CHANGES revision 7d891eaf911e5cab1f704615f8f1ef87c8716f46
1b5a72829324a0d2fa327a270caea8fd02ae8779Mark Andrews3962. [bug] 'dig +topdown +trace +sigchase' address unhandled error
1b5a72829324a0d2fa327a270caea8fd02ae8779Mark Andrews conditions. [RT #34663]
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews3961. [bug] Forwarding of SIG(0) signed UPDATE messages failed with
5e9f6125246cec57771bcdeefed03153d41c23fdMark Andrews BADSIG. [RT #37216]
0451757ad8f7c49a0d3dcdf7fbdd4ea64fcec298Mark Andrews3960. [bug] 'dig +sigchase' could loop forever. [RT #37220]
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews3959. [bug] Updates could be lost if they arrived immediately
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews after a rndc thaw. [RT #37233]
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews3958. [bug] Detect when writeable files have multiple references
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews in named.conf. [RT #37172]
87c7b822b7bcdd8bec7ba1c01937286308b4847cMark Andrews3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews and ECDSAP384SHA384. [RT #37183]
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews3956. [func] Notify messages are now rate limited by notify-rate and
a4b3e51a8f1c9742c0f7d9f7d70f1ad926985145Mark Andrews startup-notify-rate instead of serial-query-rate.
1fc93ac506b0d20ca7b94b6d64e1b8d67516e3c4Mark Andrews3955. [bug] Notify messages due to changes are no longer queued
1fc93ac506b0d20ca7b94b6d64e1b8d67516e3c4Mark Andrews behind startup notify messages. [RT #24454]
661868027cb905052cae5721f2551701b3ed81a3Mark Andrews3954. [bug] Unchecked mutex init in dlz_dlopen_driver.c [RT #37112]
f488b1c311f2fc09ae8e45f7893185e608b17edeMark Andrews3953. [bug] Don't escape semi-colon in TXT fields. [RT #37159]
4bb16c5856e5c6b05ac43c60f9f9376641bdcccfMark Andrews3952. [bug] dns_name_fullcompare failed to set *nlabelsp when the
4bb16c5856e5c6b05ac43c60f9f9376641bdcccfMark Andrews two name pointers were the same. [RT #37176]
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews3951. [func] Add the ability to set yet-to-be-defined EDNS flags
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews to dig (+ednsflags=#). [RT #37142]
ffdfae8e4188c143297393f80f22134503372452Mark Andrews3950. [port] Changed the bin/python Makefile to work around a
ffdfae8e4188c143297393f80f22134503372452Mark Andrews bmake bug in FreeBSD 10 and NetBSD 6. [RT #36993]
471e0563c7965c556c759775882cd3448dae78eaMark Andrews3949. [experimental] Experimental support for draft-andrews-edns1 by sending
471e0563c7965c556c759775882cd3448dae78eaMark Andrews EDNS(1) queries (define DRAFT_ANDREWS_EDNS1 when
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews building). Add support for limiting the EDNS version
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews advertised to servers: server { edns-version 0; };
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews Log the EDNS version received in the query log.
e0557d5e689c2fda8a925d2627c029e947ed2656Mark Andrews3948. [port] solaris: RCVBUFSIZE was too large on Solaris with
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews --with-tuning=large. [RT #37059]
ca18417083383060354c1d2e053c385ac0173d97Mark Andrews3947. [cleanup] Set the executable bit on libraries when using
ca18417083383060354c1d2e053c385ac0173d97Mark Andrews libtool. [RT #36786]
3ca4b8062f845489a9c7e33a4af63cf9c863c1d4Mark Andrews3946. [cleanup] Improved "configure" search for a python interpreter.
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews3945. [bug] Invalid wildcard expansions could be incorrectly
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews accepted by the validator. [RT #37093]
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews3944. [test] Added a regression test for "server-id". [RT #37057]
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews3943. [func] SERVFAIL responses can now be cached for a
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews limited time (configured by "servfail-ttl",
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews default 10 seconds, limit 30). This can reduce
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews the frequency of retries when an authoritative
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews server is known to be failing, e.g., due to
b589c679027849d3dcc34aa8dd4fc78f583be107Mark Andrews ongoing DNSSEC validation problems. [RT #21347]
b589c679027849d3dcc34aa8dd4fc78f583be107Mark Andrews3942. [bug] Wildcard responses from a optout range should be
b589c679027849d3dcc34aa8dd4fc78f583be107Mark Andrews marked as insecure. [RT #37072]
9c1eb2279d715188bf631d98d103f6f81a3c76fbMark Andrews3941. [doc] Include the BIND version number in the ARM. [RT #37067]
edfcbabd60f8479b72d91bcc2d2082a36ace4003Mark Andrews3940. [func] "rndc nta" now allows negative trust anchors to be
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews set for up to one week. [RT #37069]
21f1794606dce19928cf455029e173321f166380Mark Andrews3939. [func] Improve UPDATE forwarding performance by allowing TCP
21f1794606dce19928cf455029e173321f166380Mark Andrews connections to be shared. [RT #37039]
3425cd6803ca599c4c1ebf7cab7399f0b6913842Mark Andrews3938. [placeholder]
0cb25226fba18befbe40156c93845f2fc9bf3524Mark Andrews3937. [func] Added some debug logging to better indicate the
2610933abd985bdea28801c35d740d2cab2f137aMark Andrews conditions causing SERVFAILs when resolving.
7a857bdb6828e75eec5a7080e4670ce199875922Mark Andrews3936. [func] Added authoritative support for the EDNS Client
68aff652083dd10323ea9e9d09cd0539dc7a66f4Mark Andrews Subnet (ECS) option.
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews ACLs can now include "ecs" elements which specify
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews an address or network prefix; if an ECS option is
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews included in a DNS query, then the address encoded
c6385d5575f964e6ee1916679985497f6bac550dMark Andrews in the option will be matched against "ecs" ACL
397f86cf2767cabfb8b4238188187e2abc8a48d1Mark Andrews Also, if an ECS address is included in a query,
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews then it will be used instead of the client source
c7c5645e062287294326fdb92e7e9b831950c4f3Mark Andrews address when matching "geoip" ACL elements. This
c7c5645e062287294326fdb92e7e9b831950c4f3Mark Andrews behavior can be overridden with "geoip-use-ecs no;".
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews (Note: to enable "geoip" ACLs, use "configure
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews --with-geoip". This requires libGeoIP version
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews 1.5.0 or higher.)
f5af519ab547bc80c51387529103e4e852a1171eMark Andrews When "ecs" or "geoip" ACL elements are used to
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews select a view for a query, the response will include
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews an ECS option to indicate which client network the
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews answer is valid for.
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews (Thanks to Vincent Bernat.) [RT #36781]
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews3935. [bug] "geoip asnum" ACL elements would not match unless
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews the full organization name was specified. They
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews can now match against the AS number alone (e.g.,
dd3f0d86f8f0def6bdb7abb5774aa4b9bb0e4a96Mark Andrews AS1234). [RT #36945]
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews3934. [bug] Catch bad 'sit-secret' in named-checkconf. Improve
8ff31bab2f51b171a8eab3a0b8415c64529e116eMark Andrews sit-secret documentation. [RT #36980]
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews3933. [bug] Corrected the implementation of dns_rdata_casecompare()
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews for the HIP rdata type. [RT #36911]
806c235ecf533b98d068b3f8df9d7abbe1e30cf9Mark Andrews3932. [test] Improved named-checkconf tests. [RT #36911]
935000aa6e2b9d08f363b2e698a258a458a5a7cfMark Andrews3931. [cleanup] Cleanup how dlz grammar is defined. [RT #36879]
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews3930. [bug] "rndc nta -r" could cause a server hang if the
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews NTA was not found. [RT #36909]
2fd63cf561135572339d4e2ff0c06695e3dcf1baMark Andrews3929. [bug] 'host -a' needed to clear idnoptions. [RT #36963]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews3928. [test] Improve rndc system test. [RT #36898]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews3927. [bug] dig: report PKCS#11 error codes correctly when
8ca42f6318be756354b70260050132545aa680d3Mark Andrews compiled with --enable-native-pkcs11. [RT #36956]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews3926. [doc] Added doc for geoip-directory. [RT #36877]
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews3925. [bug] DS lookup of RFC 1918 empty zones failed. [RT #36917]
4cb69e7c919cc43b16852016588af714bc421da3Mark Andrews3924. [bug] Improve 'rndc addzone' error reporting. [RT #35187]
ea6fe0d54f36754c195b3b8dac47c81f7993677eMark Andrews3923. [bug] Sanity check the xml2-config output. [RT #22246]
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews3922. [bug] When resigning, dnssec-signzone was removing
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews all signatures from delegation nodes. It now
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews retains DS and (if applicable) NSEC signatures.
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews3921. [bug] AD was inappropriately set on RPZ responses. [RT #36833]
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews3920. [doc] Added doc for masterfile-style. [RT #36823]
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews3919. [bug] dig: continue to next line if a address lookup fails
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews in batch mode. [RT #36755]
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews3918. [doc] Update check-spf documentation. [RT #36910]
b500de3be9ba5318da157364bf9fbbda5f88f203Mark Andrews3917. [bug] dig, nslookup and host now continue on names that are
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews too long after applying a search list elements.
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews3916. [contrib] zone2sqlite checked wrong result code. Address
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews compiler warnings. [RT #36931]
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews3915. [bug] Address a assertion if a route event arrived while
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews shutting down. [RT #36887]
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews3914. [bug] Allow the URI target and CAA value fields to
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews be zero length. [RT #36737]
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews3913. [bug] Address race issue in dispatch. [RT #36731]
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews3912. [bug] Address some unrecoverable lookup failures. [RT #36330]
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews3911. [func] Implement EDNS EXPIRE option client side, allowing
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews a slave server to set the expiration timer correctly
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews when transferring zone data from another slave
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews server. [RT #35925]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3910. [bug] Fix races to free event during shutdown. [RT #36720]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3909. [bug] When computing the number of elements required for a
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews acl count_acl_elements could have a short count leading
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews to a assertion failure. Also zero out new acl elements
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews in dns_acl_merge. [RT #36675]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3908. [bug] rndc now differentiates between a zone in multiple
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews views and a zone that doesn't exist at all. [RT #36691]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3907. [cleanup] Alphabetize rndc help. [RT #36683]
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews3906. [protocol] Update URI record format to comply with
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews draft-faltstrom-uri-08. [RT #36642]
463fc8f9d61e07613486e64b4b7b3f924ea2b25cMark Andrews3905. [bug] Address deadlock between view.c and adb.c. [RT #36341]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3904. [func] Add the RPZ SOA to the additional section. [RT36507]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3903. [bug] Improve the accuracy of DiG's reported round trip
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews time. [RT 36611]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3902. [bug] liblwres wasn't handling link-local addresses in
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews nameserver clauses in resolv.conf. [RT #36039]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3901. [protocol] Added support for CAA record type (RFC 6844).
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews3900. [bug] Fix a crash in PostgreSQL DLZ driver. [RT #36637]
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews3899. [bug] "request-ixfr" is only applicable to slave and redirect
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews zones. [RT #36608]
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews3898. [bug] Too small a buffer in tohexstr() calls in test code.
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews3897. [bug] RPZ summary information was not properly being updated
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews after a AXFR resulting in changes sometimes being
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews ignored. [RT #35885]
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews3896. [bug] Address performance issues with DSCP code on some
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews platforms. [RT #36534]
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews3895. [func] Add the ability to set the DSCP code point to dig.
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews3894. [bug] Buffers in isc_print_vsnprintf were not properly
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews initialized leading to potential overflows when
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews printing out quad values. [RT #36505]
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews3893. [bug] Peer DSCP values could be returned without being set.
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews3892. [bug] Setting '-t aaaa' in .digrc had unintended side
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews effects. [RT #36452]
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews3891. [bug] Use ${INSTALL_SCRIPT} rather than ${INSTALL_PROGRAM}
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews to install python programs.
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews3890. [bug] RRSIG sets that were not loaded in a single transaction
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews at start up where not being correctly added to
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews re-signing heaps. [RT #36302]
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews3889. [port] hurd: configure fixes as per:
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746540
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews3888. [func] 'rndc status' now reports the number of automatic
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews zones. [RT #36015]
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews3887. [cleanup] Make all static symbols in rbtdb64 end in "64" so
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews they are easier to use in a debugger. [RT #36373]
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews3886. [bug] rbtdb_write_header should use a once to initialize
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews FILE_VERSION. [RT #36374]
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews3885. [port] Use 'open()' rather than 'file()' to open files in
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews3884. [protocol] Add CDS and CDNSKEY record types. [RT #36333]
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews3883. [placeholder]
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews3882. [func] By default, negative trust anchors will be tested
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews periodically to see whether data below them can be
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews validated, and if so, they will be allowed to
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews expire early. The "rndc nta -force" option
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews overrides this behavior. The default NTA lifetime
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews and the recheck frequency can be configured by the
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews "nta-lifetime" and "nta-recheck" options. [RT #36146]
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews3881. [bug] Address memory leak with UPDATE error handling.
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews3880. [test] Update ans.pl to work with new TSIG support in
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews Net::DNS; add additional Net::DNS version prerequisite
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews checks. [RT #36327]
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews3879. [func] Add version printing option to various BIND utilities.
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews3878. [bug] Using the incorrect filename for a DLZ module
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews caused a segmentation fault on startup. [RT #36286]
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews3877. [bug] Inserting and deleting parent and child nodes
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews in response policy zones could trigger an assertion
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews failure. [RT #36272]
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews3876. [bug] Improve efficiency of DLZ redirect zones by
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews suppressing unnecessary database lookups. [RT #35835]
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews3875. [cleanup] Clarify log message when unable to read private
d92770e851ebbc1005b3bf121e3c9f13b67a3f42Mark Andrews key files. [RT #24702]
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews3874. [test] Check that only "check-names master" is needed for
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews updates to be accepted.
90295f915c883d1aeeda856f518584d4219a704aMark Andrews3873. [protocol] Only warn for SPF without TXT spf record. [RT #36210]
90295f915c883d1aeeda856f518584d4219a704aMark Andrews3872. [bug] Address issues found by static analysis. [RT #36209]
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews3871. [bug] Don't publish an activated key automatically before
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews its publish time. [RT #35063]
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews3870. [func] Updated the random number generator used in
99776003811a413457a2c35a808ad860df877d24Mark Andrews the resolver to use the updated ChaCha based one
99776003811a413457a2c35a808ad860df877d24Mark Andrews (similar to OpenBSD's changes). Also moved the
99776003811a413457a2c35a808ad860df877d24Mark Andrews RNG to libisc and added unit tests for it.
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews3869. [doc] Document that in-view zones cannot be used for
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews response policy zones. [RT #35941]
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews3868. [bug] isc_mem_setwater incorrectly cleared hi_called
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews potentially leaving over memory cleaner running.
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews3867. [func] "rndc nta" can now be used to set a temporary
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews negative trust anchor, which disables DNSSEC
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews validation below a specified name for a specified
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews period of time (not exceeding 24 hours). This
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews can be used when validation for a domain is known
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews to be failing due to a configuration error on
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews the part of the domain owner rather than a
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews spoofing attack. [RT #29358]
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉3866. [bug] Named could die on disk full in generate_session_key.
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews3865. [test] Improved testability of the red-black tree
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews implementation and added unit tests. [RT #35904]
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉3864. [bug] RPZ didn't work well when being used as forwarder.
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉3863. [bug] The "E" flag was missing from the query log as a
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉 unintended side effect of code rearrangement to
2945ac15af547df0268e449252902ead599e2451Mark Andrews support EDNS EXPIRE. [RT #36117]
2945ac15af547df0268e449252902ead599e2451Mark Andrews3862. [cleanup] Return immediately if we are not going to log the
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉 message in ns_client_dumpmessage.
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉3861. [security] Missing isc_buffer_availablelength check results
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews in a REQUIRE assertion when printing out a packet
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews (CVE-2014-3859). [RT #36078]
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews3860. [bug] ioctl(DP_POLL) array size needs to be determined
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews at run time as it is limited to {OPEN_MAX}.
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews3859. [placeholder]
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews3858. [bug] Disable GCC 4.9 "delete null pointer check".
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews3857. [bug] Make it harder for a incorrect NOEDNS classification
ebbbd34776d668bb2d7cf100b58a6f647c431c03Mark Andrews to be made. [RT #36020]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3856. [bug] Configuring libjson without also configuring libxml
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews resulted in a REQUIRE assertion when retrieving
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews statistics using json. [RT #36009]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3855. [bug] Limit smoothed round trip time aging to no more than
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews once a second. [RT #32909]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3854. [cleanup] Report unrecognized options, if any, in the final
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews configure summary. [RT #36014]
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews3853. [cleanup] Refactor dns_rdataslab_fromrdataset to separate out
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews the handling of a rdataset with no records. [RT #35968]
550085fed1d0af54ba5b2f588898afec158195deMark Andrews3852. [func] Increase the default number of clients available
550085fed1d0af54ba5b2f588898afec158195deMark Andrews for servicing lightweight resolver queries, and
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews make them configurable via the "lwres-tasks" and
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews "lwres-clients" options. (Thanks to Tomas Hozza.)
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉3851. [func] Allow libseccomp based system-call filtering
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 on Linux; use "configure --enable-seccomp" to
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 turn it on. Thanks to Loganaden Velvindron
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 of AFRINIC for the contribution. [RT #35347]
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews3850. [bug] Disabling forwarding could trigger a REQUIRE assertion.
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews3849. [doc] Alphabetized dig's +options. [RT #35992]
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews3848. [bug] Adjust 'statistics-channels specified but not effective'
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews error message to account for JSON support. [RT #36008]
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews3847. [bug] 'configure --with-dlz-postgres' failed to fail when
b6309ed962c4988a314d61742c4fbc4935467d68Mark Andrews there is not support available.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
39fe146f2ab82cb8e49caa319a3345174fa2d69aMark Andrews ixfr query. [RT #35980]
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews3845. [placeholder]
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews3844. [bug] Use the x64 version of the Microsoft Visual C++
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews Redistributable when built for 64 bit Windows.
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3842. [bug] Adjust RRL log-only logging category. [RT #35945]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3840. [port] Check for arc4random_addrandom() before using it;
311e6d00c584f63665bed5dd9aea292402cad8deMark Andrews it's been removed from OpenBSD 5.5. [RT #35907]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3839. [test] Use only posix-compatible shell in system tests.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews3837. [security] A NULL pointer is passed to query_prefetch resulting
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews a REQUIRE assertion failure when a fetch is actually
a6211a2f234767a015a6a30b85d5da087fa907f1Mark Andrews initiated (CVE-2014-3214). [RT #35899]
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews3836. [bug] Address C++ keyword usage in header file.
4c342614f80d867bba23e63795ec6ee79dd6395dMark Andrews3835. [bug] Geoip ACL elements didn't work correctly when
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews referenced via named or nested ACLs. [RT #35879]
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews3834. [bug] The re-signing heaps were not being updated soon enough
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews leading to multiple re-generations of the same RRSIG
4eaf7590c82871637d1380be59000d8684db649cMark Andrews when a zone transfer was in progress. [RT #35273]
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews3833. [bug] Cross compiling was broken due to calling genrandom at
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews build time. [RT #35869]
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews3832. [func] "named -L <filename>" causes named to send log
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews messages to the specified file by default instead
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews of to the system log. (Thanks to Tony Finch.)
08d802a9c6ec4c92f18c6cab1250d55c3f649b38Mark Andrews3831. [cleanup] Reduce logging noise when EDNS state changes occur.
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer3830. [func] When query logging is enabled, log query errors at
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer the same level ('info') as the queries themselves.
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews3829. [func] "dig +ttlunits" causes dig to print TTL values
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews with time-unit suffixes: w, d, h, m, s for
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer weeks, days, hours, minutes, and seconds. (Thanks
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer to Tony Finch.) [RT #35823]
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews3828. [func] "dnssec-signzone -N date" updates serial number
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews to the current date in YYYYMMDDNN format.
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews3827. [placeholder]
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews3825. [bug] Address sign extension bug in isc_regex_validate.
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews3824. [bug] A collision between two flag values could cause
012a2b979e011b13ba0d291c279dc65a167c039eMark Andrews problems with cache cleaning when SIT was enabled.
