723f0510558928Mark Andrews Red Hat for the FreeIPA project.
5581e28ed8c05350ce6119230c223da60dafdbafMark Andrews DynDB drivers fully implement the BIND database
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews API, and are capable of significantly better
2c4ae1d331c98beba03a337a58e9b44aec98d663Mark Andrews performance and functionality than DLZ drivers,
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews while taking advantage of advanced database
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews features not available in BIND such as multi-master
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews replication.
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews Thanks to Adam Tkac and Petr Spacek of Red Hat.
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews4223. [func] Add support for setting max-cache-size to percentage
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews of available physical memory, set default to 90%.
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews4222. [func] Bias IPv6 servers when selecting the next server to
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews query. [RT #40836]
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews4221. [bug] Resource leak on DNS_R_NXDOMAIN in fctx_create.
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews4220. [doc] Improve documentation for zone-statistics.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews4219. [bug] Set event->result to ISC_R_WOULDBLOCK on EWOULDBLOCK,
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews EGAIN when these soft error are not retried for
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews isc_socket_send*().
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews4218. [bug] Potential null pointer dereference on out of memory
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews if mmap is not supported. [RT #40777]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews4217. [protocol] Add support for CSYNC. [RT #40532]
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews4216. [cleanup] Silence static analysis warnings. [RT #40649]
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews4215. [bug] nsupdate: skip to next request on GSSTKEY create
6e373c502584f9292e964378411d296c8259026bMark Andrews failure. [RT #40685]
6e373c502584f9292e964378411d296c8259026bMark Andrews4214. [protocol] Add support for TALINK. [RT #40544]
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews4213. [bug] Don't reuse a cache across multiple classes.
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews4212. [func] Re-query if we get a bad client cookie returned over
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews UDP. [RT #40748]
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews4211. [bug] Ensure that lwresd gets at least one task to work
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews with if enabled. [RT #40652]
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews4210. [cleanup] Silence use after free false positive. [RT #40743]
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews4209. [bug] Address resource leaks in dlz modules. [RT #40654]
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews4208. [bug] Address null pointer dereferences on out of memory.
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews4207. [bug] Handle class mismatches with raw zone files.
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews4206. [bug] contrib: fixed a possible NULL dereference in
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews DLZ wildcard module. [RT #40745]
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews4205. [bug] 'named-checkconf -p' could include unwanted spaces
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews when printing tuples with unset optional fields.
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews4204. [bug] 'dig +trace' failed to lookup the correct type if
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews the initial root NS query was retried. [RT #40296]
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews4203. [test] The rrchecker system test now tests conversion
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews to and from unknown-type format. [RT #40584]
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews4202. [bug] isccc_cc_fromwire() could return an incorrect
3fc7753efdc33559978ce61785961b1305944077Mark Andrews result. [RT #40614]
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews4201. [func] The default preferred-glue is now the address record
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews type of the transport the query was received
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews over. [RT #40468]
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews4200. [cleanup] win32: update BINDinstall to be BIND release
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews independent. [RT #38915]
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews4199. [protocol] Add support for NINFO, RKEY, SINK, TA.
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews [RT #40545] [RT #40547] [RT #40561] [RT #40563]
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews4198. [placeholder]
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed4197. [bug] 'named-checkconf -z' didn't handle 'in-view' clauses.
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews4196. [doc] Improve how "enum + other" types are documented.
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews4195. [bug] 'max-zone-ttl unlimited;' was broken. [RT #40608]
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews4194. [bug] named-checkconf -p failed to properly print a port
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews range. [RT #40634]
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews4193. [bug] Handle broken servers that return BADVERS incorrectly.
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews4192. [bug] The default rrset-order of random was not always being
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews applied. [RT #40456]
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews4191. [protocol] Accept DNS-SD non LDH PTR records in reverse zones
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews as per RFC 6763. [RT #37889]
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews4190. [protocol] Accept Active Directory gc._msdcs.<forest> name as
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews valid with check-names. <forest> still needs to be
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews LDH. [RT #40399]
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews4189. [cleanup] Don't exit on overly long tokens in named.conf.
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews4188. [bug] Support HTTP/1.0 client properly on the statistics
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews channel. [RT #40261]
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews4187. [func] When any RR type implementation doesn't
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews implement totext() for the RDATA's wire
6178552326050b16f5706ee63c931e9388d74318Mark Andrews representation and returns ISC_R_NOTIMPLEMENTED,
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews such RDATA is now printed in unknown
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews presentation format (RFC 3597). RR types affected
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews include LOC(29) and APL(42). [RT #40317].
69836f45cff130ab11a1f5a662e8bf8aaf390de2Mark Andrews4186. [bug] Fixed an RPZ bug where a QNAME would be matched
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews against a policy RR with wildcard owner name
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews (trigger) where the QNAME was the wildcard owner
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews name's parent. For example, the bug caused a query
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews with QNAME "example.com" to match a policy RR with
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews "*.example.com" as trigger. [RT #40357]
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews4185. [bug] Fixed an RPZ bug where a policy RR with wildcard
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews owner name (trigger) would prevent another policy RR
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews with its parent owner name from being
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews loaded. For example, the bug caused a policy RR
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews with trigger "example.com" to not have any
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews effect when a previous policy RR with trigger
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews "*.example.com" existed in that RPZ zone.
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews4184. [bug] Fixed a possible memory leak in name compression
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews when rendering long messages. (Also, improved
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews wire_test for testing such messages.) [RT #40375]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews4183. [cleanup] Use timing-safe memory comparisons in cryptographic
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews code. Also, the timing-safe comparison functions have
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews been renamed to avoid possible confusion with
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews memcmp(). Thanks to Loganaden Velvindron of
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews AFRINIC. [RT #40148]
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews4182. [cleanup] Use mnemonics for RR class and type comparisons.
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews4181. [bug] Queued notify messages could be dequeued from the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews wrong rate limiter queue. [RT #40350]
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews4180. [bug] Error responses in pipelined queries could
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews cause a crash in client.c. [RT #40289]
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews4179. [bug] Fix double frees in getaddrinfo() in libirs.
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews4178. [bug] Fix assertion failure in parsing UNSPEC(103) RR from
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews text. [RT #40274]
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews4177. [bug] Fix assertion failure in parsing NSAP records from
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews text. [RT #40285]
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews4176. [bug] Address race issues with lwresd. [RT #40284]
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews4175. [bug] TKEY with GSS-API keys needed bigger buffers.
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews4174. [bug] "dnssec-coverage -r" didn't handle time unit
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews suffixes correctly. [RT #38444]
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews4173. [bug] dig +sigchase was not properly matching the trusted
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews key. [RT #40188]
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews4172. [bug] Named / named-checkconf didn't handle a view of CLASS0.
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews4171. [bug] Fixed incorrect class checks in TSIG RR
57e4191a112bf57a1eab6d37212df2531b6f8a16Mark Andrews implementation. [RT #40287]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews4170. [security] An incorrect boundary check in the OPENPGPKEY
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews rdatatype could trigger an assertion failure.
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews (CVE-2015-5986) [RT #40286]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews4169. [test] Added a 'wire_test -d' option to read input as
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews raw binary data, for use as a fuzzing harness.
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews4168. [security] A buffer accounting error could trigger an
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews assertion failure when parsing certain malformed
d08c5dfcd4d1f69004c1382ffc00cc1848dcd1a3Mark Andrews DNSSEC keys. (CVE-2015-5722) [RT #40212]
982a2cfef37a39842ff53dc2e00b947c554fa78eTatuya JINMEI 神明達哉4167. [func] Update rndc's usage output to include recently added
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews commands. Thanks to Tony Finch for submitting a
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews patch. [RT #40010]
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews4166. [func] Print informative output from rndc showzone when
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews allow-new-zones is not enabled for a view. Thanks to
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews Tony Finch for submitting a patch. [RT #40009]
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews4165. [security] A failure to reset a value to NULL in tkey.c could
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews result in an assertion failure. (CVE-2015-5477)
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews4164. [bug] Don't rename slave files and journals on out of memory.
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews4163. [bug] Address compiler warnings. [RT #40024]
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews4162. [bug] httpdmgr->flags was not being initialized. [RT #40017]
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews4161. [test] Add JSON test for traffic size stats; also test
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews for consistency between "rndc stats" and the XML
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews and JSON statistics channel contents. [RT #38700]
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews4160. [placeholder]
885e60828681cecd17bccbe5ceff8f4e75ef4c5cMark Andrews4159. [cleanup] Alphabetize dig's help output. [RT #39966]
8ec056723666c71a499880ffa415661f37ffd08eMark Andrews4158. [placeholder]
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews4157. [placeholder]
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews4156. [func] Added statistics counters to track the sizes
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 of incoming queries and outgoing responses in
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 histogram buckets, as specified in RSSAC002.
85708f9aabbfe31fc648c90258ae18ce0edc3488Mark Andrews4155. [func] Allow RPZ rewrite logging to be configured on a
85708f9aabbfe31fc648c90258ae18ce0edc3488Mark Andrews per-zone basis using a newly introduced log clause in
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews the response-policy option. [RT #39754]
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews4154. [bug] A OPT record should be included with the FORMERR
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews response when there is a malformed EDNS option.
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews4153. [bug] Dig should zero non significant +subnet bits. Check
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews that non significant ECS bits are zero on receipt.
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews4152. [func] Implement DNS COOKIE option. This replaces the
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews experimental SIT option of BIND 9.10. The following
03e200df5dc283f24a6a349f0b31d3eab26da893Mark Andrews named.conf directives are available: send-cookie,
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews cookie-secret, cookie-algorithm, nocookie-udp-size
6672b3524c2305d8c66d8189c774f549be352ac0Mark Andrews and require-server-cookie. The following dig options
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews are available: +[no]cookie[=value] and +[no]badcookie.
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews4151. [bug] 'rndc flush' could cause a deadlock. [RT #39835]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews4150. [bug] win32: listen-on-v6 { any; }; was not working. Apply
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews minimal fix. [RT #39667]
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews4149. [bug] Fixed a race condition in the getaddrinfo()
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews implementation in libirs, which caused the delv
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews utility to crash with an assertion failure when using
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews the '@server' syntax with a hostname argument.
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews4148. [bug] Fix a bug when printing zone names with '/' character
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews in XML and JSON statistics output. [RT #39873]
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews4147. [bug] Filter-aaaa / filter-aaaa-on-v4 / filter-aaaa-on-v6
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews was returning referrals rather than nodata responses
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews when the AAAA records were filtered. [RT #39843]
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews4146. [bug] Address reference leak that could prevent a clean
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews shutdown. [RT #37125]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews4145. [bug] Not all unassociated adb entries where being printed.
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews4144. [func] Add statistics counters for nxdomain redirections.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4143. [placeholder]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4142. [bug] rndc addzone with view specified saved NZF config
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews that could not be read back by named. This has now
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews been fixed. [RT #39845]
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews4141. [bug] A formatting bug caused rndc zonestatus to print
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews negative numbers for large serial values. This has
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews now been fixed. [RT #39854]
7c678cfe0bd477ded2995b9490d72edf7bc76a84Mark Andrews4140. [cleanup] Remove redundant nzf_remove() call during delzone.
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews4139. [doc] Fix rpz-client-ip documentation. [RT #39783]
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews4138. [security] An uninitialized value in validator.c could result
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews in an assertion failure. (CVE-2015-4620) [RT #39795]
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews4137. [bug] Make rndc reconfig report configuration errors the
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews same way rndc reload does. [RT #39635]
01b8bc018d83e757b0578723977b0a71e1e626f8Mark Andrews4136. [bug] Stale statistics counters with the leading
01b8bc018d83e757b0578723977b0a71e1e626f8Mark Andrews '#' prefix (such as #NXDOMAIN) were not being
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews updated correctly. This has been fixed. [RT #39141]
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews4135. [cleanup] Log expired NTA at startup. [RT #39680]
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews4134. [cleanup] Include client-ip rules when logging the number
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews of RPZ rules of each type. [RT #39670]
b5ad6dfea4cc3e7d1d322ac99f1e5a31096837c4Mark Andrews4133. [port] Update how various json libraries are handled.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4132. [cleanup] dig: added +rd as a synonym for +recurse,
aa0f0779d1ea7150991c3e6eec1cc532086c13fdMark Andrews added +class as an unabbreviated alternative
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews to +cl. [RT #39686]
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews4131. [bug] Addressed further problems with reloading RPZ
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews zones. [RT #39649]
0563d476dea35a60a59857cc8bd26ef276d78799Mark Andrews4130. [bug] The compatibility shim for *printf() misprinted some
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews large numbers. [RT #39586]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]
2b3e34f03675d6c71a654fe2094f3b9c063a70eaMark Andrews4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews key as per RFC 7344, Section 4.1. [RT #37215]
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews4126. [bug] Addressed a regression introduced in change #4121.
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews4125. [test] Added tests for dig, renamed delv test to digdelv.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4124. [func] Log errors or warnings encountered when parsing the
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews internal default configuration. Clarify the logging
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews of errors and warnings encountered in rndc
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews addzone or modzone parameters. [RT #39440]
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews4123. [port] Added %z (size_t) format options to the portable
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews internal printf/sprintf implementation. [RT #39586]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4122. [bug] The server could match a shorter prefix than what was
2bef3713093349af52ba61eaab07adf3207da873Mark Andrews available in CLIENT-IP policy triggers, and so, an
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews unexpected action could be taken. This has been
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews corrected. [RT #39481]
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews4121. [bug] On servers with one or more policy zones
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews configured as slaves, if a policy zone updated
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews during regular operation (rather than at
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews startup) using a full zone reload, such as via
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews AXFR, a bug could allow the RPZ summary data to
ad226e3da3207fcb1dbb1054dd339dbbd19f507aMark Andrews fall out of sync, potentially leading to an
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews assertion failure in rpz.c when further
9b80f3a7c739a99b498a37a711a51b6a88df3a78Mark Andrews incremental updates were made to the zone, such
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews as via IXFR. [RT #39567]
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews4120. [bug] A bug in RPZ could cause the server to crash if
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews policy zones were updated while recursion was
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews pending for RPZ processing of an active query.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4119. [test] Allow dig to set the message opcode. [RT #39550]
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews4118. [bug] Teach isc-config.sh about irs. [RT #39213]
e7fb847ed570dd8c1bcdacabb3d69bd81feb79aeMark Andrews4117. [protocol] Add EMPTY.AS112.ARPA as per RFC 7534.
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews4116. [bug] Fix a bug in RPZ that could cause some policy
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews zones that did not specifically require
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews recursion to be treated as if they did;
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews consequently, setting qname-wait-recurse no; was
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews sometimes ineffective. [RT #39229]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews4115. [func] "rndc -r" now prints the result code (e.g.,
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews ISC_R_SUCCESS, ISC_R_TIMEOUT, etc) after
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews running the requested command. [RT #38913]
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews4114. [bug] Fix a regression in radix tree implementation
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews introduced by ECS code. This bug was never
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews released, but it was reported by a user testing
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews master. [RT #38983]
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews4113. [test] Check for Net::DNS is some system test
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews prerequisites. [RT #39369]
3d247992c4a500caa7703edaee68612e545af602Mark Andrews4112. [bug] Named failed to load when "root-delegation-only"
3d247992c4a500caa7703edaee68612e545af602Mark Andrews was used without a list of domains to exclude.
3d247992c4a500caa7703edaee68612e545af602Mark Andrews4111. [doc] Alphabetize rndc man page. [RT #39360]
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews4110. [bug] Address memory leaks / null pointer dereferences
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews on out of memory. [RT #39310]
cd5f6549b33bf2481538b77934d69313f452ff4bMark Andrews4109. [port] linux: support reading the local port range from
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews4108. [func] An additional NXDOMAIN redirect method (option
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews "nxdomain-redirect") has been added, allowing
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews redirection to a specified DNS namespace instead
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews of a single redirect zone. [RT #37989]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews4107. [bug] Address potential deadlock when updating zone content.
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews4106. [port] Improve readline support. [RT #38938]
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews4105. [port] Misc fixes for Microsoft Visual Studio
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews 2015 CTP6 in 64 bit mode. [RT #39308]
ef67e6d8fa86d98a2c0defc43b624434324d9ce7Mark Andrews4104. [bug] Address uninitialized elements. [RT #39252]
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews4103. [port] Misc fixes for Microsoft Visual Studio
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews 2015 CTP6. [RT #39267]
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews4102. [bug] Fix a use after free bug introduced in change
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews #4094. [RT #39281]
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein4101. [bug] dig: the +split and +rrcomments options didn't
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein work with +short. [RT #39291]
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews4100. [bug] Inherited owernames on the line immediately following
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews a $INCLUDE were not working. [RT #39268]
2941824604f9c5aa70f216d1f2941b3c59aa37dcMark Andrews4099. [port] clang: make unknown commandline options hard errors
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews when determining what options are supported.
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews4098. [bug] Address use-after-free issue when using a
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews predecessor key with dnssec-settime. [RT #39272]
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein4097. [func] Add additional logging about xfrin transfer status.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein4096. [bug] Fix a use after free of query->sendevent.
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews4095. [bug] zone->options2 was not being properly initialized.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews4094. [bug] A race during shutdown or reconfiguration could
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews cause an assertion in mem.c. [RT #38979]
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews4093. [func] Dig now learns the SIT value from truncated
40a547174fb7d14f74bc375f076c8c390498f68eMark Andrews responses when it retries over TCP. [RT #39047]
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews4092. [bug] 'in-view' didn't work for zones beneath a empty zone.
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews4091. [cleanup] Some cleanups in isc mem code. [RT #38896]
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews4090. [bug] Fix a crash while parsing malformed CAA RRs in
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews presentation format, i.e., from text such as
46cb442c5c53f16ece23bfe7f7f7bf44f78b0e46Mark Andrews from master files. Thanks to John Van de
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews Meulebrouck Brendgard for discovering and
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews reporting this problem. [RT #39003]
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews4089. [bug] Send notifies immediately for slave zones during
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews startup. [RT #38843]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews4088. [port] Fixed errors when building with libressl. [RT #38899]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews4087. [bug] Fix a crash due to use-after-free due to sequencing
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews of tasks actions. [RT #38495]
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews4086. [bug] Fix out-of-srcdir build with native pkcs11. [RT #38831]
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews4085. [bug] ISC_PLATFORM_HAVEXADDQ could be inconsistently set.
d9ec2891475b8ed894a524a83370cfce30328569Mark Andrews4084. [bug] Fix a possible race in updating stats counters.
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews4083. [cleanup] Print the number of CPUs and UDP listeners
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews consistently in the log and in "rndc status"
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews output; indicate whether threads are supported
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews in "named -V" output. [RT #38811]
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews4082. [bug] Incrementally sign large inline zone deltas.
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759]
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews4080. [func] Completed change #4022, adding a "lock-file" option
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews to named.conf to override the default lock file,
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews in addition to the "named -X <filename>" command
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews line option. Setting the lock file to "none"
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews using either method disables the check completely.
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews4079. [func] Preserve the case of the owner name of records to
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews the RRset level. [RT #37442]
cb2d565b507027f9e5664fa7e167bb24faa7c8fbMark Andrews4078. [bug] Handle the case where CMSG_SPACE(sizeof(int)) !=
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews CMSG_SPACE(sizeof(char)). [RT #38621]
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews4077. [test] Add static-stub regression test for DS NXDOMAIN
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews return making the static stub disappear. [RT #38564]
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews4076. [bug] Named could crash on shutdown with outstanding
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews reload / reconfig events. [RT #38622]
5d3083c4b5b11dfb653b15fd0eeb8e0cc9b175e0Mark Andrews4075. [placeholder]
52188225731669cd571984c45a1407a55c74ee78Mark Andrews4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708]
52188225731669cd571984c45a1407a55c74ee78Mark Andrews4073. [cleanup] Add libjson-c version number reporting to
52188225731669cd571984c45a1407a55c74ee78Mark Andrews "named -V"; normalize version number formatting.
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews4072. [func] Add a --enable-querytrace configure switch for
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews very verbose query trace logging. (This option
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews has a negative performance impact and should be
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews used only for debugging.) [RT #37520]
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews4071. [cleanup] Initialize pthread mutex attrs just once, instead of
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews doing it per mutex creation. [RT #38547]
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews4070. [bug] Fix a segfault in nslookup in a query such as
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews4069. [doc] Reorganize options in the nsupdate man page.
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews4068. [bug] Omit unknown serial number from JSON zone statistics.
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews4067. [cleanup] Reduce noise from RRL when query logging is
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews disabled. [RT #38648]
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews4066. [doc] Reorganize options in the dig man page. [RT #38516]
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews4065. [test] Additional RFC 5011 tests. [RT #38569]
25899e7f1ff0db5322362ada01f7aec3006ff0beTatuya JINMEI 神明達哉4064. [contrib] dnssec-keyset.sh: Generates a specified number
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews of DNSSEC keys with timing set to implement a
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews pre-publication key rollover strategy. Thanks
3d79c437d8cc10651b22601b55f4098b4cfe5979Mark Andrews to Jeffry A. Spain. [RT #38459]
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews4063. [bug] Asynchronous zone loads were not handled
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews correctly when the zone load was already in
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews progress; this could trigger a crash in zt.c.
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉4062. [bug] Fix an out-of-bounds read in RPZ code. If the
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 read succeeded, it doesn't result in a bug
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 during operation. If the read failed, named
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 could segfault. [RT #38559]
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉4061. [bug] Handle timeout in legacy system test. [RT #38573]
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews4060. [bug] dns_rdata_freestruct could be called on a
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews uninitialized structure when handling a error.
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews4059. [bug] Addressed valgrind warnings. [RT #38549]
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews4058. [bug] UDP dispatches could use the wrong pseudorandom
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews number generator context. [RT #38578]
65d64acb51b0655f04b165c8045d1aed556489abMark Andrews4057. [bug] 'dnssec-dsfromkey -T 0' failed to add ttl field.
