CHANGES revision 72c86c105a7cf315036d7131a4ef408bc6227639
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3523. [contrib] Ported filesystem and ldap DLZ drivers to
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams dynamically-loadable modules, and added the
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams "wildcard" module based on a contribution from
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3522. [bug] DLZ lookups could fail to return SERVFAIL when
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams they ought to. [RT #32685]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3520. [bug] 'mctx' was not being referenced counted in some places
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams where it should have been. [RT #32794]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3519. [func] Full replay protection via four-way handshake is
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams now mandatory for rndc clients. Very old versions
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams of rndc will no longer work. [RT #32798]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams so that all dns_rrl_rtype_t enum values fit regardless
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams of whether it is teated as signed or unsigned by
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams the compiler. [RT #32792]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3516. [placeholder]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3515. [port] '%T' is not portable in strftime(). [RT #32763]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3514. [bug] The ranges for valid key sizes in ddns-confgen and
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams rndc-confgen were too constrained. Keys up to 512
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams bits are now allowed for most algorithms, and up
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams to 1024 bits for hmac-sha384 and hmac-sha512.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3513. [func] "dig -u" prints times in microseconds rather than
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams milliseconds. [RT #32704]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3512. [func] "rndc validation check" reports the current status
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams of DNSSEC validation. [RT #21397]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3511. [doc] Improve documentation of redirect zones. [RT #32756]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3510. [func] "rndc status" and XML statistics channel now report
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams server start and reconfiguration times. [RT #21048]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3509. [cleanup] Added a product line to version file to allow for
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams easy naming of different products (BIND
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams vs BIND ESV, for example). [RT #32755]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3508. [contrib] queryperf was incorrectly rejecting the -T option.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3507. [bug] Statistics channel XSL had a glitch when attempting
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams to chart query data before any queries had been
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams received. [RT #32620]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3506. [func] When setting "max-cache-size" and "max-acache-size",
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams the keyword "unlimited" is no longer defined as equal
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams to 4 gigabytes (except on 32-bit platforms); it
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams means literally unlimited. [RT #32358]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3505. [bug] When setting "max-cache-size" and "max-acache-size",
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams larger values than 4 gigabytes could not be set
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams explicitly, though larger sizes were available
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams when setting cache size to 0. This has been
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams corrected; the full range is now available.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3504. [func] Add support for ACLs based on geographic location,
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams using MaxMind GeoIP databases. Based on code
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams contributed by Ken Brownfield <kb@slide.com>.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3503. [doc] Clarify size_spec syntax. [RT #32449]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3502. [func] zone-statistics: "no" is now a synonym for "none",
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams instead of "terse". [RT #29165]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3501. [func] zone-statistics now takes three options: full,
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams terse, and none. "yes" and "no" are retained as
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams synonyms for full and terse, respectively. [RT #29165]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3500. [port] Support NAPTR regular expression validation on
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams all platforms. [RT #32688]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3499. [doc] Corrected ARM documentation of built-in zones.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3498. [bug] zone statistics for zones which matched a potential
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams empty zone could have their zone-statistics setting
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3497. [func] When deleting a slave/stub zone using 'rndc delzone'
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams report the files that were being used so they can
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams be cleaned up if desired. [RT #27899]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3496. [placeholder]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3495. [func] Support multiple response-policy zones (up to 32),
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams while improving RPZ performance. "response-policy"
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams syntax now includes a "min-ns-dots" clause, with
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams default 1, to exclude top-level domains from
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams NSIP and NSDNAME checking. --enable-rpz-nsip and
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams --enable-rpz-nsdname are now the default. [RT #32251]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3494. [func] DNS RRL: Blunt the impact of DNS reflection and
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams amplification attacks by rate-limiting substantially-
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams identical responses. [RT #28130]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3493. [contrib] Added BDBHPT dynamically-lodable DLZ module,
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams contributed by Mark Goldfinch. [RT #32549]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3492. [bug] Fixed a regression in zone loading performance
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams due to lock contention. [RT #30399]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3491. [bug] Slave zones using inline-signing must specify a
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams file name. [RT #31946]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3490. [bug] When logging RDATA during update, truncate if it's
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams too long. [RT #32365]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams dns_dlzcreate() failed to properly initialize
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams dlzdb.link. When cloning a rdataset do not copy
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams the link contents. [RT #32651]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3488. [bug] Use after free error with DH generated keys. [RT #32649]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3487. [bug] Change 3444 was not complete. There was a additional
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams place where the NOQNAME proof needed to be saved.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3486. [bug] named could crash when using TKEY-negotiated keys
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams that had been deleted and then recreated. [RT #32506]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3484. [bug] Some statistics were incorrectly rendered in XML.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3483. [placeholder]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3482. [func] dig +nssearch now prints name servers that don't
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams have address records (missing AAAA or A, or the name
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams doesn't exist). [RT #29348]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3481. [cleanup] removed use of const const in atf
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3480. [bug] Silence logging noise when setting up zone
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams statistics. [RT #32525]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3479. [bug] Address potential memory leaks in gssapi support
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams code. [RT #32405]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3478. [port] Fix a build failure in strict C99 environments
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3477. [func] Expand logging when adding records via DDNS update
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3476. [bug] "rndc zonestatus" could report a spurious "not
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams found" error on inline-signing zones. [RT #29226]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3475. [cleanup] Changed name of 'map' zone file format (previously
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams 'fast'). [RT #32458]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3474. [bug] nsupdate could assert when the local and remote
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams address families didn't match. [RT #22897]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3473. [bug] dnssec-signzone/verify could incorrectly report
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams an error condition due to an empty node above an
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams opt-out delegation lacking an NSEC3. [RT #32072]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3472. [bug] The active-connections counter in the socket