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews3823. [func] Log the rpz cname target when rewriting. [RT #35667]
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews3822. [bug] Log the correct type of static-stub zones when
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews removing them. [RT #35842]
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews update and transaction support. Thanks to Marty
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews Lee for the contribution. [RT #35656]
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews3820. [func] The DLZ API doesn't pass the database version to
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews the lookup() function; this can cause DLZ modules
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews that allow dynamic updates to mishandle prerequisite
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews checks. This has been corrected by adding a
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews 'dbversion' field to the dns_clientinfo_t
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews structure. [RT #35656]
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews3819. [bug] NSEC3 hashes need to be able to be entered and
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews displayed without padding. This is not a issue for
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews currently defined algorithms but may be for future
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews hash algorithms. [RT #27925]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3818. [bug] Stop lying to the optimizer that 'void *arg' is a
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews constant in isc_event_allocate.
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews3817. [func] The "delve" command is now spelled "delv" to avoid
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews a namespace collision with the Xapian project.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3816. [func] "dig +qr" now reports query size. (Thanks to
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews Tony Finch.) [RT #35822]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews3814. [func] The "masterfile-style" zone option controls the
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews formatting of dumped zone files. Options are
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews "relative" (multiline format) and "full" (one
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews record per line). The default is "relative".
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3813. [func] "host" now recognizes the "timeout", "attempts" and
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews "debug" options when set in /etc/resolv.conf.
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews (Thanks to Adam Tkac at RedHat.) [RT #21885]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3812. [func] Dig now supports sending arbitrary EDNS options from
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews the command line (+ednsopt=code[:value]). [RT #35584]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3811. [func] "serial-update-method date;" sets serial number
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews on dynamic update to today's date in YYYYMMDDNN
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews format. (Thanks to Bradley Forschinger.) [RT #24903]
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews3810. [bug] Work around broken nameservers that fail to ignore
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews unknown EDNS options. [RT #35766]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3809. [doc] Fix SIT and NSID documentation.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3808. [doc] Clean up "prefetch" documentation. [RT #35751]
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews3807. [bug] Fix sign extension bug in dns_name_fromtext when
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews lowercase is set. [RT #35743]
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews3806. [test] Improved system test portability. [RT #35625]
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews3805. [contrib] Added contrib/perftcpdns, a performance testing tool
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews for DNS over TCP. [RT #35710]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews --- 9.10.0rc1 released ---
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews3804. [bug] Corrected a race condition in dispatch.c in which
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews portentry could be reset leading to an assertion
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews failure in socket_search(). (Change #3708
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews addressed the same issue but was incomplete.)
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3803. [bug] "named-checkconf -z" incorrectly rejected zones
33c538015323f4576679e427088372eea614feebMark Andrews using alternate data sources for not having a "file"
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews option. [RT #35685]
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews3802. [bug] Various header files were not being installed.
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews3800. [bug] A pending event on the route socket could cause an
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews assertion failure when shutting down named. [RT #35674]
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews3799. [bug] Improve named's command line error reporting.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews time. [RT #35659]
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews3797. [port] netbsd: geoip support probing was broken. [RT #35642]
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3795. [bug] Make named-checkconf detect raw masterfiles for
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews hint zones and reject them. [RT #35268]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3793. [bug] zone.c:save_nsec3param() could assert when out of
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews memory. [RT #35621]
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews3792. [func] Provide links to the alternate statistics views when
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews displaying in a browser. [RT #35605]
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews3791. [placeholder]
e2cf63c5df79eb7c8b86b6278289883fa760cda5Mark Andrews3790. [bug] Handle broken nameservers that send BADVERS in
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews response to unknown EDNS options. Maintain
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews statistics on BADVERS responses.
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews3789. [bug] Null pointer dereference on rbt creation failure.
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews3788. [bug] dns_peer_getrequestsit was returning request_nsid by
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews --- 9.10.0b2 released ---
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews3787. [bug] The code that checks whether "auto-dnssec" is
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews allowed was ignoring "allow-update" ACLs set at
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews the options or view level. [RT #29536]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3786. [func] Provide more detailed error codes when using
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews native PKCS#11. "pkcs11-tokens" now fails robustly
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews rather than asserting when run against an HSM with
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews an incomplete PKCS#11 API implementation. [RT #35479]
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews3785. [bug] Debugging code dumphex didn't accept arbitrarily long
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews input (only compiled with -DDEBUG). [RT #35544]
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews3784. [bug] Using "rrset-order fixed" when it had not been
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews enabled at compile time caused inconsistent
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews results. It now works as documented, defaulting
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews to cyclic mode. [RT #28104]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3783. [func] "tsig-keygen" is now available as an alternate
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews command name for "ddns-confgen". It generates
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews a TSIG key in named.conf format without comments.
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews3782. [func] Specifying "auto" as the salt when using
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews "rndc signing -nsec3param" causes named to
d73de275987d29627dc11d5bd4a22874a29f7874Mark Andrews generate a 64-bit salt at random. [RT #35322]
8f9664521724eefc39728c092d0bc6be527e1496Mark Andrews3781. [tuning] Use adaptive mutex locks when available; this
8f9664521724eefc39728c092d0bc6be527e1496Mark Andrews has been found to improve performance under load
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews on many systems. "configure --with-locktype=standard"
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews restores conventional mutex locks. [RT #32576]
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews3780. [bug] $GENERATE handled negative numbers incorrectly.
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews3779. [cleanup] Clarify the error message when using an option
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews that was not enabled at compile time. [RT #35504]
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews3778. [bug] Log a warning when the wrong address family is
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews used in "listen-on" or "listen-on-v6". [RT #17848]
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews3777. [bug] EDNS EXPIRE code could dump core when processing
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews DLZ queries. [RT #35493]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3776. [func] "rndc -q" suppresses output from successful
5b1627d469d07c5bfe7f193e3ddd85d0dd6ad4b0Mark Andrews rndc commands. Errors are printed on stderr.
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews3775. [bug] dlz_dlopen driver could return the wrong error
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews code on API version mismatch, leading to a segfault.
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews3774. [func] When using "request-nsid", log the NSID value in
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews printable form as well as hex. [RT #20864]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3773. [func] "host", "nslookup" and "nsupdate" now have
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews options to print the version number and exit.
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews (Based in part on a contribution from Tim Tessier.)
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews messages. [RT #24383]
9549a96654ead15b264c9159d48eb485e4f9db55Mark Andrews3770. [bug] "dig +trace" could fail with an assertion when it
e70b069e3807d5f499dff31eb31c2b3e0e125457Mark Andrews needed to fall back to TCP due to a truncated
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews response. [RT #24660]
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews3769. [doc] Improved documentation of "rndc signing -list".
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews algorithm. [RT #34000]
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews3767. [func] Log explicitly when using rndc.key to configure
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews command channel. [RT #35316]
57e0f58b3fd4cb49a57200c8af9cb58d984d871aMark Andrews3766. [cleanup] Fixed problems with building outside the source
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews tree when using native PKCS#11. [RT #35459]
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews3765. [bug] Fixed a bug in "rndc secroots" that could crash
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews named when dumping an empty keynode. [RT #35469]
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews3764. [bug] The dnssec-keygen/settime -S and -i options
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews (to set up a successor key and set the prepublication
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews interval) were missing from dnssec-keyfromlabel.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3763. [bug] delve: Cache DNSSEC records to avoid the need to
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews re-fetch them when restarting validation. [RT #35476]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3762. [bug] Address build problems with --pkcs11-native +
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews --with-openssl with ECDSA support. [RT #35467]
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
88c2b83cc548a217cc92a2bf75ca1ef1d4237d4fMark Andrews3760. [bug] Improve SIT with native PKCS#11 and on Windows.
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews3759. [port] Enable delve on Windows. [RT #35441]
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews3758. [port] Enable export library APIs on Windows. [RT #35382]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3757. [port] Enable Python tools (dnssec-coverage,
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews dnssec-checkds) to run on Windows. [RT #34355]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3756. [bug] GSSAPI Kerberos realm checking was broken in
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews check_config leading to spurious messages being
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews logged. [RT #35443]
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews --- 9.10.0b1 released ---
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3755. [func] Add stats counters for known EDNS options + others.
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews3754. [cleanup] win32: Installer now places files in the
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews Program Files area rather than system services.
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3752. [bug] Address potential REQUIRE failure if
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews DNS_STYLEFLAG_COMMENTDATA is set when printing out
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews3751. [tuning] The default setting for the -U option (setting
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews the number of UDP listeners per interface) has
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews been adjusted to improve performance. [RT #35417]
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews3750. [experimental] Partially implement EDNS EXPIRE option as described
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews in draft-andrews-dnsext-expire-00. Retrieval of
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews the remaining time until expiry for slave zones
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews is supported.
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews EXPIRE uses an experimental option code (65002),
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews which is subject to change. [RT #35416]
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews3749. [func] "dig +subnet" sends an EDNS client subnet option
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews containing the specified address/prefix when
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews querying. (Thanks to Wilmer van der Gaast.)
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews3748. [test] Use delve to test dns_client interfaces. [RT #35383]
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews3747. [bug] A race condition could lead to a core dump when
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews destroying a resolver fetch object. [RT #35385]
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews3746. [func] New "max-zone-ttl" option enforces maximum
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews TTLs for zones. If loading a zone containing a
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews higher TTL, the load fails. DDNS updates with
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews higher TTLs are accepted but the TTL is truncated.
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews (Note: Currently supported for master zones only;
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews inline-signing slaves will be added.) [RT #38405]
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews3745. [func] "configure --with-tuning=large" adjusts various
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews compiled-in constants and default settings to
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews values suited to large servers with abundant
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews memory. [RT #29538]
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews3744. [experimental] SIT: send and process Source Identity Tokens
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews (similar to DNS Cookies by Donald Eastlake 3rd),
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews which are designed to help clients detect off-path
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews spoofed responses and for servers to identify
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews legitimate clients.
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews SIT uses an experimental EDNS option code (65001),
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews which will be changed to an IANA-assigned value
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews if the experiment is deemed a success.
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews SIT can be enabled via "configure --enable-sit" (or
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews --enable-developer). It is enabled by default in
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews Servers can be configured to send smaller responses
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews to clients that have not identified themselves via
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews SIT. RRL processing has also been updated;
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews legitimate clients are not subject to rate
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews limiting. [RT #35389]
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews3743. [bug] delegation-only flag wasn't working in forward zone
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews declarations despite being documented. This is
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews needed to support turning off forwarding and turning
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews on delegation only at the same name. [RT #35392]
81e302788a444b81231a7cda721548a020ae5660Brian Wellington3742. [port] linux: libcap support: declare curval at start of
81e302788a444b81231a7cda721548a020ae5660Brian Wellington block. [RT #35387]
c00a1eb423623442aff428336bb55590f79013bbMark Andrews3741. [func] "delve" (domain entity lookup and validation engine):
c00a1eb423623442aff428336bb55590f79013bbMark Andrews A new tool with dig-like semantics for performing DNS
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews lookups, with internal DNSSEC validation, using the
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews same resolver and validator logic as named. This
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews allows easy validation of DNSSEC data in environments
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews with untrustworthy resolvers, and assists with
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington troubleshooting of DNSSEC problems. [RT #32406]
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington3740. [contrib] Minor fixes to configure --with-dlz-bdb,
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews3739. [func] Added per-zone stats counters to track TCP and
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews UDP queries. [RT #35375]
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews3737. [bug] 'rndc retransfer' could trigger a assertion failure
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews with inline zones. [RT #35353]
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews3736. [bug] nsupdate: When specifying a server by name,
94323de0419d68fe8c48af7ae14a2f1a1cd274a8Mark Andrews fall back to alternate addresses if the first
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews address for that name is not reachable. [RT #25784]
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews3735. [cleanup] Merged the libiscpk11 library into libisc
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews to simplify dependencies. [RT #35205]
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews3734. [bug] Improve building with libtool. [RT #35314]
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews3733. [func] Improve interface scanning support. Interface
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews information will be automatically updated if the
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews OS supports routing sockets (MacOS, *BSD, Linux).
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews Use "automatic-interface-scan no;" to disable.
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews Add "rndc scan" to trigger a scan. [RT #23027]
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews driver to dump core on 64-bit systems. [RT #35324]
6b610836bc081fdadf7bc7a16ce27f422c6b5638Brian Wellington3731. [func] Added a "no-case-compress" ACL, which causes
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews named to use case-insensitive compression
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews (disabling change #3645) for specified
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews clients. (This is useful when dealing
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews with broken client implementations that
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews use case-sensitive name comparisons,
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews rejecting responses that fail to match the
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews capitalization of the query that was sent.)
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews3730. [cleanup] Added "never" as a synonym for "none" when
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews configuring key event dates in the dnssec tools.
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews3729. [bug] dnssec-keygen could set the publication date
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews incorrectly when only the activation date was
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews specified on the command line. [RT #35278]
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews3728. [doc] Expanded native-PKCS#11 documentation,
faf23095be9a0b5e2696f2b1f1a260af16e9ebeaMark Andrews specifically pkcs11: URI labels. [RT #35287]
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews3727. [func] The isc_bitstring API is no longer used and
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews has been removed from libisc. [RT #35284]
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews3726. [cleanup] Clarified the error message when attempting
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews to configure more than 32 response-policy zones.
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews3725. [contrib] Updated zkt and nslint to newest versions,
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews cleaned up and rearranged the contrib
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews directory, and added a README.
986be654feec852eb9da0d15599f18d0035e569bMark Andrews --- 9.10.0a2 released ---
986be654feec852eb9da0d15599f18d0035e569bMark Andrews3724. [bug] win32: Fixed a bug that prevented dig and
3703473c4a2672af58b4f141e92067e969fd978eBrian Wellington host from exiting properly after completing
3703473c4a2672af58b4f141e92067e969fd978eBrian Wellington a UDP query. [RT #35288]
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews3723. [cleanup] Imported keys are now handled the same way
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews regardless of DNSSEC algorithm. [RT #35215]
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews3722. [bug] Using geoip ACLs in a blackhole statement
86e71d7e8626de37559265f0edac8451bef6d001Andreas Gustafsson could cause a segfault. [RT #35272]
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews3721. [doc] Improved documentation of the EDNS processing
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews enhancements introduced in change #3593. [RT #35275]
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews3720. [bug] Address compiler warnings. [RT #35261]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews3719. [bug] Address memory leak in in peer.c. [RT #35255]
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews probing to see if it is possible to set dscp values
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews on a per packet basis. [RT #35252]
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews3716. [bug] The dns_request code was setting dcsp values when not
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews requested. [RT #35252]
eeede5be4b3ff940b622799a04951e0dc45ad45fAndreas Gustafsson3715. [bug] The region and city databases could fail to
eeede5be4b3ff940b622799a04951e0dc45ad45fAndreas Gustafsson initialize when using some versions of libGeoIP,
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews causing assertion failures when named was
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews configured to use them. [RT #35427]
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews3714. [test] System tests that need to test for cryptography
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews support before running can now use a common
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews "testcrypto.sh" script to do so. [RT #35213]
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews3713. [bug] Save memory by not storing "also-notify" addresses
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews in zone objects that are configured not to send
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews notify requests. [RT #35195]
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews3712. [placeholder]
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews3711. [placeholder]
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews3710. [bug] Address double dns_zone_detach when switching to
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington using automatic empty zones from regular zones.
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington3709. [port] Use built-in versions of strptime() and timegm()
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson on all platforms to avoid portability issues.
0b809e3e23f9f3d9697def5f447aa57d5aeef56bAndreas Gustafsson3708. [bug] Address a portentry locking issue in dispatch.c.
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington on a missing resolv.conf file and initializes the
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington structure as if it had been configured with:
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington nameserver ::1
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington nameserver 127.0.0.1
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington Note: Callers will need to be updated to treat
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington ISC_R_FILENOTFOUND as a qualified success or else
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington they will leak memory. The following code fragment
683f10428e292811317df38fa324f242abbf7384Mark Andrews will work with both old and new versions without
683f10428e292811317df38fa324f242abbf7384Mark Andrews changing the behaviour of the existing code.
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews resconf = NULL;
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews result = irs_resconf_load(mctx, "/etc/resolv.conf",
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews if (result != ISC_SUCCESS) {
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews if (resconf != NULL)
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews irs_resconf_destroy(&resconf);
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington3706. [contrib] queryperf: Fixed a possible integer overflow when
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington printing results. [RT #35182]
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington3705. [func] "configure --enable-native-pkcs11" enables BIND
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington to use the PKCS#11 API for all cryptographic
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington functions, so that it can drive a hardware service
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington module directly without the need to use a modified
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington OpenSSL as intermediary (so long as the HSM's vendor
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington provides a complete-enough implementation of the
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington PKCS#11 interface). This has been tested successfully
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington with the Thales nShield HSM and with SoftHSMv2 from
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews the OpenDNSSEC project. [RT #29031]
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews3703. [func] To improve recursive resolver performance, cache
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews records which are still being requested by clients
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington can now be automatically refreshed from the
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington authoritative server before they expire, reducing
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington or eliminating the time window in which no answer
49f62849e5f80add0ee36b0f9b42cdce8de9748aMark Andrews is available in the cache. See the "prefetch" option
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews for more details. [RT #35041]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews3702. [func] 'dnssec-coverage -l' option specifies a length
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews of time to check for coverage; events further into
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews the future are ignored. 'dnssec-coverage -z'
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews checks only ZSK events, and 'dnssec-coverage -k'
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews checks only KSK events. (Thanks to Peter Palfrader.)
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews3701. [func] named-checkconf can now obscure shared secrets
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews when printing by specifying '-x'. [RT #34465]
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews special URLs http://<server>:<port>/xml/v3/server,
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson /zones, /net, /tasks, /mem, and /status. [RT #35115]
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson3699. [bug] Improvements to statistics channel XSL stylesheet:
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews the stylesheet can now be cached by the browser;
b938d2af619822a8262c86223cad958511e716a9Andreas Gustafsson section headers are omitted from the stats display
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews when there is no data in those sections to be
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews displayed; counters are now right-justified for
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews easier readability. [RT #35117]
77467267d97c781f3f3d050e229a874831e59c3dMark Andrews3698. [cleanup] Replaced all uses of memcpy() with memmove().
3036da01090c0d1e11cddc26af16630d6d9c1f39Mark Andrews3697. [bug] Handle "." as a search list element when IDN support
84d8c0166ddc63ad5ce64e7d354553de38b9aabdAndreas Gustafsson is enabled. [RT #35133]
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews3696. [bug] dig failed to handle AXFR style IXFR responses which
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews span multiple messages. [RT #35137]
84d8c0166ddc63ad5ce64e7d354553de38b9aabdAndreas Gustafsson3695. [bug] Address a possible race in dispatch.c. [RT #35107]
58d943711575376b05b3b3b303922a8a9d7ce9c1Mark Andrews3694. [bug] Warn when a key-directory is configured for a zone,
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews but does not exist or is not a directory. [RT #35108]
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson3693. [security] memcpy was incorrectly called with overlapping
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson ranges resulting in malformed names being generated
23fb770906bf1fd98210f16ad660078274242963Mark Andrews on some platforms. This could cause INSIST failures
23fb770906bf1fd98210f16ad660078274242963Mark Andrews when serving NSEC3 signed zones (CVE-2014-0591).
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington was no data at the node. [RT #35080]
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews3691. [contrib] Address null pointer dereference in LDAP and
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews MySQL DLZ modules.
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews3690. [bug] Iterative responses could be missed when the source
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews port for an upstream query was the same as the
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews listener port (53). [RT #34925]
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson3689. [bug] Fixed a bug causing an insecure delegation from one
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson static-stub zone to another to fail with a broken
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson trust chain. [RT #35081]
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews3688. [bug] loadnode could return a freed node on out of memory.
0d6f70f1dbf77cf10e0bae8683c741f5924f6afeMark Andrews3687. [bug] Address null pointer dereference in zone_xfrdone.