28e36fcc1eea8b5283aa33d3a6d21d42df8fdaf2Mark Andrews4056. [bug] Expanded automatic testing of trust anchor
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews management and fixed several small bugs including
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews a memory leak and a possible loss of key state
2a2e9c7a1a8cded637be17f32dc1bbdef519ca81Mark Andrews information. [RT #38458]
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews4055. [func] "rndc managed-keys" can be used to check status
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews of trust anchors or to force keys to be refreshed,
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews Also, the managed keys data file has easier-to-read
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews comments. [RT #38458]
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews4054. [func] Added a new tool 'mdig', a lightweight clone of
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews dig able to send multiple pipelined queries.
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews4053. [security] Revoking a managed trust anchor and supplying
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews an untrusted replacement could cause named
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews to crash with an assertion failure.
70ba825728dc64439801981a1abe7f1e28182698Mark Andrews (CVE-2015-1349) [RT #38344]
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews4052. [bug] Fix a leak of query fetchlock. [RT #38454]
8cd830d7c806cac681b057e0c0185f29992fa35fMark Andrews4051. [bug] Fix a leak of pthread_mutexattr_t. [RT #38454]
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews4050. [bug] RPZ could send spurious SERVFAILs in response
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews to duplicate queries. [RT #38510]
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews4049. [bug] CDS and CDNSKEY had the wrong attributes. [RT #38491]
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews4048. [bug] adb hash table was not being grown. [RT #38470]
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews4047. [cleanup] "named -V" now reports the current running versions
7087b3dc9298e85909df7a10f83bbd0588310f0cMark Andrews of OpenSSL and the libxml2 libraries, in addition to
4844ed026a9b5a91044e76399cee80a6514cbf0dMark Andrews the versions that were in use at build time.
db2649bad98fc08054feb1a1ed234d8b9b011ea8Mark Andrews4046. [bug] Accounting of "total use" in memory context
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews statistics was not correct. [RT #38370]
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews4045. [bug] Skip to next master on dns_request_createvia4 failure.
cdb15282589682b664dfb70428a3c1750fe05250Mark Andrews4044. [bug] Change 3955 was not complete, resulting in an assertion
b326d7e3a3a50eb65dd06db007d2fddc62606bbfMark Andrews failure if the timing was just right. [RT #38352]
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews4043. [func] "rndc modzone" can be used to modify the
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews configuration of an existing zone, using similar
4834c6a7f0054b8f4a8a267d60ef78204521e39eMark Andrews syntax to "rndc addzone". [RT #37895]
4c47c184b98a5ec1b303281959c1f3b0db85d733Mark Andrews4042. [bug] zone.c:iszonesecure was being called too late.
0e93730a02a4cafbc5cdfaa04b2d813a0c11b205Mark Andrews4041. [func] TCP sockets can now be shared while connecting.
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews (This will be used to enable client-side support
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews of pipelined queries.) [RT #38231]
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews4040. [func] Added server-side support for pipelined TCP
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews queries. Clients may continue sending queries via
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews TCP while previous queries are being processed
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews in parallel. (The new "keep-response-order"
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews option allows clients to be specified for which
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews the old behavior will still be used.) [RT #37821]
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381]
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews4038. [bug] Add 'rpz' flag to node and use it to determine whether
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews to call dns_rpz_delete. This should prevent unbalanced
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews add / delete calls. [RT #36888]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews4037. [bug] also-notify was ignoring the tsig key when checking
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews for duplicates resulting in some expected notify
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews messages not being sent. [RT #38369]
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews4036. [bug] Make call to open a temporary file name safe during
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews NZF creation. [RT #38331]
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews4035. [bug] Close temporary and NZF FILE pointers before moving
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews the former into the latter's place, as required on
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews Windows. [RT #38332]
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews4034. [func] When added, negative trust anchors (NTA) are now
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews saved to files (viewname.nta), in order to
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews persist across restarts of the named server.
136e739d0d7267a8ce72468233fa795359db62faMark Andrews4033. [bug] Missing out of memory check in request.c:req_send.
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews4032. [bug] Built-in "empty" zones did not correctly inherit the
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews "allow-transfer" ACL from the options or view.
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews4031. [bug] named-checkconf -z failed to report a missing file
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews with a hint zone. [RT #38294]
4091f8dfb71b78b53acd1b25f74e26c384750c03Mark Andrews4030. [func] "rndc delzone" is now applicable to zones that were
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews configured in named.conf, as well as zones that
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews were added via "rndc addzone". (Note, however, that
74ff5f080abdffa7823ff93da74969cd9fa25308Mark Andrews if named.conf is not also modified, the deleted zone
a10ae596379471b0dc76ebd8025d91bf2b90bafcMark Andrews will return when named is reloaded.) [RT #37887]
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews4029. [func] "rndc showzone" displays the current configuration
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews of a specified zone. [RT #37887]
c202b9f4dd7438252d77a4dd8936b7a051431a0bMark Andrews4028. [bug] $GENERATE with a zero step was not being caught as a
d844741f5516bce45f8897435342731edb2307cbMark Andrews error. A $GENERATE with a / but no step was not being
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews caught as a error. [RT #38262]
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews4027. [port] Net::DNS 0.81 compatibility. [RT #38165]
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews4026. [bug] Fix RFC 3658 reference in dig +sigchase. [RT #38173]
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews4025. [port] bsdi: failed to build. [RT #38047]
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews4024. [bug] dns_rdata_opt_first, dns_rdata_opt_next,
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews dns_rdata_opt_current, dns_rdata_txt_first,
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews dns_rdata_txt_next and dns_rdata_txt_current were
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews documented but not implemented. These have now been
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews implemented.
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews dns_rdata_spf_first, dns_rdata_spf_next and
e9a0e12b2b732285e00e0d9436961d0fe3655aa6Mark Andrews dns_rdata_spf_current were documented but not
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews implemented. The prototypes for these
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews functions have been removed. [RT #38068]
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews4023. [bug] win32: socket handling with explicit ports and
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews invoking named with -4 was broken for some
a8be540f55786eb9db43ae52bcc891529602c850Mark Andrews configurations. [RT #38068]
a8be540f55786eb9db43ae52bcc891529602c850Mark Andrews4022. [func] Stop multiple spawns of named by limiting number of
4c8df3b2e8858e97debfe3fb771fe03f22b04d1eMark Andrews processes to 1. This is done by using a lockfile and
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews checking whether we can listen on any configured
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews TCP interfaces. [RT #37908]
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews4021. [bug] Adjust max-recursion-queries to accommodate
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews the need for more queries when the cache is
e021f388dfc2ac024a103def34818af73e7e869fMark Andrews empty. [RT #38104]
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews4020. [bug] Change 3736 broke nsupdate's SOA MNAME discovery
c5eebaf6f1311662f8120a8b560e2dbbfd5c92e8Mark Andrews resulting in updates being sent to the wrong server.
1e6d80a391137b26e7250e72f6b28eb92c2b9952Mark Andrews4019. [func] If named is not configured to validate the answer
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews then allow fallback to plain DNS on timeout even
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews when we know the server supports EDNS. [RT #37978]
3aca8e5bf3740bbcc3bb13dde242d7cc369abb27Mark Andrews4018. [placeholder]
4d86cda3d7eb31578c9088c51a26643d43799533Mark Andrews4017. [test] Add system test to check lookups to legacy servers
cbfce73e8e020c1d08c7be7b48a849d8333eb9bfMark Andrews with broken DNS behavior. [RT #37965]
84a5b69f0029952e33c96695f0a7d26c2bb8f7ccMark Andrews4016. [bug] Fix a dig segfault due to bad linked list usage.
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews4015. [bug] Nameservers that are skipped due to them being
6f1ad0fc645250c240f21a9201e8cdb0f263c218Mark Andrews CNAMEs were not being logged. They are now logged
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews to category 'cname' as per BIND 8. [RT #37935]
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews4014. [bug] When including a master file origin_changed was
783707ee556191b974e951f04accf09f443f5fdfMark Andrews not being properly set leading to a potentially
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews spurious 'inherited owner' warning. [RT #37919]
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews4013. [func] Add a new tcp-only option to server (config) /
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews peer (struct) to use TCP transport to send
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews queries (in place of UDP transport with a
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews TCP fallback on truncated (TC set) response).
fed3d5c2fc3fa8e1547e8b5c28c01f1095e17e5fMark Andrews4012. [cleanup] Check returned status of OpenSSL digest and HMAC
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews functions when they return one. Note this applies
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews only to FIPS capable OpenSSL libraries put in
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews FIPS mode and MD5. [RT #37944]
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews4011. [bug] master's list port and dscp inheritance was not
b03a31d98f1cf42414d321c742c9fc04be75b32bMark Andrews properly implemented. [RT #37792]
81e6a5849d61c2e710d628cf9a7b7282eaa88c46Mark Andrews4010. [cleanup] Clear the prefetchable state when initiating a
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews prefetch. [RT #37399]
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews4009. [func] delv: added a +tcp option. [RT #37855]
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews4008. [contrib] Updated zkt to latest version (1.1.3). [RT #37886]
c1807114ce574896694e3f449c73b098fe91730fMark Andrews4007. [doc] Remove acl forward reference restriction. [RT #37772]
c1807114ce574896694e3f449c73b098fe91730fMark Andrews4006. [security] A flaw in delegation handling could be exploited
0066165079c7d85033f4b623153e404df31b9c75Mark Andrews to put named into an infinite loop. This has
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews been addressed by placing limits on the number
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews of levels of recursion named will allow (default 7),
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews and the number of iterative queries that it will
055597532db52233e80f617b8b015e8caadcb577Mark Andrews send (default 50) before terminating a recursive
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews query (CVE-2014-8500).
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews The recursion depth limit is configured via the
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews "max-recursion-depth" option, and the query limit
055597532db52233e80f617b8b015e8caadcb577Mark Andrews via the "max-recursion-queries" option. [RT #37580]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews4005. [func] The buffer used for returning text from rndc
055597532db52233e80f617b8b015e8caadcb577Mark Andrews commands is now dynamically resizable, allowing
055597532db52233e80f617b8b015e8caadcb577Mark Andrews arbitrarily large amounts of text to be sent back
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews to the client. (Prior to this change, it was
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews possible for the output of "rndc tsig-list" to be
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews truncated.) [RT #37731]
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews4004. [bug] When delegations had AAAA glue but not A, a
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews reference could be leaked causing an assertion
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews failure on shutdown. [RT #37796]
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews4003. [security] When geoip-directory was reconfigured during
9076b18608d8e5cfff8fac54ef82853371fdd0d6Mark Andrews named run-time, the previously loaded GeoIP
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews data could remain, potentially causing wrong
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews ACLs to be used or wrong results to be served
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews based on geolocation (CVE-2014-8680). [RT #37720]
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews4002. [security] Lookups in GeoIP databases that were not
411c61d6fbf5a27c78650b9a1b3c69ac2640c929Mark Andrews loaded could cause an assertion failure
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews (CVE-2014-8680). [RT #37679]
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews4001. [security] The caching of GeoIP lookups did not always
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews handle address families correctly, potentially
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews resulting in an assertion failure (CVE-2014-8680).
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews4000. [bug] NXDOMAIN redirection incorrectly handled NXRRSET
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews from the redirect zone. [RT #37722]
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews3999. [func] "mkeys" and "nzf" files are now named after
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews their corresponding views, unless the view name
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews contains characters that would be incompatible
5ec95dc3cbba160d03be874941930bdf3e515bbdMark Andrews with use in a filename (i.e., slash, backslash,
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews or capital letters). If a view name does contain
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews these characters, the files will still be named
aeb33b58e1979b716d1eb0521df8bc3a0aa41a52Mark Andrews using a cryptographic hash of the view name.
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews Regardless of this, if a file using the old name
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews format is found to exist, it will continue to be
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews used. [RT #37704]
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews3998. [bug] isc_radix_search was returning matches that were
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews too precise. [RT #37680]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews3997. [protocol] Add OPENGPGKEY record. [RT# 37671]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews3996. [bug] Address use after free on out of memory error in
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews keyring_add. [RT #37639]
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews3995. [bug] receive_secure_serial holds the zone lock for too
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews long. [RT #37626]
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews3994. [func] Dig now supports setting the last unassigned DNS
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews header flag bit (dig +zflag). [RT #37421]
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews3993. [func] Dig now supports EDNS negotiation by default.
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews (dig +[no]ednsnegotiation).
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews Note: This is disabled by default in BIND 9.10
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews and enabled by default in BIND 9.11. [RT #37604]
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews3992. [func] DiG can now send queries without questions
7a1cba6262f099aa5ecf9ed4db9c0345489653ccMark Andrews (dig +header-only). [RT #37599]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3991. [func] Add the ability to buffer logging output by specifying
bce2d35b4879d7878e339a9c60db9364508e38fdMark Andrews "buffered yes;" when defining a channel. [RT #26561]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3990. [test] Add tests for unknown DNSSEC algorithm handling.
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3989. [cleanup] Remove redundant dns_db_resigned calls. [RT #35748]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3988. [func] Allow the zone serial of a dynamically updatable
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews zone to be updated via "rndc signing -serial".
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews3987. [port] Handle future Visual Studio 14 incompatible changes.
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews3986. [doc] Add the BIND version number to page footers
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews in the ARM. [RT #37398]
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews3985. [doc] Describe how +ndots and +search interact in dig.
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews3984. [func] Accept 256 byte long PINs in native PKCS#11
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews crypto. [RT #37410]
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews3983. [bug] Change #3940 was incomplete: negative trust anchors
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews could be set to last up to a week, but the
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews "nta-lifetime" and "nta-recheck" options were
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews still limited to one day. [RT #37522]
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews3982. [doc] Include release notes in product documentation.
ac86cff0d7ff2108cd7ace66697e2de104735496Mark Andrews3981. [bug] Cache DS/NXDOMAIN independently of other query types.
8147940ae7a7280ba12dd35614b9c987b38363faMark Andrews3980. [bug] Improve --with-tuning=large by self tuning of SO_RCVBUF
23ac30603a7639bea1d331537634b079b046b122Mark Andrews size. [RT #37187]
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews3979. [bug] Negative trust anchor fetches were not properly
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews managed. [RT #37488]
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews3978. [test] Added a unit test for Diffie-Hellman key
fa901545edc8bb62969121e14199d533a40d0b61Tatuya JINMEI 神明達哉 computation, completing change #3974. [RT #37477]
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews3977. [cleanup] "rndc secroots" reported a "not found" error when
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews there were no negative trust anchors set. [RT #37506]
326449ec24b069f5ef59c8e282ae22a50aa27049Mark Andrews3976. [bug] When refreshing managed-key trust anchors, clear
207f0a15bb486d8dc27cf5ff963fac6068ee2972Mark Andrews any cached trust so that they will always be
3bb3c75ebcf3a798d33a5c439b997e1f37910501Mark Andrews revalidated with the current set of secure
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews roots. [RT #37506]
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews3975. [bug] Don't populate or use the bad cache for queries that
a1ed9109a60911df561628e49c5c29e3b0506801Mark Andrews don't request or use recursion. [RT #37466]
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews3974. [bug] Handle DH_compute_key() failure correctly in
5639d60b40db2051eb7e737d86635c621ffbfa12Mark Andrews3973. [test] Added hooks for Google Performance Tools CPU profiler,
d0deea590e6e175c77f9b5f972fea3fc7a63577aMark Andrews including real-time/wall-clock profiling. Use
689023771c563d8660e45d439a207e06e96de28fMark Andrews "configure --with-gperftools-profiler" to enable.
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews3972. [bug] Fix host's usage statement. [RT #37397]
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews3971. [bug] Reduce the cascading failures due to a bad $TTL line
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews in named-checkconf / named-checkzone. [RT #37138]
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews3970. [contrib] Fixed a use after free bug in the SDB LDAP driver.
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉3969. [test] Added 'delv' system test. [RT #36901]
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉3968. [bug] Silence spurious log messages when using 'named -[46]'.
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews3967. [test] Add test for inlined signed zone in multiple views
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews with different DNSKEY sets. [RT #35759]
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews3966. [bug] Missing dns_db_closeversion call in receive_secure_db.
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews3965. [func] Log outgoing packets and improve packet logging to
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews support logging the remote address. [RT #36624]
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews3964. [func] nsupdate now performs check-names processing.
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews3963. [test] Added NXRRSET test cases to the "dlzexternal"
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews system test. [RT #37344]
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews conditions. [RT #34663]
cb75f7ce19e11e3dfedee5a50a331bf53cd2c36bMark Andrews3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews BADSIG. [RT #37216]
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews3959. [bug] Updates could be lost if they arrived immediately
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews after a rndc thaw. [RT #37233]
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews3958. [bug] Detect when writeable files have multiple references
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews in named.conf. [RT #37172]
351696ef9e44e31e200afc0b019f24af6b597471Rob Austein3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
fbdadf789f3057a5c90ebc026dbf2d174022bd28Rob Austein and ECDSAP384SHA384. [RT #37183]
1672cff96d0b02badab6f94524e10285dde851fcMark Andrews3956. [func] Notify messages are now rate limited by notify-rate and
e9f33cdca0565d049941117d30e4c37ab3c5e990Mark Andrews startup-notify-rate instead of serial-query-rate.
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews3955. [bug] Notify messages due to changes are no longer queued
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews behind startup notify messages. [RT #24454]
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
7b78f6665635ed85118352c97ff5a25f5bb242f7Mark Andrews3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
3b2032121d6e8ae1f4ad24b31a69e1a4b33c91a0Mark Andrews3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews two name pointers were the same. [RT #37176]
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews3951. [func] Add the ability to set yet-to-be-defined EDNS flags
65356eb978747c5e68d4c6b3909642cebb8479f8Mark Andrews to dig (+ednsflags=#). [RT #37142]
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews3950. [port] Changed the bin/python Makefile to work around a
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews3949. [experimental] Experimental support for draft-andrews-edns1 by sending
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews building). Add support for limiting the EDNS version
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews advertised to servers: server { edns-version 0; };
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews Log the EDNS version received in the query log.
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews --with-tuning=large. [RT #37059]
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews3947. [cleanup] Set the executable bit on libraries when using
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews libtool. [RT #36786]
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews3946. [cleanup] Improved "configure" search for a python interpreter.
d562cb04df022606af43c7bee3111e4d17cbe4b2Mark Andrews3945. [bug] Invalid wildcard expansions could be incorrectly
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews accepted by the validator. [RT #37093]
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews3944. [test] Added a regression test for "server-id". [RT #37057]
1bf8f4b77df1e1f8c1ce8326679ab02bac235c09Mark Andrews3943. [func] SERVFAIL responses can now be cached for a
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews limited time (configured by "servfail-ttl",
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews default 10 seconds, limit 30). This can reduce
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews the frequency of retries when an authoritative
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews server is known to be failing, e.g., due to
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews ongoing DNSSEC validation problems. [RT #21347]
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein3942. [bug] Wildcard responses from a optout range should be
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews marked as insecure. [RT #37072]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews3941. [doc] Include the BIND version number in the ARM. [RT #37067]
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews3940. [func] "rndc nta" now allows negative trust anchors to be
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews set for up to one week. [RT #37069]
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews3939. [func] Improve UPDATE forwarding performance by allowing TCP
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein connections to be shared. [RT #37039]
3d8dfd44a3be708f00380064411c16b2fa28303aMark Andrews3938. [func] Added quotas to be used in recursive resolvers
a46445468bb39318ad2a4291ace371a8c4ff9ac6Mark Andrews that are under high query load for names in zones
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews whose authoritative servers are nonresponsive or
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews are experiencing a denial of service attack.
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews - "fetches-per-server" limits the number of
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews simultaneous queries that can be sent to any
eeac8cfcd3ad738b435ad82fcd5c6387da643f90Mark Andrews single authoritative server. The configured
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews value is a starting point; it is automatically
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews adjusted downward if the server is partially or
d1ef96c5fb81b1edbede4228480848b58e48799eMark Andrews completely non-responsive. The algorithm used to
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews adjust the quota can be configured via the
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews "fetch-quota-params" option.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews - "fetches-per-zone" limits the number of
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews simultaneous queries that can be sent for names
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews within a single domain. (Note: Unlike
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews "fetches-per-server", this value is not
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews self-tuning.)
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews - New stats counters have been added to count
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews queries spilled due to these quotas.
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews See the ARM for details of these options. [RT #37125]
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews3937. [func] Added some debug logging to better indicate the
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews conditions causing SERVFAILs when resolving.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews3936. [func] Added authoritative support for the EDNS Client
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews Subnet (ECS) option.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews ACLs can now include "ecs" elements which specify
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews an address or network prefix; if an ECS option is
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews included in a DNS query, then the address encoded
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews in the option will be matched against "ecs" ACL
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews Also, if an ECS address is included in a query,
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews then it will be used instead of the client source
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews address when matching "geoip" ACL elements. This
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews behavior can be overridden with "geoip-use-ecs no;".
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews (Note: to enable "geoip" ACLs, use "configure
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews --with-geoip". This requires libGeoIP version
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews 1.5.0 or higher.)
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews When "ecs" or "geoip" ACL elements are used to
c956fbfbbd536407a2f0ef8f138c27729d31744dMark Andrews select a view for a query, the response will include
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews an ECS option to indicate which client network the
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews answer is valid for.
c52d94fa4b7eaf8b7be9dfda15f9fc2c01041d51Mark Andrews (Thanks to Vincent Bernat.) [RT #36781]
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews3935. [bug] "geoip asnum" ACL elements would not match unless
e94cf7074d8ac30820a715211ae914387996cca9Mark Andrews the full organization name was specified. They
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews can now match against the AS number alone (e.g.,
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews AS1234). [RT #36945]
6ecbd11029fa201b5f273f4ef016617dc35206aeMark Andrews3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews sit-secret documentation. [RT #36980]
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews3933. [bug] Corrected the implementation of dns_rdata_casecompare()
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews for the HIP rdata type. [RT #36911]
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews3932. [test] Improved named-checkconf tests. [RT #36911]
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews3930. [bug] "rndc nta -r" could cause a server hang if the
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews NTA was not found. [RT #36909]
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews3928. [test] Improve rndc system test. [RT #36898]
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews3927. [bug] dig: report PKCS#11 error codes correctly when
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews compiled with --enable-native-pkcs11. [RT #36956]
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews3926. [doc] Added doc for geoip-directory. [RT #36877]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews3923. [bug] Sanity check the xml2-config output. [RT #22246]
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews3922. [bug] When resigning, dnssec-signzone was removing
1195e2e1f2853df56d7ec69d2e01a99d44e4d61dMark Andrews all signatures from delegation nodes. It now
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews retains DS and (if applicable) NSEC signatures.