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams statistics could underflow. [RT #31747]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3471. [bug] The number of UDP dispatches now defaults to
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams the number of CPUs even if -n has been set to
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams a higher value. [RT #30964]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3470. [bug] Slave zones could fail to dump when successfully
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams refreshing after an initial failure. [RT #31276]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3469. [bug] Handle DLZ lookup failures more gracefully. Improve
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams backward compatibility between versions of DLZ dlopen
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams API. [RT #32275]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3468. [security] RPZ rules to generate A records (but not AAAA records)
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams could trigger an assertion failure when used in
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams conjunction with DNS64 (CVE-2012-5689). [RT #32141]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3467. [bug] Added checks in dnssec-keygen and dnssec-settime
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams to check for delete date < inactive date. [RT #31719]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams in DLZ example driver. [RT #32275]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3465. [bug] Handle isolated reserved ports. [RT #31778]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3464. [maint] Updates to PKCS#11 openssl patches, supporting
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3462. [doc] Clarify server selection behavior of dig when using
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams -4 or -6 options. [RT #32181]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3461. [bug] Negative responses could incorrectly have AD=1
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams set. [RT #32237]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3460. [bug] Only link against readline where needed. [RT #29810]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3459. [func] Added -J option to named-checkzone/named-compilezone
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams to specify the path to the journal file. [RT #30958]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3458. [bug] Return FORMERR when presented with a overly long
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams domain named in a request. [RT #29682]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3456. [port] g++47: ATF failed to compile. [RT #32012]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3455. [contrib] queryperf: fix getopt option list. [RT #32338]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3454. [port] sparc64: improve atomic support. [RT #25182]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams failed. [RT #31960]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3452. [bug] Accept duplicate singleton records. [RT #32329]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3451. [port] Increase per thread stack size from 64K to 1M.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3450. [bug] Stop logfileconfig system test spam system logs.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3449. [bug] gen.c: use the pre-processor to construct format
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams strings so that compiler can perform sanity checks;
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams check the snprintf results. [RT #17576]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3448. [bug] The allow-query-on ACL was not processed correctly.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3447. [port] Add support for libxml2-2.9.x [RT #32231]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3446. [port] win32: Add source ID (see change #3400) to build.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3445. [bug] Warn about zone files with blank owner names
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams immediately after $ORIGIN directives. [RT #31848]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3444. [bug] The NOQNAME proof was not being returned from cached
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams insecure responses. [RT #21409]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams rejected when generating keys. [RT #31927]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3442. [port] Net::DNS 0.69 introduced a non backwards compatible
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams change. [RT #32216]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3440. [bug] Reorder get_key_struct to not trigger a assertion when
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams cleaning up due to out of memory error. [RT #32131]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3439. [placeholder]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams buffers with constant data. [RT #32064]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3436. [bug] Check malloc/calloc return values. [RT #32088]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3435. [bug] Cross compilation support in configure was broken.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3434. [bug] Pass client info to the DLZ findzone() entry
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams point in addition to lookup(). This makes it
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams possible for a database to answer differently
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams whether it's authoritative for a name depending
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams on the address of the client. [RT #31775]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3433. [bug] dlz_findzone() did not correctly handle
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams ISC_R_NOMORE. [RT #31172]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3432. [func] Multiple DLZ databases can now be configured.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams DLZ databases are searched in the order configured,
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams unless set to "search no", in which case a
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams zone can be configured to be retrieved from a
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams particular DLZ database by using a "dlz <name>"
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams option in the zone statement. DLZ databases can
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams support type "master" and "redirect" zones.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3431. [bug] ddns-confgen: Some valid key algorithms were
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams not accepted. [RT #31927]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3430. [bug] win32: isc_time_formatISO8601 was missing the
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams 'T' between the date and time. [RT #32044]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3429. [bug] dns_zone_getserial2 could a return success without
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams returning a valid serial. [RT #32007]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3428. [cleanup] dig: Add timezone to date output. [RT #2269]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3427. [bug] dig +trace incorrectly displayed name server
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams addresses instead of names. [RT #31641]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3426. [bug] dnssec-checkds: Clearer output when records are not
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams found. [RT #31968]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3425. [bug] "acacheentry" reference counting was broken resulting
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams in use after free. [RT #31908]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3424. [func] dnssec-dsfromkey now emits the hash without spaces.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3423. [bug] "rndc signing -nsec3param" didn't accept the full
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams range of possible values. Address portability issues.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3422. [bug] Added a clear error message for when the SOA does not
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams match the referral. [RT #31281]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3421. [bug] Named loops when re-signing if all keys are offline.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3420. [bug] Address VPATH compilation issues. [RT #31879]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3419. [bug] Memory leak on validation cancel. [RT #31869]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3418. [func] New XML schema (version 3.0) for the statistics channel
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams adds query type statistics at the zone level, and
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams flattens the XML tree and uses compressed format to
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams optimize parsing. Includes new XSL that permits
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams charting via the Google Charts API on browsers that
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams support javascript in XSL. The old XML schema has been
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams deprecated. [RT #30023]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3417. [placeholder]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3416. [bug] Named could die on shutdown if running with 128 UDP
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams dispatches per interface. [RT #31743]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3415. [bug] named could die with a REQUIRE failure if a valdation
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams was canceled. [RT #31804]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3414. [bug] Address locking issues found by Coverity. [RT #31626]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3413. [func] Record the number of DNS64 AAAA RRsets that have been
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams synthesized. [RT #27636]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3412. [bug] Copy timeval structure from control message data.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams to UDP. [RT #31690]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3410. [bug] Addressed Coverity warnings. [RT #31626]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams from X.509 certificates, for use with DANE
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams (DNS-based Authentication of Named Entities).