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews3686. [func] "dnssec-signzone -Q" drops signatures from keys
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews that are still published but no longer active.
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews3685. [bug] "rndc refresh" didn't work correctly with slave
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson zones using inline-signing. [RT #35105]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3684. [bug] The list of included files would grow on reload.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3683. [cleanup] Add a more detailed "not found" message to rndc
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson commands which specify a zone name. [RT #35059]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3682. [bug] Correct the behavior of rndc retransfer to allow
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson inline-signing slave zones to retain NSEC3 parameters
f2c49862fb348586bb4b95a5388c86e0c0cbfa2cAndreas Gustafsson instead of reverting to NSEC. [RT #34745]
45fe575607b91147ed753d175a7255198f14f197Andreas Gustafsson3681. [port] Update the Windows build system to support feature
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews selection and WIN64 builds. This is a work in
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews progress. [RT #34160]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews3680. [bug] Ensure buffer space is available in "rndc zonestatus".
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews3679. [bug] dig could fail to clean up TCP sockets still
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews waiting on connect(). [RT #35074]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews3678. [port] Update config.guess and config.sub. [RT #35060]
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson times. [RT #35073]
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington3676. [bug] "named-checkconf -z" now checks zones of type
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington hint and redirect as well as master. [RT #35046]
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington3675. [misc] Provide a place for third parties to add version
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington information for their extensions in the version
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington file by setting the EXTENSIONS variable.
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington --- 9.10.0a1 released ---
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
f59d47928ed33d1546e8f982370086429f727e85Andreas Gustafsson3673. [func] New "in-view" zone option allows direct sharing
f59d47928ed33d1546e8f982370086429f727e85Andreas Gustafsson of zones between views. [RT #32968]
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson3672. [func] Local address can now be specified when using
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson dns_client API. [RT #34811]
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews3671. [bug] Don't allow dnssec-importkey overwrite a existing
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson non-imported private key.
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson3670. [bug] Address read after free in server side of
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson lwres_getrrsetbyname. [RT #29075]
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
892476530f3971aff52f25103d488ece9b01f673Andreas Gustafsson3667. [test] dig: add support to keep the TCP socket open between
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson successive queries (+[no]keepopen). [RT #34918]
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews3666. [func] Add a tool, named-rrchecker, for checking the syntax
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews of individual resource records. This tool is intended
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews to be called by provisioning systems so that the front
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews end does not need to be upgraded to support new DNS
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson record types. [RT #34778]
9b2c0d29248ad5f86b47319239a06c783e1b5307Andreas Gustafsson3665. [bug] Failure to release lock on error in receive_secure_db.
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews locking and other bugs. [RT #34855]
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson3663. [bug] Address bugs in dns_rdata_fromstruct and
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
11fe3dcfe2a5fbefd0cfe445872dc4c595506204Andreas Gustafsson3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews3661. [bug] Address lock order reversal deadlock with inline zones.
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson3659. [port] solaris: don't add explicit dependencies/rules for
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson python programs as make won't use the implicit rules.
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington3658. [port] linux: Address platform specific compilation issue
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson when libcap-devel is installed. [RT #34838]
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson3657. [port] Some readline clones don't accept NULL pointers when
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson calling add_history. [RT #34842]
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson3656. [security] Treat an all zero netmask as invalid when generating
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews the localnets acl. (The prior behavior could
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews allow unexpected matches when using some versions
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson of Winsock: CVE-2013-6320.) [RT #34687]
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews3655. [cleanup] Simplify TCP message processing when requesting a
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews zone transfer. [RT #34825]
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson3654. [bug] Address race condition with manual notify requests.
ce6caa07591b3723968c22f5aa13740f9609135aAndreas Gustafsson3653. [func] Create delegations for all "children" of empty zones
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson except "forward first". [RT #34826]
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer3651. [tuning] Adjust when a master server is deemed unreachable.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson notify requests. [RT #30589]
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson3649. [cleanup] Include a comment in .nzf files, giving the name of
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson the associated view. [RT #34765]
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews3647. [bug] Address a race condition when shutting down a zone.
3e42bdfdc901b6b921b02028bd51ca2af8e84adcMark Andrews3646. [bug] Journal filename string could be set incorrectly,
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews causing garbage in log messages. [RT #34738]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews3645. [protocol] Use case sensitive compression when responding to
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews queries. [RT #34737]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson3643. [doc] Clarify RRL "slip" documentation.
bad3251d3f7ffccdec39ccfe04d94308985fb36eAndreas Gustafsson3642. [func] Allow externally generated DNSKEY to be imported
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews into the DNSKEY management framework. A new tool
9eec883bf871ee2235009e889440f986c98908b8Andreas Gustafsson dnssec-importkey is used to do this. [RT #34698]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3641. [bug] Handle changes to sig-validity-interval settings
1c935a070ecf9989b525f9bccd56e4d15f7686f0Mark Andrews better. [RT #34625]
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson3640. [bug] ndots was not being checked when searching. Only
088eaf3878580eebbbd2b020411532af278aae5aAndreas Gustafsson continue searching on NXDOMAIN responses. Add the
6b13908f7030e09fb4573f3c2f8d7a5edc70e0b5Mark Andrews ability to specify ndots to nslookup. [RT #34711]
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews in a key zone. [RT #34238]
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson encountered. [RT #34668]
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3637. [bug] 'allow-query-on' was checking the source address
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson rather than the destination address. [RT #34590]
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3636. [bug] Automatic empty zones now behave better with
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington forward only "zones" beneath them. [RT #34583]
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington3635. [bug] Signatures were not being removed from a zone with
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews only KSK keys for a algorithm. [RT #34439]
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson3634. [func] Report build-id in rndc status. Report build-id
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson when building from a git repository. [RT #20422]
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson3633. [cleanup] Refactor OPT processing in named to make it easier
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews to support new EDNS options. [RT #34414]
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews3632. [bug] Signature from newly inactive keys were not being
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews removed. [RT #32178]
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews3631. [bug] Remove spurious warning about missing signatures when
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews qtype is SIG. [RT #34600]
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews3629. [func] Allow the printing of cryptographic fields in DNSSEC
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews records by dig to be suppressed (dig +nocrypto).
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
e70b069e3807d5f499dff31eb31c2b3e0e125457Mark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews3625. [bug] Don't send notify messages to machines outside of the
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews3624. [bug] Look for 'json_object_new_int64' when looking for a
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews the json library. [RT #34449]
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews3623. [placeholder]
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews cache statistics. [RT #34339]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
64e9b7eafb798c75e9a40948cf05d8847da59d9dAndreas Gustafsson can lead to a remotely triggerable REQUIRE failure
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews (CVE-2013-4854). [RT #34238]
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews RPZ responses to be configured on the basis of
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews the client IP address; this can be used, for
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews example, to blacklist misbehaving recursive
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews or stub resolvers. [RT #33605]
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews3618. [func] "rndc reload" now checks modification times of
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews include files as well as master files to determine
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews whether to skip reloading a zone. [RT #33936]
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews3617. [bug] Named was failing to answer queries during
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson "rndc reload" [RT #34098]
5f4804c7e47e3cfe7237d27a354d268b0b7ea73bAndreas Gustafsson3616. [bug] Change #3613 was incomplete. [RT #34177]
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson3615. [cleanup] "configure" now finishes by printing a summary
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson of optional BIND features and whether they are
1418d7292da7ebaba1ba389d60192023c0170245Andreas Gustafsson active or inactive. ("configure --enable-full-report"
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson increases the verbosity of the summary.) [RT #31777]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson3614. [port] Check for <linux/types.h>. [RT #34162]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson3613. [bug] named could crash when deleting inline-signing
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson zones with "rndc delzone". [RT #34066]
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews3611. [bug] Improved resistance to a theoretical authentication
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews attack based on differential timing. [RT #33939]
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews3610. [cleanup] win32: Some executables had been omitted from the
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews installer. [RT #34116]
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews3609. [bug] Corrected a possible deadlock in applications using
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson the export version of the isc_app API. [RT #33967]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson3608. [port] win32: added todos.pl script to ensure all text files
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson the win32 build depends on are converted to DOS
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson newline format. [RT #22067]
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews message. [RT #34045]
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson3606. [func] "rndc flushtree" now flushes matching
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson records in the address database and bad cache
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson as well as the DNS cache. (Previously only the
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson DNS cache was flushed.) [RT #33970]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson3605. [port] win32: Addressed several compatibility issues
1c398fd83c444d61904d23431d3994139919b68eAndreas Gustafsson with newer versions of Visual Studio. [RT #33916]
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews3604. [bug] Fixed a compile-time error when building with
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson JSON but not XML. [RT #33959]
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson3603. [bug] Install <isc/stat.h>. [RT #33956]
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson integrate with named and serve DNS data.
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews (Contributed by John Eaglesham of Yahoo.)
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews3601. [bug] Added to PKCS#11 openssl patches a value len
479c6fc4584e062088ceee037690cdff85fc349bAndreas Gustafsson attribute in DH derive key. [RT #33928]
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson3600. [cleanup] dig: Fixed a typo in the warning output when receiving
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson an oversized response. [RT #33910]
1255d388f034dc556d235a002527101781dbeb29Mark Andrews3599. [tuning] Check for pointer equivalence in name comparisons.
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews3598. [cleanup] Improved portability of map file code. [RT #33820]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews3597. [bug] Ensure automatic-resigning heaps are reconstructed
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews when loading zones in map format. [RT #33381]
f04c15adc7e62deb2f53cc53f32d890936007903Andreas Gustafsson3596. [port] Updated win32 build documentation, added
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews dnssec-verify. [RT #22067]
d1029cbcf03a0a2a6c05c1e17e692d844eb27094Andreas Gustafsson3595. [port] win32: Fix build problems introduced by change #3550.
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson3594. [maint] Update config.guess and config.sub. [RT #33816]
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson3593. [func] Update EDNS processing to better track remote server
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson capabilities. [RT #30655]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson3592. [doc] Moved documentation of rndc command options to the
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson rndc man page. [RT #33506]
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews3591. [func] Use CRC-64 to detect map file corruption at load
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews time. [RT #33746]
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews3590. [bug] When using RRL on recursive servers, defer
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews rate-limiting until after recursion is complete;
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews also, use correct rcode for slipped NXDOMAIN
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews responses. [RT #33604]
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews3589. [func] Report serial numbers in when starting zone transfers.
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson Report accepted NOTIFY requests including serial.
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson3588. [bug] dig: addressed a memory leak in the sigchase code
42f61e5c46d4824918385e7279c1b71d8ada8e8dAndreas Gustafsson that could cause a shutdown crash. [RT #33733]
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews3587. [func] 'named -g' now checks the logging configuration but
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson does not use it. [RT #33473]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson3585. [func] "rndc delzone -clean" option removes zone files
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson when deleting a zone. [RT #33570]
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson3584. [security] Caching data from an incompletely signed zone could
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews trigger an assertion failure in resolver.c
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson (CVE-2013-3919). [RT #33690]
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews3583. [bug] Address memory leak in GSS-API processing [RT #33574]
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews3582. [bug] Silence false positive warning regarding missing file
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson directive for inline slave zones. [RT #33662]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson3580. [bug] Addressed a possible race in acache.c [RT #33602]
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson3579. [maint] Updates to PKCS#11 openssl patches, supporting
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
9bdb01e6c382e897572791b12190472955994d87Mark Andrews3577. [bug] Handle zero TTL values better. [RT #33411]
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson3576. [bug] Address a shutdown race when validating. [RT #33573]
417872b98aec720d587a9ef0197e25e78a2b7ee9Mark Andrews3575. [func] Changed the logging category for RRL events from
417872b98aec720d587a9ef0197e25e78a2b7ee9Mark Andrews 'queries' to 'query-errors'. [RT #33540]
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson3574. [doc] The 'hostname' keyword was missing from server-id
8ba4e82f5358815fd94f34fde408ffd047ba3430Andreas Gustafsson description in the named.conf man page. [RT #33476]
61d5bfc06be978ea962b1c64309894ac80351771Mark Andrews3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews zone names containing punctuation marks and other
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews nonstandard characters. [RT #33419]
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson3572. [func] Threads are now enabled by default on most
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson operating systems. [RT #25483]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson3571. [bug] Address race condition in dns_client_startresolve().
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson3570. [bug] Check internal pointers are valid when loading map
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson files. [RT #33403]
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson module, and added multithread support. [RT #33394]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson3568. [cleanup] Add a product description line to the version file,
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson to be reported by named -v/-V. [RT #33366]
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson3567. [bug] Silence clang static analyzer warnings. [RT #33365]
9df7cf8ea31d8d26f9c1be55f2cdafdc68d63c53Andreas Gustafsson3566. [func] Log when forwarding updates to master. [RT #33240]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson3565. [placeholder]
4fa5d53e750b4e34e19b9648900d489315b185eaAndreas Gustafsson3564. [bug] Improved handling of corrupted map files. [RT #33380]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson3562. [func] Update map file header format to include a SHA-1 hash
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson of the database content, so that corrupted map files
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson can be rejected at load time. [RT #32459]
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson or NOTIMP. Adjust usage message. [RT #33363]
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson3560. [bug] isc-config.sh did not honor includedir and libdir
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson when set via configure. [RT #33345]
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews3559. [func] Check that both forms of Sender Policy Framework
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson records exist or do not exist. [RT #33355]
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson3557. [bug] Reloading redirect zones was broken. [RT #33292]
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews3555. [bug] Address theoretical race conditions in acache.c
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews (change #3553 was incomplete). [RT #33252]
f08782f0923d11227983a352c26301cf703383cfMark Andrews3554. [bug] RRL failed to correctly rate-limit upward
f08782f0923d11227983a352c26301cf703383cfMark Andrews referrals and failed to count dropped error
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson responses in the statistics. [RT #33225]
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson3553. [bug] Address suspected double free in acache. [RT #33252]
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson3552. [bug] Wrong getopt option string for 'nsupdate -r'.
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson3550. [func] Unified the internal and export versions of the
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson BIND libraries, allowing external clients to use
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson the same libraries as BIND. [RT #33131]
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson3549. [doc] Documentation for "request-nsid" was missing.
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson3548. [bug] The NSID request code in resolver.c was broken
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews resulting in invalid EDNS options being sent.
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson3547. [bug] Some malformed unknown rdata records were not properly
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson detected and rejected. [RT #33129]
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews3546. [func] Add EUI48 and EUI64 types. [RT #33082]
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews3544. [contrib] check5011.pl: Script to report the status of
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson managed keys as recorded in managed-keys.bind.
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson Contributed by Tony Finch <dot@dotat.at>
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson3543. [bug] Update socket structure before attaching to socket
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson manager after accept. [RT #33084]
3e934267660cb13029bcdbddf318fe1cc27b6718Andreas Gustafsson3542. [placeholder]
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson3541. [bug] Parts of libdns were not properly initialized when
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson built in libexport mode. [RT #33028]
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson3540. [test] libt_api: t_info and t_assert were not thread safe.
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson3539. [port] win32: timestamp format didn't match other platforms.
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson3538. [test] Running "make test" now requires loopback interfaces
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington to be set up. [RT #32452]
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson3537. [tuning] Slave zones, when updated, now send NOTIFY messages
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson to peers before being dumped to disk rather than
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson after. [RT #27242]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson3536. [func] Add support for setting Differentiated Services Code
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson Point (DSCP) values in named. Most configuration
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson options which take a "port" option (e.g.,
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson listen-on, forwarders, also-notify, masters,
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson notify-source, etc) can now also take a "dscp"
595a14576ea14884c35b3726f054f2065365620bMark Andrews option specifying a code point for use with
595a14576ea14884c35b3726f054f2065365620bMark Andrews outgoing traffic, if supported by the underlying
595a14576ea14884c35b3726f054f2065365620bMark Andrews OS. [RT #27596]
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson3535. [bug] Minor win32 cleanups. [RT #32962]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3534. [bug] Extra text after an embedded NULL was ignored when
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson parsing zone files. [RT #32699]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
0bd1b2fbfed4aa489e9d5fcbc7f48acb96ba7248Mark Andrews3531. [bug] win32: A uninitialized value could be returned on out
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews of memory. [RT #32960]
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson3529. [func] Named now listens on both IPv4 and IPv6 interfaces
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson by default. Named previously only listened on IPv4
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson interfaces by default unless named was running in
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson IPv6 only mode. [RT #32945]
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson3528. [func] New "dnssec-coverage" command scans the timing
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson metadata for a set of DNSSEC keys and reports if a
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson lapse in signing coverage has been scheduled
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson inadvertently. (Note: This tool depends on python;
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington it will not be built or installed on systems that
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington do not have a python interpreter.) [RT #28098]
ea34bcc6376555296a08e4c9e2f9c2cbe58378a9Andreas Gustafsson3527. [compat] Add a URI to allow applications to explicitly
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews request a particular XML schema from the statistics
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer channel, returning 404 if not supported. [RT #32481]
06f12c290c7904f0723094b5cbd11e2a1d49e95eAndreas Gustafsson3526. [cleanup] Set up dependencies for unit tests correctly during
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer build. [RT #32803]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3525. [func] Support for additional signing algorithms in rndc:
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews The -A option to rndc-confgen can be used to
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews select the algorithm for the generated key.
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews (The default is still hmac-md5; this may
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson change in a future release.) [RT #20363]
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews3524. [func] Added an alternate statistics channel in JSON format,
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews when the server is built with the json-c library:
5c831a1a1b14470037de6d8bc0501aea5dc6cacdAndreas Gustafsson http://[address]:[port]/json. [RT #32630]
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews dynamically-loadable modules, and added the
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews "wildcard" module based on a contribution from
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson they ought to. [RT #32685]
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson3520. [bug] 'mctx' was not being referenced counted in some places
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson where it should have been. [RT #32794]
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews3519. [func] Full replay protection via four-way handshake is
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews now mandatory for rndc clients. Very old versions
0262406cea5802a717539247cbaa596ac808efa9Mark Andrews of rndc will no longer work. [RT #32798]
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson so that all dns_rrl_rtype_t enum values fit regardless
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson of whether it is teated as signed or unsigned by
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson the compiler. [RT #32792]
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3516. [placeholder]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3515. [port] '%T' is not portable in strftime(). [RT #32763]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3514. [bug] The ranges for valid key sizes in ddns-confgen and
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews rndc-confgen were too constrained. Keys up to 512
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews bits are now allowed for most algorithms, and up
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews to 1024 bits for hmac-sha384 and hmac-sha512.
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson3513. [func] "dig -u" prints times in microseconds rather than
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson milliseconds. [RT #32704]
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson3512. [func] "rndc validation check" reports the current status
dd3f0d86f8f0def6bdb7abb5774aa4b9bb0e4a96Mark Andrews of DNSSEC validation. [RT #21397]
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson3511. [doc] Improve documentation of redirect zones. [RT #32756]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3510. [func] "rndc status" and XML statistics channel now report
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson server start and reconfiguration times. [RT #21048]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3509. [cleanup] Added a product line to version file to allow for
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews easy naming of different products (BIND
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews vs BIND ESV, for example). [RT #32755]
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington3508. [contrib] queryperf was incorrectly rejecting the -T option.
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson3507. [bug] Statistics channel XSL had a glitch when attempting
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson to chart query data before any queries had been
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson received. [RT #32620]
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
ed03e26c44347ec20aff6608de6082e3594d95fbMark Andrews the keyword "unlimited" is no longer defined as equal
ed03e26c44347ec20aff6608de6082e3594d95fbMark Andrews to 4 gigabytes (except on 32-bit platforms); it
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews means literally unlimited. [RT #32358]
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews3505. [bug] When setting "max-cache-size" and "max-acache-size",
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews larger values than 4 gigabytes could not be set
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews explicitly, though larger sizes were available
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews when setting cache size to 0. This has been
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews corrected; the full range is now available.
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3504. [func] Add support for ACLs based on geographic location,
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson using MaxMind GeoIP databases. Based on code
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson contributed by Ken Brownfield <kb@slide.com>.