74def1c9c1880480bb62eb881e8a7ce28f9f7a20Mark Andrews3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews3920. [doc] Added doc for masterfile-style. [RT #36823]
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews3919. [bug] dig: continue to next line if a address lookup fails
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews in batch mode. [RT #36755]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3918. [doc] Update check-spf documentation. [RT #36910]
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉3917. [bug] dig, nslookup and host now continue on names that are
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉 too long after applying a search list elements.
71839e2a424a904a60429a380ee7685464022e4bMark Andrews3916. [contrib] zone2sqlite checked wrong result code. Address
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews compiler warnings. [RT #36931]
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews3915. [bug] Address a assertion if a route event arrived while
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews shutting down. [RT #36887]
38e8022ace865803bdd609c9763cd7d7ba2818dcMark Andrews3914. [bug] Allow the URI target and CAA value fields to
38e8022ace865803bdd609c9763cd7d7ba2818dcMark Andrews be zero length. [RT #36737]
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews3913. [bug] Address race issue in dispatch. [RT #36731]
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews3911. [func] Implement EDNS EXPIRE option client side, allowing
b9625d9be5d89015b75cc7c25088a8d1a3bb7655Mark Andrews a slave server to set the expiration timer correctly
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews when transferring zone data from another slave
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews server. [RT #35925]
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews3910. [bug] Fix races to free event during shutdown. [RT #36720]
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉3909. [bug] When computing the number of elements required for a
3dc3d557be91d59317b34fc5a9ae79b1925d5878Mark Andrews acl count_acl_elements could have a short count leading
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews to a assertion failure. Also zero out new acl elements
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews in dns_acl_merge. [RT #36675]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews3908. [bug] rndc now differentiates between a zone in multiple
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews views and a zone that doesn't exist at all. [RT #36691]
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews3907. [cleanup] Alphabetize rndc help. [RT #36683]
5ed76fa7ea83d3ce7a33d365aa3b84410c3b8773Mark Andrews3906. [protocol] Update URI record format to comply with
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews draft-faltstrom-uri-08. [RT #36642]
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews3904. [func] Add the RPZ SOA to the additional section. [RT36507]
ea38808b7dc1b2e760f18f2cc3ae07deaf15ba1aMark Andrews3903. [bug] Improve the accuracy of DiG's reported round trip
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews time. [RT 36611]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews3902. [bug] liblwres wasn't handling link-local addresses in
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews nameserver clauses in resolv.conf. [RT #36039]
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews3901. [protocol] Added support for CAA record type (RFC 6844).
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
a0a19510c03e6004fd11ec278745d499751cd081Mark Andrews3899. [bug] "request-ixfr" is only applicable to slave and redirect
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews zones. [RT #36608]
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews3898. [bug] Too small a buffer in tohexstr() calls in test code.
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews3897. [bug] RPZ summary information was not properly being updated
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews after a AXFR resulting in changes sometimes being
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews ignored. [RT #35885]
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews3896. [bug] Address performance issues with DSCP code on some
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews platforms. [RT #36534]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews3895. [func] Add the ability to set the DSCP code point to dig.
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews3894. [bug] Buffers in isc_print_vsnprintf were not properly
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews initialized leading to potential overflows when
7952b2b43e880b18e63613805f71fd3e8624bb44Mark Andrews printing out quad values. [RT #36505]
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews3893. [bug] Peer DSCP values could be returned without being set.
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews3892. [bug] Setting '-t aaaa' in .digrc had unintended side
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews effects. [RT #36452]
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews to install python programs.
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews3890. [bug] RRSIG sets that were not loaded in a single transaction
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews at start up where not being correctly added to
6ec0f98cf6e88aeba1615763fdec253bf391f22eMark Andrews re-signing heaps. [RT #36302]
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews3889. [port] hurd: configure fixes as per:
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews3888. [func] 'rndc status' now reports the number of automatic
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews zones. [RT #36015]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews they are easier to use in a debugger. [RT #36373]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews3886. [bug] rbtdb_write_header should use a once to initialize
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews FILE_VERSION. [RT #36374]
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews3885. [port] Use 'open()' rather than 'file()' to open files in
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews3883. [placeholder]
ead4d2d676b12a856769d3750861c6efbb95f709Mark Andrews3882. [func] By default, negative trust anchors will be tested
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews periodically to see whether data below them can be
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews validated, and if so, they will be allowed to
bdb609f5874056f6f1cd212ebf8700132e683fe5Mark Andrews expire early. The "rndc nta -force" option
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews overrides this behavior. The default NTA lifetime
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews and the recheck frequency can be configured by the
bae21f249ead77e442a025b9b18d90e21ebf72ceMark Andrews "nta-lifetime" and "nta-recheck" options. [RT #36146]
a3a09ca2497e925a9f0ba76f1525c6c60e5d5094Mark Andrews3881. [bug] Address memory leak with UPDATE error handling.
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews3880. [test] Update ans.pl to work with new TSIG support in
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews Net::DNS; add additional Net::DNS version prerequisite
50105afc551903541608b11851d73278b23579a3Mark Andrews checks. [RT #36327]
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews3879. [func] Add version printing option to various BIND utilities.
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews3878. [bug] Using the incorrect filename for a DLZ module
ad35e0aec9dae18ee31e760beab1602f7eb4ef05Mark Andrews caused a segmentation fault on startup. [RT #36286]
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews3877. [bug] Inserting and deleting parent and child nodes
8c5d451ea2898586c00932efeb5123b41afc9650Mark Andrews in response policy zones could trigger an assertion
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews failure. [RT #36272]
fa7ee558e0536a94bfdb154a7c7ba298535459c4Mark Andrews3876. [bug] Improve efficiency of DLZ redirect zones by
d81018ac98b287438248cd0e3a1c230eb40b0b55Mark Andrews suppressing unnecessary database lookups. [RT #35835]
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews3875. [cleanup] Clarify log message when unable to read private
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews key files. [RT #24702]
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews3874. [test] Check that only "check-names master" is needed for
e9964e7db4467722300c0d7d52ec1d7a51a784c1Mark Andrews updates to be accepted.
50105afc551903541608b11851d73278b23579a3Mark Andrews3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3872. [bug] Address issues found by static analysis. [RT #36209]
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews3871. [bug] Don't publish an activated key automatically before
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews its publish time. [RT #35063]
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews3870. [func] Updated the random number generator used in
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews the resolver to use the updated ChaCha based one
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews (similar to OpenBSD's changes). Also moved the
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews RNG to libisc and added unit tests for it.
91c79af4755df2d892511512e0fc886639518a92Mark Andrews3869. [doc] Document that in-view zones cannot be used for
91c79af4755df2d892511512e0fc886639518a92Mark Andrews response policy zones. [RT #35941]
80c5a37ddcb42239f6b7d16b66ca0426ca6ffe2cMark Andrews3868. [bug] isc_mem_setwater incorrectly cleared hi_called
2558e3f25d4972a028c99141bd26d3f3087630d5Mark Andrews potentially leaving over memory cleaner running.
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews3867. [func] "rndc nta" can now be used to set a temporary
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews negative trust anchor, which disables DNSSEC
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews validation below a specified name for a specified
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews period of time (not exceeding 24 hours). This
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews can be used when validation for a domain is known
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews to be failing due to a configuration error on
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews the part of the domain owner rather than a
0e4f7c9d4e1a4bb66f0702e9f9975c392a15918bMark Andrews spoofing attack. [RT #29358]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3866. [bug] Named could die on disk full in generate_session_key.
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews3865. [test] Improved testability of the red-black tree
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews implementation and added unit tests. [RT #35904]
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews3864. [bug] RPZ didn't work well when being used as forwarder.
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews3863. [bug] The "E" flag was missing from the query log as a
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews unintended side effect of code rearrangement to
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews support EDNS EXPIRE. [RT #36117]
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews3862. [cleanup] Return immediately if we are not going to log the
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews message in ns_client_dumpmessage.
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews3861. [security] Missing isc_buffer_availablelength check results
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews in a REQUIRE assertion when printing out a packet
807d4a4c54ab9a328afeb5f69dc680ffbcb384c8Tatuya JINMEI 神明達哉 (CVE-2014-3859). [RT #36078]
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews3860. [bug] ioctl(DP_POLL) array size needs to be determined
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews at run time as it is limited to {OPEN_MAX}.
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews3859. [placeholder]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews3858. [bug] Disable GCC 4.9 "delete null pointer check".
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews3857. [bug] Make it harder for a incorrect NOEDNS classification
ea40cebe2b51bd2b3c228ac6d08a3cfeca17960aMark Andrews to be made. [RT #36020]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews3856. [bug] Configuring libjson without also configuring libxml
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews resulted in a REQUIRE assertion when retrieving
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews statistics using json. [RT #36009]
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews3855. [bug] Limit smoothed round trip time aging to no more than
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews once a second. [RT #32909]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews3854. [cleanup] Report unrecognized options, if any, in the final
90c4900d5cf1a1b556ae4c1de6338b2e7475ee55Mark Andrews configure summary. [RT #36014]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews the handling of a rdataset with no records. [RT #35968]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3852. [func] Increase the default number of clients available
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews for servicing lightweight resolver queries, and
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews make them configurable via the "lwres-tasks" and
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews "lwres-clients" options. (Thanks to Tomas Hozza.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3851. [func] Allow libseccomp based system-call filtering
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews on Linux; use "configure --enable-seccomp" to
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews turn it on. Thanks to Loganaden Velvindron
6ec7bd9c691cf7b7a1d4f507e89f2b7cb22a12dcMark Andrews of AFRINIC for the contribution. [RT #35347]
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews3849. [doc] Alphabetized dig's +options. [RT #35992]
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews3848. [bug] Adjust 'statistics-channels specified but not effective'
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews error message to account for JSON support. [RT #36008]
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews3847. [bug] 'configure --with-dlz-postgres' failed to fail when
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews there is not support available.
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews ixfr query. [RT #35980]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews3845. [placeholder]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews3844. [bug] Use the x64 version of the Microsoft Visual C++
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews Redistributable when built for 64 bit Windows.
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews3842. [bug] Adjust RRL log-only logging category. [RT #35945]
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews3840. [port] Check for arc4random_addrandom() before using it;
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews it's been removed from OpenBSD 5.5. [RT #35907]
7052e191ce63fdf063a977695718ff426a27628eMark Andrews3839. [test] Use only posix-compatible shell in system tests.
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews3837. [security] A NULL pointer is passed to query_prefetch resulting
185fd227381269568e193147a98f292210a16f2cMark Andrews a REQUIRE assertion failure when a fetch is actually
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews initiated (CVE-2014-3214). [RT #35899]
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews3836. [bug] Address C++ keyword usage in header file.
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews3835. [bug] Geoip ACL elements didn't work correctly when
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews referenced via named or nested ACLs. [RT #35879]
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews3834. [bug] The re-signing heaps were not being updated soon enough
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews leading to multiple re-generations of the same RRSIG
7ad4d54f29c315cbcb241ca5fc12ba1e0744358bMark Andrews when a zone transfer was in progress. [RT #35273]
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews3833. [bug] Cross compiling was broken due to calling genrandom at
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews build time. [RT #35869]
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews3832. [func] "named -L <filename>" causes named to send log
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews messages to the specified file by default instead
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews of to the system log. (Thanks to Tony Finch.)
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3831. [cleanup] Reduce logging noise when EDNS state changes occur.
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews3830. [func] When query logging is enabled, log query errors at
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews the same level ('info') as the queries themselves.
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews3829. [func] "dig +ttlunits" causes dig to print TTL values
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews with time-unit suffixes: w, d, h, m, s for
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews weeks, days, hours, minutes, and seconds. (Thanks
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews to Tony Finch.) [RT #35823]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3828. [func] "dnssec-signzone -N date" updates serial number
1576cde466a8de10e84f9887ec073ebaf5973aefMark Andrews to the current date in YYYYMMDDNN format.
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉3827. [placeholder]
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉3825. [bug] Address sign extension bug in isc_regex_validate.
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉3824. [bug] A collision between two flag values could cause
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 problems with cache cleaning when SIT was enabled.
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews3823. [func] Log the rpz cname target when rewriting. [RT #35667]
e724512f2be8d3de5f2982ebba0b2cdaf8325702Mark Andrews3822. [bug] Log the correct type of static-stub zones when
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews removing them. [RT #35842]
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews update and transaction support. Thanks to Marty
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews Lee for the contribution. [RT #35656]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews3820. [func] The DLZ API doesn't pass the database version to
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews the lookup() function; this can cause DLZ modules
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews that allow dynamic updates to mishandle prerequisite
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews checks. This has been corrected by adding a
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews 'dbversion' field to the dns_clientinfo_t
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews structure. [RT #35656]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews3819. [bug] NSEC3 hashes need to be able to be entered and
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews displayed without padding. This is not a issue for
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews currently defined algorithms but may be for future
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hash algorithms. [RT #27925]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews3818. [bug] Stop lying to the optimizer that 'void *arg' is a
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews constant in isc_event_allocate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3817. [func] The "delve" command is now spelled "delv" to avoid
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrews a namespace collision with the Xapian project.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3816. [func] "dig +qr" now reports query size. (Thanks to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Tony Finch.) [RT #35822]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews3814. [func] The "masterfile-style" zone option controls the
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews formatting of dumped zone files. Options are
73d74334741756eab4a9afd8d3c4e7c08da9a844Mark Andrews "relative" (multiline format) and "full" (one
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record per line). The default is "relative".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3813. [func] "host" now recognizes the "timeout", "attempts" and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews "debug" options when set in /etc/resolv.conf.
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews (Thanks to Adam Tkac at RedHat.) [RT #21885]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3812. [func] Dig now supports sending arbitrary EDNS options from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the command line (+ednsopt=code[:value]). [RT #35584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3811. [func] "serial-update-method date;" sets serial number
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews on dynamic update to today's date in YYYYMMDDNN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format. (Thanks to Bradley Forschinger.) [RT #24903]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3810. [bug] Work around broken nameservers that fail to ignore
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews unknown EDNS options. [RT #35766]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3809. [doc] Fix SIT and NSID documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3808. [doc] Clean up "prefetch" documentation. [RT #35751]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews3807. [bug] Fix sign extension bug in dns_name_fromtext when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lowercase is set. [RT #35743]
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews3806. [test] Improved system test portability. [RT #35625]
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews3805. [contrib] Added contrib/perftcpdns, a performance testing tool
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews for DNS over TCP. [RT #35710]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3804. [bug] Corrected a race condition in dispatch.c in which
c528ef03d9cdfd7eed4fe6b93563dd599bbb25b0Mark Andrews portentry could be reset leading to an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure in socket_search(). (Change #3708
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews addressed the same issue but was incomplete.)
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews3803. [bug] "named-checkconf -z" incorrectly rejected zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using alternate data sources for not having a "file"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option. [RT #35685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3802. [bug] Various header files were not being installed.
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
0451757ad8f7c49a0d3dcdf7fbdd4ea64fcec298Mark Andrews3800. [bug] A pending event on the route socket could cause an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failure when shutting down named. [RT #35674]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3799. [bug] Improve named's command line error reporting.
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #35659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3797. [port] netbsd: geoip support probing was broken. [RT #35642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
a4b3e51a8f1c9742c0f7d9f7d70f1ad926985145Mark Andrews3795. [bug] Make named-checkconf detect raw masterfiles for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hint zones and reject them. [RT #35268]
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3793. [bug] zone.c:save_nsec3param() could assert when out of
f488b1c311f2fc09ae8e45f7893185e608b17edeMark Andrews memory. [RT #35621]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3792. [func] Provide links to the alternate statistics views when
4bb16c5856e5c6b05ac43c60f9f9376641bdcccfMark Andrews displaying in a browser. [RT #35605]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3791. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3790. [bug] Handle broken nameservers that send BADVERS in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response to unknown EDNS options. Maintain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics on BADVERS responses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3789. [bug] Null pointer dereference on rbt creation failure.
471e0563c7965c556c759775882cd3448dae78eaMark Andrews3788. [bug] dns_peer_getrequestsit was returning request_nsid by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0b2 released ---
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews3787. [bug] The code that checks whether "auto-dnssec" is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allowed was ignoring "allow-update" ACLs set at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the options or view level. [RT #29536]
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews3786. [func] Provide more detailed error codes when using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews native PKCS#11. "pkcs11-tokens" now fails robustly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than asserting when run against an HSM with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an incomplete PKCS#11 API implementation. [RT #35479]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3785. [bug] Debugging code dumphex didn't accept arbitrarily long
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews input (only compiled with -DDEBUG). [RT #35544]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3784. [bug] Using "rrset-order fixed" when it had not been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabled at compile time caused inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews results. It now works as documented, defaulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to cyclic mode. [RT #28104]
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews3783. [func] "tsig-keygen" is now available as an alternate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews command name for "ddns-confgen". It generates
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a TSIG key in named.conf format without comments.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3782. [func] Specifying "auto" as the salt when using
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews "rndc signing -nsec3param" causes named to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generate a 64-bit salt at random. [RT #35322]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3781. [tuning] Use adaptive mutex locks when available; this
edfcbabd60f8479b72d91bcc2d2082a36ace4003Mark Andrews has been found to improve performance under load
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on many systems. "configure --with-locktype=standard"
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews restores conventional mutex locks. [RT #32576]
21f1794606dce19928cf455029e173321f166380Mark Andrews3780. [bug] $GENERATE handled negative numbers incorrectly.
0cb25226fba18befbe40156c93845f2fc9bf3524Mark Andrews3779. [cleanup] Clarify the error message when using an option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that was not enabled at compile time. [RT #35504]
2610933abd985bdea28801c35d740d2cab2f137aMark Andrews3778. [bug] Log a warning when the wrong address family is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used in "listen-on" or "listen-on-v6". [RT #17848]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3777. [bug] EDNS EXPIRE code could dump core when processing
fc87397df60d3c5e5d9900ff5ac82da29fe1dbb7Mark Andrews DLZ queries. [RT #35493]
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews3776. [func] "rndc -q" suppresses output from successful
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc commands. Errors are printed on stderr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3775. [bug] dlz_dlopen driver could return the wrong error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews code on API version mismatch, leading to a segfault.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3774. [func] When using "request-nsid", log the NSID value in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews printable form as well as hex. [RT #20864]
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews3773. [func] "host", "nslookup" and "nsupdate" now have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options to print the version number and exit.
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Based in part on a contribution from Tim Tessier.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #24383]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3770. [bug] "dig +trace" could fail with an assertion when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews needed to fall back to TCP due to a truncated
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews response. [RT #24660]
8ff31bab2f51b171a8eab3a0b8415c64529e116eMark Andrews3769. [doc] Improved documentation of "rndc signing -list".
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm. [RT #34000]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3767. [func] Log explicitly when using rndc.key to configure
935000aa6e2b9d08f363b2e698a258a458a5a7cfMark Andrews command channel. [RT #35316]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3766. [cleanup] Fixed problems with building outside the source
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews tree when using native PKCS#11. [RT #35459]
2fd63cf561135572339d4e2ff0c06695e3dcf1baMark Andrews3765. [bug] Fixed a bug in "rndc secroots" that could crash
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named when dumping an empty keynode. [RT #35469]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews3764. [bug] The dnssec-keygen/settime -S and -i options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (to set up a successor key and set the prepublication
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interval) were missing from dnssec-keyfromlabel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3763. [bug] delve: Cache DNSSEC records to avoid the need to
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews re-fetch them when restarting validation. [RT #35476]
4cb69e7c919cc43b16852016588af714bc421da3Mark Andrews3762. [bug] Address build problems with --pkcs11-native +
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-openssl with ECDSA support. [RT #35467]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3760. [bug] Improve SIT with native PKCS#11 and on Windows.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3759. [port] Enable delve on Windows. [RT #35441]
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews3758. [port] Enable export library APIs on Windows. [RT #35382]
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews3757. [port] Enable Python tools (dnssec-coverage,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-checkds) to run on Windows. [RT #34355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3756. [bug] GSSAPI Kerberos realm checking was broken in
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews check_config leading to spurious messages being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logged. [RT #35443]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3755. [func] Add stats counters for known EDNS options + others.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3754. [cleanup] win32: Installer now places files in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Program Files area rather than system services.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3752. [bug] Address potential REQUIRE failure if
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews DNS_STYLEFLAG_COMMENTDATA is set when printing out
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews3751. [tuning] The default setting for the -U option (setting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the number of UDP listeners per interface) has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been adjusted to improve performance. [RT #35417]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3750. [experimental] Partially implement EDNS EXPIRE option as described
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in draft-andrews-dnsext-expire-00. Retrieval of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the remaining time until expiry for slave zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EXPIRE uses an experimental option code (65002),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which is subject to change. [RT #35416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3749. [func] "dig +subnet" sends an EDNS client subnet option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews containing the specified address/prefix when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews querying. (Thanks to Wilmer van der Gaast.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3748. [test] Use delve to test dns_client interfaces. [RT #35383]
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews3747. [bug] A race condition could lead to a core dump when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews destroying a resolver fetch object. [RT #35385]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3746. [func] New "max-zone-ttl" option enforces maximum
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews TTLs for zones. If loading a zone containing a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews higher TTL, the load fails. DDNS updates with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews higher TTLs are accepted but the TTL is truncated.