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3408. [bug] Some DNSSEC-related options (update-check-ksk,
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams are now legal in slave zones as long as
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams inline-signing is in use. [RT #31078]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3407. [placeholder]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3406. [bug] mem.c: Fix compilation errors when building with
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3405. [bug] Handle time going backwards in acache. [RT #31253]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3404. [bug] dnssec-signzone: When re-signing a zone, remove
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams RRSIG and NSEC records from nodes that used to be
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams in-zone but are now below a zone cut. [RT #31556]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3402. [test] The IPv6 interface numbers used for system
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams tests were incorrect on some platforms. [RT #25085]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3401. [bug] Addressed Coverity warnings. [RT #31484]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3400. [cleanup] "named -V" can now report a source ID string, defined
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams in the "srcid" file in the build tree and normally set
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams to the most recent git hash. [RT #31494]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3399. [port] netbsd: rename 'bool' parameter to avoid namespace
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams clash. [RT #31515]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3398. [bug] SOA parameters were not being updated with inline
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams signed zones if the zone was modified while the
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams server was offline. [RT #29272]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3396. [bug] OPT records were incorrectly removed from signed,
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams truncated responses. [RT #31439]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3394. [bug] Adjust 'successfully validated after lower casing
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams signer' log level and category. [RT #31414]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3393. [bug] 'host -C' could core dump if REFUSED was received.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3392. [func] Keep statistics on REFUSED responses. [RT #31412]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3390. [bug] Silence clang compiler warnings. [RT #30417]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3388. [bug] Fixed several Coverity warnings.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams Note: This change includes a fix for a bug that
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams was subsequently determined to be an exploitable
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams security vulnerability, CVE-2012-5688: named could
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams die on specific queries with dns64 enabled.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3387. [func] DS digest can be disabled at runtime with
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams disable-ds-digests. [RT #21581]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3386. [bug] Address locking violation when generating new NSEC /
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams NSEC3 chains. [RT #31224]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3385. [bug] named-checkconf didn't detect missing master lists
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams in also-notify clauses. [RT #30810]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3384. [bug] Improved logging of crypto errors. [RT #30963]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3383. [security] A certain combination of records in the RBT could
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams cause named to hang while populating the additional
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams section of a response. [RT #31090]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3382. [bug] SOA query from slave used use-v6-udp-ports range,
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams if set, regardless of the address family in use.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3381. [contrib] Update queryperf to support more RR types.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3380. [bug] named could die if a non-existant master list was
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams referenced in a also-notify. [RT #31004]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3379. [bug] isc_interval_zero and isc_time_epoch should be
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams "const (type)* const". [RT #31069]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3378. [bug] Handle missing 'managed-keys-directory' better.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3377. [bug] Removed spurious newline from NSEC3 multiline
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams output. [RT #31044]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3376. [bug] Lack of EDNS support was being recorded without a
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams successful response. [RT #30811]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3374. [bug] isc_parse_uint32 failed to return a range error on
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams systems with 64 bit longs. [RT #30232]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3373. [bug] win32: open raw files in binary mode. [RT #30944]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3372. [bug] Silence spurious "deleted from unreachable cache"
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams messages. [RT #30501]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3371. [bug] AD=1 should behave like DO=1 when deciding whether to
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams add NS RRsets to the additional section or not.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3370. [bug] Address use after free while shutting down. [RT #30241]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3369. [bug] nsupdate terminated unexpectedly in interactive mode
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams if built with readline support. [RT #29550]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams were not C++ safe.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3367. [bug] dns_dnsseckey_create() result was not being checked.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3366. [bug] Fixed Read-After-Write dependency violation for IA64
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams atomic operations. [RT #25181]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3365. [bug] Removed spurious newlines from log messages in
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3364. [security] Named could die on specially crafted record.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3363. [bug] Need to allow "forward" and "fowarders" options
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams in static-stub zones; this had been overlooked.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3362. [bug] Setting some option values to 0 in named.conf
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams could trigger an assertion failure on startup.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3361. [bug] "rndc signing -nsec3param" didn't work correctly
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams when salt was set to '-' (no salt). [RT #30099]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3360. [bug] 'host -w' could die. [RT #18723]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3359. [bug] An improperly-formed TSIG secret could cause a
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams memory leak. [RT #30607]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3358. [placeholder]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3357. [port] Add support for libxml2-2.8.x [RT #30440]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams approaching their expiry, so they don't remain
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams in caches after expiry. [RT #26429]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3355. [port] Use more portable awk in verify system test.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3354. [func] Improve OpenSSL error logging. [RT #29932]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3353. [bug] Use a single task for task exclusive operations.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3352. [bug] Ensure that learned server attributes timeout of the
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams adb cache. [RT #29856]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams memory debugging flags are set. [RT #30243]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3350. [bug] Memory read overrun in isc___mem_reallocate if
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams ISC_MEM_DEBUGCTX memory debugging flag is set.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3349. [bug] Change #3345 was incomplete. [RT #30233]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3348. [bug] Prevent RRSIG data from being cached if a negative
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams record matching the covering type exists at a higher
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams trust level. Such data already can't be retrieved from
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams the cache since change 3218 -- this prevents it
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams being inserted into the cache as well. [RT #26809]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3347. [bug] dnssec-settime: Issue a warning when writing a new
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams private key file would cause a change in the
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams permissions of the existing file. [RT #27724]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3346. [security] Bad-cache data could be used before it was
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams initialized, causing an assert. [RT #30025]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3345. [bug] Addressed race condition when removing the last item
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams or inserting the first item in an ISC_QUEUE.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3344. [func] New "dnssec-checkds" command checks a zone to
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams determine which DS records should be published
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams in the parent zone, or which DLV records should be
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams published in a DLV zone, and queries the DNS to
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams ensure that it exists. (Note: This tool depends
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams on python; it will not be built or installed on
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams systems that do not have a python interpreter.)
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3343. [placeholder]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3342. [bug] Change #3314 broke saving of stub zones to disk
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams resulting in excessive cpu usage in some cases.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3341. [func] New "dnssec-verify" command checks a signed zone
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams to ensure correctness of signatures and of NSEC/NSEC3
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams chains. [RT #23673]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3340. [func] Added new 'map' zone file format, which is an image
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams of a zone database that can be loaded directly into
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams memory via mmap(), allowing much faster zone loading.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams (Note: Because of pointer sizes and other
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams considerations, this file format is platform-dependent;
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams 'map' zone files cannot always be transferred from one
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams server to another.) [RT #25419]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3339. [func] Allow the maximum supported rsa exponent size to be
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams specified: "max-rsa-exponent-size <value>;" [RT #29228]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3338. [bug] Address race condition in units tests: asyncload_zone
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams and asyncload_zt. [RT #26100]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3337. [bug] Change #3294 broke support for the multiple keys
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams in controls. [RT #29694]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3336. [func] Maintain statistics for RRsets tagged as "stale".
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3335. [func] nslookup: return a nonzero exit code when unable
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams to get an answer. [RT #29492]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3334. [bug] Hold a zone table reference while performing a
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams asynchronous load of a zone. [RT #28326]
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams3333. [bug] Setting resolver-query-timeout too low can cause
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams named to not recover if it loses connectivity.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3331. [security] dns_rdataslab_fromrdataset could produce bad
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams rdataslabs. [RT #29644]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3330. [func] Fix missing signatures on NOERROR results despite
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams RPZ rewriting. Also
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams - add optional "recursive-only yes|no" to the
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams response-policy statement
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams - add optional "max-policy-ttl" to the response-policy
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams statement to limit the false data that
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams "recursive-only no" can introduce into
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams resolvers' caches
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams - add a RPZ performance test to bin/tests/system/rpz
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams when queryperf is available.
d5ab1ee6a7f1c8159562af429b861ae32f6aa2d6gary.williams - the encoding of PASSTHRU action to "rpz-passthru".