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3503. [doc] Clarify size_spec syntax. [RT #32449]
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews3502. [func] zone-statistics: "no" is now a synonym for "none",
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews instead of "terse". [RT #29165]
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews3501. [func] zone-statistics now takes three options: full,
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson terse, and none. "yes" and "no" are retained as
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews synonyms for full and terse, respectively. [RT #29165]
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews3500. [security] Support NAPTR regular expression validation on
cb8fd52bbeaf40c9166a0144541c4ff2bafc2dd6Andreas Gustafsson all platforms without using libregex, which
1eaad22e111709254c70953a4dc768b6d4d31646Mark Andrews can be vulnerable to memory exhaustion attack
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson (CVE-2013-2266). [RT #32688]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3499. [doc] Corrected ARM documentation of built-in zones.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3498. [bug] zone statistics for zones which matched a potential
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson empty zone could have their zone-statistics setting
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer3497. [func] When deleting a slave/stub zone using 'rndc delzone'
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer report the files that were being used so they can
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer be cleaned up if desired. [RT #27899]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer3496. [placeholder]
f462b9aed23b77bda867301f80ead6990df6f4f8Andreas Gustafsson3495. [func] Support multiple response-policy zones (up to 32),
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews while improving RPZ performance. "response-policy"
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson syntax now includes a "min-ns-dots" clause, with
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson default 1, to exclude top-level domains from
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson NSIP and NSDNAME checking. --enable-rpz-nsip and
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson --enable-rpz-nsdname are now the default. [RT #32251]
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson3494. [func] DNS RRL: Blunt the impact of DNS reflection and
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews amplification attacks by rate-limiting substantially-
539cad8f49b38540b7c20c64d1ef456cb2fa7914Andreas Gustafsson identical responses. [RT #28130]
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson contributed by Mark Goldfinch. [RT #32549]
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews3492. [bug] Fixed a regression in zone loading performance
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson due to lock contention. [RT #30399]
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews3491. [bug] Slave zones using inline-signing must specify a
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson file name. [RT #31946]
ea72586fc5c360539117119ee35e4c3a04b912bcAndreas Gustafsson3490. [bug] When logging RDATA during update, truncate if it's
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson too long. [RT #32365]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews dns_dlzcreate() failed to properly initialize
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews dlzdb.link. When cloning a rdataset do not copy
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews the link contents. [RT #32651]
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer3488. [bug] Use after free error with DH generated keys. [RT #32649]
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer3487. [bug] Change 3444 was not complete. There was a additional
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer place where the NOQNAME proof needed to be saved.
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson3486. [bug] named could crash when using TKEY-negotiated keys
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews that had been deleted and then recreated. [RT #32506]
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3484. [bug] Some statistics were incorrectly rendered in XML.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3483. [placeholder]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3482. [func] dig +nssearch now prints name servers that don't
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson have address records (missing AAAA or A, or the name
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson doesn't exist). [RT #29348]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3481. [cleanup] Removed use of const const in atf.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3480. [bug] Silence logging noise when setting up zone
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews statistics. [RT #32525]
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews3479. [bug] Address potential memory leaks in gssapi support
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews code. [RT #32405]
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson3478. [port] Fix a build failure in strict C99 environments
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson3477. [func] Expand logging when adding records via DDNS update
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson3476. [bug] "rndc zonestatus" could report a spurious "not
44c141f9471a6bb1fac0cba7880ba768ede2f0c8Brian Wellington found" error on inline-signing zones. [RT #29226]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson3475. [cleanup] Changed name of 'map' zone file format (previously
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson 'fast'). [RT #32458]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson3474. [bug] nsupdate could assert when the local and remote
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson address families didn't match. [RT #22897]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson3473. [bug] dnssec-signzone/verify could incorrectly report
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews an error condition due to an empty node above an
4d77dbcfa052c065a87d2d35b116f17b74bae573Andreas Gustafsson opt-out delegation lacking an NSEC3. [RT #32072]
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews3472. [bug] The active-connections counter in the socket
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews statistics could underflow. [RT #31747]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson3471. [bug] The number of UDP dispatches now defaults to
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson the number of CPUs even if -n has been set to
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson a higher value. [RT #30964]
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington3470. [bug] Slave zones could fail to dump when successfully
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson refreshing after an initial failure. [RT #31276]
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington3469. [bug] Handle DLZ lookup failures more gracefully. Improve
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington backward compatibility between versions of DLZ dlopen
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington API. [RT #32275]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3468. [security] RPZ rules to generate A records (but not AAAA records)
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington could trigger an assertion failure when used in
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews conjunction with DNS64 (CVE-2012-5689). [RT #32141]
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews3467. [bug] Added checks in dnssec-keygen and dnssec-settime
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington to check for delete date < inactive date. [RT #31719]
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
2033e305852d4b76772885ea73ebfb6776c1f820Mark Andrews in DLZ example driver. [RT #32275]
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson3465. [bug] Handle isolated reserved ports. [RT #31778]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington3464. [maint] Updates to PKCS#11 openssl patches, supporting
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews3462. [doc] Clarify server selection behavior of dig when using
0176adc7c58bb8bd60ec71eeae94dbfbbc4018a8Mark Andrews -4 or -6 options. [RT #32181]
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson3461. [bug] Negative responses could incorrectly have AD=1
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson set. [RT #32237]
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3459. [func] Added -J option to named-checkzone/named-compilezone
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson to specify the path to the journal file. [RT #30958]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3458. [bug] Return FORMERR when presented with a overly long
47d48791fc352fcdf9019200070221be41a8d77cMark Andrews domain named in a request. [RT #29682]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson3456. [port] g++47: ATF failed to compile. [RT #32012]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson3455. [contrib] queryperf: fix getopt option list. [RT #32338]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson3454. [port] sparc64: improve atomic support. [RT #25182]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington failed. [RT #31960]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson3452. [bug] Accept duplicate singleton records. [RT #32329]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson3451. [port] Increase per thread stack size from 64K to 1M.
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington3450. [bug] Stop logfileconfig system test spam system logs.
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington3449. [bug] gen.c: use the pre-processor to construct format
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington strings so that compiler can perform sanity checks;
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington check the snprintf results. [RT #17576]
e9596e1fb3dfa560216776acdbfac3cf5ef97157Mark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley3446. [port] win32: Add source ID (see change #3400) to build.
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington3445. [bug] Warn about zone files with blank owner names
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson immediately after $ORIGIN directives. [RT #31848]
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington3444. [bug] The NOQNAME proof was not being returned from cached
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson insecure responses. [RT #21409]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson rejected when generating keys. [RT #31927]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3442. [port] Net::DNS 0.69 introduced a non backwards compatible
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington change. [RT #32216]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson3440. [bug] Reorder get_key_struct to not trigger a assertion when
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington cleaning up due to out of memory error. [RT #32131]
debff476ad3512687a354499c25d2793e2009acdBrian Wellington3439. [placeholder]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson buffers with constant data. [RT #32064]
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson3436. [bug] Check malloc/calloc return values. [RT #32088]
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson3435. [bug] Cross compilation support in configure was broken.
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson3434. [bug] Pass client info to the DLZ findzone() entry
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson point in addition to lookup(). This makes it
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson possible for a database to answer differently
57188b5ff2397c0517e55f622879e69ee547918dAndreas Gustafsson whether it's authoritative for a name depending
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson on the address of the client. [RT #31775]
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson3433. [bug] dlz_findzone() did not correctly handle
9a72459b6040b30d043c5fd9e283441b847e569aAndreas Gustafsson ISC_R_NOMORE. [RT #31172]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson3432. [func] Multiple DLZ databases can now be configured.
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson DLZ databases are searched in the order configured,
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson unless set to "search no", in which case a
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson zone can be configured to be retrieved from a
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson particular DLZ database by using a "dlz <name>"
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson option in the zone statement. DLZ databases can
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson support type "master" and "redirect" zones.
f2a16ec2e8970615d39f8fe339b215ad0a893b85Mark Andrews3431. [bug] ddns-confgen: Some valid key algorithms were
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson not accepted. [RT #31927]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 'T' between the date and time. [RT #32044]
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence3429. [bug] dns_zone_getserial2 could a return success without
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence returning a valid serial. [RT #32007]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence3428. [cleanup] dig: Add timezone to date output. [RT #2269]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence3427. [bug] dig +trace incorrectly displayed name server
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence addresses instead of names. [RT #31641]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence3426. [bug] dnssec-checkds: Clearer output when records are not
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence found. [RT #31968]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson3425. [bug] "acacheentry" reference counting was broken resulting
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson in use after free. [RT #31908]
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson3424. [func] dnssec-dsfromkey now emits the hash without spaces.
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson3423. [bug] "rndc signing -nsec3param" didn't accept the full
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington range of possible values. Address portability issues.
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson3422. [bug] Added a clear error message for when the SOA does not
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence match the referral. [RT #31281]
112d9875bf33e2382f9a986d3e58fce08f1935fcOlafur Gudmundsson3421. [bug] Named loops when re-signing if all keys are offline.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson3419. [bug] Memory leak on validation cancel. [RT #31869]
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson3418. [func] New XML schema (version 3.0) for the statistics channel
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson adds query type statistics at the zone level, and
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson flattens the XML tree and uses compressed format to
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson optimize parsing. Includes new XSL that permits
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson charting via the Google Charts API on browsers that
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson support javascript in XSL. The old XML schema has been
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson deprecated. [RT #30023]
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence3417. [placeholder]
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence3416. [bug] Named could die on shutdown if running with 128 UDP
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence dispatches per interface. [RT #31743]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence3415. [bug] named could die with a REQUIRE failure if a validation
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence was canceled. [RT #31804]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence3414. [bug] Address locking issues found by Coverity. [RT #31626]
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence3413. [func] Record the number of DNS64 AAAA RRsets that have been
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence synthesized. [RT #27636]
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence3412. [bug] Copy timeval structure from control message data.
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence to UDP. [RT #31690]
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence3410. [bug] Addressed Coverity warnings. [RT #31626]
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington from X.509 certificates, for use with DANE
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson (DNS-based Authentication of Named Entities).
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson3408. [bug] Some DNSSEC-related options (update-check-ksk,
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson are now legal in slave zones as long as
7fe2ead2b3e23f68c1d3c79da51ef5af4f678f7dAndreas Gustafsson inline-signing is in use. [RT #31078]
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson3407. [placeholder]
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson3406. [bug] mem.c: Fix compilation errors when building with
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3405. [bug] Handle time going backwards in acache. [RT #31253]
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson RRSIG and NSEC records from nodes that used to be
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews in-zone but are now below a zone cut. [RT #31556]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3402. [test] The IPv6 interface numbers used for system
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews tests were incorrect on some platforms. [RT #25085]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews in the "srcid" file in the build tree and normally set
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews to the most recent git hash. [RT #31494]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews clash. [RT #31515]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3398. [bug] SOA parameters were not being updated with inline
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews signed zones if the zone was modified while the
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews server was offline. [RT #29272]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3396. [bug] OPT records were incorrectly removed from signed,
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews truncated responses. [RT #31439]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3394. [bug] Adjust 'successfully validated after lower casing
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews signer' log level and category. [RT #31414]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
4585aeb2cc84c0e0602da5abf47c31f92ec3b6b2Mark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson3388. [bug] Fixed several Coverity warnings.
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson Note: This change includes a fix for a bug that
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson was subsequently determined to be an exploitable
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson security vulnerability, CVE-2012-5688: named could
711c2be7d9d99ee4415bc4e41ebe4f7f31947b3bAndreas Gustafsson die on specific queries with dns64 enabled.
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson3387. [func] DS digest can be disabled at runtime with
dd3f0d86f8f0def6bdb7abb5774aa4b9bb0e4a96Mark Andrews disable-ds-digests. [RT #21581]
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson3386. [bug] Address locking violation when generating new NSEC /
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson NSEC3 chains. [RT #31224]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3385. [bug] named-checkconf didn't detect missing master lists
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews in also-notify clauses. [RT #30810]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3384. [bug] Improved logging of crypto errors. [RT #30963]
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews3383. [security] A certain combination of records in the RBT could
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews cause named to hang while populating the additional
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington section of a response. [RT #31090]
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington3382. [bug] SOA query from slave used use-v6-udp-ports range,
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington if set, regardless of the address family in use.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3381. [contrib] Update queryperf to support more RR types.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3380. [bug] named could die if a nonexistent master list was
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence referenced in a also-notify. [RT #31004]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3379. [bug] isc_interval_zero and isc_time_epoch should be
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence "const (type)* const". [RT #31069]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3378. [bug] Handle missing 'managed-keys-directory' better.
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews3377. [bug] Removed spurious newline from NSEC3 multiline
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson output. [RT #31044]
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews3376. [bug] Lack of EDNS support was being recorded without a
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews successful response. [RT #30811]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington3374. [bug] isc_parse_uint32 failed to return a range error on
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews systems with 64 bit longs. [RT #30232]
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews messages. [RT #30501]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3371. [bug] AD=1 should behave like DO=1 when deciding whether to
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence add NS RRsets to the additional section or not.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3370. [bug] Address use after free while shutting down. [RT #30241]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3369. [bug] nsupdate terminated unexpectedly in interactive mode
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence if built with readline support. [RT #29550]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence were not C++ safe.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3367. [bug] dns_dnsseckey_create() result was not being checked.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3366. [bug] Fixed Read-After-Write dependency violation for IA64
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence atomic operations. [RT #25181]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3365. [bug] Removed spurious newlines from log messages in
74cc9d733ca94d43310ff3df84d7a4644c0950f9Andreas Gustafsson3364. [security] Named could die on specially crafted record.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3363. [bug] Need to allow "forward" and "fowarders" options
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence in static-stub zones; this had been overlooked.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3362. [bug] Setting some option values to 0 in named.conf
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson could trigger an assertion failure on startup.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3361. [bug] "rndc signing -nsec3param" didn't work correctly
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence when salt was set to '-' (no salt). [RT #30099]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3360. [bug] 'host -w' could die. [RT #18723]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3359. [bug] An improperly-formed TSIG secret could cause a
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence memory leak. [RT #30607]
5455f30a7532738d750252c00e649890c694ee30Brian Wellington3358. [placeholder]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington3357. [port] Add support for libxml2-2.8.x [RT #30440]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington approaching their expiry, so they don't remain
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington in caches after expiry. [RT #26429]
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington3355. [port] Use more portable awk in verify system test.
89d03d4715120fd0c968775bf0724b5a2a647539Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
4fbd6a13a5ba6ec1e9bd080cba86c74b3b92c894Mark Andrews3353. [bug] Use a single task for task exclusive operations.
dd3f0d86f8f0def6bdb7abb5774aa4b9bb0e4a96Mark Andrews3352. [bug] Ensure that learned server attributes timeout of the
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson adb cache. [RT #29856]
0b135de5a52acec5bb42f96b4e79484d1629fd93Brian Wellington3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson memory debugging flags are set. [RT #30243]
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson3350. [bug] Memory read overrun in isc___mem_reallocate if
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson ISC_MEM_DEBUGCTX memory debugging flag is set.
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson3349. [bug] Change #3345 was incomplete. [RT #30233]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson3348. [bug] Prevent RRSIG data from being cached if a negative
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson record matching the covering type exists at a higher
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson trust level. Such data already can't be retrieved from
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson the cache since change 3218 -- this prevents it
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson being inserted into the cache as well. [RT #26809]
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson3347. [bug] dnssec-settime: Issue a warning when writing a new
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson private key file would cause a change in the
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson permissions of the existing file. [RT #27724]
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson3346. [security] Bad-cache data could be used before it was
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson initialized, causing an assert. [RT #30025]
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson3345. [bug] Addressed race condition when removing the last item
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington or inserting the first item in an ISC_QUEUE.
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley3344. [func] New "dnssec-checkds" command checks a zone to
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley determine which DS records should be published
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley in the parent zone, or which DLV records should be
751aa24c98fea02215cad95a08411af547d70e41Bob Halley published in a DLV zone, and queries the DNS to
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson ensure that it exists. (Note: This tool depends
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson on python; it will not be built or installed on
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson systems that do not have a python interpreter.)
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson3343. [placeholder]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson3342. [bug] Change #3314 broke saving of stub zones to disk
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews resulting in excessive cpu usage in some cases.
f08f3c6caeb8460cb679a8687f61da61fff69fb0Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson chains. [RT #23673]
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson3340. [func] Added new 'map' zone file format, which is an image
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson of a zone database that can be loaded directly into
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington memory via mmap(), allowing much faster zone loading.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson (Note: Because of pointer sizes and other
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington considerations, this file format is platform-dependent;
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington 'map' zone files cannot always be transferred from one
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson server to another.) [RT #25419]
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington3339. [func] Allow the maximum supported rsa exponent size to be
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson specified: "max-rsa-exponent-size <value>;" [RT #29228]
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson3338. [bug] Address race condition in units tests: asyncload_zone
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson and asyncload_zt. [RT #26100]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley3337. [bug] Change #3294 broke support for the multiple keys
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley in controls. [RT #29694]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley3336. [func] Maintain statistics for RRsets tagged as "stale".
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson3335. [func] nslookup: return a nonzero exit code when unable
ecaedd50f4e6b8cff110f9981a0a33a34269d421Mark Andrews to get an answer. [RT #29492]
296253a3b9dec61190cce77e8b551e05ff514fcdAndreas Gustafsson3334. [bug] Hold a zone table reference while performing a
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence asynchronous load of a zone. [RT #28326]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence3333. [bug] Setting resolver-query-timeout too low can cause
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence named to not recover if it loses connectivity.
1ac6cf2f7ae95e4c915cba7038e61930d7c4ba2aAndreas Gustafsson3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson3331. [security] dns_rdataslab_fromrdataset could produce bad
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson rdataslabs. [RT #29644]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson3330. [func] Fix missing signatures on NOERROR results despite
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson RPZ rewriting. Also
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson - add optional "recursive-only yes|no" to the
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson response-policy statement
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson - add optional "max-policy-ttl" to the response-policy
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson statement to limit the false data that
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson "recursive-only no" can introduce into
47afc27c28aef95d94e8d1296498ba57a5f00b25Brian Wellington resolvers' caches
cedd0ab1e812ec7cf05d57c3e602db41b79f0a2aAndreas Gustafsson - add a RPZ performance test to bin/tests/system/rpz
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington when queryperf is available.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson - the encoding of PASSTHRU action to "rpz-passthru".
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington (The old encoding is still accepted.)
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington3329. [bug] Handle RRSIG signer-name case consistently: We
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington generate RRSIG records with the signer-name in
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson lower case. We accept them with any case, but if
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson they fail to validate, we try again in lower case.
4df51a8f53381d57b3dd75dd84615abd4cf9e969Andreas Gustafsson3328. [bug] Fixed inconsistent data checking in dst_parse.c.
0c9dd74fecd876563b7f0e4662243ff026b59622Andreas Gustafsson3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson to 'filter-aaaa-on-v4' but applies to IPv6
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson connections. (Use "configure --enable-filter-aaaa"
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson to enable this option.) [RT #27308]
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington3326. [func] Added task list statistics: task model, worker
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson threads, quantum, tasks running, tasks ready.
55ddb88e53838693370c213930beda1652b8a583Brian Wellington3325. [func] Report cache statistics: memory use, number of
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson nodes, number of hash buckets, hit and miss counts.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3324. [test] Add better tests for ADB stats [RT #27057]
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington3323. [func] Report the number of buckets the resolver is using.
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington3322. [func] Monitor the number of active TCP and UDP dispatches.
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley3321. [func] Monitor the number of recursive fetches and the
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley number of open sockets, and report these values in
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley the statistics channel. [RT #27054]
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington3320. [func] Added support for monitoring of recursing client
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington count. [RT #27009]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3319. [func] Added support for monitoring of ADB entry count and
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence hash size. [RT #27057]
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence3318. [tuning] Reduce the amount of work performed while holding a
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence bucket lock when finished with a fetch context.
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3316. [tuning] Improved locking performance when recursing.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3315. [tuning] Use multiple dispatch objects for sending upstream
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington queries; this can improve performance on busy
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington multiprocessor systems by reducing lock contention.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3314. [bug] The masters list could be updated while stub_callback
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington or refresh_callback were using it. [RT #26732]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson3313. [protocol] Add TLSA record type. [RT #28989]
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson3311. [bug] Abort the zone dump if zone->db is NULL in
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson zone.c:zone_gotwritehandle. [RT #29028]
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson3310. [test] Increase table size for mutex profiling. [RT #28809]
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington3309. [bug] resolver.c:fctx_finddone() was not thread safe.