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews (Note: Currently supported for master zones only;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing slaves will be added.) [RT #38405]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3745. [func] "configure --with-tuning=large" adjusts various
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compiled-in constants and default settings to
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews values suited to large servers with abundant
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #29538]
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews3744. [experimental] SIT: send and process Source Identity Tokens
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (similar to DNS Cookies by Donald Eastlake 3rd),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which are designed to help clients detect off-path
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spoofed responses and for servers to identify
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews legitimate clients.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SIT uses an experimental EDNS option code (65001),
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews which will be changed to an IANA-assigned value
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if the experiment is deemed a success.
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews SIT can be enabled via "configure --enable-sit" (or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --enable-developer). It is enabled by default in
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews Servers can be configured to send smaller responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to clients that have not identified themselves via
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews SIT. RRL processing has also been updated;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews legitimate clients are not subject to rate
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews limiting. [RT #35389]
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews3743. [bug] delegation-only flag wasn't working in forward zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews declarations despite being documented. This is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews needed to support turning off forwarding and turning
a207a2835e37de52e11d4c143c0425e749409c46Mark Andrews on delegation only at the same name. [RT #35392]
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews3742. [port] linux: libcap support: declare curval at start of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews block. [RT #35387]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3741. [func] "delve" (domain entity lookup and validation engine):
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews A new tool with dig-like semantics for performing DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookups, with internal DNSSEC validation, using the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews same resolver and validator logic as named. This
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allows easy validation of DNSSEC data in environments
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews with untrustworthy resolvers, and assists with
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews troubleshooting of DNSSEC problems. [RT #32406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3740. [contrib] Minor fixes to configure --with-dlz-bdb,
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews3739. [func] Added per-zone stats counters to track TCP and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews UDP queries. [RT #35375]
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3737. [bug] 'rndc retransfer' could trigger a assertion failure
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews with inline zones. [RT #35353]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3736. [bug] nsupdate: When specifying a server by name,
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews fall back to alternate addresses if the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address for that name is not reachable. [RT #25784]
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews3735. [cleanup] Merged the libiscpk11 library into libisc
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews to simplify dependencies. [RT #35205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3734. [bug] Improve building with libtool. [RT #35314]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3733. [func] Improve interface scanning support. Interface
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews information will be automatically updated if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OS supports routing sockets (MacOS, *BSD, Linux).
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews Use "automatic-interface-scan no;" to disable.
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews Add "rndc scan" to trigger a scan. [RT #23027]
9d3ad53203f1ac49f9e876dbbcaca18656eb3e19Mark Andrews3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews driver to dump core on 64-bit systems. [RT #35324]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3731. [func] Added a "no-case-compress" ACL, which causes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named to use case-insensitive compression
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews (disabling change #3645) for specified
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews clients. (This is useful when dealing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with broken client implementations that
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews use case-sensitive name comparisons,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rejecting responses that fail to match the
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews capitalization of the query that was sent.)
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews3730. [cleanup] Added "never" as a synonym for "none" when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuring key event dates in the dnssec tools.
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews3729. [bug] dnssec-keygen could set the publication date
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly when only the activation date was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified on the command line. [RT #35278]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3728. [doc] Expanded native-PKCS#11 documentation,
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews specifically pkcs11: URI labels. [RT #35287]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3727. [func] The isc_bitstring API is no longer used and
90295f915c883d1aeeda856f518584d4219a704aMark Andrews has been removed from libisc. [RT #35284]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3726. [cleanup] Clarified the error message when attempting
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews to configure more than 32 response-policy zones.
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews3725. [contrib] Updated zkt and nslint to newest versions,
c368f28dad471c70213b41f7a0ad1b4ef4d8c543Mark Andrews cleaned up and rearranged the contrib
99776003811a413457a2c35a808ad860df877d24Mark Andrews directory, and added a README.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3724. [bug] win32: Fixed a bug that prevented dig and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews host from exiting properly after completing
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews a UDP query. [RT #35288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3723. [cleanup] Imported keys are now handled the same way
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews regardless of DNSSEC algorithm. [RT #35215]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3722. [bug] Using geoip ACLs in a blackhole statement
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could cause a segfault. [RT #35272]
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews3721. [doc] Improved documentation of the EDNS processing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enhancements introduced in change #3593. [RT #35275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3720. [bug] Address compiler warnings. [RT #35261]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3719. [bug] Address memory leak in in peer.c. [RT #35255]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews probing to see if it is possible to set dscp values
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉 on a per packet basis. [RT #35252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3716. [bug] The dns_request code was setting dcsp values when not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requested. [RT #35252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3715. [bug] The region and city databases could fail to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialize when using some versions of libGeoIP,
2945ac15af547df0268e449252902ead599e2451Mark Andrews causing assertion failures when named was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured to use them. [RT #35427]
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉3714. [test] System tests that need to test for cryptography
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support before running can now use a common
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "testcrypto.sh" script to do so. [RT #35213]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3713. [bug] Save memory by not storing "also-notify" addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in zone objects that are configured not to send
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify requests. [RT #35195]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3712. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3711. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3710. [bug] Address double dns_zone_detach when switching to
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews using automatic empty zones from regular zones.
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3709. [port] Use built-in versions of strptime() and timegm()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on all platforms to avoid portability issues.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3708. [bug] Address a portentry locking issue in dispatch.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews on a missing resolv.conf file and initializes the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews structure as if it had been configured with:
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews nameserver ::1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver 127.0.0.1
550085fed1d0af54ba5b2f588898afec158195deMark Andrews Note: Callers will need to be updated to treat
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_FILENOTFOUND as a qualified success or else
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they will leak memory. The following code fragment
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews will work with both old and new versions without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews changing the behaviour of the existing code.
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 resconf = NULL;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result = irs_resconf_load(mctx, "/etc/resolv.conf",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if (result != ISC_SUCCESS) {
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews if (resconf != NULL)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews irs_resconf_destroy(&resconf);
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3706. [contrib] queryperf: Fixed a possible integer overflow when
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews printing results. [RT #35182]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3705. [func] "configure --enable-native-pkcs11" enables BIND
b6309ed962c4988a314d61742c4fbc4935467d68Mark Andrews to use the PKCS#11 API for all cryptographic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions, so that it can drive a hardware service
39fe146f2ab82cb8e49caa319a3345174fa2d69aMark Andrews module directly without the need to use a modified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL as intermediary (so long as the HSM's vendor
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews provides a complete-enough implementation of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews PKCS#11 interface). This has been tested successfully
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews with the Thales nShield HSM and with SoftHSMv2 from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the OpenDNSSEC project. [RT #29031]
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3703. [func] To improve recursive resolver performance, cache
2434ccfde7efa30b6fedf4630e5036eeb5d647d0Mark Andrews records which are still being requested by clients
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can now be automatically refreshed from the
d8ec783e6dc0bd16a80b30d9888306b1faae6037Mark Andrews authoritative server before they expire, reducing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or eliminating the time window in which no answer
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews is available in the cache. See the "prefetch" option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for more details. [RT #35041]
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews3702. [func] 'dnssec-coverage -l' option specifies a length
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of time to check for coverage; events further into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the future are ignored. 'dnssec-coverage -z'
7f32428506d55083fe5ac9aa515294bdef7c6e27Mark Andrews checks only ZSK events, and 'dnssec-coverage -k'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checks only KSK events. (Thanks to Peter Palfrader.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3701. [func] named-checkconf can now obscure shared secrets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when printing by specifying '-x'. [RT #34465]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews special URLs http://<server>:<port>/xml/v3/server,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3699. [bug] Improvements to statistics channel XSL stylesheet:
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews the stylesheet can now be cached by the browser;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews section headers are omitted from the stats display
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews when there is no data in those sections to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews displayed; counters are now right-justified for
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews easier readability. [RT #35117]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3698. [cleanup] Replaced all uses of memcpy() with memmove().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3697. [bug] Handle "." as a search list element when IDN support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is enabled. [RT #35133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3696. [bug] dig failed to handle AXFR style IXFR responses which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews span multiple messages. [RT #35137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3695. [bug] Address a possible race in dispatch.c. [RT #35107]
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer3694. [bug] Warn when a key-directory is configured for a zone,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but does not exist or is not a directory. [RT #35108]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3693. [security] memcpy was incorrectly called with overlapping
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews ranges resulting in malformed names being generated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on some platforms. This could cause INSIST failures
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer when serving NSEC3 signed zones (CVE-2014-0591).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was no data at the node. [RT #35080]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3691. [contrib] Address null pointer dereference in LDAP and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews MySQL DLZ modules.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3690. [bug] Iterative responses could be missed when the source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews port for an upstream query was the same as the
1431917c7cddbac7442cb910e83cb058fea59fb5Mark Andrews listener port (53). [RT #34925]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3689. [bug] Fixed a bug causing an insecure delegation from one
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews static-stub zone to another to fail with a broken
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trust chain. [RT #35081]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3688. [bug] loadnode could return a freed node on out of memory.
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews3687. [bug] Address null pointer dereference in zone_xfrdone.
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews3686. [func] "dnssec-signzone -Q" drops signatures from keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that are still published but no longer active.
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews3685. [bug] "rndc refresh" didn't work correctly with slave
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones using inline-signing. [RT #35105]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3684. [bug] The list of included files would grow on reload.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3683. [cleanup] Add a more detailed "not found" message to rndc
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews commands which specify a zone name. [RT #35059]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3682. [bug] Correct the behavior of rndc retransfer to allow
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews inline-signing slave zones to retain NSEC3 parameters
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of reverting to NSEC. [RT #34745]
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews3681. [port] Update the Windows build system to support feature
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews selection and WIN64 builds. This is a work in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews progress. [RT #34160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3680. [bug] Ensure buffer space is available in "rndc zonestatus".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3679. [bug] dig could fail to clean up TCP sockets still
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews waiting on connect(). [RT #35074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3678. [port] Update config.guess and config.sub. [RT #35060]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
86f6b92e35c7bdb5fc1fd1021af75b981863313eMark Andrews times. [RT #35073]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3676. [bug] "named-checkconf -z" now checks zones of type
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews hint and redirect as well as master. [RT #35046]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3675. [misc] Provide a place for third parties to add version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information for their extensions in the version
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews file by setting the EXTENSIONS variable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.10.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews3673. [func] New "in-view" zone option allows direct sharing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of zones between views. [RT #32968]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3672. [func] Local address can now be specified when using
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews dns_client API. [RT #34811]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews3671. [bug] Don't allow dnssec-importkey overwrite a existing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews non-imported private key.
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews3670. [bug] Address read after free in server side of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lwres_getrrsetbyname. [RT #29075]
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
020f7361a49c5b1cda91927cf8206c1283fc7496Mark Andrews3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3667. [test] dig: add support to keep the TCP socket open between
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successive queries (+[no]keepopen). [RT #34918]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3666. [func] Add a tool, named-rrchecker, for checking the syntax
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of individual resource records. This tool is intended
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews to be called by provisioning systems so that the front
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews end does not need to be upgraded to support new DNS
33c538015323f4576679e427088372eea614feebMark Andrews record types. [RT #34778]
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews3665. [bug] Failure to release lock on error in receive_secure_db.
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews locking and other bugs. [RT #34855]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3663. [bug] Address bugs in dns_rdata_fromstruct and
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3661. [bug] Address lock order reversal deadlock with inline zones.
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3659. [port] solaris: don't add explicit dependencies/rules for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews python programs as make won't use the implicit rules.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3658. [port] linux: Address platform specific compilation issue
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews when libcap-devel is installed. [RT #34838]
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews3657. [port] Some readline clones don't accept NULL pointers when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling add_history. [RT #34842]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3656. [security] Treat an all zero netmask as invalid when generating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the localnets acl. (The prior behavior could
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews allow unexpected matches when using some versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of Winsock: CVE-2013-6320.) [RT #34687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3655. [cleanup] Simplify TCP message processing when requesting a
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews zone transfer. [RT #34825]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3654. [bug] Address race condition with manual notify requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3653. [func] Create delegations for all "children" of empty zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews except "forward first". [RT #34826]
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3651. [tuning] Adjust when a master server is deemed unreachable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews notify requests. [RT #30589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews the associated view. [RT #34765]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3647. [bug] Address a race condition when shutting down a zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3646. [bug] Journal filename string could be set incorrectly,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing garbage in log messages. [RT #34738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3645. [protocol] Use case sensitive compression when responding to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. [RT #34737]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3643. [doc] Clarify RRL "slip" documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3642. [func] Allow externally generated DNSKEY to be imported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into the DNSKEY management framework. A new tool
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews dnssec-importkey is used to do this. [RT #34698]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3641. [bug] Handle changes to sig-validity-interval settings
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews better. [RT #34625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3640. [bug] ndots was not being checked when searching. Only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews continue searching on NXDOMAIN responses. Add the
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews ability to specify ndots to nslookup. [RT #34711]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews in a key zone. [RT #34238]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
a1edcd1b8d430650d85ec0962cd32efde76a71fbMark Andrews encountered. [RT #34668]
5b1627d469d07c5bfe7f193e3ddd85d0dd6ad4b0Mark Andrews3637. [bug] 'allow-query-on' was checking the source address
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews rather than the destination address. [RT #34590]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3636. [bug] Automatic empty zones now behave better with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews forward only "zones" beneath them. [RT #34583]
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews3635. [bug] Signatures were not being removed from a zone with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only KSK keys for a algorithm. [RT #34439]
acc8b7ac3d16538bf223545bbf71899b9accaebbMark Andrews3634. [func] Report build-id in rndc status. Report build-id
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when building from a git repository. [RT #20422]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews to support new EDNS options. [RT #34414]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3632. [bug] Signature from newly inactive keys were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed. [RT #32178]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3631. [bug] Remove spurious warning about missing signatures when
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews qtype is SIG. [RT #34600]
9549a96654ead15b264c9159d48eb485e4f9db55Mark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews3629. [func] Allow the printing of cryptographic fields in DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records by dig to be suppressed (dig +nocrypto).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
57e0f58b3fd4cb49a57200c8af9cb58d984d871aMark Andrews3625. [bug] Don't send notify messages to machines outside of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3624. [bug] Look for 'json_object_new_int64' when looking for a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the json library. [RT #34449]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3623. [placeholder]
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache statistics. [RT #34339]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews can lead to a remotely triggerable REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-4854). [RT #34238]
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ responses to be configured on the basis of
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews the client IP address; this can be used, for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews example, to blacklist misbehaving recursive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or stub resolvers. [RT #33605]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3618. [func] "rndc reload" now checks modification times of
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews include files as well as master files to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews whether to skip reloading a zone. [RT #33936]
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews3617. [bug] Named was failing to answer queries during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc reload" [RT #34098]
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews3616. [bug] Change #3613 was incomplete. [RT #34177]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3615. [cleanup] "configure" now finishes by printing a summary
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews of optional BIND features and whether they are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews active or inactive. ("configure --enable-full-report"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews increases the verbosity of the summary.) [RT #31777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3614. [port] Check for <linux/types.h>. [RT #34162]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3613. [bug] named could crash when deleting inline-signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones with "rndc delzone". [RT #34066]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3611. [bug] Improved resistance to a theoretical authentication
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews attack based on differential timing. [RT #33939]
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews3610. [cleanup] win32: Some executables had been omitted from the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews installer. [RT #34116]
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews3609. [bug] Corrected a possible deadlock in applications using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the export version of the isc_app API. [RT #33967]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3608. [port] win32: added todos.pl script to ensure all text files
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews the win32 build depends on are converted to DOS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews newline format. [RT #22067]
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews message. [RT #34045]
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews3606. [func] "rndc flushtree" now flushes matching
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records in the address database and bad cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as well as the DNS cache. (Previously only the
c08a03a43116c21cf12dea7cbcb5465588f7955cMark Andrews DNS cache was flushed.) [RT #33970]
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews3605. [port] win32: Addressed several compatibility issues
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with newer versions of Visual Studio. [RT #33916]
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews3604. [bug] Fixed a compile-time error when building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews JSON but not XML. [RT #33959]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3603. [bug] Install <isc/stat.h>. [RT #33956]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews integrate with named and serve DNS data.
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews (Contributed by John Eaglesham of Yahoo.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3601. [bug] Added to PKCS#11 openssl patches a value len
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attribute in DH derive key. [RT #33928]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3600. [cleanup] dig: Fixed a typo in the warning output when receiving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an oversized response. [RT #33910]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3599. [tuning] Check for pointer equivalence in name comparisons.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3598. [cleanup] Improved portability of map file code. [RT #33820]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3597. [bug] Ensure automatic-resigning heaps are reconstructed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when loading zones in map format. [RT #33381]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3596. [port] Updated win32 build documentation, added
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-verify. [RT #22067]
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews3595. [port] win32: Fix build problems introduced by change #3550.
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews3594. [maint] Update config.guess and config.sub. [RT #33816]
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews3593. [func] Update EDNS processing to better track remote server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews capabilities. [RT #30655]
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews3592. [doc] Moved documentation of rndc command options to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc man page. [RT #33506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3591. [func] Use CRC-64 to detect map file corruption at load
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #33746]
81e302788a444b81231a7cda721548a020ae5660Brian Wellington3590. [bug] When using RRL on recursive servers, defer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rate-limiting until after recursion is complete;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews also, use correct rcode for slipped NXDOMAIN
c00a1eb423623442aff428336bb55590f79013bbMark Andrews responses. [RT #33604]
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews3589. [func] Report serial numbers in when starting zone transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Report accepted NOTIFY requests including serial.
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington3588. [bug] dig: addressed a memory leak in the sigchase code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that could cause a shutdown crash. [RT #33733]
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington3587. [func] 'named -g' now checks the logging configuration but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews does not use it. [RT #33473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3585. [func] "rndc delzone -clean" option removes zone files
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews when deleting a zone. [RT #33570]
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews3584. [security] Caching data from an incompletely signed zone could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an assertion failure in resolver.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-3919). [RT #33690]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3583. [bug] Address memory leak in GSS-API processing [RT #33574]
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews3582. [bug] Silence false positive warning regarding missing file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directive for inline slave zones. [RT #33662]
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3580. [bug] Addressed a possible race in acache.c [RT #33602]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3579. [maint] Updates to PKCS#11 openssl patches, supporting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3577. [bug] Handle zero TTL values better. [RT #33411]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3576. [bug] Address a shutdown race when validating. [RT #33573]
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews3575. [func] Changed the logging category for RRL events from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'queries' to 'query-errors'. [RT #33540]
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews3574. [doc] The 'hostname' keyword was missing from server-id
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews description in the named.conf man page. [RT #33476]
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone names containing punctuation marks and other
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews nonstandard characters. [RT #33419]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3572. [func] Threads are now enabled by default on most
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews operating systems. [RT #25483]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3571. [bug] Address race condition in dns_client_startresolve().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3570. [bug] Check internal pointers are valid when loading map
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews files. [RT #33403]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews module, and added multithread support. [RT #33394]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3568. [cleanup] Add a product description line to the version file,
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews to be reported by named -v/-V. [RT #33366]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3567. [bug] Silence clang static analyzer warnings. [RT #33365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3566. [func] Log when forwarding updates to master. [RT #33240]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3565. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3562. [func] Update map file header format to include a SHA-1 hash
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews of the database content, so that corrupted map files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be rejected at load time. [RT #32459]
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or NOTIMP. Adjust usage message. [RT #33363]
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when set via configure. [RT #33345]
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews3559. [func] Check that both forms of Sender Policy Framework
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records exist or do not exist. [RT #33355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3557. [bug] Reloading redirect zones was broken. [RT #33292]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews3555. [bug] Address theoretical race conditions in acache.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (change #3553 was incomplete). [RT #33252]
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews3554. [bug] RRL failed to correctly rate-limit upward
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referrals and failed to count dropped error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses in the statistics. [RT #33225]
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews3553. [bug] Address suspected double free in acache. [RT #33252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3552. [bug] Wrong getopt option string for 'nsupdate -r'.
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3550. [func] Unified the internal and export versions of the
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews BIND libraries, allowing external clients to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the same libraries as BIND. [RT #33131]
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews3549. [doc] Documentation for "request-nsid" was missing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3548. [bug] The NSID request code in resolver.c was broken
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington resulting in invalid EDNS options being sent.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3547. [bug] Some malformed unknown rdata records were not properly
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson detected and rejected. [RT #33129]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3546. [func] Add EUI48 and EUI64 types. [RT #33082]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3544. [contrib] check5011.pl: Script to report the status of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews managed keys as recorded in managed-keys.bind.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Contributed by Tony Finch <dot@dotat.at>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3543. [bug] Update socket structure before attaching to socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews manager after accept. [RT #33084]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3542. [placeholder]
683f10428e292811317df38fa324f242abbf7384Mark Andrews3541. [bug] Parts of libdns were not properly initialized when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews built in libexport mode. [RT #33028]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews3540. [test] libt_api: t_info and t_assert were not thread safe.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3539. [port] win32: timestamp format didn't match other platforms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3538. [test] Running "make test" now requires loopback interfaces
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be set up. [RT #32452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3537. [tuning] Slave zones, when updated, now send NOTIFY messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to peers before being dumped to disk rather than
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington after. [RT #27242]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3536. [func] Add support for setting Differentiated Services Code
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington Point (DSCP) values in named. Most configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options which take a "port" option (e.g.,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listen-on, forwarders, also-notify, masters,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify-source, etc) can now also take a "dscp"
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington option specifying a code point for use with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews outgoing traffic, if supported by the underlying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OS. [RT #27596]
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington3535. [bug] Minor win32 cleanups. [RT #32962]
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews3534. [bug] Extra text after an embedded NULL was ignored when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parsing zone files. [RT #32699]
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3531. [bug] win32: A uninitialized value could be returned on out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory. [RT #32960]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3529. [func] Named now listens on both IPv4 and IPv6 interfaces
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by default. Named previously only listened on IPv4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces by default unless named was running in
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews IPv6 only mode. [RT #32945]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3528. [func] New "dnssec-coverage" command scans the timing
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews metadata for a set of DNSSEC keys and reports if a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lapse in signing coverage has been scheduled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inadvertently. (Note: This tool depends on python;
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews it will not be built or installed on systems that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews do not have a python interpreter.) [RT #28098]
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson3527. [compat] Add a URI to allow applications to explicitly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews request a particular XML schema from the statistics
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews channel, returning 404 if not supported. [RT #32481]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3526. [cleanup] Set up dependencies for unit tests correctly during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build. [RT #32803]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3525. [func] Support for additional signing algorithms in rndc:
77467267d97c781f3f3d050e229a874831e59c3dMark Andrews hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The -A option to rndc-confgen can be used to
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews select the algorithm for the generated key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (The default is still hmac-md5; this may
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews change in a future release.) [RT #20363]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3524. [func] Added an alternate statistics channel in JSON format,
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews when the server is built with the json-c library:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews http://[address]:[port]/json. [RT #32630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamically-loadable modules, and added the
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews "wildcard" module based on a contribution from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they ought to. [RT #32685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington3520. [bug] 'mctx' was not being referenced counted in some places
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where it should have been. [RT #32794]
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews3519. [func] Full replay protection via four-way handshake is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now mandatory for rndc clients. Very old versions
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews of rndc will no longer work. [RT #32798]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews so that all dns_rrl_rtype_t enum values fit regardless
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of whether it is teated as signed or unsigned by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the compiler. [RT #32792]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3516. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3515. [port] '%T' is not portable in strftime(). [RT #32763]
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews3514. [bug] The ranges for valid key sizes in ddns-confgen and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc-confgen were too constrained. Keys up to 512
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bits are now allowed for most algorithms, and up
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews to 1024 bits for hmac-sha384 and hmac-sha512.