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams (The old encoding is still accepted.)
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3329. [bug] Handle RRSIG signer-name case consistently: We
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams generate RRSIG records with the signer-name in
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams lower case. We accept them with any case, but if
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams they fail to validate, we try again in lower case.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3328. [bug] Fixed inconsistent data checking in dst_parse.c.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams to 'filter-aaaa-on-v4' but applies to IPv6
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams connections. (Use "configure --enable-filter-aaaa"
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams to enable this option.) [RT #27308]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3326. [func] Added task list statistics: task model, worker
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams threads, quantum, tasks running, tasks ready.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3325. [func] Report cache statistics: memory use, number of
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams nodes, number of hash buckets, hit and miss counts.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3324. [test] Add better tests for ADB stats [RT #27057]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3323. [func] Report the number of buckets the resolver is using.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3322. [func] Monitor the number of active TCP and UDP dispatches.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3321. [func] Monitor the number of recursive fetches and the
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams number of open sockets, and report these values in
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams the statistics channel. [RT #27054]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3320. [func] Added support for monitoring of recursing client
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams count. [RT #27009]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3319. [func] Added support for monitoring of ADB entry count and
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams hash size. [RT #27057]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3318. [tuning] Reduce the amount of work performed while holding a
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams bucket lock when finished with a fetch context.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3316. [tuning] Improved locking performance when recursing.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3315. [tuning] Use multiple dispatch objects for sending upstream
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams queries; this can improve performance on busy
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams multiprocessor systems by reducing lock contention.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3314. [bug] The masters list could be updated while refesh_callback
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams and stub_callback were using it. [RT #26732]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3313. [protocol] Add TLSA record type. [RT #28989]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3311. [bug] Abort the zone dump if zone->db is NULL in
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams zone.c:zone_gotwritehandle. [RT #29028]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3310. [test] Increase table size for mutex profiling. [RT #28809]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3309. [bug] resolver.c:fctx_finddone() was not thread safe.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3308. [placeholder]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3305. [func] Add wire format lookup method to sdb. [RT #28563]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3303. [bug] named could die when reloading. [RT #28606]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3302. [bug] dns_dnssec_findmatchingkeys could fail to find
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams keys if the zone name contained character that
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams required special mappings. [RT #28600]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3301. [contrib] Update queryperf to build on darwin. Add -R flag
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams for non-recursive queries. [RT #28565]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3300. [bug] Named could die if gssapi was enabled in named.conf
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams but was not compiled in. [RT #28338]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3299. [bug] Make SDB handle errors from database drivers better.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3298. [bug] Named could dereference a NULL pointer in
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams zmgr_start_xfrin_ifquota if the zone was being removed.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3297. [bug] Named could die on a malformed master file. [RT #28467]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3296. [bug] Named could die with a INSIST failure in
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams client.c:exit_check. [RT #28346]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3295. [bug] Adjust isc_time_secondsastimet range check to be more
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams portable. [RT # 26542]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams error. [RT #28265]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3293. [func] nsupdate: list supported type. [RT #28261]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3292. [func] Log messages in the axfr stream at debug 10.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3291. [port] Fixed a build error on systems without ENOTSUP.
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
01e09f486fb36ebba02ca7958e3069a251dd6ce9gary.williams3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3288. [bug] dlz_destroy() function wasn't correctly registered
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams by the DLZ dlopen driver. [RT #28056]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3286. [bug] Managed key maintenance timer could fail to start
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams after 'rndc reconfig'. [RT #26786]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3285. [bug] val-frdataset was incorrectly disassociated in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams proveunsecure after calling startfinddlvsep.
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3284. [bug] Address race conditions with the handling of
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3283. [bug] Raw zones with with more than 512 records in a RRset
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams failed to load. [RT #27863]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3282. [bug] Restrict the TTL of NS RRset to no more than that
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams of the old NS RRset when replacing it.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams [RT #27792] [RT #27884]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3281. [bug] SOA refresh queries could be treated as cancelled
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams despite succeeding over the loopback interface.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3280. [bug] Potential double free of a rdataset on out of memory
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams with DNS64. [RT #27762]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3279. [bug] Hold a internal reference to the zone while performing
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams a asynchronous load. Address potential memory leak
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams if the asynchronous is cancelled. [RT #27750]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3278. [bug] Make sure automatic key maintenance is started
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams when "auto-dnssec maintain" is turned on during
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams "rndc reconfig". [RT #26805]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3276. [bug] win32: ns_os_openfile failed to return NULL on
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams safe_open failure. [RT #27696]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams option had been misspelled as '-clear'. (To avoid
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams future confusion, both options now work.) [RT #27173]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3274. [placeholder]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3273. [bug] AAAA responses could be returned in the additional
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams section even when filter-aaaa-on-v4 was in use.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3272. [func] New "rndc zonestatus" command prints information
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams about the specified zone. [RT #21671]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3271. [port] darwin: mksymtbl is not always stable, loop several
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams times before giving up. mksymtbl was using non
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams portable perl to covert 64 bit hex strings. [RT #27653]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams --- 9.9.0rc2 released ---
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3270. [bug] "rndc reload" didn't reuse existing zones correctly
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams when inline-signing was in use. [RT #27650]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3269. [port] darwin 11 and later now built threaded by default.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams out the earliest expiry time. [RT #23311]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3267. [bug] Memory allocation failures could be mis-reported as
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams unexpected error. New ISC_R_UNSET result code.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3266. [bug] The maximum number of NSEC3 iterations for a
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams DNSKEY RRset was not being properly computed.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3265. [bug] Corrected a problem with lock ordering in the
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams inline-signing code. [RT #27557]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3264. [bug] Automatic regeneration of signatures in an
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams inline-signing zone could stall when the server
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams was restarted. [RT #27344]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3263. [bug] "rndc sync" did not affect the unsigned side of an
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams inline-signing zone. [RT #27337]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3262. [bug] Signed responses were handled incorrectly by RPZ.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3261. [func] RRset ordering now defaults to random. [RT #27174]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3260. [bug] "rrset-order cyclic" could appear not to rotate
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams for some query patterns. [RT #27170/27185]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams --- 9.9.0rc1 released ---
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3259. [bug] named-compilezone: Suppress "dump zone to <file>"
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams message when writing to stdout. [RT #27109]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3258. [test] Add "forcing full sign with unreadable keys" test.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3257. [bug] Do not generate a error message when calling fsync()
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams in a pipe or socket. [RT #27109]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3255. [func] No longer require that a empty zones be explicitly