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson3308. [placeholder]
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson3305. [func] Add wire format lookup method to sdb. [RT #28563]
48565891e8f2f8c77b87908b4893f693a08e9ba9Brian Wellington3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
b0390aab30438a13f533cccae9389945214b1421Brian Wellington3303. [bug] named could die when reloading. [RT #28606]
b0390aab30438a13f533cccae9389945214b1421Brian Wellington3302. [bug] dns_dnssec_findmatchingkeys could fail to find
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson keys if the zone name contained character that
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington required special mappings. [RT #28600]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson3301. [contrib] Update queryperf to build on darwin. Add -R flag
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson for non-recursive queries. [RT #28565]
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington3300. [bug] Named could die if gssapi was enabled in named.conf
91e35ded544576b671606779143d7fbffaf451d2Andreas Gustafsson but was not compiled in. [RT #28338]
d9112843333472bb7700c02a10d18e2b253b2708Bob Halley3299. [bug] Make SDB handle errors from database drivers better.
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson3298. [bug] Named could dereference a NULL pointer in
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson zmgr_start_xfrin_ifquota if the zone was being removed.
04cb6056a6539539e0fc2ed695298f7fa7b1d632Brian Wellington3297. [bug] Named could die on a malformed master file. [RT #28467]
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews3296. [bug] Named could die with a INSIST failure in
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews client.c:exit_check. [RT #28346]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson3295. [bug] Adjust isc_time_secondsastimet range check to be more
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence portable. [RT # 26542]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence error. [RT #28265]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson3293. [func] nsupdate: list supported type. [RT #28261]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson3292. [func] Log messages in the axfr stream at debug 10.
88a790c39176f72a8f98f134b83df92e09a8c56bAndreas Gustafsson3291. [port] Fixed a build error on systems without ENOTSUP.
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley3288. [bug] dlz_destroy() function wasn't correctly registered
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley by the DLZ dlopen driver. [RT #28056]
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley3286. [bug] Managed key maintenance timer could fail to start
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley after 'rndc reconfig'. [RT #26786]
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington3285. [bug] val-frdataset was incorrectly disassociated in
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington proveunsecure after calling startfinddlvsep.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson3284. [bug] Address race conditions with the handling of
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson3283. [bug] Raw zones with with more than 512 records in a RRset
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson failed to load. [RT #27863]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson3282. [bug] Restrict the TTL of NS RRset to no more than that
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson of the old NS RRset when replacing it.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson [RT #27792] [RT #27884]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson3281. [bug] SOA refresh queries could be treated as cancelled
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson despite succeeding over the loopback interface.
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley3280. [bug] Potential double free of a rdataset on out of memory
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley with DNS64. [RT #27762]
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington3279. [bug] Hold a internal reference to the zone while performing
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson a asynchronous load. Address potential memory leak
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson if the asynchronous is cancelled. [RT #27750]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson3278. [bug] Make sure automatic key maintenance is started
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson when "auto-dnssec maintain" is turned on during
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson "rndc reconfig". [RT #26805]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson3276. [bug] win32: ns_os_openfile failed to return NULL on
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews safe_open failure. [RT #27696]
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews option had been misspelled as '-clear'. (To avoid
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews future confusion, both options now work.) [RT #27173]
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson3274. [placeholder]
1c1156b6e71555e593ed4bbca2284055c9f6fa45Andreas Gustafsson3273. [bug] AAAA responses could be returned in the additional
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson section even when filter-aaaa-on-v4 was in use.
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington3272. [func] New "rndc zonestatus" command prints information
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington about the specified zone. [RT #21671]
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington3271. [port] darwin: mksymtbl is not always stable, loop several
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson times before giving up. mksymtbl was using non
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson portable perl to covert 64 bit hex strings. [RT #27653]
4d35b6836eb57387a9da6b103331b59cc988b827Mark Andrews --- 9.9.0rc2 released ---
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley3270. [bug] "rndc reload" didn't reuse existing zones correctly
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson when inline-signing was in use. [RT #27650]
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley3269. [port] darwin 11 and later now built threaded by default.
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson out the earliest expiry time. [RT #23311]
4e605108c6533c2ec6311ee7a466582392656dddAndreas Gustafsson3267. [bug] Memory allocation failures could be mis-reported as
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson unexpected error. New ISC_R_UNSET result code.
762a538eed7f4de4c340090536553f9c73f6432aBrian Wellington3266. [bug] The maximum number of NSEC3 iterations for a
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington DNSKEY RRset was not being properly computed.
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington3265. [bug] Corrected a problem with lock ordering in the
c44ab73a0f37fa8c8a52069ca20dd060492dbafdAndreas Gustafsson inline-signing code. [RT #27557]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson3264. [bug] Automatic regeneration of signatures in an
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley inline-signing zone could stall when the server
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley was restarted. [RT #27344]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3263. [bug] "rndc sync" did not affect the unsigned side of an
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley inline-signing zone. [RT #27337]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson3262. [bug] Signed responses were handled incorrectly by RPZ.
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington3261. [func] RRset ordering now defaults to random. [RT #27174]
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington3260. [bug] "rrset-order cyclic" could appear not to rotate
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington for some query patterns. [RT #27170/27185]
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington --- 9.9.0rc1 released ---
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington3259. [bug] named-compilezone: Suppress "dump zone to <file>"
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington message when writing to stdout. [RT #27109]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington3258. [test] Add "forcing full sign with unreadable keys" test.
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington3257. [bug] Do not generate a error message when calling fsync()
4b9f0fd0791cb9cb31087789a03fa3a28dd4b583Andreas Gustafsson in a pipe or socket. [RT #27109]
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
dc1453b15d6656cd0661d5bec56359efa649268dAndreas Gustafsson3255. [func] No longer require that a empty zones be explicitly
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews enabled or that a empty zone is disabled for
80aba3d49a872ca11d7cf8550c3a993162e7939fMark Andrews RFC 1918 empty zones to be configured. [RT #27139]
31039b15173fb3e375269991920e4843f664457eMark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
936af16e0dbac26c1ec2337e684ff6ca9b2fe1bbAndreas Gustafsson3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson too long. [RT #26956]
22457624d3e63e7cd255b4083cb435c16caea26dBob Halley3252. [bug] When master zones using inline-signing were
019fefd77d7e77f3c841808ab604f8ce31679d2dBrian Wellington updated while the server was offline, the source
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson zone could fall out of sync with the signed
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington copy. They can now resynchronize. [RT #26676]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington memory dns_sdlz_putrr() can allocate per record to
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington prevent run away memory consumption on ISC_R_NOSPACE.
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews3250. [func] 'configure --enable-developer'; turn on various
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson configure options, normally off by default, that
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson we want developers to build and test with. [RT #27103]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson3249. [bug] Update log message when saving slave zones files for
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson analysis after load failures. [RT #27087]
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington3248. [bug] Configure options --enable-fixed-rrset and
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington --enable-exportlib were incompatible with each
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington other. [RT #27087]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson3247. [bug] 'raw' format zones failed to preserve load order
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson breaking 'fixed' sort order. [RT #27087]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley3246. [bug] Named failed to start with a empty also-notify list.
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley3245. [bug] Don't report a error unchanged serials unless there
8e68489885e744ab48907414b4199c36858c27ddMark Andrews were other changes when thawing a zone with
8e68489885e744ab48907414b4199c36858c27ddMark Andrews ixfr-fromdifferences. [RT #26845]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson3244. [func] Added readline support to nslookup and nsupdate.
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson Also simplified nsupdate syntax to make "update"
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson and "prereq" optional. [RT #24659]
ec4f7c6d0f0cfc72bcecdb22bf59890d590218d6Mark Andrews3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
d8d95c7d2eae28c5adbde097e88efa115bae6f35Andreas Gustafsson being properly set.
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson3242. [func] Extended the header of raw-format master files to
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson include the serial number of the zone from which
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson they were generated, if different (as in the case
7427490a67b9547242b57c255254f7e146127c48Bob Halley of inline-signing zones). This is to be used in
7427490a67b9547242b57c255254f7e146127c48Bob Halley inline-signing zones, to track changes between the
7427490a67b9547242b57c255254f7e146127c48Bob Halley unsigned and signed versions of the zone, which may
7427490a67b9547242b57c255254f7e146127c48Bob Halley have different serial numbers.
fbe35d126f2c4df000f50662ed9d90ced13188c3Andreas Gustafsson (Note: raw zonefiles generated by this version of
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson BIND are no longer compatible with prior versions.
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson To generate a backward-compatible raw zonefile
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson using dnssec-signzone or named-compilezone, specify
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson output format "raw=0" instead of simply "raw".)
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews3241. [bug] Address race conditions in the resolver code.
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson3240. [bug] DNSKEY state change events could be missed. [RT #26874]
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington timestamp. [RT #26883]
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington3238. [bug] keyrdata was not being reinitialized in
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington lib/dns/rbtdb.c:iszonesecure. [RT #26913]
a1cad3b231800ca928751ff8889bdc6d312d1f88Andreas Gustafsson3237. [bug] dig -6 didn't work with +trace. [RT #26906]
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington3236. [bug] Backed out changes #3182 and #3202, related to
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington EDNS(0) fallback behavior. [RT #26416]
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington3235. [func] dns_db_diffx, a extended dns_db_diff which returns
e4aeba32725a79e295c2ceed1919cba076530ba3Andreas Gustafsson the generated diff and optionally writes it to a
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington journal. [RT #26386]
4b236540be165859390f05911eda86a39ee58eedAndreas Gustafsson3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson3232. [bug] Zero zone->curmaster before return in
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson dns_zone_setmasterswithkeys(). [RT #26732]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews3231. [bug] named could fail to send a incompressible zone.
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
363cb30a83e8e57bc8874e621910f0e23dd84909Mark Andrews axfr with a serial of 0. [RT #26796]
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington3229. [bug] Fix local variable to struct var assignment
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington found by CLANG warning.
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson3228. [tuning] Dynamically grow symbol table to improve zone
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson loading performance. [RT #26523]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson3227. [bug] Interim fix to make WKS's use of getprotobyname()
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson and getservbyname() self thread safe. [RT #26232]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson3226. [bug] Address minor resource leakages. [RT #26624]
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson messages. [RT #26507]
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington3223. [bug] 'task_test privilege_drop' generated false positives.
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington3222. [cleanup] Replace dns_journal_{get,set}_bitws with
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington dns_journal_{get,set}_sourceserial. [RT #26634]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3221. [bug] Fixed a potential core dump on shutdown due to
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington referencing fetch context after it's been freed.
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington --- 9.9.0b2 released ---
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson could fail to set the database version correctly,
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington causing an assertion failure. [RT #26180]
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington3219. [bug] Disable NOEDNS caching following a timeout.
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington3218. [security] Cache lookup could return RRSIG data associated with
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington nonexistent records, leading to an assertion
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson failure. [RT #26590]
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley3214. [func] Add 'named -U' option to set the number of UDP
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson listener threads per interface. [RT #26485]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington list prior to adding a reference to it leading a
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington possible assertion failure. [RT #23219]
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington option prints in single-line-per-record format.
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson3210. [bug] Canceling the oldest query due to recursive-client
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews overload could trigger an assertion failure. [RT #26463]
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
d72269740049af28b091ba81d68a067c88f53547Mark Andrews3208. [bug] 'dig -y' handle unknown tsig algorithm better.
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
5e16689bd396d261779526345a1c5207e3308477Andreas Gustafsson3205. [func] Upgrade dig's defaults to better reflect modern
f7321615eaaf63461bd682513d2873d97ae31771Mark Andrews nameserver behavior. Enable "dig +adflag" and
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson "dig +edns=0" by default. Enable "+dnssec" when
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington running "dig +trace". [RT #23497]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington3204. [bug] When a master server that has been marked as
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson unreachable sends a NOTIFY, mark it reachable
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson again. [RT #25960]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson3203. [bug] Increase log level to 'info' for validation failures
725fec8d79ff36402b0f90a7a05aafa7964e387fBrian Wellington from expired or not-yet-valid RRSIGs. [RT #21796]
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington3202. [bug] NOEDNS caching on timeout was too aggressive.
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson3201. [func] 'rndc querylog' can now be given an on/off parameter
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson instead of only being used as a toggle. [RT #18351]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson3200. [doc] Some rndc functions were undocumented or were
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson missing from 'rndc -h' output. [RT #25555]
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews3199. [func] When logging client information, include the name
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews being queried. [RT #25944]
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington3198. [doc] Clarified that dnssec-settime can alter keyfile
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington permissions. [RT #24866]
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington3197. [bug] Don't try to log the filename and line number when
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington the config parser can't open a file. [RT #22263]
12acad068846c11ad7bb9adb23f02a6fc37b4e17Andreas Gustafsson3196. [bug] nsupdate: return nonzero exit code when target zone
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington doesn't exist. [RT #25783]
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews3195. [cleanup] Silence "file not found" warnings when loading
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews managed-keys zone. [RT #26340]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington3194. [doc] Updated RFC references in the 'empty-zones-enable'
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington documentation. [RT #25203]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington3192. [bug] A query structure could be used after being freed.
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington3191. [bug] Print NULL records using "unknown" format. [RT #26392]
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson3190. [bug] Underflow in error handling in isc_mutexblock_init.
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson3189. [test] Added a summary report after system tests. [RT #25517]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson3188. [bug] zone.c:zone_refreshkeys() could fail to detach
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson references correctly when errors occurred, causing
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson a hang on shutdown. [RT #26372]
228c679d7a269423019f7c528db92e855f08240bMark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson --- 9.9.0b1 released ---
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson3186. [bug] Version/db mis-match in rpz code. [RT #26180]
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington3185. [func] New 'rndc signing' option for auto-dnssec zones:
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington - 'rndc signing -list' displays the current
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington state of signing operations
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington - 'rndc signing -clear' clears the signing state
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington records for keys that have fully signed the zone
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington - 'rndc signing -nsec3param' sets the NSEC3
175ba246fb074ae8caca0e76ecc8055517ab486cBrian Wellington parameters for the zone
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington The 'rndc keydone' syntax is removed. [RT #23729]
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington3184. [bug] named had excessive cpu usage when a redirect zone was
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington configured. [RT #26013]
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews3182. [bug] Auth servers behind firewalls which block packets
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews greater than 512 bytes may cause other servers to
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer perform poorly. Now, adb retains edns information
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson and caches noedns servers. [RT #23392/24964]
61470ed14b20c55c0730461165faa582a3775eb8Mark Andrews3181. [func] Inline-signing is now supported for master zones.
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews3180. [func] Local copies of slave zones are now saved in raw
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews format by default, to improve startup performance.
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington 'masterfile-format text;' can be used to override
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington the default, if desired. [RT #25867]
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington3179. [port] kfreebsd: build issues. [RT #26273]
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington3178. [bug] A race condition introduced by change #3163 could
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley cause an assertion failure on shutdown. [RT #26271]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3177. [func] 'rndc keydone', remove the indicator record that
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley named has finished signing the zone with the
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley corresponding key. [RT #26206]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley3176. [doc] Corrected example code and added a README to the
065958bd3d26dbc25ff313cfcee07bb6a77ee47eBrian Wellington sample external DLZ module in contrib/dlz/example.
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence3175. [bug] Fix how DNSSEC positive wildcard responses from a
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson NSEC3 signed zone are validated. Stop sending a
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson unnecessary NSEC3 record when generating such
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson responses. [RT #26200]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson3174. [bug] Always compute to revoked key tag from scratch.
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence3173. [port] Correctly validate root DS responses. [RT #25726]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence3172. [port] darwin 10.* and freebsd [89] are now built threaded by
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson 'rndc addzone'. [RT #25600]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews --- 9.9.0a3 released ---
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews3170. [func] RPZ update:
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson - fix precedence among competing rules
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson - improve ARM text including documenting rule precedence
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews - try to rewrite CNAME chains until first hit
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews - new "rpz" logging channel
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson - RDATA for CNAME rules can include wildcards
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews - replace "NO-OP" named.conf policy override with
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson is still recognized)
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington3169. [func] Catch db/version mis-matches when calling dns_db_*().
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence3168. [bug] Nxdomain redirection could trigger an assert with
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence a ANY query. [RT #26017]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence3167. [bug] Negative answers from forwarders were not being
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence correctly tagged making them appear to not be cached.
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence3166. [bug] Upgrading a zone to support inline-signing failed.
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington3165. [bug] dnssec-signzone could generate new signatures when
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington resigning, even when valid signatures were already
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington present. [RT #26025]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence3164. [func] Enable DLZ modules to retrieve client information,
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence so that responses can be changed depending on the
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence source address of the query. [RT #25768]
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence3163. [bug] Use finer-grained locking in client.c to address
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews concurrency problems with large numbers of threads.
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson3162. [test] start.pl: modified to allow for "named.args" in
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson ns*/ subdirectory to override stock arguments to
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson named. Largely from RT #26044, but no separate ticket.
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
a06df85974344892431b14bec51c1beeee971eccAndreas Gustafsson assertion failures. [RT #25880]
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson3160. [bug] When printing out a NSEC3 record in multiline form
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington the newline was not being printed causing type codes
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington to be run together. [RT #25873]
9be0c3d823200bed1286cff6bddf2a8c639f5287Brian Wellington3159. [bug] On some platforms, named could assert on startup
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence when running in a chrooted environment without
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence /proc. [RT #25863]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence3158. [bug] Recursive servers would prefer a particular UDP
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson socket instead of using all available sockets.
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington the config file before pausing the server. [RT #21373]
732f883c12f171186d7f3331ebdf5d16044b14b0Brian Wellington3156. [placeholder]
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson --- 9.9.0a2 released ---
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson3155. [bug] Fixed a build failure when using contrib DLZ
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson drivers (e.g., mysql, postgresql, etc). [RT #25710]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson3154. [bug] Attempting to print an empty rdataset could trigger
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson an assert. [RT #25452]
f53848e17123569387b279578f0100dca5407da5Mark Andrews3153. [func] Extend request-ixfr to zone level and remove the
f53848e17123569387b279578f0100dca5407da5Mark Andrews side effect of forcing an AXFR. [RT #25156]
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington3152. [cleanup] Some versions of gcc and clang failed due to
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington incorrect use of __builtin_expect. [RT #25183]
1599bd6998f54b2b34804d7332f543744368a586Mark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson incorrectly. [RT #21050]
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson3150. [func] Improved startup and reconfiguration time by
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews enabling zones to load in multiple threads. [RT #25333]
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington3149. [placeholder]
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington3148. [bug] Processing of normal queries could be stalled when
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson forwarding a UPDATE message. [RT #24711]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson3147. [func] Initial inline signing support. [RT #23657]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson --- 9.9.0a1 released ---
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson3145. [test] Capture output of ATF unit tests in "./atf.out" if
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews there were any errors while running them. [RT #25527]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson3144. [bug] dns_dbiterator_seek() could trigger an assert when
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson used with a nonexistent database node. [RT #25358]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson3143. [bug] Silence clang compiler warnings. [RT #25174]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson3142. [bug] NAPTR is class agnostic. [RT #25429]
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence3141. [bug] Silence spurious "zone serial (0) unchanged" messages
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence associated with empty zones. [RT #25079]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence3140. [func] New command "rndc flushtree <name>" clears the
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence specified name from the server cache along with
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence all names under it. [RT #19970]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence for the hashing algorithms (md5, sha1 - sha512, and
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence their hmac counterparts). [RT #25067]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence3138. [bug] Address memory leaks and out-of-order operations when
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington shutting named down. [RT #25210]
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington3137. [func] Improve hardware scalability by allowing multiple
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington worker threads to process incoming UDP packets.
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington This can significantly increase query throughput
253f774e358dba38742a484426a4cadf4f248817Brian Wellington on some systems. [RT #22992]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington3136. [func] Add RFC 1918 reverse zones to the list of built-in
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington empty zones switched on by the 'empty-zones-enable'
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington option. [RT #24990]
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson3134. [bug] Improve the accuracy of dnssec-signzone's signing
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson statistics. [RT #16030]
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington3133. [bug] Change #3114 was incomplete. [RT #24577]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer3132. [placeholder]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer3131. [tuning] Improve scalability by allocating one zone task
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence per 100 zones at startup time, rather than using a
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence fixed-size task table. [RT #24406]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington3130. [func] Support alternate methods for managing a dynamic
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington zone's serial number. Two methods are currently
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington defined using serial-update-method, "increment"
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer (default) and "unixtime". [RT #23849]
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence3129. [bug] Named could crash on 'rndc reconfig' when
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson allow-new-zones was set to yes and named ACLs
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence were used. [RT #22739]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson3128. [func] Inserting an NSEC3PARAM via dynamic update in an
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington auto-dnssec zone that has not been signed yet
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington will cause it to be signed with the specified NSEC3
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington parameters when keys are activated. The
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews NSEC3PARAM record will not appear in the zone until
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington it is signed, but the parameters will be stored.