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews3513. [func] "dig -u" prints times in microseconds rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews milliseconds. [RT #32704]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3512. [func] "rndc validation check" reports the current status
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of DNSSEC validation. [RT #21397]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3511. [doc] Improve documentation of redirect zones. [RT #32756]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3510. [func] "rndc status" and XML statistics channel now report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server start and reconfiguration times. [RT #21048]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3509. [cleanup] Added a product line to version file to allow for
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews easy naming of different products (BIND
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews vs BIND ESV, for example). [RT #32755]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3508. [contrib] queryperf was incorrectly rejecting the -T option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3507. [bug] Statistics channel XSL had a glitch when attempting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to chart query data before any queries had been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received. [RT #32620]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the keyword "unlimited" is no longer defined as equal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 4 gigabytes (except on 32-bit platforms); it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews means literally unlimited. [RT #32358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3505. [bug] When setting "max-cache-size" and "max-acache-size",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews larger values than 4 gigabytes could not be set
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington explicitly, though larger sizes were available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when setting cache size to 0. This has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corrected; the full range is now available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3504. [func] Add support for ACLs based on geographic location,
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington using MaxMind GeoIP databases. Based on code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contributed by Ken Brownfield <kb@slide.com>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3503. [doc] Clarify size_spec syntax. [RT #32449]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3502. [func] zone-statistics: "no" is now a synonym for "none",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of "terse". [RT #29165]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3501. [func] zone-statistics now takes three options: full,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews terse, and none. "yes" and "no" are retained as
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews synonyms for full and terse, respectively. [RT #29165]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3500. [security] Support NAPTR regular expression validation on
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews all platforms without using libregex, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be vulnerable to memory exhaustion attack
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-2266). [RT #32688]
1e4bfff1855795853648f507422b96fc8fecbff1Mark Andrews3499. [doc] Corrected ARM documentation of built-in zones.
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson3498. [bug] zone statistics for zones which matched a potential
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews empty zone could have their zone-statistics setting
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews3497. [func] When deleting a slave/stub zone using 'rndc delzone'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews report the files that were being used so they can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be cleaned up if desired. [RT #27899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3496. [placeholder]
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews3495. [func] Support multiple response-policy zones (up to 32),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while improving RPZ performance. "response-policy"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews syntax now includes a "min-ns-dots" clause, with
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews default 1, to exclude top-level domains from
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews NSIP and NSDNAME checking. --enable-rpz-nsip and
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson --enable-rpz-nsdname are now the default. [RT #32251]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3494. [func] DNS RRL: Blunt the impact of DNS reflection and
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews amplification attacks by rate-limiting substantially-
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews identical responses. [RT #28130]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson contributed by Mark Goldfinch. [RT #32549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3492. [bug] Fixed a regression in zone loading performance
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson due to lock contention. [RT #30399]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3491. [bug] Slave zones using inline-signing must specify a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file name. [RT #31946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3490. [bug] When logging RDATA during update, truncate if it's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too long. [RT #32365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dlzcreate() failed to properly initialize
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dlzdb.link. When cloning a rdataset do not copy
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews the link contents. [RT #32651]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3488. [bug] Use after free error with DH generated keys. [RT #32649]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3487. [bug] Change 3444 was not complete. There was a additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews place where the NOQNAME proof needed to be saved.
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson3486. [bug] named could crash when using TKEY-negotiated keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that had been deleted and then recreated. [RT #32506]
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3484. [bug] Some statistics were incorrectly rendered in XML.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3483. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3482. [func] dig +nssearch now prints name servers that don't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have address records (missing AAAA or A, or the name
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson doesn't exist). [RT #29348]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3481. [cleanup] Removed use of const const in atf.
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson3480. [bug] Silence logging noise when setting up zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics. [RT #32525]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3479. [bug] Address potential memory leaks in gssapi support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews code. [RT #32405]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3478. [port] Fix a build failure in strict C99 environments
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews3477. [func] Expand logging when adding records via DDNS update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3476. [bug] "rndc zonestatus" could report a spurious "not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found" error on inline-signing zones. [RT #29226]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3475. [cleanup] Changed name of 'map' zone file format (previously
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson 'fast'). [RT #32458]
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews3474. [bug] nsupdate could assert when the local and remote
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address families didn't match. [RT #22897]
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer3473. [bug] dnssec-signzone/verify could incorrectly report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an error condition due to an empty node above an
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson opt-out delegation lacking an NSEC3. [RT #32072]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3472. [bug] The active-connections counter in the socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics could underflow. [RT #31747]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3471. [bug] The number of UDP dispatches now defaults to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the number of CPUs even if -n has been set to
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews a higher value. [RT #30964]
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer3470. [bug] Slave zones could fail to dump when successfully
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews refreshing after an initial failure. [RT #31276]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3469. [bug] Handle DLZ lookup failures more gracefully. Improve
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson backward compatibility between versions of DLZ dlopen
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API. [RT #32275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3468. [security] RPZ rules to generate A records (but not AAAA records)
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington could trigger an assertion failure when used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conjunction with DNS64 (CVE-2012-5689). [RT #32141]
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews3467. [bug] Added checks in dnssec-keygen and dnssec-settime
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to check for delete date < inactive date. [RT #31719]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in DLZ example driver. [RT #32275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3465. [bug] Handle isolated reserved ports. [RT #31778]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3464. [maint] Updates to PKCS#11 openssl patches, supporting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3462. [doc] Clarify server selection behavior of dig when using
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews -4 or -6 options. [RT #32181]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3461. [bug] Negative responses could incorrectly have AD=1
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews set. [RT #32237]
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews3459. [func] Added -J option to named-checkzone/named-compilezone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to specify the path to the journal file. [RT #30958]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3458. [bug] Return FORMERR when presented with a overly long
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews domain named in a request. [RT #29682]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews3456. [port] g++47: ATF failed to compile. [RT #32012]
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews failed. [RT #31960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3452. [bug] Accept duplicate singleton records. [RT #32329]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3451. [port] Increase per thread stack size from 64K to 1M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3450. [bug] Stop logfileconfig system test spam system logs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3449. [bug] gen.c: use the pre-processor to construct format
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews strings so that compiler can perform sanity checks;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews check the snprintf results. [RT #17576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3445. [bug] Warn about zone files with blank owner names
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews immediately after $ORIGIN directives. [RT #31848]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews insecure responses. [RT #21409]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rejected when generating keys. [RT #31927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3442. [port] Net::DNS 0.69 introduced a non backwards compatible
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson change. [RT #32216]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews3440. [bug] Reorder get_key_struct to not trigger a assertion when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cleaning up due to out of memory error. [RT #32131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3439. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews buffers with constant data. [RT #32064]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3436. [bug] Check malloc/calloc return values. [RT #32088]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3435. [bug] Cross compilation support in configure was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3434. [bug] Pass client info to the DLZ findzone() entry
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson point in addition to lookup(). This makes it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible for a database to answer differently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews whether it's authoritative for a name depending
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson on the address of the client. [RT #31775]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3433. [bug] dlz_findzone() did not correctly handle
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews ISC_R_NOMORE. [RT #31172]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3432. [func] Multiple DLZ databases can now be configured.
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson DLZ databases are searched in the order configured,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unless set to "search no", in which case a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone can be configured to be retrieved from a
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson particular DLZ database by using a "dlz <name>"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option in the zone statement. DLZ databases can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support type "master" and "redirect" zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3431. [bug] ddns-confgen: Some valid key algorithms were
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews not accepted. [RT #31927]
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson3430. [bug] win32: isc_time_formatISO8601 was missing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'T' between the date and time. [RT #32044]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3429. [bug] dns_zone_getserial2 could a return success without
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews returning a valid serial. [RT #32007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3427. [bug] dig +trace incorrectly displayed name server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses instead of names. [RT #31641]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3426. [bug] dnssec-checkds: Clearer output when records are not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found. [RT #31968]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in use after free. [RT #31908]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson3423. [bug] "rndc signing -nsec3param" didn't accept the full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range of possible values. Address portability issues.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3422. [bug] Added a clear error message for when the SOA does not
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews match the referral. [RT #31281]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3421. [bug] Named loops when re-signing if all keys are offline.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson3418. [func] New XML schema (version 3.0) for the statistics channel
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adds query type statistics at the zone level, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews flattens the XML tree and uses compressed format to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews optimize parsing. Includes new XSL that permits
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews charting via the Google Charts API on browsers that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support javascript in XSL. The old XML schema has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecated. [RT #30023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3417. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews dispatches per interface. [RT #31743]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3415. [bug] named could die with a REQUIRE failure if a validation
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson was canceled. [RT #31804]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3414. [bug] Address locking issues found by Coverity. [RT #31626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3413. [func] Record the number of DNS64 AAAA RRsets that have been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews synthesized. [RT #27636]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson3412. [bug] Copy timeval structure from control message data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to UDP. [RT #31690]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3410. [bug] Addressed Coverity warnings. [RT #31626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from X.509 certificates, for use with DANE
9bdb01e6c382e897572791b12190472955994d87Mark Andrews (DNS-based Authentication of Named Entities).
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson3408. [bug] Some DNSSEC-related options (update-check-ksk,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are now legal in slave zones as long as
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson inline-signing is in use. [RT #31078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3407. [placeholder]
61d5bfc06be978ea962b1c64309894ac80351771Mark Andrews3406. [bug] mem.c: Fix compilation errors when building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3405. [bug] Handle time going backwards in acache. [RT #31253]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson3404. [bug] dnssec-signzone: When re-signing a zone, remove
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRSIG and NSEC records from nodes that used to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in-zone but are now below a zone cut. [RT #31556]
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3402. [test] The IPv6 interface numbers used for system
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tests were incorrect on some platforms. [RT #25085]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson3400. [cleanup] "named -V" can now report a source ID string, defined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the "srcid" file in the build tree and normally set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the most recent git hash. [RT #31494]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clash. [RT #31515]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3398. [bug] SOA parameters were not being updated with inline
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signed zones if the zone was modified while the
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson server was offline. [RT #29272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews3396. [bug] OPT records were incorrectly removed from signed,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews truncated responses. [RT #31439]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3394. [bug] Adjust 'successfully validated after lower casing
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews signer' log level and category. [RT #31414]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3388. [bug] Fixed several Coverity warnings.
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson Note: This change includes a fix for a bug that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was subsequently determined to be an exploitable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews security vulnerability, CVE-2012-5688: named could
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson die on specific queries with dns64 enabled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3387. [func] DS digest can be disabled at runtime with
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson disable-ds-digests. [RT #21581]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3386. [bug] Address locking violation when generating new NSEC /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3 chains. [RT #31224]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3385. [bug] named-checkconf didn't detect missing master lists
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in also-notify clauses. [RT #30810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3384. [bug] Improved logging of crypto errors. [RT #30963]
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson3383. [security] A certain combination of records in the RBT could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause named to hang while populating the additional
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews section of a response. [RT #31090]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews if set, regardless of the address family in use.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3381. [contrib] Update queryperf to support more RR types.
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews3380. [bug] named could die if a nonexistent master list was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referenced in a also-notify. [RT #31004]
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson3379. [bug] isc_interval_zero and isc_time_epoch should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "const (type)* const". [RT #31069]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3377. [bug] Removed spurious newline from NSEC3 multiline
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output. [RT #31044]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3376. [bug] Lack of EDNS support was being recorded without a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successful response. [RT #30811]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington3374. [bug] isc_parse_uint32 failed to return a range error on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems with 64 bit longs. [RT #30232]
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson3373. [bug] win32: open raw files in binary mode. [RT #30944]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson messages. [RT #30501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3371. [bug] AD=1 should behave like DO=1 when deciding whether to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews add NS RRsets to the additional section or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3370. [bug] Address use after free while shutting down. [RT #30241]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3369. [bug] nsupdate terminated unexpectedly in interactive mode
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if built with readline support. [RT #29550]
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were not C++ safe.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3367. [bug] dns_dnsseckey_create() result was not being checked.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3366. [bug] Fixed Read-After-Write dependency violation for IA64
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic operations. [RT #25181]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3365. [bug] Removed spurious newlines from log messages in
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3364. [security] Named could die on specially crafted record.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in static-stub zones; this had been overlooked.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3362. [bug] Setting some option values to 0 in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could trigger an assertion failure on startup.
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington3361. [bug] "rndc signing -nsec3param" didn't work correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when salt was set to '-' (no salt). [RT #30099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3360. [bug] 'host -w' could die. [RT #18723]
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer3359. [bug] An improperly-formed TSIG secret could cause a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory leak. [RT #30607]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3358. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews approaching their expiry, so they don't remain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in caches after expiry. [RT #26429]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3355. [port] Use more portable awk in verify system test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3353. [bug] Use a single task for task exclusive operations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3352. [bug] Ensure that learned server attributes timeout of the
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews adb cache. [RT #29856]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
56d69016f4fae2eda4d39c92fe13595251aaadd3Mark Andrews caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory debugging flags are set. [RT #30243]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3350. [bug] Memory read overrun in isc___mem_reallocate if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_MEM_DEBUGCTX memory debugging flag is set.
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews3349. [bug] Change #3345 was incomplete. [RT #30233]
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson3348. [bug] Prevent RRSIG data from being cached if a negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record matching the covering type exists at a higher
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson trust level. Such data already can't be retrieved from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the cache since change 3218 -- this prevents it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being inserted into the cache as well. [RT #26809]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson private key file would cause a change in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews permissions of the existing file. [RT #27724]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3346. [security] Bad-cache data could be used before it was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialized, causing an assert. [RT #30025]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3345. [bug] Addressed race condition when removing the last item
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews or inserting the first item in an ISC_QUEUE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3344. [func] New "dnssec-checkds" command checks a zone to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews determine which DS records should be published
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson in the parent zone, or which DLV records should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews published in a DLV zone, and queries the DNS to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ensure that it exists. (Note: This tool depends
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on python; it will not be built or installed on
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson systems that do not have a python interpreter.)
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3343. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in excessive cpu usage in some cases.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington chains. [RT #23673]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3340. [func] Added new 'map' zone file format, which is an image
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson of a zone database that can be loaded directly into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory via mmap(), allowing much faster zone loading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Note: Because of pointer sizes and other
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews considerations, this file format is platform-dependent;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'map' zone files cannot always be transferred from one
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server to another.) [RT #25419]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3339. [func] Allow the maximum supported rsa exponent size to be
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews specified: "max-rsa-exponent-size <value>;" [RT #29228]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3338. [bug] Address race condition in units tests: asyncload_zone
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews and asyncload_zt. [RT #26100]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3337. [bug] Change #3294 broke support for the multiple keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in controls. [RT #29694]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3336. [func] Maintain statistics for RRsets tagged as "stale".
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3335. [func] nslookup: return a nonzero exit code when unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to get an answer. [RT #29492]
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews3334. [bug] Hold a zone table reference while performing a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews asynchronous load of a zone. [RT #28326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3333. [bug] Setting resolver-query-timeout too low can cause
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews named to not recover if it loses connectivity.
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3331. [security] dns_rdataslab_fromrdataset could produce bad
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataslabs. [RT #29644]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3330. [func] Fix missing signatures on NOERROR results despite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ rewriting. Also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add optional "recursive-only yes|no" to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response-policy statement
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add optional "max-policy-ttl" to the response-policy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement to limit the false data that
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer "recursive-only no" can introduce into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolvers' caches
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add a RPZ performance test to bin/tests/system/rpz
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer when queryperf is available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - the encoding of PASSTHRU action to "rpz-passthru".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (The old encoding is still accepted.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson generate RRSIG records with the signer-name in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lower case. We accept them with any case, but if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they fail to validate, we try again in lower case.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3328. [bug] Fixed inconsistent data checking in dst_parse.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews to 'filter-aaaa-on-v4' but applies to IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections. (Use "configure --enable-filter-aaaa"
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed to enable this option.) [RT #27308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3326. [func] Added task list statistics: task model, worker
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews threads, quantum, tasks running, tasks ready.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3325. [func] Report cache statistics: memory use, number of
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews nodes, number of hash buckets, hit and miss counts.
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews3323. [func] Report the number of buckets the resolver is using.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3322. [func] Monitor the number of active TCP and UDP dispatches.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3321. [func] Monitor the number of recursive fetches and the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number of open sockets, and report these values in
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson the statistics channel. [RT #27054]
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews3320. [func] Added support for monitoring of recursing client
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews count. [RT #27009]
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews3319. [func] Added support for monitoring of ADB entry count and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hash size. [RT #27057]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews bucket lock when finished with a fetch context.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3316. [tuning] Improved locking performance when recursing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries; this can improve performance on busy
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson multiprocessor systems by reducing lock contention.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3314. [bug] The masters list could be updated while stub_callback
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson or refresh_callback were using it. [RT #26732]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson3311. [bug] Abort the zone dump if zone->db is NULL in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone.c:zone_gotwritehandle. [RT #29028]
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson3310. [test] Increase table size for mutex profiling. [RT #28809]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson3309. [bug] resolver.c:fctx_finddone() was not thread safe.
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington3308. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson3305. [func] Add wire format lookup method to sdb. [RT #28563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3303. [bug] named could die when reloading. [RT #28606]
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington3302. [bug] dns_dnssec_findmatchingkeys could fail to find
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keys if the zone name contained character that
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington required special mappings. [RT #28600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for non-recursive queries. [RT #28565]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but was not compiled in. [RT #28338]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3298. [bug] Named could dereference a NULL pointer in
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson zmgr_start_xfrin_ifquota if the zone was being removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3296. [bug] Named could die with a INSIST failure in
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews client.c:exit_check. [RT #28346]
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson3295. [bug] Adjust isc_time_secondsastimet range check to be more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews portable. [RT # 26542]
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #28265]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3293. [func] nsupdate: list supported type. [RT #28261]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3292. [func] Log messages in the axfr stream at debug 10.
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson3291. [port] Fixed a build error on systems without ENOTSUP.
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by the DLZ dlopen driver. [RT #28056]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson after 'rndc reconfig'. [RT #26786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington proveunsecure after calling startfinddlvsep.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3284. [bug] Address race conditions with the handling of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to load. [RT #27863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the old NS RRset when replacing it.
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley [RT #27792] [RT #27884]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews despite succeeding over the loopback interface.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3280. [bug] Potential double free of a rdataset on out of memory
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington with DNS64. [RT #27762]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3279. [bug] Hold a internal reference to the zone while performing
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson a asynchronous load. Address potential memory leak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if the asynchronous is cancelled. [RT #27750]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3278. [bug] Make sure automatic key maintenance is started
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when "auto-dnssec maintain" is turned on during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc reconfig". [RT #26805]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3276. [bug] win32: ns_os_openfile failed to return NULL on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews safe_open failure. [RT #27696]
debff476ad3512687a354499c25d2793e2009acdBrian Wellington3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option had been misspelled as '-clear'. (To avoid
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson future confusion, both options now work.) [RT #27173]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3274. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3273. [bug] AAAA responses could be returned in the additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews section even when filter-aaaa-on-v4 was in use.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3272. [func] New "rndc zonestatus" command prints information
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews about the specified zone. [RT #21671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3271. [port] darwin: mksymtbl is not always stable, loop several
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews times before giving up. mksymtbl was using non
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0rc2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson when inline-signing was in use. [RT #27650]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3269. [port] darwin 11 and later now built threaded by default.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews out the earliest expiry time. [RT #23311]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3267. [bug] Memory allocation failures could be mis-reported as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpected error. New ISC_R_UNSET result code.
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence3266. [bug] The maximum number of NSEC3 iterations for a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY RRset was not being properly computed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence inline-signing code. [RT #27557]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence3264. [bug] Automatic regeneration of signatures in an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing zone could stall when the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was restarted. [RT #27344]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence inline-signing zone. [RT #27337]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington3260. [bug] "rrset-order cyclic" could appear not to rotate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for some query patterns. [RT #27170/27185]
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington --- 9.9.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson message when writing to stdout. [RT #27109]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson3257. [bug] Do not generate a error message when calling fsync()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a pipe or socket. [RT #27109]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson3255. [func] No longer require that a empty zones be explicitly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabled or that a empty zone is disabled for
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson RFC 1918 empty zones to be configured. [RT #27139]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too long. [RT #26956]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3252. [bug] When master zones using inline-signing were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updated while the server was offline, the source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone could fall out of sync with the signed
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence copy. They can now resynchronize. [RT #26676]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory dns_sdlz_putrr() can allocate per record to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews prevent run away memory consumption on ISC_R_NOSPACE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3250. [func] 'configure --enable-developer'; turn on various
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure options, normally off by default, that
6c35e4dd17e6562a6b4d106cbf1d824b9f529356David Lawrence we want developers to build and test with. [RT #27103]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3249. [bug] Update log message when saving slave zones files for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews analysis after load failures. [RT #27087]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3248. [bug] Configure options --enable-fixed-rrset and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --enable-exportlib were incompatible with each
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews other. [RT #27087]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3247. [bug] 'raw' format zones failed to preserve load order
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson breaking 'fixed' sort order. [RT #27087]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3246. [bug] Named failed to start with a empty also-notify list.