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams enabled or that a empty zone is disabled for
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams RFC 1918 empty zones to be configured. [RT #27139]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams too long. [RT #26956]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3252. [bug] When master zones using inline-signing were
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams updated while the server was offline, the source
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams zone could fall out of sync with the signed
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams copy. They can now resynchronize. [RT #26676]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams memory dns_sdlz_putrr() can allocate per record to
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams prevent run away memory consumption on ISC_R_NOSPACE.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3250. [func] 'configure --enable-developer'; turn on various
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams configure options, normally off by default, that
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams we want developers to build and test with. [RT #27103]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3249. [bug] Update log message when saving slave zones files for
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams analysis after load failures. [RT #27087]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3248. [bug] Configure options --enable-fixed-rrset and
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams --enable-exportlib were incompatible with each
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams other. [RT #27087]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3247. [bug] 'raw' format zones failed to preserve load order
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams breaking 'fixed' sort order. [RT #27087]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3246. [bug] Named failed to start with a empty also-notify list.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3245. [bug] Don't report a error unchanged serials unless there
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams were other changes when thawing a zone with
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams ixfr-fromdifferences. [RT #26845]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3244. [func] Added readline support to nslookup and nsupdate.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams Also simplified nsupdate syntax to make "update"
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams and "prereq" optional. [RT #24659]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams being properly set.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3242. [func] Extended the header of raw-format master files to
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams include the serial number of the zone from which
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams they were generated, if different (as in the case
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams of inline-signing zones). This is to be used in
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams inline-signing zones, to track changes between the
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams unsigned and signed versions of the zone, which may
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams have different serial numbers.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams (Note: raw zonefiles generated by this version of
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams BIND are no longer compatible with prior versions.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams To generate a backward-compatible raw zonefile
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams using dnssec-signzone or named-compilezone, specify
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams output format "raw=0" instead of simply "raw".)
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3241. [bug] Address race conditions in the resolver code.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3240. [bug] DNSKEY state change events could be missed. [RT #26874]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams timestamp. [RT #26883]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3238. [bug] keyrdata was not being reinitialized in
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams lib/dns/rbtdb.c:iszonesecure. [RT#26913]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3237. [bug] dig -6 didn't work with +trace. [RT #26906]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3236. [bug] Backed out changes #3182 and #3202, related to
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams EDNS(0) fallback behavior. [RT #26416]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3235. [func] dns_db_diffx, a extended dns_db_diff which returns
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams the generated diff and optionally writes it to a
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams journal. [RT #26386]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3232. [bug] Zero zone->curmaster before return in
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams dns_zone_setmasterswithkeys(). [RT #26732]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3231. [bug] named could fail to send a incompressible zone.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3230. [bug] 'dig axfr' failed to properly handle a multi-message
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams axfr with a serial of 0. [RT #26796]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3229. [bug] Fix local variable to struct var assignment
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams found by CLANG warning.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3228. [tuning] Dynamically grow symbol table to improve zone
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams loading performance. [RT #26523]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3227. [bug] Interim fix to make WKS's use of getprotobyname()
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams and getservbyname() self thread safe. [RT #26232]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3226. [bug] Address minor resource leakages. [RT #26624]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams messages. [RT #26507]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3223. [bug] 'task_test privilege_drop' generated false positives.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3222. [cleanup] Replace dns_journal_{get,set}_bitws with
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams dns_journal_{get,set}_sourceserial. [RT #26634]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3221. [bug] Fixed a potential core dump on shutdown due to
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams referencing fetch context after it's been freed.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams --- 9.9.0b2 released ---
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams could fail to set the database version correctly,
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams causing an assertion failure. [RT #26180]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3219. [bug] Disable NOEDNS caching following a timeout.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3218. [security] Cache lookup could return RRSIG data associated with
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams nonexistent records, leading to an assertion
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams failure. [RT #26590]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3214. [func] Add 'named -U' option to set the number of UDP
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams listener threads per interface. [RT #26485]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams list prior to adding a reference to it leading a
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams possible assertion failure. [RT #23219]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams option prints in single-line-per-record format.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3210. [bug] Canceling the oldest query due to recursive-client
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams overload could trigger an assertion failure. [RT #26463]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3208. [bug] 'dig -y' handle unknown tsig algorithm better.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3206. [cleanup] Add ISC information to log at start time. [RT #25484]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3205. [func] Upgrade dig's defaults to better reflect modern
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams nameserver behavior. Enable "dig +adflag" and
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams "dig +edns=0" by default. Enable "+dnssec" when
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams running "dig +trace". [RT #23497]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3204. [bug] When a master server that has been marked as
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams unreachable sends a NOTIFY, mark it reachable
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams again. [RT #25960]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3203. [bug] Increase log level to 'info' for validation failures
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams from expired or not-yet-valid RRSIGs. [RT #21796]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3202. [bug] NOEDNS caching on timeout was too aggressive.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3201. [func] 'rndc querylog' can now be given an on/off parameter
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams instead of only being used as a toggle. [RT #18351]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3200. [doc] Some rndc functions were undocumented or were
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams missing from 'rndc -h' output. [RT #25555]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3199. [func] When logging client information, include the name
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams being queried. [RT #25944]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3198. [doc] Clarified that dnssec-settime can alter keyfile
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams permissions. [RT #24866]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3197. [bug] Don't try to log the filename and line number when
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams the config parser can't open a file. [RT #22263]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3196. [bug] nsupdate: return nonzero exit code when target zone
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams doesn't exist. [RT #25783]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3195. [cleanup] Silence "file not found" warnings when loading
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams managed-keys zone. [RT #26340]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3194. [doc] Updated RFC references in the 'empty-zones-enable'
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams documentation. [RT #25203]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3192. [bug] A query structure could be used after being freed.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3191. [bug] Print NULL records using "unknown" format. [RT #26392]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3190. [bug] Underflow in error handling in isc_mutexblock_init.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3189. [test] Added a summary report after system tests. [RT #25517]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3188. [bug] zone.c:zone_refreshkeys() could fail to detach
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams references correctly when errors occurred, causing
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams a hang on shutdown. [RT #26372]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3187. [port] win32: support for Visual Studio 2008. [RT #26356]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams --- 9.9.0b1 released ---