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington3127. [bug] 'rndc thaw' will now remove a zone's journal file
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington if the zone serial number has been changed and
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington ixfr-from-differences is not in use. [RT #24687]
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington3126. [security] Using DNAME record to generate replacements caused
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington RPZ to exit with a assertion failure. [RT #24766]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington3125. [security] Using wildcard CNAME records as a replacement with
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson RPZ caused named to exit with a assertion failure.
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson3124. [bug] Use an rdataset attribute flag to indicate
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington negative-cache records rather than using rrtype 0;
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington this will prevent problems when that rrtype is
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington used in actual DNS packets. [RT #24777]
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson3123. [security] Change #2912 exposed a latent flaw in
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson dns_rdataset_totext() that could cause named to
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington crash with an assertion failure. [RT #24777]
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson3121. [security] An authoritative name server sending a negative
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson response containing a very large RRset could
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews trigger an off-by-one error in the ncache code
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson and crash named. [RT #24650]
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson3120. [bug] Named could fail to validate zones listed in a DLV
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews that validated insecure without using DLV and had
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson DS records in the parent zone. [RT #24631]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3119. [bug] When rolling to a new DNSSEC key, a private-type
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson record could be created and never marked complete.
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson3118. [bug] nsupdate could dump core on shutdown when using
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson SIG(0) keys. [RT #24604]
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews3117. [cleanup] Remove doc and parser references to the
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews never-implemented 'auto-dnssec create' option.
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson3116. [func] New 'dnssec-update-mode' option controls updates
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson of DNSSEC records in signed dynamic zones. Set to
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson 'no-resign' to disable automatic RRSIG regeneration
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson while retaining the ability to sign new or changed
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson data. [RT #24533]
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson3115. [bug] Named could fail to return requested data when
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson following a CNAME that points into the same zone.
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews inactive and there is no replacement key. [RT #23136]
483958540f0034d543f0564beb7877326f15a45bMark Andrews3113. [doc] Document the relationship between serial-query-rate
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley and NOTIFY messages.
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson3112. [doc] Add missing descriptions of the update policy name
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson types "ms-self", "ms-subdomain", "krb5-self" and
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson "krb5-subdomain", which allow machines to update
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews their own records, to the BIND 9 ARM.
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson dnssec-validation, added test cases to the
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson checkconf system test. [RT #24398]
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews when attempting to sign with no KSK. [RT #24369]
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews3109. [func] The also-notify option now uses the same syntax
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews as a zone's masters clause. This means it is
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews now possible to specify a TSIG key to use when
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews sending notifies to a given server, or to include
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson an explicit named masters list in an also-notify
42928d936e79dbda7ea00bbcab6e5d8034a95bf8Andreas Gustafsson statement. [RT #23508]
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington3108. [cleanup] dnssec-signzone: Clarified some error and
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson code (use -P instead). [RT #20852]
d7e77a9b59138e8a94d3dfa4e41e1852ad51ac25Andreas Gustafsson3107. [bug] dnssec-signzone: Report the correct number of ZSKs
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson when using -x. [RT #20852]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson3106. [func] When logging client requests, include the name of
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson the TSIG key if any. [RT #23619]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson3105. [bug] GOST support can be suppressed by "configure
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley --without-gost" [RT #24367]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley3104. [bug] Better support for cross-compiling. [RT #24367]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley3103. [bug] Configuring 'dnssec-validation auto' in a view
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley instead of in the options statement could trigger
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley an assertion failure in named-checkconf. [RT #24382]
5bbed85a33186db4e629e98f45ca702ac6b09127Brian Wellington3102. [func] New 'dnssec-loadkeys-interval' option configures
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson how often, in minutes, to check the key repository
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson for updates when using automatic key maintenance.
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson Default is every 60 minutes (formerly hard-coded
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson to 12 hours). [RT #23744]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson3101. [bug] Zones using automatic key maintenance could fail
86a4d80e0624a10b1824d25018246e1ea63f55d2Andreas Gustafsson to check the key repository for updates. [RT #23744]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson3100. [security] Certain response policy zone configurations could
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington trigger an INSIST when receiving a query of type
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington RRSIG. [RT #24280]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson3099. [test] "dlz" system test now runs but gives R:SKIPPED if
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson not compiled with --with-dlz-filesystem. [RT #24146]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson3098. [bug] DLZ zones were answering without setting the AA bit.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3097. [test] Add a tool to test handling of malformed packets.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3096. [bug] Set KRB5_KTNAME before calling log_cred() in
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence dst_gssapi_acceptctx(). [RT #24004]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3095. [bug] Handle isolated reserved ports in the port range.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3094. [doc] Expand dns64 documentation.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson3092. [bug] Signatures for records at the zone apex could go
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington stale due to an incorrect timer setting. [RT #23769]
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington3091. [bug] Fixed a bug in which zone keys that were published
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington and then subsequently activated could fail to trigger
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews automatic signing. [RT #22911]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson3090. [func] Make --with-gssapi default [RT #23738]
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington3089. [func] dnssec-dsfromkey now supports reading keys from
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington standard input "dnssec-dsfromkey -f -". [RT #20662]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews and add setup.sh in order to resolve changing
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson named.conf issue. [RT #23687]
733e928f714c848aa394c2d12b6239bc7780101bMark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson type "external" could cause a crash. [RT #23735]
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson3086. [bug] Running dnssec-settime -f on an old-style key will
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson now force an update to the new key format even if no
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington other change has been specified, using "-P now -A now"
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington as default values. [RT #22474]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson3085. [func] New '-R' option in dnssec-signzone forces removal
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson of signatures which have not yet expired but
066faef1195d539f575816ccab87ff3e85b1b13eBrian Wellington were generated by a key that no longer exists.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews removes the journal file after syncing. Also,
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer "rndc freeze" no longer removes journal files.
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer3083. [bug] NOTIFY messages were not being sent when generating
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer a NSEC3 chain incrementally. [RT #23702]
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer3082. [port] strtok_r is threads only. [RT #23747]
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson3081. [bug] Failure of DNAME substitution did not return
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson YXDOMAIN. [RT #23591]
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
4ec1a96d90784f70380bdec66f8a0bd6718a5b71Mark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews3078. [func] Added a new include file with function typedefs
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews for the DLZ "dlopen" driver. [RT #23629]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington3077. [bug] zone.c:zone_refreshkeys() incorrectly called
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews dnssec-keyfromlabel sets the default TTL of the
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews key. When possible, automatic signing will use that
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews TTL when the key is published. [RT #23304]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews timestamp when determining which keys are active.
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews3074. [bug] Make the adb cache read through for zone data and
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence glue learn for zone named is authoritative for.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence3073. [bug] managed-keys changes were not properly being recorded.
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson3071. [bug] has_nsec could be used uninitialized in
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence update.c:next_active. [RT #20256]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews3069. [cleanup] Silence warnings messages from clang static analysis.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3068. [bug] Named failed to build with a OpenSSL without engine
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews support. [RT #23473]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews select the master/slave zones. [RT #23580]
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews3066. [func] The DLZ "dlopen" driver is now built by default,
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington no longer requiring a configure option. To
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington disable it, use "configure --without-dlopen".
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington Driver also supported on win32. [RT #23467]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3064. [bug] powerpc: add sync instructions to the end of atomic
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington operations. [RT #23469]
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson3062. [func] Made several changes to enhance human readability
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson of DNSSEC data in dig output and in generated
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson - DNSKEY record comments are more verbose, no
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson longer used in multiline mode only
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington - multiline RRSIG records reformatted
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington - multiline output mode for NSEC3PARAM records
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington - "dig +norrcomments" suppresses DNSKEY comments
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington - "dig +split=X" breaks hex/base64 records into
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington fields of width X; "dig +nosplit" disables this.
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews3061. [func] New option "dnssec-signzone -D", only write out
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson generated DNSSEC records. [RT #22896]
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson3060. [func] New option "dnssec-signzone -X <date>" allows
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington specification of a separate expiration date
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3059. [test] Added a regression test for change #3023.
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence3058. [bug] Cause named to terminate at startup or rndc reconfig/
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence reload to fail, if a log file specified in the conf
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence file isn't a plain file. [RT #22771]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3057. [bug] "rndc secroots" would abort after the first error
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington and so could miss some views. [RT #23488]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3056. [func] Added support for URI resource record. [RT #23386]
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington3055. [placeholder]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley3054. [bug] Added elliptic curve support check in
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley GOST OpenSSL engine detection. [RT #23485]
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington3053. [bug] Under a sustained high query load with a finite
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley max-cache-size, it was possible for cache memory
86c270cbb24117976d6cd3098c3010e067915c24Andreas Gustafsson to be exhausted and not recovered. [RT #23371]
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews3052. [test] Fixed last autosign test report. [RT #23256]
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews3051. [bug] NS records obscure DNAME records at the bottom of the
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews zone if both are present. [RT #23035]
8217f91f8d2dd6e94a2bf893284506ea47cd294aAndreas Gustafsson3050. [bug] The autosign system test was timing dependent.
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer Wait for the initial autosigning to complete
21a170a0cee1ec2df7be0ce334da309f9a892ea9Andreas Gustafsson before running the rest of the test. [RT #23035]
588b63e1a86fb707172830e14897da624ed380edMark Andrews3049. [bug] Save and restore the gid when creating creating
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington named.pid at startup. [RT #23290]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington3048. [bug] Fully separate view key management. [RT #23419]
452d75b18f9d050086964fa39c326cf388517396Mark Andrews3047. [bug] DNSKEY NODATA responses not cached fixed in
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews validator.c. Tests added to dnssec system test.
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington3046. [bug] Use RRSIG original TTL to compute validated RRset
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington and RRSIG TTL. [RT #23332]
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews3045. [removed] Replaced by change #3050.
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington3043. [test] Merged in the NetBSD ATF test framework (currently
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington version 0.12) for development of future unit tests.
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews Use configure --with-atf to build ATF internally
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews or configure --with-atf=prefix to use an external
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews copy. [RT #23209]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews addresses on systems with only IPv4 connectivity.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3041. [bug] dnssec-signzone failed to generate new signatures on
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer ttl changes. [RT #23330]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3040. [bug] Named failed to validate insecure zones where a node
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson with a CNAME existed between the trust anchor and the
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer top of the zone. [RT #23338]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3039. [func] Redirect on NXDOMAIN support. [RT #23146]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3038. [bug] Install <dns/rpz.h>. [RT #23342]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer3037. [doc] Update COPYRIGHT to contain all the individual
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews copyright notices that cover various parts.
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson3036. [bug] Check built-in zone arguments to see if the zone
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson is re-usable or not. [RT #21914]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson3035. [cleanup] Simplify by using strlcpy. [RT #22521]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3029. [bug] isc_netaddr_format() handle a zero sized buffer.
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson catch NULL pointer dereferences before they happen.
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington after calling grow_headerspace() and if not
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington re-call grow_headerspace() until we do. [RT #22521]
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington3025. [bug] Fixed a possible deadlock due to zone resigning.
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer3024. [func] RTT Banding removed due to minor security increase
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer but major impact on resolver latency. [RT #23310]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer3023. [bug] Named could be left in an inconsistent state when
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer receiving multiple AXFR response messages that were
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer not all TSIG-signed. [RT #23254]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson3021. [bug] Change #3010 was incomplete. [RT #22296]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson3020. [bug] auto-dnssec failed to correctly update the zone when
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews changing the DNSKEY RRset. [RT #23232]
e412ae947df6de858883564b8676a9650df70d9aMark Andrews3019. [test] Test: check apex NSEC3 records after adding DNSKEY
e412ae947df6de858883564b8676a9650df70d9aMark Andrews record via UPDATE. [RT #23229]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews if a zone may need to be re-signed. [RT #23120]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson3016. [bug] rndc usage missing '-b'. [RT #22937]
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson3014. [placeholder]
0e07026a21dfcaf57dc789e7ece20182dc36029cMark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson3012. [bug] Remove DNSKEY TTL change pairs before generating
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson signing records for any remaining DNSKEY changes.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson3011. [func] Change the default query timeout from 30 seconds
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson to 10. Allow setting this in named.conf using the new
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson 'resolver-query-timeout' option, which specifies a max
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson time in seconds. 0 means 'default' and anything longer
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson than 30 will be silently set to 30. [RT #22852]
dc2e45d08d73fdaefd92dbfa4d69b4d3f3b0f249Andreas Gustafsson3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson for refreshing managed-keys. [RT #22296]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3009. [bug] clients-per-query code didn't work as expected with
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson particular query patterns. [RT #22972]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson --- 9.8.0b1 released ---
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson3008. [func] Response policy zones (RPZ) support. [RT #21726]
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington3007. [bug] Named failed to preserve the case of domain names in
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington rdata which is not compressible when writing master
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson files. [RT #22863]
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews3006. [func] Allow dynamically generated TSIG keys to be preserved
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews across restarts of named. Initially this is for
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews TSIG keys generated using GSSAPI. [RT #22639]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews3005. [port] Solaris: Work around the lack of
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews gsskrb5_register_acceptor_identity() by setting
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews the KRB5_KTNAME environment variable to the
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews contents of tkey-gssapi-keytab. Also fixed
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews test errors on MacOSX. [RT #22853]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews3004. [func] DNS64 reverse support. [RT #22769]
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence3003. [experimental] Added update-policy match type "external",
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson enabling named to defer the decision of whether to
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence allow a dynamic update to an external daemon.
051beeafa6547440da17985665b31952b85ede56Brian Wellington (Contributed by Andrew Tridgell.) [RT #22758]
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington3001. [func] Added a default trust anchor for the root zone, which
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington can be switched on by setting "dnssec-validation auto;"
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson in the named.conf options. [RT #21727]
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson3000. [bug] More TKEY/GSS fixes:
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence - nsupdate can now get the default realm from
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington the user's Kerberos principal
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington - corrected gsstest compilation flags
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson - improved documentation
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer - fixed some NULL dereferences
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer2999. [func] Add GOST support (RFC 5933). [RT #20639]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
abb38b673379d6dae7cbb495f814d73a4afe5c8bAndreas Gustafsson to the task api. [RT #22776]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2997. [func] named -V now reports the OpenSSL and libxml2 verions
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews it was compiled against. [RT #22687]
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson2996. [security] Temporarily disable SO_ACCEPTFILTER support.
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews2995. [bug] The Kerberos realm was not being correctly extracted
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews from the signer's identity. [RT #22770]
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews do not use threads on earlier versions. Also kill
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews the unproven-pthreads, mit-pthreads, and ptl2 support.
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2993. [func] Dynamically grow adb hash tables. [RT #21186]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson for looking at a secure delegation. [RT #22059]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews dynamic zones. [RT #22365]
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley interval validity when the interval is set to 0.
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2989. [func] Added support for writable DLZ zones. (Contributed
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley by Andrew Tridgell of the Samba project.) [RT #22629]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson of external DLZ drivers that can be loaded as
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson shared objects at runtime rather than linked with
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer named. Currently this is switched on via a
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews compile-time option, "configure --with-dlz-dlopen".
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews Note: the syntax for configuring DLZ zones
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley is likely to be refined in future releases.
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley (Contributed by Andrew Tridgell of the Samba
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley project.) [RT #22629]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2987. [func] Improve ease of configuring TKEY/GSS updates by
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff adding a "tkey-gssapi-keytab" option. If set,
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff updates will be allowed with any key matching
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff a principal in the specified keytab file.
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff "tkey-gssapi-credential" is no longer required
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson and is expected to be deprecated. (Contributed
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson by Andrew Tridgell of the Samba project.)
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2986. [func] Add new zone type "static-stub". It's like a stub
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson zone, but the nameserver names and/or their IP
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson addresses are statically configured. [RT #21474]
ba43c53451d5c38765f376eeede457178b36951aBob Halley2985. [bug] Add a regression test for change #2896. [RT #21324]
ba43c53451d5c38765f376eeede457178b36951aBob Halley2984. [bug] Don't run MX checks when the target of the MX record
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews is ".". [RT #22645]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews --- 9.8.0a1 released ---
668278867ba063995988507b6b28724ebb9f9391Mark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff increment the reference count.
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson Note: dns_tsigkey_createfromkey() callers should now
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson always call dst_key_free() rather than setting it
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson to NULL on success. [RT #22672]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2980. [bug] named didn't properly handle UPDATES that changed the
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson TTL of the NSEC3PARAM RRset. [RT #22363]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2979. [bug] named could deadlock during shutdown if two
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson "rndc stop" commands were issued at the same
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson time. [RT #22108]
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson2978. [port] hpux: look for <devpoll.h> [RT #21919]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2977. [bug] 'nsupdate -l' report if the session key is missing.
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2976. [bug] named could die on exit after negotiating a GSS-TSIG
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson key. [RT #22573]
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson wrong lock which could lead to server deadlock.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2974. [bug] Some valid UPDATE requests could fail due to a
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff consistency check examining the existing version
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff of the zone rather than the new version resulting
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff from the UPDATE. [RT #22413]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2973. [bug] bind.keys.h was being removed by the "make clean"
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington at the end of configure resulting in build failures
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington where there is very old version of perl installed.
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington Move it to "make maintainer-clean". [RT #22230]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2972. [bug] win32: address windows socket errors. [RT #21906]
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2971. [bug] Fixed a bug that caused journal files not to be
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley compacted on Windows systems as a result of
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley non-POSIX-compliant rename() semantics. [RT #22434]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2970. [security] Adding a NO DATA negative cache entry failed to clear
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington any matching RRSIG records. A subsequent lookup of
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington of NO DATA cache entry could trigger a INSIST when the
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson unexpected RRSIG was also returned with the NO DATA
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley CVE-2010-3613, VU#706148. [RT #22288]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley2969. [security] Fix acl type processing so that allow-query works
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson in options and view statements. Also add a new
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff set of tests to verify proper functioning.
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff CVE-2010-3615, VU#510208. [RT #22418]
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2968. [security] Named could fail to prove a data set was insecure
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson before marking it as insecure. One set of conditions
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson that can trigger this occurs naturally when rolling
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson DNSKEY algorithms.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff CVE-2010-3614, VU#837744. [RT #22309]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2967. [bug] 'host -D' now turns on debugging messages earlier.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff2966. [bug] isc_print_vsnprintf() failed to check if there was
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson space available in the buffer when adding a left
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson justified character with a non zero width,
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson (e.g. "%-1c"). [RT #22270]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson2965. [func] Test HMAC functions using test data from RFC 2104 and
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson RFC 4634. [RT #21702]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2964. [placeholder]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2963. [security] The allow-query acl was being applied instead of the
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington allow-query-cache acl to cache lookups. [RT #22114]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson2961. [bug] Be still more selective about the non-authoritative
0d00f4bb92090ff64d49ae803a2e75b3f299f547Andreas Gustafsson answers we apply change 2748 to. [RT #22074]
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2960. [func] Check that named accepts non-authoritative answers.
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson2959. [func] Check that named starts with a missing masterfile.
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson2958. [bug] named failed to start with a missing master file.
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington2957. [bug] entropy_get() and entropy_getpseudo() failed to match
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington the API for RAND_bytes() and RAND_pseudo_bytes()
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington respectively. [RT #21962]
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2955. [func] Provide more detail in the recursing log. [RT #22043]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson build_sqldbinstance failure. [RT #21623]
ec4060d3104e8bec28406232eb7338c81bb1b1c1Mark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson exact match" message when returning a wildcard
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson no data response. [RT #21744]
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson2952. [port] win32: named-checkzone and named-checkconf failed
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson to initialize winsock. [RT #21932]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2951. [bug] named failed to generate a correct signed response
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson in a optout, delegation only zone with no secure
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington delegations. [RT #22007]
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington2950. [bug] named failed to perform a SOA up to date check when
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington falling back to TCP on UDP timeouts when
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson ixfr-from-differences was set. [RT #21595]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2949. [bug] dns_view_setnewzones() contained a memory leak if
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson it was called multiple times. [RT #21942]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2948. [port] MacOS: provide a mechanism to configure the test
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington interfaces at reboot. See bin/tests/system/README
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington2947. [placeholder]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2946. [doc] Document the default values for the minimum and maximum
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson zone refresh and retry values in the ARM. [RT #21886]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2945. [doc] Update empty-zones list in ARM. [RT #21772]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2943. [func] Add support to load new keys into managed zones
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson without signing immediately with "rndc loadkeys".