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson3245. [bug] Don't report a error unchanged serials unless there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were other changes when thawing a zone with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-fromdifferences. [RT #26845]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson Also simplified nsupdate syntax to make "update"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and "prereq" optional. [RT #24659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington being properly set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3242. [func] Extended the header of raw-format master files to
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews include the serial number of the zone from which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they were generated, if different (as in the case
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of inline-signing zones). This is to be used in
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews inline-signing zones, to track changes between the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unsigned and signed versions of the zone, which may
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews have different serial numbers.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews (Note: raw zonefiles generated by this version of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND are no longer compatible with prior versions.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews To generate a backward-compatible raw zonefile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using dnssec-signzone or named-compilezone, specify
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews output format "raw=0" instead of simply "raw".)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3241. [bug] Address race conditions in the resolver code.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timestamp. [RT #26883]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3238. [bug] keyrdata was not being reinitialized in
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews lib/dns/rbtdb.c:iszonesecure. [RT #26913]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EDNS(0) fallback behavior. [RT #26416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews the generated diff and optionally writes it to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews journal. [RT #26386]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3232. [bug] Zero zone->curmaster before return in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3231. [bug] named could fail to send a incompressible zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson axfr with a serial of 0. [RT #26796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3229. [bug] Fix local variable to struct var assignment
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found by CLANG warning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loading performance. [RT #26523]
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson3227. [bug] Interim fix to make WKS's use of getprotobyname()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and getservbyname() self thread safe. [RT #26232]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3226. [bug] Address minor resource leakages. [RT #26624]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #26507]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3221. [bug] Fixed a potential core dump on shutdown due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referencing fetch context after it's been freed.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews --- 9.9.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could fail to set the database version correctly,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing an assertion failure. [RT #26180]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3219. [bug] Disable NOEDNS caching following a timeout.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews nonexistent records, leading to an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #26590]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3214. [func] Add 'named -U' option to set the number of UDP
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews listener threads per interface. [RT #26485]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews list prior to adding a reference to it leading a
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence possible assertion failure. [RT #23219]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson option prints in single-line-per-record format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3210. [bug] Canceling the oldest query due to recursive-client
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overload could trigger an assertion failure. [RT #26463]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3208. [bug] 'dig -y' handle unknown tsig algorithm better.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver behavior. Enable "dig +adflag" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dig +edns=0" by default. Enable "+dnssec" when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews running "dig +trace". [RT #23497]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3204. [bug] When a master server that has been marked as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unreachable sends a NOTIFY, mark it reachable
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence again. [RT #25960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3203. [bug] Increase log level to 'info' for validation failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3202. [bug] NOEDNS caching on timeout was too aggressive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of only being used as a toggle. [RT #18351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3200. [doc] Some rndc functions were undocumented or were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews missing from 'rndc -h' output. [RT #25555]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3199. [func] When logging client information, include the name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being queried. [RT #25944]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington permissions. [RT #24866]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3197. [bug] Don't try to log the filename and line number when
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington the config parser can't open a file. [RT #22263]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews doesn't exist. [RT #25783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3195. [cleanup] Silence "file not found" warnings when loading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews managed-keys zone. [RT #26340]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation. [RT #25203]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3192. [bug] A query structure could be used after being freed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson3190. [bug] Underflow in error handling in isc_mutexblock_init.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3189. [test] Added a summary report after system tests. [RT #25517]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3188. [bug] zone.c:zone_refreshkeys() could fail to detach
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references correctly when errors occurred, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a hang on shutdown. [RT #26372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson - 'rndc signing -list' displays the current
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews state of signing operations
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington - 'rndc signing -clear' clears the signing state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records for keys that have fully signed the zone
751aa24c98fea02215cad95a08411af547d70e41Bob Halley - 'rndc signing -nsec3param' sets the NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameters for the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3184. [bug] named had excessive cpu usage when a redirect zone was
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson configured. [RT #26013]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3182. [bug] Auth servers behind firewalls which block packets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews greater than 512 bytes may cause other servers to
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson perform poorly. Now, adb retains edns information
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and caches noedns servers. [RT #23392/24964]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3181. [func] Inline-signing is now supported for master zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3180. [func] Local copies of slave zones are now saved in raw
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format by default, to improve startup performance.
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson 'masterfile-format text;' can be used to override
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the default, if desired. [RT #25867]
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington3179. [port] kfreebsd: build issues. [RT #26273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3178. [bug] A race condition introduced by change #3163 could
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington cause an assertion failure on shutdown. [RT #26271]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3177. [func] 'rndc keydone', remove the indicator record that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named has finished signing the zone with the
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson corresponding key. [RT #26206]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3176. [doc] Corrected example code and added a README to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sample external DLZ module in contrib/dlz/example.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3 signed zone are validated. Stop sending a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unnecessary NSEC3 record when generating such
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson responses. [RT #26200]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3174. [bug] Always compute to revoked key tag from scratch.
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence3173. [port] Correctly validate root DS responses. [RT #25726]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc addzone'. [RT #25600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3170. [func] RPZ update:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - fix precedence among competing rules
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - improve ARM text including documenting rule precedence
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson - try to rewrite CNAME chains until first hit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - new "rpz" logging channel
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - RDATA for CNAME rules can include wildcards
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson - replace "NO-OP" named.conf policy override with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is still recognized)
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington3169. [func] Catch db/version mis-matches when calling dns_db_*().
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington3168. [bug] Nxdomain redirection could trigger an assert with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a ANY query. [RT #26017]
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington3167. [bug] Negative answers from forwarders were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly tagged making them appear to not be cached.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3165. [bug] dnssec-signzone could generate new signatures when
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews resigning, even when valid signatures were already
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews present. [RT #26025]
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson3164. [func] Enable DLZ modules to retrieve client information,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews so that responses can be changed depending on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source address of the query. [RT #25768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3163. [bug] Use finer-grained locking in client.c to address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews concurrency problems with large numbers of threads.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3162. [test] start.pl: modified to allow for "named.args" in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ns*/ subdirectory to override stock arguments to
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington named. Largely from RT #26044, but no separate ticket.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington assertion failures. [RT #25880]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington the newline was not being printed causing type codes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be run together. [RT #25873]
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley3159. [bug] On some platforms, named could assert on startup
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when running in a chrooted environment without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews /proc. [RT #25863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3158. [bug] Recursive servers would prefer a particular UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socket instead of using all available sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence the config file before pausing the server. [RT #21373]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3156. [placeholder]
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington --- 9.9.0a2 released ---
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington3155. [bug] Fixed a build failure when using contrib DLZ
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington3154. [bug] Attempting to print an empty rdataset could trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assert. [RT #25452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3153. [func] Extend request-ixfr to zone level and remove the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews side effect of forcing an AXFR. [RT #25156]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrect use of __builtin_expect. [RT #25183]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson incorrectly. [RT #21050]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3150. [func] Improved startup and reconfiguration time by
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson enabling zones to load in multiple threads. [RT #25333]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3149. [placeholder]
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington3148. [bug] Processing of normal queries could be stalled when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews forwarding a UPDATE message. [RT #24711]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3147. [func] Initial inline signing support. [RT #23657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0a1 released ---
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson there were any errors while running them. [RT #25527]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3144. [bug] dns_dbiterator_seek() could trigger an assert when
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson used with a nonexistent database node. [RT #25358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3142. [bug] NAPTR is class agnostic. [RT #25429]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington associated with empty zones. [RT #25079]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson3140. [func] New command "rndc flushtree <name>" clears the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified name from the server cache along with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all names under it. [RT #19970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for the hashing algorithms (md5, sha1 - sha512, and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews their hmac counterparts). [RT #25067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3138. [bug] Address memory leaks and out-of-order operations when
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson shutting named down. [RT #25210]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3137. [func] Improve hardware scalability by allowing multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews worker threads to process incoming UDP packets.
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington This can significantly increase query throughput
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on some systems. [RT #22992]
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty zones switched on by the 'empty-zones-enable'
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson option. [RT #24990]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson statistics. [RT #16030]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3133. [bug] Change #3114 was incomplete. [RT #24577]
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington3132. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington per 100 zones at startup time, rather than using a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fixed-size task table. [RT #24406]
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews3130. [func] Support alternate methods for managing a dynamic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone's serial number. Two methods are currently
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley defined using serial-update-method, "increment"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (default) and "unixtime". [RT #23849]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley allow-new-zones was set to yes and named ACLs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were used. [RT #22739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews auto-dnssec zone that has not been signed yet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will cause it to be signed with the specified NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameters when keys are activated. The
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3PARAM record will not appear in the zone until
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson it is signed, but the parameters will be stored.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson3127. [bug] 'rndc thaw' will now remove a zone's journal file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if the zone serial number has been changed and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences is not in use. [RT #24687]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson3126. [security] Using DNAME record to generate replacements caused
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ to exit with a assertion failure. [RT #24766]
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington3125. [security] Using wildcard CNAME records as a replacement with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ caused named to exit with a assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3124. [bug] Use an rdataset attribute flag to indicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews negative-cache records rather than using rrtype 0;
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington this will prevent problems when that rrtype is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used in actual DNS packets. [RT #24777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3123. [security] Change #2912 exposed a latent flaw in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdataset_totext() that could cause named to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews crash with an assertion failure. [RT #24777]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3121. [security] An authoritative name server sending a negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response containing a very large RRset could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an off-by-one error in the ncache code
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews and crash named. [RT #24650]
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that validated insecure without using DLV and had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DS records in the parent zone. [RT #24631]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson record could be created and never marked complete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3118. [bug] nsupdate could dump core on shutdown when using
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington SIG(0) keys. [RT #24604]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3117. [cleanup] Remove doc and parser references to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews never-implemented 'auto-dnssec create' option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of DNSSEC records in signed dynamic zones. Set to
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews 'no-resign' to disable automatic RRSIG regeneration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while retaining the ability to sign new or changed
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley data. [RT #24533]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3115. [bug] Named could fail to return requested data when
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson following a CNAME that points into the same zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson inactive and there is no replacement key. [RT #23136]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3113. [doc] Document the relationship between serial-query-rate
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington and NOTIFY messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3112. [doc] Add missing descriptions of the update policy name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington "krb5-subdomain", which allow machines to update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews their own records, to the BIND 9 ARM.
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson3111. [bug] Improved consistency checks for dnssec-enable and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-validation, added test cases to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checkconf system test. [RT #24398]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when attempting to sign with no KSK. [RT #24369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3109. [func] The also-notify option now uses the same syntax
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson as a zone's masters clause. This means it is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now possible to specify a TSIG key to use when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sending notifies to a given server, or to include
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an explicit named masters list in an also-notify
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington statement. [RT #23508]
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington3108. [cleanup] dnssec-signzone: Clarified some error and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington code (use -P instead). [RT #20852]
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington3107. [bug] dnssec-signzone: Report the correct number of ZSKs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when using -x. [RT #20852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3106. [func] When logging client requests, include the name of
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington the TSIG key if any. [RT #23619]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3105. [bug] GOST support can be suppressed by "configure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --without-gost" [RT #24367]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3103. [bug] Configuring 'dnssec-validation auto' in a view
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews instead of in the options statement could trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure in named-checkconf. [RT #24382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3102. [func] New 'dnssec-loadkeys-interval' option configures
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews how often, in minutes, to check the key repository
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for updates when using automatic key maintenance.
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson Default is every 60 minutes (formerly hard-coded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 12 hours). [RT #23744]
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley3101. [bug] Zones using automatic key maintenance could fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to check the key repository for updates. [RT #23744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3100. [security] Certain response policy zone configurations could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an INSIST when receiving a query of type
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington RRSIG. [RT #24280]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3099. [test] "dlz" system test now runs but gives R:SKIPPED if
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington not compiled with --with-dlz-filesystem. [RT #24146]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson3098. [bug] DLZ zones were answering without setting the AA bit.
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson3097. [test] Add a tool to test handling of malformed packets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_gssapi_acceptctx(). [RT #24004]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3095. [bug] Handle isolated reserved ports in the port range.
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson3094. [doc] Expand dns64 documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3092. [bug] Signatures for records at the zone apex could go
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stale due to an incorrect timer setting. [RT #23769]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3091. [bug] Fixed a bug in which zone keys that were published
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson and then subsequently activated could fail to trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatic signing. [RT #22911]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson3090. [func] Make --with-gssapi default [RT #23738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson standard input "dnssec-dsfromkey -f -". [RT #20662]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson and add setup.sh in order to resolve changing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.conf issue. [RT #23687]
7427490a67b9547242b57c255254f7e146127c48Bob Halley3087. [bug] DDNS updates using SIG(0) with update-policy match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews type "external" could cause a crash. [RT #23735]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson now force an update to the new key format even if no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews other change has been specified, using "-P now -A now"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as default values. [RT #22474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of signatures which have not yet expired but
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews were generated by a key that no longer exists.
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson3084. [func] A new command "rndc sync" dumps pending changes in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removes the journal file after syncing. Also,
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington "rndc freeze" no longer removes journal files.
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington3083. [bug] NOTIFY messages were not being sent when generating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a NSEC3 chain incrementally. [RT #23702]
a12d9cfa59b5981c52e1aaafedf652d5128f3448Brian Wellington3082. [port] strtok_r is threads only. [RT #23747]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3081. [bug] Failure of DNAME substitution did not return
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington YXDOMAIN. [RT #23591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3078. [func] Added a new include file with function typedefs
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson for the DLZ "dlopen" driver. [RT #23629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keyfromlabel sets the default TTL of the
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews key. When possible, automatic signing will use that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTL when the key is published. [RT #23304]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timestamp when determining which keys are active.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3074. [bug] Make the adb cache read through for zone data and
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson glue learn for zone named is authoritative for.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3073. [bug] managed-keys changes were not properly being recorded.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson3071. [bug] has_nsec could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update.c:next_active. [RT #20256]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3069. [cleanup] Silence warnings messages from clang static analysis.
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington3068. [bug] Named failed to build with a OpenSSL without engine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support. [RT #23473]
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington3067. [bug] ixfr-from-differences {master|slave}; failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews select the master/slave zones. [RT #23580]
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson3066. [func] The DLZ "dlopen" driver is now built by default,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no longer requiring a configure option. To
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disable it, use "configure --without-dlopen".
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington Driver also supported on win32. [RT #23467]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson operations. [RT #23469]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3062. [func] Made several changes to enhance human readability
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington of DNSSEC data in dig output and in generated
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson - DNSKEY record comments are more verbose, no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews longer used in multiline mode only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - multiline RRSIG records reformatted
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson - multiline output mode for NSEC3PARAM records
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews - "dig +norrcomments" suppresses DNSKEY comments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - "dig +split=X" breaks hex/base64 records into
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington fields of width X; "dig +nosplit" disables this.
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington3061. [func] New option "dnssec-signzone -D", only write out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generated DNSSEC records. [RT #22896]
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specification of a separate expiration date
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews3059. [test] Added a regression test for change #3023.
d72269740049af28b091ba81d68a067c88f53547Mark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload to fail, if a log file specified in the conf
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews file isn't a plain file. [RT #22771]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3057. [bug] "rndc secroots" would abort after the first error
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews and so could miss some views. [RT #23488]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3056. [func] Added support for URI resource record. [RT #23386]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3055. [placeholder]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington3054. [bug] Added elliptic curve support check in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews GOST OpenSSL engine detection. [RT #23485]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson3053. [bug] Under a sustained high query load with a finite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-cache-size, it was possible for cache memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be exhausted and not recovered. [RT #23371]
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington3052. [test] Fixed last autosign test report. [RT #23256]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3051. [bug] NS records obscure DNAME records at the bottom of the
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson zone if both are present. [RT #23035]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3050. [bug] The autosign system test was timing dependent.
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson Wait for the initial autosigning to complete
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before running the rest of the test. [RT #23035]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3049. [bug] Save and restore the gid when creating creating
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews named.pid at startup. [RT #23290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3048. [bug] Fully separate view key management. [RT #23419]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3047. [bug] DNSKEY NODATA responses not cached fixed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validator.c. Tests added to dnssec system test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and RRSIG TTL. [RT #23332]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3045. [removed] Replaced by change #3050.
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington3043. [test] Merged in the NetBSD ATF test framework (currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews version 0.12) for development of future unit tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use configure --with-atf to build ATF internally
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or configure --with-atf=prefix to use an external
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington copy. [RT #23209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson addresses on systems with only IPv4 connectivity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson ttl changes. [RT #23330]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with a CNAME existed between the trust anchor and the
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson top of the zone. [RT #23338]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson copyright notices that cover various parts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3036. [bug] Check built-in zone arguments to see if the zone
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington is re-usable or not. [RT #21914]
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington3035. [cleanup] Simplify by using strlcpy. [RT #22521]
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer3029. [bug] isc_netaddr_format() handle a zero sized buffer.
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews catch NULL pointer dereferences before they happen.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington after calling grow_headerspace() and if not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews re-call grow_headerspace() until we do. [RT #22521]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3025. [bug] Fixed a possible deadlock due to zone resigning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3024. [func] RTT Banding removed due to minor security increase
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but major impact on resolver latency. [RT #23310]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3023. [bug] Named could be left in an inconsistent state when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews receiving multiple AXFR response messages that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not all TSIG-signed. [RT #23254]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence changing the DNSKEY RRset. [RT #23232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3019. [test] Test: check apex NSEC3 records after adding DNSKEY
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence record via UPDATE. [RT #23229]
046a9aca49bdc25bd57d75fd0dd34c021722f095Mark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if a zone may need to be re-signed. [RT #23120]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3014. [placeholder]
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson3013. [bug] The DNS64 ttl was not always being set as expected.
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington3012. [bug] Remove DNSKEY TTL change pairs before generating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing records for any remaining DNSKEY changes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3011. [func] Change the default query timeout from 30 seconds
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 10. Allow setting this in named.conf using the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'resolver-query-timeout' option, which specifies a max
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence time in seconds. 0 means 'default' and anything longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than 30 will be silently set to 30. [RT #22852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for refreshing managed-keys. [RT #22296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3009. [bug] clients-per-query code didn't work as expected with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular query patterns. [RT #22972]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.8.0b1 released ---
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence3008. [func] Response policy zones (RPZ) support. [RT #21726]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdata which is not compressible when writing master
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence files. [RT #22863]
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington3006. [func] Allow dynamically generated TSIG keys to be preserved
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews across restarts of named. Initially this is for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TSIG keys generated using GSSAPI. [RT #22639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3005. [port] Solaris: Work around the lack of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gsskrb5_register_acceptor_identity() by setting
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews the KRB5_KTNAME environment variable to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contents of tkey-gssapi-keytab. Also fixed
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson test errors on MacOSX. [RT #22853]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3004. [func] DNS64 reverse support. [RT #22769]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3003. [experimental] Added update-policy match type "external",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabling named to defer the decision of whether to
7d33e8996948523e0180bc7e28a93d534d878dccAndreas Gustafsson allow a dynamic update to an external daemon.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Contributed by Andrew Tridgell.) [RT #22758]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3001. [func] Added a default trust anchor for the root zone, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be switched on by setting "dnssec-validation auto;"
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington in the named.conf options. [RT #21727]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3000. [bug] More TKEY/GSS fixes:
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson - nsupdate can now get the default realm from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the user's Kerberos principal
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson - corrected gsstest compilation flags
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - improved documentation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - fixed some NULL dereferences
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2999. [func] Add GOST support (RFC 5933). [RT #20639]
f53848e17123569387b279578f0100dca5407da5Mark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the task api. [RT #22776]
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington2997. [func] named -V now reports the OpenSSL and libxml2 verions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it was compiled against. [RT #22687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2996. [security] Temporarily disable SO_ACCEPTFILTER support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2995. [bug] The Kerberos realm was not being correctly extracted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the signer's identity. [RT #22770]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington do not use threads on earlier versions. Also kill
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the unproven-pthreads, mit-pthreads, and ptl2 support.
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2993. [func] Dynamically grow adb hash tables. [RT #21186]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for looking at a secure delegation. [RT #22059]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson dynamic zones. [RT #22365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson interval validity when the interval is set to 0.
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2989. [func] Added support for writable DLZ zones. (Contributed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of external DLZ drivers that can be loaded as
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence shared objects at runtime rather than linked with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named. Currently this is switched on via a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compile-time option, "configure --with-dlz-dlopen".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: the syntax for configuring DLZ zones
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence is likely to be refined in future releases.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Contributed by Andrew Tridgell of the Samba
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews project.) [RT #22629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence adding a "tkey-gssapi-keytab" option. If set,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updates will be allowed with any key matching
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a principal in the specified keytab file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "tkey-gssapi-credential" is no longer required
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington and is expected to be deprecated. (Contributed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by Andrew Tridgell of the Samba project.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
253f774e358dba38742a484426a4cadf4f248817Brian Wellington zone, but the nameserver names and/or their IP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses are statically configured. [RT #21474]
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington2985. [bug] Add a regression test for change #2896. [RT #21324]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2984. [bug] Don't run MX checks when the target of the MX record
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson is ".". [RT #22645]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson --- 9.8.0a1 released ---
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington2982. [bug] Reference count dst keys. dst_key_attach() can be used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews increment the reference count.
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer Note: dns_tsigkey_createfromkey() callers should now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews always call dst_key_free() rather than setting it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to NULL on success. [RT #22672]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington2980. [bug] named didn't properly handle UPDATES that changed the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer2979. [bug] named could deadlock during shutdown if two
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc stop" commands were issued at the same
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson time. [RT #22108]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington key. [RT #22573]
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong lock which could lead to server deadlock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistency check examining the existing version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the zone rather than the new version resulting
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington from the UPDATE. [RT #22413]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson at the end of configure resulting in build failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where there is very old version of perl installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Move it to "make maintainer-clean". [RT #22230]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2972. [bug] win32: address windows socket errors. [RT #21906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2971. [bug] Fixed a bug that caused journal files not to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compacted on Windows systems as a result of
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson non-POSIX-compliant rename() semantics. [RT #22434]
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington2970. [security] Adding a NO DATA negative cache entry failed to clear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews any matching RRSIG records. A subsequent lookup of
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews of NO DATA cache entry could trigger a INSIST when the
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson unexpected RRSIG was also returned with the NO DATA
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache entry.