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3186. [bug] Version/db mis-match in rpz code. [RT #26180]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3185. [func] New 'rndc signing' option for auto-dnssec zones:
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams - 'rndc signing -list' displays the current
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams state of signing operations
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams - 'rndc signing -clear' clears the signing state
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams records for keys that have fully signed the zone
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams - 'rndc signing -nsec3param' sets the NSEC3
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams parameters for the zone
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams The 'rndc keydone' syntax is removed. [RT #23729]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3184. [bug] named had excessive cpu usage when a redirect zone was
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams configured. [RT #26013]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3182. [bug] Auth servers behind firewalls which block packets
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams greater than 512 bytes may cause other servers to
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams perform poorly. Now, adb retains edns information
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams and caches noedns servers. [RT #23392/24964]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3181. [func] Inline-signing is now supported for master zones.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3180. [func] Local copies of slave zones are now saved in raw
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams format by default, to improve startup performance.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams 'masterfile-format text;' can be used to override
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams the default, if desired. [RT #25867]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3179. [port] kfreebsd: build issues. [RT #26273]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3178. [bug] A race condition introduced by change #3163 could
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams cause an assertion failure on shutdown. [RT #26271]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3177. [func] 'rndc keydone', remove the indicator record that
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams named has finished signing the zone with the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams corresponding key. [RT #26206]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3176. [doc] Corrected example code and added a README to the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams sample external DLZ module in contrib/dlz/example.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3175. [bug] Fix how DNSSEC positive wildcard responses from a
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams NSEC3 signed zone are validated. Stop sending a
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams unnecessary NSEC3 record when generating such
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams responses. [RT #26200]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3174. [bug] Always compute to revoked key tag from scratch.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3173. [port] Correctly validate root DS responses. [RT #25726]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3172. [port] darwin 10.* and freebsd [89] are now built threaded by
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3171. [bug] Exclusively lock the task when adding a zone using
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams 'rndc addzone'. [RT #25600]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams --- 9.9.0a3 released ---
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3170. [func] RPZ update:
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - fix precedence among competing rules
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - improve ARM text including documenting rule precedence
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - try to rewrite CNAME chains until first hit
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - new "rpz" logging channel
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - RDATA for CNAME rules can include wildcards
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - replace "NO-OP" named.conf policy override with
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams "PASSTHRU" and add "DISABLED" override ("NO-OP"
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams is still recognized)
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3169. [func] Catch db/version mis-matches when calling dns_db_*().
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3168. [bug] Nxdomain redirection could trigger an assert with
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams a ANY query. [RT #26017]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3167. [bug] Negative answers from forwarders were not being
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams correctly tagged making them appear to not be cached.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3166. [bug] Upgrading a zone to support inline-signing failed.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3165. [bug] dnssec-signzone could generate new signatures when
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams resigning, even when valid signatures were already
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams present. [RT #26025]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3164. [func] Enable DLZ modules to retrieve client information,
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams so that responses can be changed depending on the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams source address of the query. [RT #25768]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3163. [bug] Use finer-grained locking in client.c to address
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams concurrency problems with large numbers of threads.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3162. [test] start.pl: modified to allow for "named.args" in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams ns*/ subdirectory to override stock arguments to
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams named. Largely from RT#26044, but no separate ticket.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3161. [bug] zone.c:del_sigs failed to always reset rdata leading
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams assertion failures. [RT #25880]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3160. [bug] When printing out a NSEC3 record in multiline form
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams the newline was not being printed causing type codes
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams to be run together. [RT #25873]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3159. [bug] On some platforms, named could assert on startup
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams when running in a chrooted environment without
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams /proc. [RT #25863]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3158. [bug] Recursive servers would prefer a particular UDP
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams socket instead of using all available sockets.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams the config file before pausing the server. [RT #21373]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3156. [placeholder]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams --- 9.9.0a2 released ---
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3155. [bug] Fixed a build failure when using contrib DLZ
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams drivers (e.g., mysql, postgresql, etc). [RT #25710]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3154. [bug] Attempting to print an empty rdataset could trigger
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams an assert. [RT #25452]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3153. [func] Extend request-ixfr to zone level and remove the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams side effect of forcing an AXFR. [RT #25156]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3152. [cleanup] Some versions of gcc and clang failed due to
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams incorrect use of __builtin_expect. [RT #25183]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3151. [bug] Queries for type RRSIG or SIG could be handled
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams incorrectly. [RT #21050]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3150. [func] Improved startup and reconfiguration time by
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams enabling zones to load in multiple threads. [RT #25333]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3149. [placeholder]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3148. [bug] Processing of normal queries could be stalled when
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams forwarding a UPDATE message. [RT #24711]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3147. [func] Initial inline signing support. [RT #23657]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams --- 9.9.0a1 released ---
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3145. [test] Capture output of ATF unit tests in "./atf.out" if
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams there were any errors while running them. [RT #25527]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3144. [bug] dns_dbiterator_seek() could trigger an assert when
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams used with a nonexistent database node. [RT #25358]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3143. [bug] Silence clang compiler warnings. [RT #25174]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3142. [bug] NAPTR is class agnostic. [RT #25429]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3141. [bug] Silence spurious "zone serial (0) unchanged" messages
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams associated with empty zones. [RT #25079]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3140. [func] New command "rndc flushtree <name>" clears the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams specified name from the server cache along with
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams all names under it. [RT #19970]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams for the hashing algorithms (md5, sha1 - sha512, and
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams their hmac counterparts). [RT #25067]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3138. [bug] Address memory leaks and out-of-order operations when
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams shutting named down. [RT #25210]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3137. [func] Improve hardware scalability by allowing multiple
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams worker threads to process incoming UDP packets.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams This can significantly increase query throughput
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams on some systems. [RT #22992]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3136. [func] Add RFC 1918 reverse zones to the list of built-in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams empty zones switched on by the 'empty-zones-enable'
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams option. [RT #24990]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3134. [bug] Improve the accuracy of dnssec-signzone's signing
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams statistics. [RT #16030]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3133. [bug] Change #3114 was incomplete. [RT #24577]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3132. [placeholder]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3131. [tuning] Improve scalability by allocating one zone task
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams per 100 zones at startup time, rather than using a