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson Add support to link keys with "dnssec-keygen -S"
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson and "dnssec-settime -S". [RT #21351]
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson2941. [bug] sdb and sdlz (dlz's zone database) failed to support
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson DNAME at the zone apex. [RT #21610]
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2940. [port] Remove connection aborted error message on
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews Windows. [RT #21549]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews that fail to match the NSEC3PARAM record currently
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews in use. [RT #21868]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2938. [bug] When generating signed responses, from a signed zone
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews that uses NSEC3, named would use a uninitialized
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews pointer if it needed to skip a NSEC3 record because
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews it didn't match the selected NSEC3PARAM record for
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews zone. [RT #21868]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2937. [bug] Worked around an apparent race condition in over
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews memory conditions. Without this fix a DNS cache DB or
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson ADB could incorrectly stay in an over memory state,
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews effectively refusing further caching, which
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson subsequently made a BIND 9 caching server unworkable.
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson This fix prevents this problem from happening by
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson polling the state of the memory context, rather than
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson making a copy of the state, which appeared to cause
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews a race. This is a "workaround" in that it doesn't
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson solve the possible race per se, but several experiments
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson proved this change solves the symptom. Also, the
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson polling overhead hasn't been reported to be an issue.
e3402551ac9be809eeb3a4b7b30d023ba67dad28Brian Wellington This bug should only affect a caching server that
6d3f954c572db02159deedd444373161fda47a88Brian Wellington specifies a finite max-cache-size. It's also quite
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington likely that the bug happens only when enabling threads,
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington but it's not confirmed yet. [RT #21818]
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson2936. [func] Improved configuration syntax and multiple-view
3f31c8c2954f857e375db8e943a35f6aa5e230b4Andreas Gustafsson support for addzone/delzone feature (see change
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson #2930). Removed "new-zone-file" option, replaced
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson with "allow-new-zones (yes|no)". The new-zone-file
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson for each view is now created automatically, with
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson a filename generated from a hash of the view name.
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence It is no longer necessary to "include" the
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence new-zone-file in named.conf; this happens
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson automatically. Zones that were not added via
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington "rndc addzone" can no longer be removed with
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington "rndc delzone". [RT #19447]
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson2935. [bug] nsupdate: improve 'file not found' error message.
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington2933. [bug] 'dig +nsid' used stack memory after it went out of
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington scope. This could potentially result in a unknown,
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington potentially malformed, EDNS option being sent instead
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson of the desired NSID option. [RT #21781]
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence2932. [cleanup] Corrected a numbering error in the "dnssec" test.
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2931. [bug] Temporarily and partially disable change 2864
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson because it would cause infinite attempts of RRSIG
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson queries. This is an urgent care fix; we'll
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson revisit the issue and complete the fix later.
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington2930. [experimental] New "rndc addzone" and "rndc delzone" commands
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson allow dynamic addition and deletion of zones.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson To enable this feature, specify a "new-zone-file"
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson option at the view or options level in named.conf.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson Zone configuration information for the new zones
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson will be written into that file. To make the new
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson zones persist after a restart, "include" the file
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson into named.conf in the appropriate view. (Note:
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson This feature is not yet documented, and its syntax
d403e27f2b1c94f2b9349ddb68f50a141ae8d26dAndreas Gustafsson is expected to change.) [RT #19447]
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson2929. [bug] Improved handling of GSS security contexts:
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson - added LRU expiration for generated TSIGs
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson - added the ability to use a non-default realm
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson - added new "realm" keyword in nsupdate
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson - limited lifetime of generated keys to 1 hour
e0a9b524614889ca9b75f846cb6101fc448a60dcAndreas Gustafsson or the lifetime of the context (whichever is
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2928. [bug] Be more selective about the non-authoritative
385a9cb48a70b329e507c39d043fa9a44c659913James Brister answer we apply change 2748 to. [RT #21594]
3cb0de1c667237085c6a805715c31ddc5fdc9c4dBrian Wellington2927. [placeholder]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2926. [placeholder]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2925. [bug] Named failed to accept uncachable negative responses
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence from insecure zones. [RT #21555]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2924. [func] 'rndc secroots' dump a combined summary of the
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence current managed keys combined with trusted keys.
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington2923. [bug] 'dig +trace' could drop core after "connection
47ddde42728034854444cf17e278cebaea06f666Michael Graff timeout". [RT #21514]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2922. [contrib] Update zkt to version 1.0.
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2921. [bug] The resolver could attempt to destroy a fetch context
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence too soon. [RT #19878]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence to IPv4 clients. New acl 'filter-aaaa' (default any).
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2917. [func] Virtual time test framework. [RT #20801]
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington2916. [func] Add framework to use IPv6 in tests.
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
529a6b5224d751504027293a766a4c8b81241869Brian Wellington2915. [cleanup] Be smarter about which objects we attempt to compile
529a6b5224d751504027293a766a4c8b81241869Brian Wellington based on configure options. [RT #21444]
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson2914. [bug] Make the "autosign" system test more portable.
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington2913. [func] Add pkcs#11 system tests. [RT #20784]
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence2912. [func] Windows clients don't like UPDATE responses that clear
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence the zone section. [RT #20986]
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2911. [bug] dnssec-signzone didn't handle out of zone records well.
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2910. [func] Sanity check Kerberos credentials. [RT #20986]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson2909. [bug] named-checkconf -p could die if "update-policy local;"
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson was specified in named.conf. [RT #21416]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2908. [bug] It was possible for re-signing to stop after removing
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington a DNSKEY. [RT #21384]
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2907. [bug] The export version of libdns had undefined references.
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2905. [port] aix: set use_atomic=yes with native compiler.
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson2904. [bug] When using DLV, sub-zones of the zones in the DLV,
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson could be incorrectly marked as insecure instead of
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister secure leading to negative proofs failing. This was
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson a unintended outcome from change 2890. [RT #21392]
48cddfee7c4d90b1901d03ccc0e67e08908a8f2fMark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2902. [func] Add regression test for change 2897. [RT #21040]
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2900. [bug] The placeholder negative caching element was not
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson properly constructed triggering a INSIST in
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson dns_ncache_towire(). [RT #21346]
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson2899. [port] win32: Support linking against OpenSSL 1.0.0.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2898. [bug] nslookup leaked memory when -domain=value was
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson specified. [RT #21301]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2897. [bug] NSEC3 chains could be left behind when transitioning
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson to insecure. [RT #21040]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2896. [bug] "rndc sign" failed to properly update the zone
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson when adding a DNSKEY for publication only. [RT #21045]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2895. [func] genrandom: add support for the generation of multiple
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence files. [RT #20917]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2893. [bug] Improve managed keys support. New named.conf option
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence managed-keys-directory. [RT #20924]
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2892. [bug] Handle REVOKED keys better. [RT #20961]
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2891. [maint] Update empty-zones list to match
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson draft-ietf-dnsop-default-local-zones-13. [RT #21099]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2890. [bug] Handle the introduction of new trusted-keys and
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson DS, DLV RRsets better. [RT #21097]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington2889. [bug] Elements of the grammar where not properly reported.
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson2888. [bug] Only the first EDNS option was displayed. [RT #21273]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2887. [bug] Report the keytag times in UTC in the .key file,
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson local time is presented as a comment within the
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson comment. [RT #21223]
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington2886. [bug] ctime() is not thread safe. [RT #21223]
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington2885. [bug] Improve -fno-strict-aliasing support probing in
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington configure. [RT #21080]
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson2884. [bug] Insufficient validation in dns_name_getlabelsequence().
da527e4ff6a013364826637963e7ac372e024f33David Lawrence2883. [bug] 'dig +short' failed to handle really large datasets.
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews2882. [bug] Remove memory context from list of active contexts
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson before clearing 'magic'. [RT #21274]
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson2881. [bug] Reduce the amount of time the rbtdb write lock
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson is held when closing a version. [RT #21198]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence consistent. [RT #21078]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister2878. [func] Incrementally write the master file after performing
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister a AXFR. [RT #21010]
adade77942b069127a7094df419b3ad39dafb385James Brister2877. [bug] The validator failed to skip obviously mismatching
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence RRSIGs. [RT #21138]
adade77942b069127a7094df419b3ad39dafb385James Brister2876. [bug] Named could return SERVFAIL for negative responses
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews from unsigned zones. [RT #21131]
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson2875. [bug] dns_time64_fromtext() could accept non digits.
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2874. [bug] Cache lack of EDNS support only after the server
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson successfully responds to the query using plain DNS.
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2873. [bug] Canceling a dynamic update via the dns/client module
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson could trigger an assertion failure. [RT #21133]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2872. [bug] Modify dns/client.c:dns_client_createx() to only
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson require one of IPv4 or IPv6 rather than both.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2871. [bug] Type mismatch in mem_api.c between the definition and
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson the header file, causing build failure with
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson --enable-exportlib. [RT #21138]
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2868. [cleanup] Run "make clean" at the end of configure to ensure
5096958739769958dd7a6b69356bf41260033873David Lawrence any changes made by configure are integrated.
5096958739769958dd7a6b69356bf41260033873David Lawrence Use --with-make-clean=no to disable. [RT #20994]
5096958739769958dd7a6b69356bf41260033873David Lawrence2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
5096958739769958dd7a6b69356bf41260033873David Lawrence don't like it. [RT #20986]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence2866. [bug] Windows does not like the TSIG name being compressed.
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence2865. [bug] memset to zero event.data. [RT #20986]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson updating DS records. [RT #20896]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2861. [doc] dnssec-settime man pages didn't correctly document the
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence inactivation time. [RT #21039]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington2860. [bug] named-checkconf's usage was out of date. [RT #21039]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington2859. [bug] When canceling validation it was possible to leak
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington memory. [RT #20800]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2858. [bug] RTT estimates were not being adjusted on ICMP errors.
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2857. [bug] named-checkconf did not fail on a bad trusted key.
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington2856. [bug] The size of a memory allocation was not always properly
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister recorded. [RT #20927]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2855. [func] nsupdate will now preserve the entered case of domain
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister names in update requests it sends. [RT #20928]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2854. [func] dig: allow the final soa record in a axfr response to
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister be suppressed, dig +onesoa. [RT #20929]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2851. [doc] nslookup.1, removed <informalexample> from the docbook
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence source as it produced bad nroff. [RT #21007]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2850. [bug] If isc_heap_insert() failed due to memory shortage
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson the heap would have corrupted entries. [RT #20951]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2849. [bug] Don't treat errors from the xml2 library as fatal.
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews README.rfc5011 into the ARM. [RT #20899]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2846. [bug] EOF on unix domain sockets was not being handled
96ab25294b028270eb1be867613df8a6c999b332David Lawrence correctly. [RT #20731]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2844. [doc] notify-delay default in ARM was wrong. It should have
96ab25294b028270eb1be867613df8a6c999b332David Lawrence been five (5) seconds.
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson creating key files if there is a chance that the new
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson key ID will collide with an existing one after
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson either of the keys has been revoked. (To override
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson this in the case of dnssec-keyfromlabel, use the -y
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson option. dnssec-keygen will simply create a
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington different, non-colliding key, so an override is
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington not necessary.) [RT #20838]
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington2842. [func] Added "smartsign" and improved "autosign" and
96ab25294b028270eb1be867613df8a6c999b332David Lawrence "dnssec" regression tests. [RT #20865]
845e0b5f968d4ac069ac8b802730467df8cd7136Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson2840. [bug] Temporary fixed pkcs11-destroy usage check.
6a8832f784bd53aa6afbda22f6187cea6490e1e1Andreas Gustafsson2839. [bug] A KSK revoked by named could not be deleted.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2838. [placeholder]
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2837. [port] Prevent Linux spurious warnings about fwrite().
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2836. [bug] Keys that were scheduled to become active could
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence be delayed. [RT #20874]
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2835. [bug] Key inactivity dates were inadvertently stored in
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence the private key file with the outdated tag
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson "Unpublish" rather than "Inactive". This has been
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson fixed; however, any existing keys that had Inactive
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson dates set will now need to have them reset, using
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson 'dnssec-settime -I'. [RT #20868]
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington2834. [bug] HMAC-SHA* keys that were longer than the algorithm
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson digest length were used incorrectly, leading to
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson interoperability problems with other DNS
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson implementations. This has been corrected.
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson (Note: If an oversize key is in use, and
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson compatibility is needed with an older release of
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson BIND, the new tool "isc-hmac-fixup" can convert
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson the key secret to a form that will work with all
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson versions.) [RT #20751]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson to avoid redefinition in some OSs [RT 20831]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2831. [security] Do not attempt to validate or cache
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews out-of-bailiwick data returned with a secure
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews answer; it must be re-fetched from its original
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews source and validated in that context. [RT #20819]
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson passes. [RT #20813]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2829. [bug] Fixed potential node inconsistency in rbtdb.c.
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2828. [security] Cached CNAME or DNAME RR could be returned to clients
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson without DNSSEC validation. [RT #20737]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson being released. [RT #20740]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence was in the process of being created was not properly
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence recorded in the zone. [RT #20786]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2824. [bug] "rndc sign" was not being run by the correct task.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence2822. [bug] rbtdb.c:loadnode() could return the wrong result.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2821. [doc] Add note that named-checkconf doesn't automatically
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2820. [func] Handle read access failure of OpenSSL configuration
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson file more user friendly (PKCS#11 engine patch).
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2818. [cleanup] rndc could return an incorrect error code
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson when a zone was not found. [RT #20767]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2816. [bug] previous_closest_nsec() could fail to return
8775909be9fc67180fc480115716f88174e74471James Brister data for NSEC3 nodes [RT #29730]
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister2815. [bug] Exclusively lock the task when freezing a zone.
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2814. [func] Provide a definitive error message when a master
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington zone is not loaded. [RT #20757]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2813. [bug] Better handling of unreadable DNSSEC key files.
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence2812. [bug] Make sure updates can't result in a zone with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence NSEC-only keys and NSEC3 records. [RT #20748]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence output. [RT #20733]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2810. [doc] Clarified the process of transitioning an NSEC3 zone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to insecure. [RT #20746]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2809. [cleanup] Restored accidentally-deleted text in usage output
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in dnssec-settime and dnssec-revoke [RT #20739]
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews atomic.h is correctly installed by the architecture
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence specific subdirectories. [RT #20722]
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson2807. [bug] Fixed a possible ASSERT when reconfiguring zone
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson keys. [RT #20720]
99524919752c9b9abe1814007732b86592011cc1Brian Wellington --- 9.7.0rc1 released ---
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson when it had changed. [RT #20703]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2805. [bug] Fixed namespace problems encountered when building
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson external programs using non-exported BIND9 libraries
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson (i.e., built without --enable-exportlib). [RT #20679]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2804. [bug] Send notifies when a zone is signed with "rndc sign"
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson or as a result of a scheduled key change. [RT #20700]
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington and genrandom under windows. [RT #20670]
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2801. [func] Detect and report records that are different according
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson to DNSSEC but are semantically equal according to plain
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson DNS. Apply plain DNS comparisons rather than DNSSEC
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson comparisons when processing UPDATE requests.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence dnssec-signzone now removes such semantically duplicate
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson records prior to signing the RRset.
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson named-checkzone -r {ignore|warn|fail} (default warn)
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer named-compilezone -r {ignore|warn|fail} (default warn)
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson named.conf: check-dup-records {ignore|warn|fail};
8ae26e9f87560f9d2e495328d573c25af81c49beMark Andrews2800. [func] Reject zones which have NS records which refer to
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews CNAMEs, DNAMEs or don't have address record (class IN
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews only). Reject UPDATEs which would cause the zone
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews to fail the above checks if committed. [RT #20678]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2798. [bug] Addressed bugs in managed-keys initialization
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister and rollover. [RT #20683]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2797. [bug] Don't decrement the dispatch manager's maxbuffers.
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson2796. [bug] Missing dns_rdataset_disassociate() call in
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington log messages. [RT #18889]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington2794. [bug] Install <isc/namespace.h>. [RT #20677]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2793. [func] Add "autosign" and "metadata" tests to the
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister automatic tests. [RT #19946]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2792. [func] "filter-aaaa-on-v4" can now be set in view
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister options (if compiled in). [RT #20635]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2791. [bug] The installation of isc-config.sh was broken.
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson2790. [bug] Handle DS queries to stub zones. [RT #20440]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2788. [bug] dnssec-signzone could sign with keys that were
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson not requested [RT #20625]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2787. [bug] Spurious log message when zone keys were
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence dynamically reconfigured. [RT #20659]
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson --- 9.7.0b3 released ---
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2785. [bug] Revoked keys could fail to self-sign [RT #20652]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2784. [bug] TC was not always being set when required glue was
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence dropped. [RT #20655]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson buffer size of 512 or less. [RT #20654]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2782. [port] win32: use getaddrinfo() for hostname lookups.
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2781. [bug] Inactive keys could be used for signing. [RT #20649]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2780. [bug] dnssec-keygen -A none didn't properly unset the
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister activation date in all cases. [RT #20648]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2779. [bug] Dynamic key revocation could fail. [RT #20644]
47c196192afa37b2dea728e52579779f190bf07fJames Brister2778. [bug] dnssec-signzone could fail when a key was revoked
29196ffb72a1337c72ffd6d52f1c8348f84c644eJames Brister without deleting the unrevoked version. [RT #20638]
adf82221858138f295bce732e86dcac34645692eJames Brister2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2776. [bug] Change #2762 was not correct. [RT #20647]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson in dnssec-keyfromlabel. [RT #20643]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2774. [bug] Existing cache DB wasn't being reused after
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington reconfiguration. [RT #20629]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2773. [bug] In autosigned zones, the SOA could be signed
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister with the KSK. [RT #20628]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2772. [security] When validating, track whether pending data was from
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister the additional section or not and only return it if
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister validates as secure. [RT #20438]
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson2771. [bug] dnssec-signzone: DNSKEY records could be
0380c44d0238a88e167526954d630d071739ed28Mark Andrews corrupted when importing from key files [RT #20624]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews causing FORMERR responses. [RT #20526]
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2769. [cleanup] Change #2742 was incomplete. [RT #19589]
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2767. [bug] named could crash on startup if a zone was
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence configured with auto-dnssec and there was no
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence key-directory. [RT #20615]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2766. [bug] isc_socket_fdwatchpoke() should only update the
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence socketmgr state if the socket is not pending on a
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson read or write. [RT #20603]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2765. [bug] Skip masters for which the TSIG key cannot be found.
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2762. [bug] DLV validation failed with a local slave DLV zone.
d5399cc351a549db957185993b320a3bffa40e41James Brister2761. [cleanup] Enable internal symbol table for backtrace only for
d5399cc351a549db957185993b320a3bffa40e41James Brister systems that are known to work. Currently, BSD
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister variants, Linux and Solaris are supported. [RT #20202]
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews2759. [doc] Add information about .jbk/.jnw files to
69b691c9624f31e59b8d128ada902a82127c15a3James Brister the ARM. [RT #20303]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2758. [bug] win32: Added a workaround for a windows 2008 bug
69b691c9624f31e59b8d128ada902a82127c15a3James Brister that could cause the UDP client handler to shut
69b691c9624f31e59b8d128ada902a82127c15a3James Brister down. [RT #19176]
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington2757. [bug] dig: assertion failure could occur in connect
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence timeout. [RT #20599]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2756. [bug] Fixed corrupt logfile message in update.c. [RT #20597]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2755. [placeholder]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2754. [bug] Secure-to-insecure transitions failed when zone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was signed with NSEC3. [RT #20587]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2753. [bug] Removed an unnecessary warning that could appear when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence building an NSEC chain. [RT #20589]
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence2752. [bug] Locking violation. [RT #20587]
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2750. [bug] dig: assertion failure could occur when a server
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence didn't have an address. [RT #20579]
0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence2749. [bug] ixfr-from-differences generated a non-minimal ixfr
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for NSEC3 signed zones. [RT #20452]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2748. [func] Identify bad answers from GTLD servers and treat them
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence as referrals. [RT #18884]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2747. [bug] Journal roll forwards failed to set the re-signing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence time of RRSIGs correctly. [RT #20541]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2746. [port] hpux: address signed/unsigned expansion mismatch of
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson2745. [bug] configure script didn't probe the return type of
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson gai_strerror(3) correctly. [RT #20573]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2744. [func] Log if a query was over TCP. [RT #19961]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff for a insecure delegation.