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson CVE-2010-3613, VU#706148. [RT #22288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2969. [security] Fix acl type processing so that allow-query works
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson in options and view statements. Also add a new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set of tests to verify proper functioning.
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson CVE-2010-3615, VU#510208. [RT #22418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2968. [security] Named could fail to prove a data set was insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before marking it as insecure. One set of conditions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that can trigger this occurs naturally when rolling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY algorithms.
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews CVE-2010-3614, VU#837744. [RT #22309]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2967. [bug] 'host -D' now turns on debugging messages earlier.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson space available in the buffer when adding a left
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews justified character with a non zero width,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (e.g. "%-1c"). [RT #22270]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson RFC 4634. [RT #21702]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2964. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2963. [security] The allow-query acl was being applied instead of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2961. [bug] Be still more selective about the non-authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answers we apply change 2748 to. [RT #22074]
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews2960. [func] Check that named accepts non-authoritative answers.
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews2959. [func] Check that named starts with a missing masterfile.
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews2958. [bug] named failed to start with a missing master file.
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson respectively. [RT #21962]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build_sqldbinstance failure. [RT #21623]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exact match" message when returning a wildcard
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson no data response. [RT #21744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley to initialize winsock. [RT #21932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2951. [bug] named failed to generate a correct signed response
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a optout, delegation only zone with no secure
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley delegations. [RT #22007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley falling back to TCP on UDP timeouts when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences was set. [RT #21595]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2949. [bug] dns_view_setnewzones() contained a memory leak if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it was called multiple times. [RT #21942]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2948. [port] MacOS: provide a mechanism to configure the test
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces at reboot. See bin/tests/system/README
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2947. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2946. [doc] Document the default values for the minimum and maximum
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington zone refresh and retry values in the ARM. [RT #21886]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson2945. [doc] Update empty-zones list in ARM. [RT #21772]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2943. [func] Add support to load new keys into managed zones
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence without signing immediately with "rndc loadkeys".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Add support to link keys with "dnssec-keygen -S"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and "dnssec-settime -S". [RT #21351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2941. [bug] sdb and sdlz (dlz's zone database) failed to support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNAME at the zone apex. [RT #21610]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2940. [port] Remove connection aborted error message on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Windows. [RT #21549]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2939. [func] Check that named successfully skips NSEC3 records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that fail to match the NSEC3PARAM record currently
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington in use. [RT #21868]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2938. [bug] When generating signed responses, from a signed zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that uses NSEC3, named would use a uninitialized
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson pointer if it needed to skip a NSEC3 record because
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it didn't match the selected NSEC3PARAM record for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. [RT #21868]
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington2937. [bug] Worked around an apparent race condition in over
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory conditions. Without this fix a DNS cache DB or
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ADB could incorrectly stay in an over memory state,
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson effectively refusing further caching, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subsequently made a BIND 9 caching server unworkable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This fix prevents this problem from happening by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polling the state of the memory context, rather than
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson making a copy of the state, which appeared to cause
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a race. This is a "workaround" in that it doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews solve the possible race per se, but several experiments
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson proved this change solves the symptom. Also, the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polling overhead hasn't been reported to be an issue.
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington This bug should only affect a caching server that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specifies a finite max-cache-size. It's also quite
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson likely that the bug happens only when enabling threads,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but it's not confirmed yet. [RT #21818]
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington2936. [func] Improved configuration syntax and multiple-view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support for addzone/delzone feature (see change
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews #2930). Removed "new-zone-file" option, replaced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews for each view is now created automatically, with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a filename generated from a hash of the view name.
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer It is no longer necessary to "include" the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new-zone-file in named.conf; this happens
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatically. Zones that were not added via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc addzone" can no longer be removed with
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer "rndc delzone". [RT #19447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scope. This could potentially result in a unknown,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews potentially malformed, EDNS option being sent instead
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington of the desired NSID option. [RT #21781]
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2931. [bug] Temporarily and partially disable change 2864
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews because it would cause infinite attempts of RRSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. This is an urgent care fix; we'll
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews revisit the issue and complete the fix later.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commands
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow dynamic addition and deletion of zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews To enable this feature, specify a "new-zone-file"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option at the view or options level in named.conf.
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews Zone configuration information for the new zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will be written into that file. To make the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones persist after a restart, "include" the file
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence into named.conf in the appropriate view. (Note:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This feature is not yet documented, and its syntax
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is expected to change.) [RT #19447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2929. [bug] Improved handling of GSS security contexts:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - added LRU expiration for generated TSIGs
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews - added the ability to use a non-default realm
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - added new "realm" keyword in nsupdate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - limited lifetime of generated keys to 1 hour
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews or the lifetime of the context (whichever is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2928. [bug] Be more selective about the non-authoritative
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews answer we apply change 2748 to. [RT #21594]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2927. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2926. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2925. [bug] Named failed to accept uncachable negative responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from insecure zones. [RT #21555]
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews current managed keys combined with trusted keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2923. [bug] 'dig +trace' could drop core after "connection
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson timeout". [RT #21514]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2922. [contrib] Update zkt to version 1.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2921. [bug] The resolver could attempt to destroy a fetch context
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington too soon. [RT #19878]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson to IPv4 clients. New acl 'filter-aaaa' (default any).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2917. [func] Virtual time test framework. [RT #20801]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2916. [func] Add framework to use IPv6 in tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on configure options. [RT #21444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2914. [bug] Make the "autosign" system test more portable.
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2913. [func] Add pkcs#11 system tests. [RT #20784]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2912. [func] Windows clients don't like UPDATE responses that clear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the zone section. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley was specified in named.conf. [RT #21416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a DNSKEY. [RT #21384]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2907. [bug] The export version of libdns had undefined references.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could be incorrectly marked as insecure instead of
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer secure leading to negative proofs failing. This was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a unintended outcome from change 2890. [RT #21392]
588b63e1a86fb707172830e14897da624ed380edMark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington2902. [func] Add regression test for change 2897. [RT #21040]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2900. [bug] The placeholder negative caching element was not
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews properly constructed triggering a INSIST in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_ncache_towire(). [RT #21346]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2899. [port] win32: Support linking against OpenSSL 1.0.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2898. [bug] nslookup leaked memory when -domain=value was
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews specified. [RT #21301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews to insecure. [RT #21040]
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington2896. [bug] "rndc sign" failed to properly update the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when adding a DNSKEY for publication only. [RT #21045]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2895. [func] genrandom: add support for the generation of multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files. [RT #20917]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2893. [bug] Improve managed keys support. New named.conf option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews managed-keys-directory. [RT #20924]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2892. [bug] Handle REVOKED keys better. [RT #20961]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2891. [maint] Update empty-zones list to match
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer draft-ietf-dnsop-default-local-zones-13. [RT #21099]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2890. [bug] Handle the introduction of new trusted-keys and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DS, DLV RRsets better. [RT #21097]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2889. [bug] Elements of the grammar where not properly reported.
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2888. [bug] Only the first EDNS option was displayed. [RT #21273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2887. [bug] Report the keytag times in UTC in the .key file,
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson local time is presented as a comment within the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comment. [RT #21223]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington configure. [RT #21080]
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2883. [bug] 'dig +short' failed to handle really large datasets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2882. [bug] Remove memory context from list of active contexts
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson before clearing 'magic'. [RT #21274]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson is held when closing a version. [RT #21198]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson consistent. [RT #21078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews2878. [func] Incrementally write the master file after performing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a AXFR. [RT #21010]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2877. [bug] The validator failed to skip obviously mismatching
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington RRSIGs. [RT #21138]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer2876. [bug] Named could return SERVFAIL for negative responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from unsigned zones. [RT #21131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2874. [bug] Cache lack of EDNS support only after the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successfully responds to the query using plain DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2873. [bug] Canceling a dynamic update via the dns/client module
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could trigger an assertion failure. [RT #21133]
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews require one of IPv4 or IPv6 rather than both.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the header file, causing build failure with
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews --enable-exportlib. [RT #21138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson any changes made by configure are integrated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews don't like it. [RT #20986]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson2866. [bug] Windows does not like the TSIG name being compressed.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2865. [bug] memset to zero event.data. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updating DS records. [RT #20896]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson inactivation time. [RT #21039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2859. [bug] When canceling validation it was possible to leak
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson memory. [RT #20800]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews2856. [bug] The size of a memory allocation was not always properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recorded. [RT #20927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2855. [func] nsupdate will now preserve the entered case of domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews names in update requests it sends. [RT #20928]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be suppressed, dig +onesoa. [RT #20929]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
051beeafa6547440da17985665b31952b85ede56Brian Wellington2851. [doc] nslookup.1, removed <informalexample> from the docbook
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source as it produced bad nroff. [RT #21007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the heap would have corrupted entries. [RT #20951]
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington2849. [bug] Don't treat errors from the xml2 library as fatal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews README.rfc5011 into the ARM. [RT #20899]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer2846. [bug] EOF on unix domain sockets was not being handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly. [RT #20731]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer2844. [doc] notify-delay default in ARM was wrong. It should have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been five (5) seconds.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews creating key files if there is a chance that the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key ID will collide with an existing one after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews either of the keys has been revoked. (To override
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this in the case of dnssec-keyfromlabel, use the -y
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option. dnssec-keygen will simply create a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews different, non-colliding key, so an override is
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews not necessary.) [RT #20838]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews "dnssec" regression tests. [RT #20865]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2839. [bug] A KSK revoked by named could not be deleted.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2838. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2836. [bug] Keys that were scheduled to become active could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be delayed. [RT #20874]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer2835. [bug] Key inactivity dates were inadvertently stored in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the private key file with the outdated tag
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer "Unpublish" rather than "Inactive". This has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fixed; however, any existing keys that had Inactive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dates set will now need to have them reset, using
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews 'dnssec-settime -I'. [RT #20868]
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2834. [bug] HMAC-SHA* keys that were longer than the algorithm
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews digest length were used incorrectly, leading to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interoperability problems with other DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementations. This has been corrected.
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff (Note: If an oversize key is in use, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatibility is needed with an older release of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND, the new tool "isc-hmac-fixup" can convert
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the key secret to a form that will work with all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions.) [RT #20751]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson to avoid redefinition in some OSs [RT 20831]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2831. [security] Do not attempt to validate or cache
ba43c53451d5c38765f376eeede457178b36951aBob Halley out-of-bailiwick data returned with a secure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answer; it must be re-fetched from its original
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source and validated in that context. [RT #20819]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews passes. [RT #20813]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews2829. [bug] Fixed potential node inconsistency in rbtdb.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson without DNSSEC validation. [RT #20737]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being released. [RT #20740]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was in the process of being created was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recorded in the zone. [RT #20786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2822. [bug] rbtdb.c:loadnode() could return the wrong result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file more user friendly (PKCS#11 engine patch).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2818. [cleanup] rndc could return an incorrect error code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a zone was not found. [RT #20767]
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2816. [bug] previous_closest_nsec() could fail to return
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley data for NSEC3 nodes [RT #29730]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2814. [func] Provide a definitive error message when a master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone is not loaded. [RT #20757]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2812. [bug] Make sure updates can't result in a zone with
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson NSEC-only keys and NSEC3 records. [RT #20748]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output. [RT #20733]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to insecure. [RT #20746]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson in dnssec-settime and dnssec-revoke [RT #20739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic.h is correctly installed by the architecture
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff specific subdirectories. [RT #20722]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keys. [RT #20720]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson when it had changed. [RT #20703]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson2805. [bug] Fixed namespace problems encountered when building
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews external programs using non-exported BIND9 libraries
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson (i.e., built without --enable-exportlib). [RT #20679]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or as a result of a scheduled key change. [RT #20700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and genrandom under windows. [RT #20670]
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2801. [func] Detect and report records that are different according
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to DNSSEC but are semantically equal according to plain
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington DNS. Apply plain DNS comparisons rather than DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comparisons when processing UPDATE requests.
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson dnssec-signzone now removes such semantically duplicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records prior to signing the RRset.
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson named-checkzone -r {ignore|warn|fail} (default warn)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington named.conf: check-dup-records {ignore|warn|fail};
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington2800. [func] Reject zones which have NS records which refer to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson only). Reject UPDATEs which would cause the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to fail the above checks if committed. [RT #20678]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2799. [cleanup] Changed the "secure-to-insecure" option to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2798. [bug] Addressed bugs in managed-keys initialization
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and rollover. [RT #20683]
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson2797. [bug] Don't decrement the dispatch manager's maxbuffers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson dns_nsec3_delnsec3sx(). [RT #20681]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington log messages. [RT #18889]
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington2794. [bug] Install <isc/namespace.h>. [RT #20677]
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson2793. [func] Add "autosign" and "metadata" tests to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatic tests. [RT #19946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options (if compiled in). [RT #20635]
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington2791. [bug] The installation of isc-config.sh was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2788. [bug] dnssec-signzone could sign with keys that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not requested [RT #20625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2787. [bug] Spurious log message when zone keys were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamically reconfigured. [RT #20659]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2786. [bug] Additional could be promoted to answer. [RT #20663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson2784. [bug] TC was not always being set when required glue was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dropped. [RT #20655]
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews buffer size of 512 or less. [RT #20654]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews activation date in all cases. [RT #20648]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without deleting the unrevoked version. [RT #20638]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in dnssec-keyfromlabel. [RT #20643]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson2774. [bug] Existing cache DB wasn't being reused after
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews reconfiguration. [RT #20629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2773. [bug] In autosigned zones, the SOA could be signed
6d3f954c572db02159deedd444373161fda47a88Brian Wellington with the KSK. [RT #20628]
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington2772. [security] When validating, track whether pending data was from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the additional section or not and only return it if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validates as secure. [RT #20438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corrupted when importing from key files [RT #20624]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing FORMERR responses. [RT #20526]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2767. [bug] named could crash on startup if a zone was
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington configured with auto-dnssec and there was no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-directory. [RT #20615]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington socketmgr state if the socket is not pending on a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews read or write. [RT #20603]
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington2765. [bug] Skip masters for which the TSIG key cannot be found.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson2762. [bug] DLV validation failed with a local slave DLV zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2761. [cleanup] Enable internal symbol table for backtrace only for
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington systems that are known to work. Currently, BSD
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews variants, Linux and Solaris are supported. [RT #20202]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2759. [doc] Add information about .jbk/.jnw files to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the ARM. [RT #20303]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson that could cause the UDP client handler to shut
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down. [RT #19176]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2757. [bug] dig: assertion failure could occur in connect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeout. [RT #20599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2755. [placeholder]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was signed with NSEC3. [RT #20587]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2753. [bug] Removed an unnecessary warning that could appear when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews building an NSEC chain. [RT #20589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2752. [bug] Locking violation. [RT #20587]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2750. [bug] dig: assertion failure could occur when a server
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer didn't have an address. [RT #20579]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer for NSEC3 signed zones. [RT #20452]
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington2748. [func] Identify bad answers from GTLD servers and treat them
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as referrals. [RT #18884]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews time of RRSIGs correctly. [RT #20541]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2746. [port] hpux: address signed/unsigned expansion mismatch of
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2745. [bug] configure script didn't probe the return type of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gai_strerror(3) correctly. [RT #20573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for a insecure delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b2 released ---
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington2742. [cleanup] Clarify some DNSSEC-related log messages in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppressed (dnssec-keygen -q). Automatically
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington suppress the progress messages when stdin is not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a tty. [RT #20474]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington2740. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence anchors for a view. [RT #20211]
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews test. [RT #20453]
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2737. [func] UPDATE requests can leak existence information.
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson2736. [func] Improve the performance of NSEC signed zones with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more than a normal amount of glue below a delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2735. [bug] dnssec-signzone could fail to read keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that were specified on the command line with
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson full paths, but weren't in the current
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory. [RT #20421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister2732. [func] Add optional filter-aaaa-on-v4 option, available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if built with './configure --enable-filter-aaaa'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Filters out AAAA answers to clients connecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via IPv4. (This is NOT recommended for general
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer use.) [RT #20339]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer2731. [func] Additional work on change 2709. The key parser
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will now ignore unrecognized fields when the
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson minor version number of the private key format
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been increased. It will reject any key with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the major version number increased. [RT #20310]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a la 'openssl genrsa' on standard error. Note
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when the first '.' is followed by a long stop
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson one has the choice between slow generation vs.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2729. [func] When constructing a CNAME from a DNAME use the DNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTL. [RT #20451]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone now warn immediately if asked to
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson write into a nonexistent directory. [RT #20278]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2727. [func] The 'key-directory' option can now specify a relative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews path. [RT #20154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2725. [doc] Added information about the file "managed-keys.bind"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the ARM. [RT #20235]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson were failing. [RT #20448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson isc_base64_totext(), didn't always mark regions of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory as fully consumed after conversion. [RT #20445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2722. [bug] Ensure that the memory associated with the name of
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington a node in a rbt tree is not altered during the life
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the node. [RT #20431]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generator. [RT #20369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington2719. [func] Skip trusted/managed keys for unsupported algorithms.
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington2718. [bug] The space calculations in opensslrsa_todns() were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrect. [RT #20394]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the last private type record was removed as a result
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of completing the signing the zone with a key.
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson --- 9.7.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2713. [bug] powerpc: atomic operations missing asm("ics") /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews __isync() calls.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be fully automated in zones configured for
adade77942b069127a7094df419b3ad39dafb385James Brister dynamic DNS. 'auto-dnssec allow;' permits a zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be signed by creating keys for it in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-directory and using 'rndc sign <zone>'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews also keeps the zone's DNSSEC keys up to date
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson according to their timing metadata. [RT #19943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson build. [RT #20372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone option cause a zone to be signed with only KSKs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the size of a DNSKEY answer. [RT #20340]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2709. [func] Added some data fields, currently unused, to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews private key file format, to allow implementation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of explicit key rollover in a future release
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without impairing backward or forward compatibility.
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson2708. [func] Insecure to secure and NSEC3 parameter changes via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update are now fully supported and no longer require
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defines to enable. We now no longer overload the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews apex. Secure to insecure changes are controlled by
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson by the named.conf option 'secure-to-insecure'.
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews Warning: If you had previously enabled support by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adding defines at compile time to BIND 9.6 you should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ensure that all changes that are in progress have
5096958739769958dd7a6b69356bf41260033873David Lawrence completed prior to upgrading to BIND 9.7. BIND 9.7
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not backwards compatible.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be specified in the label if there is a default
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence engine or the -E option has been used. Also, it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now uses default algorithms as dnssec-keygen does
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence trigger an assert. [RT #20368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2705. [placeholder]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2704. [bug] Serial of dynamic and stub zones could be inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with their SOA serial. [RT #19387]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for all binaries which can take benefit of
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister crypto hardware. [RT #20230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported TSIG key algorithm. [RT #18046]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2700. [doc] The match-mapped-addresses option is discouraged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington2698. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister S_IFREG are defined after including <isc/stat.h>.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2696. [bug] named failed to successfully process some valid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews acl constructs. [RT #20308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews callback function for isc_socket_fdwatchcreate)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to include information about the direction (read
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence or write) and add isc_socket_fdwatchpoke.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chain when re-signing a previously-signed zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use -u to modify NSEC3 parameters or switch
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews between NSEC and NSEC3. [RT #20304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to decide to fetch the destination address. [RT #20305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, added warnings when revoking a ZSK, as this is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not defined by protocol (but is legal). [RT #19943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews +adflag and +cdflag. [RT #19305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the NSEC3 parameters used to sign the zone change.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2682. [bug] "configure --enable-symtable=all" failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build. [RT #20282]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews decoded. [RT #20269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format. [RT #20031]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was set. [RT #20258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2677. [func] Changes to key metadata behavior:
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson - Keys without "publish" or "active" dates set will
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no longer be used for smart signing. However,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews those dates will be set to "now" by default when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a key is created; to generate a key but not use
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson it yet, use dnssec-keygen -G.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sets the time when a key is no longer used for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing but is still published.
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson - The "unpublished" date (-U) is deprecated in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews favor of "deleted" (-D).