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams fixed-size task table. [RT #24406]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3130. [func] Support alternate methods for managing a dynamic
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams zone's serial number. Two methods are currently
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams defined using serial-update-method, "increment"
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams (default) and "unixtime". [RT #23849]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3129. [bug] Named could crash on 'rndc reconfig' when
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams allow-new-zones was set to yes and named ACLs
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams were used. [RT #22739]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3128. [func] Inserting an NSEC3PARAM via dynamic update in an
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams auto-dnssec zone that has not been signed yet
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams will cause it to be signed with the specified NSEC3
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams parameters when keys are activated. The
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams NSEC3PARAM record will not appear in the zone until
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams it is signed, but the parameters will be stored.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3127. [bug] 'rndc thaw' will now remove a zone's journal file
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams if the zone serial number has been changed and
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams ixfr-from-differences is not in use. [RT #24687]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3126. [security] Using DNAME record to generate replacements caused
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams RPZ to exit with a assertion failure. [RT #24766]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3125. [security] Using wildcard CNAME records as a replacement with
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams RPZ caused named to exit with a assertion failure.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3124. [bug] Use an rdataset attribute flag to indicate
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams negative-cache records rather than using rrtype 0;
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams this will prevent problems when that rrtype is
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams used in actual DNS packets. [RT #24777]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3123. [security] Change #2912 exposed a latent flaw in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams dns_rdataset_totext() that could cause named to
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams crash with an assertion failure. [RT #24777]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3121. [security] An authoritative name server sending a negative
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams response containing a very large RRset could
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams trigger an off-by-one error in the ncache code
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams and crash named. [RT #24650]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3120. [bug] Named could fail to validate zones listed in a DLV
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams that validated insecure without using DLV and had
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams DS records in the parent zone. [RT #24631]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3119. [bug] When rolling to a new DNSSEC key, a private-type
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams record could be created and never marked complete.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3118. [bug] nsupdate could dump core on shutdown when using
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams SIG(0) keys. [RT #24604]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3117. [cleanup] Remove doc and parser references to the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams never-implemented 'auto-dnssec create' option.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3116. [func] New 'dnssec-update-mode' option controls updates
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams of DNSSEC records in signed dynamic zones. Set to
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams 'no-resign' to disable automatic RRSIG regeneration
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams while retaining the ability to sign new or changed
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams data. [RT #24533]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3115. [bug] Named could fail to return requested data when
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams following a CNAME that points into the same zone.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3114. [bug] Retain expired RRSIGs in dynamic zones if key is
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams inactive and there is no replacement key. [RT #23136]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3113. [doc] Document the relationship between serial-query-rate
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams and NOTIFY messages.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3112. [doc] Add missing descriptions of the update policy name
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams types "ms-self", "ms-subdomain", "krb5-self" and
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams "krb5-subdomain", which allow machines to update
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams their own records, to the BIND 9 ARM.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3111. [bug] Improved consistency checks for dnssec-enable and
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams dnssec-validation, added test cases to the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams checkconf system test. [RT #24398]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3110. [bug] dnssec-signzone: Wrong error message could appear
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams when attempting to sign with no KSK. [RT #24369]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3109. [func] The also-notify option now uses the same syntax
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams as a zone's masters clause. This means it is
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams now possible to specify a TSIG key to use when
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams sending notifies to a given server, or to include
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams an explicit named masters list in an also-notfiy
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams statement. [RT #23508]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3108. [cleanup] dnssec-signzone: Clarified some error and
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams code (use -P instead). [RT #20852]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3107. [bug] dnssec-signzone: Report the correct number of ZSKs
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams when using -x. [RT #20852]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3106. [func] When logging client requests, include the name of
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams the TSIG key if any. [RT #23619]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3105. [bug] GOST support can be suppressed by "configure
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams --without-gost" [RT #24367]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3104. [bug] Better support for cross-compiling. [RT #24367]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3103. [bug] Configuring 'dnssec-validation auto' in a view
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams instead of in the options statement could trigger
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams an assertion failure in named-checkconf. [RT #24382]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3102. [func] New 'dnssec-loadkeys-interval' option configures
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams how often, in minutes, to check the key repository
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams for updates when using automatic key maintenance.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams Default is every 60 minutes (formerly hard-coded
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams to 12 hours). [RT #23744]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3101. [bug] Zones using automatic key maintenance could fail
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams to check the key repository for updates. [RT #23744]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3100. [security] Certain response policy zone configurations could
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams trigger an INSIST when receiving a query of type
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams RRSIG. [RT #24280]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3099. [test] "dlz" system test now runs but gives R:SKIPPED if
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams not compiled with --with-dlz-filesystem. [RT #24146]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3098. [bug] DLZ zones were answering without setting the AA bit.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3097. [test] Add a tool to test handling of malformed packets.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3096. [bug] Set KRB5_KTNAME before calling log_cred() in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams dst_gssapi_acceptctx(). [RT #24004]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3095. [bug] Handle isolated reserved ports in the port range.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3094. [doc] Expand dns64 documentation.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3092. [bug] Signatures for records at the zone apex could go
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams stale due to an incorrect timer setting. [RT #23769]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3091. [bug] Fixed a bug in which zone keys that were published
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams and then subsequently activated could fail to trigger
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams automatic signing. [RT #22911]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3090. [func] Make --with-gssapi default [RT #23738]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3089. [func] dnssec-dsfromkey now supports reading keys from
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams standard input "dnssec-dsfromkey -f -". [RT# 20662]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams and add setup.sh in order to resolve changing
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams named.conf issue. [RT #23687]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3087. [bug] DDNS updates using SIG(0) with update-policy match
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams type "external" could cause a crash. [RT #23735]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3086. [bug] Running dnssec-settime -f on an old-style key will
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams now force an update to the new key format even if no
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams other change has been specified, using "-P now -A now"
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams as default values. [RT #22474]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3085. [func] New '-R' option in dnssec-signzone forces removal
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams of signatures which have not yet expired but
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams were generated by a key that no longer exists.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3084. [func] A new command "rndc sync" dumps pending changes in
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams a dynamic zone to disk; "rndc sync -clean" also
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams removes the journal file after syncing. Also,
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams "rndc freeze" no longer removes journal files.
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3083. [bug] NOTIFY messages were not being sent when generating
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams a NSEC3 chain incrementally. [RT #23702]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3082. [port] strtok_r is threads only. [RT #23747]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3081. [bug] Failure of DNAME substitution did not return
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams YXDOMAIN. [RT #23591]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3079. [bug] Handle isc_event_allocate failures in t_tasks.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3078. [func] Added a new include file with function typedefs
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams for the DLZ "dlopen" driver. [RT #23629]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3077. [bug] zone.c:zone_refreshkeys() incorrectly called
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams dns_zone_attach(), use zone->irefs instead. [RT #23303]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams dnssec-keyfromlabel sets the default TTL of the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams key. When possible, automatic signing will use that
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams TTL when the key is published. [RT #23304]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams timestamp when determining which keys are active.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3074. [bug] Make the adb cache read through for zone data and
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams glue learn for zone named is authoritative for.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3073. [bug] managed-keys changes were not properly being recorded.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3071. [bug] has_nsec could be used uninitialized in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams update.c:next_active. [RT #20256]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3070. [bug] dnssec-signzone potential NULL pointer dereference.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3069. [cleanup] Silence warnings messages from clang static analysis.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3068. [bug] Named failed to build with a OpenSSL without engine
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams support. [RT #23473]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3067. [bug] ixfr-from-differences {master|slave}; failed to
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams select the master/slave zones. [RT #23580]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3066. [func] The DLZ "dlopen" driver is now built by default,
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams no longer requiring a configure option. To
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams disable it, use "configure --without-dlopen".
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams Driver also supported on win32. [RT #23467]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3065. [bug] RRSIG could have time stamps too far in the future.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3064. [bug] powerpc: add sync instructions to the end of atomic
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams operations. [RT #23469]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3062. [func] Made several changes to enhance human readability
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams of DNSSEC data in dig output and in generated
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - DNSKEY record comments are more verbose, no
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams longer used in multiline mode only
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - multiline RRSIG records reformatted
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - multiline output mode for NSEC3PARAM records
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - "dig +norrcomments" suppresses DNSKEY comments
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams - "dig +split=X" breaks hex/base64 records into
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams fields of width X; "dig +nosplit" disables this.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3061. [func] New option "dnssec-signzone -D", only write out
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams generated DNSSEC records. [RT #22896]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3060. [func] New option "dnssec-signzone -X <date>" allows
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams specification of a separate expiration date
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3059. [test] Added a regression test for change #3023.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3058. [bug] Cause named to terminate at startup or rndc reconfig/
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams reload to fail, if a log file specified in the conf
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams file isn't a plain file. [RT #22771]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3057. [bug] "rndc secroots" would abort after the first error
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams and so could miss some views. [RT #23488]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3056. [func] Added support for URI resource record. [RT #23386]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3055. [placeholder]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3054. [bug] Added elliptic curve support check in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams GOST OpenSSL engine detection. [RT #23485]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3053. [bug] Under a sustained high query load with a finite
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams max-cache-size, it was possible for cache memory
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams to be exhausted and not recovered. [RT #23371]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3052. [test] Fixed last autosign test report. [RT #23256]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3051. [bug] NS records obscure DNAME records at the bottom of the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams zone if both are present. [RT #23035]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3050. [bug] The autosign system test was timing dependent.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams Wait for the initial autosigning to complete
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams before running the rest of the test. [RT #23035]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3049. [bug] Save and restore the gid when creating creating
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams named.pid at startup. [RT #23290]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3048. [bug] Fully separate view key management. [RT #23419]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3047. [bug] DNSKEY NODATA responses not cached fixed in
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams validator.c. Tests added to dnssec system test.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3046. [bug] Use RRSIG original TTL to compute validated RRset
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams and RRSIG TTL. [RT #23332]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3045. [removed] Replaced by change #3050.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3044. [bug] Hold the socket manager lock while freeing the socket.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3043. [test] Merged in the NetBSD ATF test framework (currently
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams version 0.12) for development of future unit tests.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams Use configure --with-atf to build ATF internally
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams or configure --with-atf=prefix to use an external
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams copy. [RT #23209]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3042. [bug] dig +trace could fail attempting to use IPv6
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams addresses on systems with only IPv4 connectivity.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3041. [bug] dnssec-signzone failed to generate new signatures on
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams ttl changes. [RT #23330]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3040. [bug] Named failed to validate insecure zones where a node
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams with a CNAME existed between the trust anchor and the
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams top of the zone. [RT #23338]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3039. [func] Redirect on NXDOMAIN support. [RT #23146]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3038. [bug] Install <dns/rpz.h>. [RT #23342]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3037. [doc] Update COPYRIGHT to contain all the individual
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams copyright notices that cover various parts.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3036. [bug] Check built-in zone arguments to see if the zone
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams is re-usable or not. [RT #21914]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3035. [cleanup] Simplify by using strlcpy. [RT #22521]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3029. [bug] isc_netaddr_format() handle a zero sized buffer.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams catch NULL pointer dereferences before they happen.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3026. [bug] lib/isc/httpd.c: check that we have enough space
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams after calling grow_headerspace() and if not
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams re-call grow_headerspace() until we do. [RT #22521]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3025. [bug] Fixed a possible deadlock due to zone resigning.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3024. [func] RTT Banding removed due to minor security increase
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams but major impact on resolver latency. [RT #23310]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3023. [bug] Named could be left in an inconsistent state when
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams receiving multiple AXFR response messages that were
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams not all TSIG-signed. [RT #23254]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3021. [bug] Change #3010 was incomplete. [RT #22296]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3020. [bug] auto-dnssec failed to correctly update the zone when
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams changing the DNSKEY RRset. [RT #23232]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3019. [test] Test: check apex NSEC3 records after adding DNSKEY
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams record via UPDATE. [RT #23229]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3018. [bug] Named failed to check for the "none;" acl when deciding
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams if a zone may need to be re-signed. [RT #23120]
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3017. [doc] dnssec-keyfromlabel -I was not properly documented.
cac8d0253f9bf77a50323a91487c6246013ef4ebgary.williams3016. [bug] rndc usage missing '-b'. [RT #22937]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
a031e6d9877cabf432f5e4f9caafec7f5781198agary.williams3014. [placeholder]
9e400e3d1871744e62389a6c84b841e6e6158d63gary.williams3013. [bug] The DNS64 ttl was not always being set as expected.
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which