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2676. [bug] --with-export-installdir should have been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-export-includedir. [RT #20252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2675. [bug] dnssec-signzone could crash if the key directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not exist. [RT #20232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0a3 released ---
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without openssl. [RT #20231]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2673. [bug] The managed-keys.bind zone file could fail to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews load due to a spurious result from sync_keyzone()
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2672. [bug] Don't enable searching in 'host' when doing reverse
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookups. [RT #20218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2671. [bug] Add support for PKCS#11 providers not returning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the public exponent in RSA private keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (OpenCryptoki for instance) in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keyfromlabel. [RT #19294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews information to be useful. [RT #20205]
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer2669. [func] Update PKCS#11 support to support Keyper HSM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-keygen and dnssec-settime can now set key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews metadata fields 0 (to unset a value, use "none")
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence - dnssec-revoke sets the revocation date in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addition to the revoke bit
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence - dnssec-settime can now print individual metadata
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fields instead of always printing all of them,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and can print them in unix epoch time format for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use by scripts
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2667. [func] Add support for logging stack backtrace on assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure (not available for all platforms). [RT #19780]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (API change from 9.7.0a2). [RT #20196]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ARM documentation about RFC 5011 support. [RT #19874]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2664. [bug] create_keydata() and minimal_update() in zone.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews didn't properly check return values for some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions. [RT #19956]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2663. [func] win32: allow named to run as a service using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews returned a misleading error code when lwresd was
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister down. [RT #20028]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews creating lwres context. [RT #20029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence applications. See README.libdns. [RT #19369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name for DNSSEC keys. [RT #19938]
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence2658. [bug] dnssec-settime and dnssec-revoke didn't process
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key file paths correctly. [RT #20078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews log level to debug 1. [RT #20058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2656. [func] win32: add a "tools only" check box to the installer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which causes it to only install dig, host, nslookup,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nsupdate and relevant DLLs. [RT #19998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2655. [doc] Document that key-directory does not affect
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews bind.keys, rndc.key or session.key. [RT #20155]
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson2654. [bug] Improve error reporting on duplicated names for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deny-answer-xxx. [RT #20164]
99524919752c9b9abe1814007732b86592011cc1Brian Wellington2653. [bug] Treat ENGINE_load_private_key() failures as key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not found rather than out of memory. [RT #18033]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2652. [func] Provide more detail about what record is being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deleted. [RT #20061]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 64-bit systems. [RT #20076]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2650. [bug] Assertion failure in dnssec-signzone when trying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to read keyset-* files. [RT #20075]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2647. [bug] Remove unnecessary SOA updates when a new KSK is
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews added. [RT #19913]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which default to 64 bits. [RT #19927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer named was unable to write the PID file and would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail on startup. [RT #20001]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2642. [bug] nsupdate could dump core on solaris when reading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improperly formatted key files. [RT #20015]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews added a regression test to check it. [RT #20007]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2640. [security] A specially crafted update packet will cause named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to exit. [RT #20000]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2638. [bug] Install arpaname. [RT #19957]
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington dnssec-* tools. Major changes:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - all dnssec-* tools now take a -K option to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specify a directory in which key files will be
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister - DNSSEC can now store metadata indicating when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they are scheduled to be published, activated,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews revoked or removed; these values can be set by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keygen or overwritten by the new
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister dnssec-settime command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-signzone -S (for "smart") option reads key
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson metadata and uses it to determine automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which keys to publish to the zone, use for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing, revoke, or remove from the zone
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2634. [port] win32: Add support for libxml2, enable
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson statschannel. [RT #19773]
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2632. [func] util/kit.sh: warn if documentation appears to be out of
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson date. [RT #19922]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews [RT #19926 ]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2630. [func] Improved syntax for DDNS autoconfiguration: use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "update-policy local;" to switch on local DDNS in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. (The "ddns-autoconf" option has been removed.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister setresgid() if not present. [RT #19932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister at startup with reduced capabilities in operation.
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2627. [bug] Named aborted if the same key was included in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trusted-keys more than once. [RT #19918]
47c196192afa37b2dea728e52579779f190bf07fJames Brister2626. [bug] Multiple trusted-keys could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #19914]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington2624. [func] 'named-checkconf -p' will print out the parsed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration. [RT #18871]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2620. [bug] Delay thawing the zone until the reload of it has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completed successfully. [RT #19750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister maintenance. The new "managed-keys" statement can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be used in place of "trusted-keys" for zones which
0380c44d0238a88e167526954d630d071739ed28Mark Andrews support this protocol. (Note: this syntax is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loop infinitely. [RT #19847]
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2617. [bug] ifconfig.sh failed to emit an error message when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews run from the wrong location. [RT #19375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence when a explicit nameserver was specified. [RT #19852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2615. [bug] "__attribute__((unused))" was in the wrong place
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for ia64 gcc builds. [RT #19854]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2614. [port] win32: 'named -v' should automatically be executed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the foreground. [RT #19844]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2613. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2612. [func] Add default values for the arguments to
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence dnssec-keygen. Without arguments, it will now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generate a 1024-bit RSASHA1 zone-signing key,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or with the -f KSK option, a 2048-bit RSASHA1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-signing key. [RT #19300]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLV records instead of DS records. [RT #19300]
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister2610. [port] sunos: Change #2363 was not complete. [RT #19796]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2609. [func] Simplify the configuration of dynamic zones:
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews - add ddns-confgen command to generate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration text for named.conf
69b691c9624f31e59b8d128ada902a82127c15a3James Brister - add zone option "ddns-autoconf yes;", which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes named to generate a TSIG session key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and allow updates to the zone using that key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add '-l' (localhost) option to nsupdate, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes nsupdate to connect to a locally-running
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington named process using the session key generated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2608. [func] Perform post signing verification checks in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone. These can be disabled with -P.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The post sign verification test ensures that for each
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm in use there is at least one non revoked
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence self signed KSK key. That all revoked KSK keys are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews self signed. That all records in the zone are signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by the algorithm. [RT #19653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson empty nodes when processing a update request.
0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence2606. [bug] "delegation-only" was not being accepted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegation-only type zones. [RT #19717]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2605. [bug] Accept DS responses from delegation only zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT # 19296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new options, deny-answer-addresses and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deny-answer-aliases. Based on contributed code from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews JD Nurmi, Google. [RT #18192]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2603. [port] win32: handle .exe extension of named-checkzone and
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews named-comilezone argv[0] names under windows.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2602. [port] win32: fix debugging command line build of libisccfg.
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2601. [doc] Mention file creation mode mask in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named manual page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2600. [doc] ARM: miscellaneous reformatting for different
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff page widths. [RT #19574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2599. [bug] Address rapid memory growth when validation fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2598. [func] Reserve the -F flag. [RT #19657]
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington2597. [bug] Handle a validation failure with a insecure delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
f34984369fbc87f6cc5c5d1059303377a1724d79James Brister2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews long, leading to inefficient memory usage or rejecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews newer cache entries in the worst case. [RT #19563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2594. [func] Have rndc warn if using its default configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file when the key file also exists. [RT #19424]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington2591. [bug] named could die when processing a update in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed_orphaned_ds(). [RT #19507]
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington2590. [func] Report zone/class of "update with no effect".
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2588. [bug] SO_REUSEADDR could be set unconditionally after failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of bind(2) call. This should be rare and mostly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews harmless, but may cause interference with other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processes that happen to use the same port. [RT #19642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2587. [func] Improve logging by reporting serial numbers for
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence when zone serial has gone backwards or unchanged.
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or SDB. [RT #19577]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2585. [bug] Uninitialized socket name could be referenced via a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics channel, triggering an assertion failure in
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence XML rendering. [RT #19427]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2583. [port] netbsd: provide a control to not add the compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews date to the version string, -DNO_VERSION_DATE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2582. [bug] Don't emit warning log message when we attempt to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews remove non-existent journal. [RT #19516]
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence2580. [bug] UpdateRej statistics counter could be incremented twice
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for one rejection. [RT #19476]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2579. [bug] DNSSEC lookaside validation failed to handle unknown
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson algorithms. [RT #19479]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson 65535 turns out to be reserved. [RT #19477]
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2577. [doc] Clarified some statistics counters. [RT #19454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2576. [bug] NSEC record were not being correctly signed when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a zone transitions from insecure to secure.
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson Handle such incorrectly signed zones. [RT #19114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2575. [func] New functions dns_name_fromstring() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_tostring(), to simplify conversion
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff of a string to a dns_name structure and vice
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versa. [RT #19451]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2573. [bug] Replacing a non-CNAME record with a CNAME record in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews single transaction in a signed zone failed. [RT #19397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2572. [func] Simplify DLV configuration, with a new option
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff "dnssec-lookaside auto;" This is the equivalent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews plus setting a trusted-key for dlv.isc.org.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: The trusted key is hard-coded into named,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but is also stored in (and can be overridden
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson rolls over it can be kept up to date by replacing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the bind.keys file with a key downloaded from
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington2571. [func] Add a new tool "arpaname" which translates IP addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2570. [func] Log the destination address the query was sent to.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson "make install" will put them in $sbindir. [RT #19301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2568. [bug] Report when the write to indicate a otherwise
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successful start fails. [RT #19360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews write_public_key() could miss write errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-dsfromkey could miss write errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response arrives from a zone thought to be secure:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "insecurity proof failed" instead of "not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews insecure". [RT #19400]
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence2565. [func] Add support for HIP record. Includes new functions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dns_rdata_hip_current(). [RT #19384]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to exit. [RT #19359]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and some new content.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2559. [bug] dnssec-dsfromkey could compute bad DS records when
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews reading from a K* files. [RT #19357]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2558. [func] Set the ownership of missing directories created
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence for pid-file if -u has been specified on the command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews line. [RT #19328]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2557. [cleanup] PCI compliance:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * new libisc log module file
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence * isc_dir_chroot() now also changes the working
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory to "/".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional INSISTs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional logging when files can't be removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error checks in the correct order resulting in the
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington wrong error code sometimes being returned. [RT #19249]
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington2555. [func] dig: when emitting a hex dump also display the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corresponding characters. [RT #19258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister fail. [RT #19297]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honored.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2548. [bug] Install iterated_hash.h. [RT #19335]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2547. [bug] openssl_link.c:mem_realloc() could reference an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews out-of-range area of the source buffer. New public
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister function isc_mem_reallocate() was introduced to address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this bug. [RT #19313]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL (in place of internal routine) for hash
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson functions (MD5, SHA[12] and HMAC). [RT #18815]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for SRV RDATA too. [RT #19304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2542. [doc] Update the description of dig +adflag. [RT #19290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2541. [bug] Conditionally update dispatch manager statistics.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2539. [security] Update the interaction between recursion, allow-query,
7b52c2ad3c9ca65712e962ddc803e34641f2bc07Mark Andrews allow-query-cache and allow-recursion. [RT #19198]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews especially with threads and smaller max-cache-size
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews values. [RT #19240]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2537. [func] Added more statistics counters including those on socket
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews I/O events and query RTT histograms. [RT #18802]
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2536. [cleanup] Silence some warnings when -Werror=format-security is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified. [RT #19083]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2534. [func] Check NAPTR records regular expressions and
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson replacement strings to ensure they are syntactically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews valid and consistent. [RT #18168]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2532. [bug] dig: check the question section of the response to
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson see if it matches the asked question. [RT #18495]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2531. [bug] Change #2207 was incomplete. [RT #19098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2530. [bug] named failed to reject insecure to secure transitions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via UPDATE. [RT #19101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson version of autoconf. [RT #18657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2528. [cleanup] Silence spurious configure warning about
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence --datarootdir [RT #19096]
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister2527. [placeholder]
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews2526. [func] New named option "attach-cache" that allows multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views to share a single cache to save memory and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improve lookup efficiency. Based on contributed code
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister from Barclay Osborn, Google. [RT #18905]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister internal information about query failures, especially
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews about server failures. [RT #19027]
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2523. [bug] Random type rdata freed by dns_nsec_typepresent().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews #2388 made the schema incompatible to the previous
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews version. [RT #19080]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver addresses of the excluded address family
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews preceded in resolv.conf. [RT #19081]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson nameserver address of the excluded address type.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2516. [bug] glue sort for responses was performed even when not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews needed. [RT #19039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister a nameserver of the excluded address family.
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed2513. [bug] Fix windows cli build. [RT #19062]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2512. [func] Print a summary of the cached records which make up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the negative response. [RT #18885]
36357e4304862fb47e9fae03c704cb6720310c45James Brister2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2509. [bug] Specifying a fixed query source port was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2508. [placeholder]
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence2507. [func] Log the recursion quota values when killing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews oldest query or refusing to recurse due to quota.
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence2506. [port] solaris: Check at configure time if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hack_shutup_pthreadonceinit is needed. [RT #19037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson atomic operation support. [RT #19031]
b99d080717fdd741961d736581270d37bad8bec0David Lawrence2504. [bug] Address race condition in the socket code. [RT #18899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2503. [port] linux: improve compatibility with Linux Standard
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson Base. [RT #18793]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence document function in <isc/radix.h>. [RT #18534]
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence2501. [func] $GENERATE now supports all rdata types. Multi-field
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdata types need to be quoted. See the ARM for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews details. [RT #18368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function. [RT #18582]
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0rc1 released ---
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence2498. [bug] Removed a bogus function argument used with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning or crash named with the debug 1 level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of logging. [RT #18917]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
eefea43215016bce437ab4a7441b2851fd182960David Lawrence installed. [RT #18826]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence up after itself. [RT #18767]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2492. [func] Rndc status now reports the number of cpus discovered
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence and the number of worker threads when running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multi-threaded. [RT #18273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2491. [func] Attempt to re-use a local port if we are already using
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson the port. [RT #18548]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence is cleared when IPV6_V6ONLY is set. [RT #18785]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
b58d2c6a1cfe8f06548763a139579f270d9014a6Jeremy Reed http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this workaround. [RT #18870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence from keyset and .key files. [RT #18694]
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence2487. [bug] Give TCP connections longer to complete. [RT #18675]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2486. [func] The default locations for named.pid and lwresd.pid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This allows the owner of the containing directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be set, for "named -u" support, and allows there
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence to be a permanent symbolic link in the path, for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "named -t" support. [RT #18306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2485. [bug] Change update's the handling of obscured RRSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records. Not all orphaned DS records were being
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence removed. [RT #18828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adding NSEC3 proofs to the response in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query_addwildcardproof(). [RT #18828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews to 2.6.*. [RT #18806]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews collisions. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2480. [bug] named could fail to emit all the required NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence2478. [bug] 'addresses' could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure_forward(). [RT #18800]
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence2477. [bug] dig: the global option to print the command line is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews +cmd not print_cmd. Update the output to reflect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this. [RT #17008]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2476. [doc] ARM: improve documentation for max-journal-size and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2475. [bug] LRU cache cleanup under overmem condition could purge
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence particular entries more aggressively. [RT #17628]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2474. [bug] ACL structures could be allocated with insufficient
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space, causing an array overrun. [RT #18765]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2473. [port] linux: raise the limit on open files to the possible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maximum value before spawning threads; 'files'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified in named.conf doesn't seem to work with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence threads as expected. [RT #18784]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2472. [port] linux: check the number of available cpu's before
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence calling chroot as it depends on "/proc". [RT #16923]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2471. [bug] named-checkzone was not reporting missing mandatory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews glue when sibling checks were disabled. [RT #18768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2470. [bug] Elements of the isc_radix_node_t could be incorrectly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence overwritten. [RT #18719]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2469. [port] solaris: Work around Solaris's select() limitations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2468. [bug] Resolver could try unreachable servers multiple times.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2465. [bug] Adb's handling of lame addresses was different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv4 and IPv6. [RT #18738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2464. [port] linux: check that a capability is present before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trying to set it. [RT #18135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API and glibc hides parts of the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API as a result. This is stupid as it breaks how the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two halves (Basic and Advanced) of the IPv6 Socket API
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were designed to be used but we have to live with it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API. [RT #18388]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2462. [doc] Document -m (enable memory usage debugging)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option for dig. [RT #18757]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2461. [port] sunos: Change #2363 was not complete. [RT #17513]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2458. [doc] ARM: update and correction for max-cache-size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews default. It should be safe because expired cache
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence entries are also purged. [RT #18684]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence address, regardless of family. They now correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews distinguish IPv4 from IPv6. [RT #18559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2453. [bug] Remove NULL pointer dereference in dns_journal_print().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2451. [port] solaris: handle runtime linking better. [RT #18356]
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence2450. [doc] Fix lwresd docbook problem for manual page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2449. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2448. [func] Add NSEC3 support. [RT #15452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2447. [cleanup] libbind has been split out as a separate product.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2446. [func] Add a new log message about build options on startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A new command-line option '-V' for named is also
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence provided to show this information. [RT #18645]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson RFC1918 address, but these are not yet compiled in).
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (clear DF) for UDP responses and requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and so connected UDP sockets would never clean up.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Fix this by doing an immediate WSAConnect() rather
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence than an io completion port type for UDP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2442. [bug] A lock could be destroyed twice. [RT #18626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2441. [bug] isc_radix_insert() could copy radix tree nodes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incompletely. [RT #18573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2440. [bug] named-checkconf used an incorrect test to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if an ACL was set to none.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2438. [bug] Timeouts could be logged incorrectly under win32.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2437. [bug] Sockets could be closed too early, leading to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inconsistent states in the socket module. [RT #18298]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2434. [bug] Fixed a minor error-reporting bug in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2433. [tuning] Set initial timeout to 800ms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence using I/O events and use IO Completion Ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews throughout. Rewrite the receive path logic to make
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it easier to support multiple simultaneous
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence requesters in the future. Add stricter consistency
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checking as a compile-time option (define
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2430. [bug] win32: isc_interval_set() could round down to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zero if the input was less than NS_INTERVAL
77f372eed39827f5efef476602de7c0505f99b91David Lawrence nanoseconds. Round up instead. [RT #18549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2429. [doc] nsupdate should be in section 1 of the man pages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tables. [RT #18409]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence was set. [RT #18528]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong value if excessively large net masks are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supplied. [RT #18512]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2425. [bug] named didn't detect unavailable query source addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at load time. [RT #18536]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2424. [port] configure now probes for a working epoll
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementation. Allow the use of kqueue,
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson epoll and /dev/poll to be selected at compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #18277]
6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington2423. [security] Randomize server selection on queries, so as to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews make forgery a little more difficult. Instead of
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff always preferring the server with the lowest RTT,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pick a server with RTT within the same 128
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews millisecond band. [RT #18441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2422. [bug] Handle the special return value of a empty node as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if it was a NXRRSET in the validator. [RT #18447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2421. [func] Add new command line option '-S' for named to specify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the max number of sockets. [RT #18493]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley Use caution: this option may not work for some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews operating systems without rebuilding named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2420. [bug] Windows socket handling cleanup. Let the io
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews completion event send out canceled read/write
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews done events, which keeps us from writing to memory
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews we no longer have ownership of. Add debugging
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socket_log() function. Rework TCP socket handling
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson to not leak sockets.
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should not be used for isc_sockettype_fdwatch sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2417. [bug] Connecting UDP sockets for outgoing queries could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpectedly fail with an 'address already in use'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #18411]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2416. [func] Log file descriptors that cause exceeding the
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington internal maximum. [RT #18460]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2415. [bug] 'rndc dumpdb' could trigger various assertion failures
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington in rbtdb.c. [RT #18455]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2414. [bug] A masterdump context held the database lock too long,
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson causing various troubles such as dead lock and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recursive lock acquisition. [RT #18311, #18456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2412. [bug] win32: address a resource leak. [RT #18374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
4716e94840921878b26e493576f84afe4fe08752Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at compilation time. [RT #18433]
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence Note: with changes #2469 and #2421 above, there is no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley2409. [bug] Only log that we disabled EDNS processing if we were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subsequently successful. [RT #18029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2408. [bug] A duplicate TCP dispatch event could be sent, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could then trigger an assertion failure in
3886e748a4086b813e3453232a742903762fedadBob Halley resquery_response(). [RT #18275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2406. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2405. [cleanup] The default value for dnssec-validation was changed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "yes" in 9.5.0-P1 and all subsequent releases; this
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington was inadvertently omitted from CHANGES at the time.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2404. [port] hpux: files unlimited support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2403. [bug] TSIG context leak. [RT #18341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (from accept() or fcntl() system calls). [RT #18358]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2399. [placeholder]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson2398. [bug] Improve file descriptor management. New,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews temporary, named.conf option reserved-sockets,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews default 512. [RT #18344]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2397. [bug] gssapi_functions had too many elements. [RT #18355]
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington2396. [bug] Don't set SO_REUSEADDR for randomized ports.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2395. [port] Avoid warning and no effect from "files unlimited"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on Linux when running as root. [RT #18335]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2394. [bug] Default configuration options set the limit for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews open files to 'unlimited' as described in the
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence documentation. [RT #18331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2393. [bug] nested acls containing keys could trigger an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion in acl.c. [RT #18166]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence don't support it. [RT #18253]
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence2391. [port] hpux: cover additional recvmsg() error codes.
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence2390. [bug] dispatch.c could make a false warning on 'odd socket'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #18301].
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews2389. [bug] Move the "working directory writable" check to after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the ns_os_changeuser() call. [RT #18326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2388. [bug] Avoid using tables for layout purposes in
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister statistics XSL [RT #18159].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #18147] [RT #18258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2386. [func] Add warning about too small 'open files' limit.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2385. [bug] A condition variable in socket.c could leak in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rare error handling [RT #17968].
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence2384. [security] Fully randomize UDP query ports to improve
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews forgery resilience. [RT #17949, #18098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2383. [bug] named could double queries when they resulted in
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister SERVFAIL due to overkilling EDNS0 failure detection.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews mysql. <prefix>/include/{,mysql/}mysql.h and
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson <prefix>/lib/{,mysql/}. [RT #18152]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington proofs which, in turn, caused validation failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for insecure zones immediately below a secure zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the server was authoritative for. [RT #18112]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2376. [bug] Change #2144 was not complete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2375. [placeholder]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence2374. [bug] "blackhole" ACLs could cause named to segfault due
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to some uninitialized memory. [RT #18095]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2373. [bug] Default values of zone ACLs were re-parsed each time a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new zone was configured, causing an overconsumption
be768c2e952c34438025999125f984995a2c675fBob Halley of memory. [RT #18092]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2370. [bug] "rndc freeze" could trigger an assertion in named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when called on a nonexistent zone. [RT #18050]
be768c2e952c34438025999125f984995a2c675fBob Halley2369. [bug] libbind: Array bounds overrun on read in bitncmp().
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley2368. [port] Linux: use libcap for capability management if
68cd13fff2b45c8a941ed8ac3efa0698798dcc96Mark Andrews possible. [RT #18026]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2367. [bug] Improve counting of dns_resstatscounter_retry
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley2366. [bug] Adb shutdown race. [RT #18021]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spurious results. [RT #18000]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2364. [bug] named could trigger a assertion when serving a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews malformed signed zone. [RT #17828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister settable by "./configure --enable-fixed-rrset".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Disabled by default. [RT #17977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2361. [bug] "recursion" statistics counter could be counted
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley multiple times for a single query. [RT #17990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2360. [bug] Fix a condition where we release a database version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (which may acquire a lock) while holding the lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2359. [bug] Fix NSID bug. [RT #17942]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2358. [doc] Update host's default query description. [RT #17934]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2357. [port] Don't use OpenSSL's engine support in versions before
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington OpenSSL 0.9.7f. [RT #17922]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2355. [func] Extend the number statistics counters available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2353. [func] Add support for Name Server ID (RFC 5001).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'dig +nsid' requests NSID from server.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'request-nsid yes;' causes recursive server to send
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence NSID requests to upstream servers. Server responds
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to NSID requests with the string configured by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'server-id' option. [RT #17091]
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which