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff --- 9.7.0b2 released ---
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2742. [cleanup] Clarify some DNSSEC-related log messages in
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington2741. [func] Allow the dnssec-keygen progress messages to be
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington suppressed (dnssec-keygen -q). Automatically
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington suppress the progress messages when stdin is not
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson a tty. [RT #20474]
f34984369fbc87f6cc5c5d1059303377a1724d79James Brister2740. [placeholder]
b092aef75539b462d24b460b67ac49edb79aaff8Andreas Gustafsson2739. [cleanup] Clean up API for initializing and clearing trust
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson anchors for a view. [RT #20211]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson test. [RT #20453]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2737. [func] UPDATE requests can leak existence information.
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2736. [func] Improve the performance of NSEC signed zones with
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington more than a normal amount of glue below a delegation.
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington2735. [bug] dnssec-signzone could fail to read keys
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington that were specified on the command line with
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson full paths, but weren't in the current
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson directory. [RT #20421]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2734. [port] cygwin: arpaname did not compile. [RT #20473]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson2732. [func] Add optional filter-aaaa-on-v4 option, available
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson if built with './configure --enable-filter-aaaa'.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Filters out AAAA answers to clients connecting
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence via IPv4. (This is NOT recommended for general
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence use.) [RT #20339]
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington2731. [func] Additional work on change 2709. The key parser
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence will now ignore unrecognized fields when the
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington minor version number of the private key format
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington has been increased. It will reject any key with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the major version number increased. [RT #20310]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2730. [func] Have dnssec-keygen display a progress indication
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a la 'openssl genrsa' on standard error. Note
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when the first '.' is followed by a long stop
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence one has the choice between slow generation vs.
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence poor random quality, i.e., '-r /dev/urandom'.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2729. [func] When constructing a CNAME from a DNAME use the DNAME
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence TTL. [RT #20451]
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington dnssec-signzone now warn immediately if asked to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence write into a nonexistent directory. [RT #20278]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2727. [func] The 'key-directory' option can now specify a relative
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence path. [RT #20154]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2726. [func] Added support for SHA-2 DNSSEC algorithms,
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson RSASHA256 and RSASHA512. [RT #20023]
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson2725. [doc] Added information about the file "managed-keys.bind"
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson to the ARM. [RT #20235]
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2724. [bug] Updates to a existing node in secure zone using NSEC
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson were failing. [RT #20448]
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson isc_base64_totext(), didn't always mark regions of
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson memory as fully consumed after conversion. [RT #20445]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2722. [bug] Ensure that the memory associated with the name of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a node in a rbt tree is not altered during the life
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff of the node. [RT #20431]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2721. [port] Have dst__entropy_status() prime the random number
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff generator. [RT #20369]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2720. [bug] RFC 5011 trust anchor updates could trigger an
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff assert if the DNSKEY record was unsigned. [RT #20406]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2719. [func] Skip trusted/managed keys for unsupported algorithms.
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2718. [bug] The space calculations in opensslrsa_todns() were
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson incorrect. [RT #20394]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2717. [bug] named failed to update the NSEC/NSEC3 record when
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson the last private type record was removed as a result
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson of completing the signing the zone with a key.
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister --- 9.7.0b1 released ---
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister2715. [bug] Require OpenSSL support to be explicitly disabled.
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2713. [bug] powerpc: atomic operations missing asm("ics") /
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson __isync() calls.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2712. [func] New 'auto-dnssec' zone option allows zone signing
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson to be fully automated in zones configured for
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson dynamic DNS. 'auto-dnssec allow;' permits a zone
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson to be signed by creating keys for it in the
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson key-directory and using 'rndc sign <zone>'.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson 'auto-dnssec maintain;' allows that too, plus it
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson also keeps the zone's DNSSEC keys up to date
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson according to their timing metadata. [RT #19943]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2711. [port] win32: Add the bin/pkcs11 tools into the full
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence build. [RT #20372]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence zone option cause a zone to be signed with only KSKs
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence signing the DNSKEY RRset, not ZSKs. This reduces
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the size of a DNSKEY answer. [RT #20340]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2709. [func] Added some data fields, currently unused, to the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence private key file format, to allow implementation
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of explicit key rollover in a future release
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence without impairing backward or forward compatibility.
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson2708. [func] Insecure to secure and NSEC3 parameter changes via
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson update are now fully supported and no longer require
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson defines to enable. We now no longer overload the
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews apex. Secure to insecure changes are controlled by
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson by the named.conf option 'secure-to-insecure'.
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews Warning: If you had previously enabled support by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence adding defines at compile time to BIND 9.6 you should
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ensure that all changes that are in progress have
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence completed prior to upgrading to BIND 9.7. BIND 9.7
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is not backwards compatible.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2707. [func] dnssec-keyfromlabel no longer require engine name
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to be specified in the label if there is a default
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence engine or the -E option has been used. Also, it
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence now uses default algorithms as dnssec-keygen does
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington2706. [bug] Loading a zone with a very large NSEC3 salt could
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington trigger an assert. [RT #20368]
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington2705. [placeholder]
34b394b43e2207e8f8f3703f0402422121455638David Lawrence2704. [bug] Serial of dynamic and stub zones could be inconsistent
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister with their SOA serial. [RT #19387]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2703. [func] Introduce an OpenSSL "engine" argument with -E
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister for all binaries which can take benefit of
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister crypto hardware. [RT #20230]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2701. [doc] Correction to ARM: hmac-md5 is no longer the only
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister supported TSIG key algorithm. [RT #18046]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2700. [doc] The match-mapped-addresses option is discouraged.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2699. [bug] Missing lock in rbtdb.c. [RT #20037]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2698. [placeholder]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
c0b06c8275c5ea3cde8cc67f3a6f9cab1bd55d65James Brister S_IFREG are defined after including <isc/stat.h>.
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson2696. [bug] named failed to successfully process some valid
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson acl constructs. [RT #20308]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson2695. [func] DHCP/DDNS - update fdwatch code for use by
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson DHCP. Modify the api to isc_sockfdwatch_t (the
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson callback function for isc_socket_fdwatchcreate)
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence to include information about the direction (read
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson or write) and add isc_socket_fdwatchpoke.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson2693. [port] Add some noreturn attributes. [RT #20257]
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson2692. [port] win32: 32/64 bit cleanups. [RT #20335]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews chain when re-signing a previously-signed zone.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews Use -u to modify NSEC3 parameters or switch
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews between NSEC and NSEC3. [RT #20304]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson to decide to fetch the destination address. [RT #20305]
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson Also, added warnings when revoking a ZSK, as this is
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews not defined by protocol (but is legal). [RT #19943]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson2684. [cleanup] dig: formalize +ad and +cd as synonyms for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence +adflag and +cdflag. [RT #19305]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the NSEC3 parameters used to sign the zone change.
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence2682. [bug] "configure --enable-symtable=all" failed to
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson build. [RT #20282]
f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson decoded. [RT #20269]
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister2679. [func] dig -k can now accept TSIG keys in named.conf
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews format. [RT #20031]
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister was set. [RT #20258]
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister2677. [func] Changes to key metadata behavior:
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - Keys without "publish" or "active" dates set will
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister no longer be used for smart signing. However,
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister those dates will be set to "now" by default when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a key is created; to generate a key but not use
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister it yet, use dnssec-keygen -G.
e411a986b94276c28e6a971f9c3b61d45c635456James Brister - New "inactive" date (dnssec-keygen/settime -I)
e411a986b94276c28e6a971f9c3b61d45c635456James Brister sets the time when a key is no longer used for
e411a986b94276c28e6a971f9c3b61d45c635456James Brister signing but is still published.
e411a986b94276c28e6a971f9c3b61d45c635456James Brister - The "unpublished" date (-U) is deprecated in
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews favor of "deleted" (-D).
76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson2676. [bug] --with-export-installdir should have been
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson --with-export-includedir. [RT #20252]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2675. [bug] dnssec-signzone could crash if the key directory
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews did not exist. [RT #20232]
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence --- 9.7.0a3 released ---
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews without openssl. [RT #20231]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2673. [bug] The managed-keys.bind zone file could fail to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence load due to a spurious result from sync_keyzone()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2672. [bug] Don't enable searching in 'host' when doing reverse
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister lookups. [RT #20218]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2671. [bug] Add support for PKCS#11 providers not returning
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson the public exponent in RSA private keys
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence (OpenCryptoki for instance) in
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister dnssec-keyfromlabel. [RT #19294]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2670. [bug] Unexpected connect failures failed to log enough
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence information to be useful. [RT #20205]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2669. [func] Update PKCS#11 support to support Keyper HSM.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Update PKCS#11 patch to be against openssl-0.9.8i.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2668. [func] Several improvements to dnssec-* tools, including:
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - dnssec-keygen and dnssec-settime can now set key
36357e4304862fb47e9fae03c704cb6720310c45James Brister metadata fields 0 (to unset a value, use "none")
36357e4304862fb47e9fae03c704cb6720310c45James Brister - dnssec-revoke sets the revocation date in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence addition to the revoke bit
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - dnssec-settime can now print individual metadata
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence fields instead of always printing all of them,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and can print them in unix epoch time format for
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence use by scripts
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence2667. [func] Add support for logging stack backtrace on assertion
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failure (not available for all platforms). [RT #19780]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2666. [func] Added an 'options' argument to dns_name_fromstring()
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence (API change from 9.7.0a2). [RT #20196]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2665. [func] Clarify syntax for managed-keys {} statement, add
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ARM documentation about RFC 5011 support. [RT #19874]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2664. [bug] create_keydata() and minimal_update() in zone.c
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson didn't properly check return values for some
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence functions. [RT #19956]
b99d080717fdd741961d736581270d37bad8bec0David Lawrence2663. [func] win32: allow named to run as a service using
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson "NT AUTHORITY\LocalService" as the account. [RT #19977]
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence returned a misleading error code when lwresd was
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence down. [RT #20028]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence creating lwres context. [RT #20029]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2660. [func] Add a new set of DNS libraries for non-BIND9
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence applications. See README.libdns. [RT #19369]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2659. [doc] Clarify dnssec-keygen doc: key name must match zone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence name for DNSSEC keys. [RT #19938]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2658. [bug] dnssec-settime and dnssec-revoke didn't process
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence key file paths correctly. [RT #20078]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2657. [cleanup] Lower "journal file <path> does not exist, creating it"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence log level to debug 1. [RT #20058]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2656. [func] win32: add a "tools only" check box to the installer
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence which causes it to only install dig, host, nslookup,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence nsupdate and relevant DLLs. [RT #19998]
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence2655. [doc] Document that key-directory does not affect
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence bind.keys, rndc.key or session.key. [RT #20155]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2654. [bug] Improve error reporting on duplicated names for
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence deny-answer-xxx. [RT #20164]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2653. [bug] Treat ENGINE_load_private_key() failures as key
eefea43215016bce437ab4a7441b2851fd182960David Lawrence not found rather than out of memory. [RT #18033]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2652. [func] Provide more detail about what record is being
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence deleted. [RT #20061]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2651. [bug] Dates could print incorrectly in K*.key files on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 64-bit systems. [RT #20076]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2650. [bug] Assertion failure in dnssec-signzone when trying
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson to read keyset-* files. [RT #20075]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2649. [bug] Set the domain for forward only zones. [RT #19944]
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2647. [bug] Remove unnecessary SOA updates when a new KSK is
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley added. [RT #19913]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence which default to 64 bits. [RT #19927]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --- 9.7.0a2 released ---
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence2644. [bug] Change #2628 caused a regression on some systems;
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence named was unable to write the PID file and would
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington fail on startup. [RT #20001]
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington2643. [bug] Stub zones interacted badly with NSEC3 support.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2642. [bug] nsupdate could dump core on solaris when reading
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence improperly formatted key files. [RT #20015]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2641. [bug] Fixed an error in parsing update-policy syntax,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence added a regression test to check it. [RT #20007]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2640. [security] A specially crafted update packet will cause named
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence to exit. [RT #20000]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence2638. [bug] Install arpaname. [RT #19957]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2636. [func] Simplify zone signing and key maintenance with the
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff dnssec-* tools. Major changes:
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews - all dnssec-* tools now take a -K option to
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews specify a directory in which key files will be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - DNSSEC can now store metadata indicating when
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews they are scheduled to be published, activated,
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence revoked or removed; these values can be set by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dnssec-keygen or overwritten by the new
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dnssec-settime command
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence - dnssec-signzone -S (for "smart") option reads key
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence metadata and uses it to determine automatically
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence which keys to publish to the zone, use for
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence signing, revoke, or remove from the zone
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2634. [port] win32: Add support for libxml2, enable
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence statschannel. [RT #19773]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2633. [bug] Handle 15 bit rand() functions. [RT #19783]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2632. [func] util/kit.sh: warn if documentation appears to be out of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence date. [RT #19922]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2630. [func] Improved syntax for DDNS autoconfiguration: use
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "update-policy local;" to switch on local DDNS in a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence zone. (The "ddns-autoconf" option has been removed.)
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2629. [port] Check for seteuid()/setegid(), use setresuid()/
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence setresgid() if not present. [RT #19932]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2628. [port] linux: Allow /var/run/named/named.pid to be opened
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence at startup with reduced capabilities in operation.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2627. [bug] Named aborted if the same key was included in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence trusted-keys more than once. [RT #19918]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2626. [bug] Multiple trusted-keys could trigger an assertion
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failure. [RT #19914]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2624. [func] 'named-checkconf -p' will print out the parsed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence configuration. [RT #18871]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2623. [bug] Named started searches for DS non-optimally. [RT #19915]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2621. [doc] Made copyright boilerplate consistent. [RT #19833]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2620. [bug] Delay thawing the zone until the reload of it has
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence completed successfully. [RT #19750]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2619. [func] Add support for RFC 5011, automatic trust anchor
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence maintenance. The new "managed-keys" statement can
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence be used in place of "trusted-keys" for zones which
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence support this protocol. (Note: this syntax is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence expected to change prior to 9.7.0 final.) [RT #19248]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2618. [bug] The sdb and sdlz db_interator_seek() methods could
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence loop infinitely. [RT #19847]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2617. [bug] ifconfig.sh failed to emit an error message when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence run from the wrong location. [RT #19375]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2616. [bug] 'host' used the nameservers from resolv.conf even
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence when a explicit nameserver was specified. [RT #19852]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2615. [bug] "__attribute__((unused))" was in the wrong place
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for ia64 gcc builds. [RT #19854]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2614. [port] win32: 'named -v' should automatically be executed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in the foreground. [RT #19844]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2613. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --- 9.7.0a1 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2612. [func] Add default values for the arguments to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dnssec-keygen. Without arguments, it will now
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence generate a 1024-bit RSASHA1 zone-signing key,
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson or with the -f KSK option, a 2048-bit RSASHA1
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson key-signing key. [RT #19300]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2611. [func] Add -l option to dnssec-dsfromkey to generate
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence DLV records instead of DS records. [RT #19300]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2610. [port] sunos: Change #2363 was not complete. [RT #19796]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2609. [func] Simplify the configuration of dynamic zones:
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence - add ddns-confgen command to generate
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence configuration text for named.conf
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence - add zone option "ddns-autoconf yes;", which
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence causes named to generate a TSIG session key
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson and allow updates to the zone using that key
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence - add '-l' (localhost) option to nsupdate, which
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence causes nsupdate to connect to a locally-running
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence named process using the session key generated
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2608. [func] Perform post signing verification checks in
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence dnssec-signzone. These can be disabled with -P.
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson The post sign verification test ensures that for each
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson algorithm in use there is at least one non revoked
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence self signed KSK key. That all revoked KSK keys are
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence self signed. That all records in the zone are signed
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence by the algorithm. [RT #19653]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2607. [bug] named could incorrectly delete NSEC3 records for
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence empty nodes when processing a update request.
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence2606. [bug] "delegation-only" was not being accepted in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence delegation-only type zones. [RT #19717]
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence2605. [bug] Accept DS responses from delegation only zones.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2604. [func] Add support for DNS rebinding attack prevention through
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley new options, deny-answer-addresses and
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley deny-answer-aliases. Based on contributed code from
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley JD Nurmi, Google. [RT #18192]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2603. [port] win32: handle .exe extension of named-checkzone and
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley named-comilezone argv[0] names under windows.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2602. [port] win32: fix debugging command line build of libisccfg.
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence2601. [doc] Mention file creation mode mask in the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence named manual page.
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence2600. [doc] ARM: miscellaneous reformatting for different
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence page widths. [RT #19574]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2599. [bug] Address rapid memory growth when validation fails.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2598. [func] Reserve the -F flag. [RT #19657]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2597. [bug] Handle a validation failure with a insecure delegation
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence from a NSEC3 signed master/slave zone. [RT #19464]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington long, leading to inefficient memory usage or rejecting
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence newer cache entries in the worst case. [RT #19563]
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2594. [func] Have rndc warn if using its default configuration
77f372eed39827f5efef476602de7c0505f99b91David Lawrence file when the key file also exists. [RT #19424]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence2591. [bug] named could die when processing a update in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence removed_orphaned_ds(). [RT #19507]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2590. [func] Report zone/class of "update with no effect".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence2588. [bug] SO_REUSEADDR could be set unconditionally after failure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of bind(2) call. This should be rare and mostly
d111a46c88adda33a93839f4934e127b6147d87dBob Halley harmless, but may cause interference with other
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence processes that happen to use the same port. [RT #19642]
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson2587. [func] Improve logging by reporting serial numbers for
e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington when zone serial has gone backwards or unchanged.
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff or SDB. [RT #19577]
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington2585. [bug] Uninitialized socket name could be referenced via a
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington statistics channel, triggering an assertion failure in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence XML rendering. [RT #19427]
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson2584. [bug] alpha: gcc optimization could break atomic operations.
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2583. [port] netbsd: provide a control to not add the compile
d111a46c88adda33a93839f4934e127b6147d87dBob Halley date to the version string, -DNO_VERSION_DATE.
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews2582. [bug] Don't emit warning log message when we attempt to
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence remove non-existent journal. [RT #19516]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson Requires MySQL 5.0.19 or later. [RT #19084]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff2580. [bug] UpdateRej statistics counter could be incremented twice
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff for one rejection. [RT #19476]
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff2579. [bug] DNSSEC lookaside validation failed to handle unknown
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington algorithms. [RT #19479]
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley2578. [bug] Changed default sig-signing-type to 65534, because
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley 65535 turns out to be reserved. [RT #19477]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2577. [doc] Clarified some statistics counters. [RT #19454]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2576. [bug] NSEC record were not being correctly signed when
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington a zone transitions from insecure to secure.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington Handle such incorrectly signed zones. [RT #19114]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2575. [func] New functions dns_name_fromstring() and
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington dns_name_tostring(), to simplify conversion
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson of a string to a dns_name structure and vice
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson versa. [RT #19451]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2574. [doc] Document nsupdate -g and -o. [RT #19351]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2573. [bug] Replacing a non-CNAME record with a CNAME record in a
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews single transaction in a signed zone failed. [RT #19397]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2572. [func] Simplify DLV configuration, with a new option
4716e94840921878b26e493576f84afe4fe08752Mark Andrews "dnssec-lookaside auto;" This is the equivalent
4716e94840921878b26e493576f84afe4fe08752Mark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence plus setting a trusted-key for dlv.isc.org.
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence Note: The trusted key is hard-coded into named,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence but is also stored in (and can be overridden
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence by) $sysconfdir/bind.keys. As the ISC DLV key
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley rolls over it can be kept up to date by replacing
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley the bind.keys file with a key downloaded from
3886e748a4086b813e3453232a742903762fedadBob Halley2571. [func] Add a new tool "arpaname" which translates IP addresses
3886e748a4086b813e3453232a742903762fedadBob Halley to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
3886e748a4086b813e3453232a742903762fedadBob Halley2570. [func] Log the destination address the query was sent to.
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2569. [func] Move journalprint, nsec3hash, and genrandom
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley "make install" will put them in $sbindir. [RT #19301]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2568. [bug] Report when the write to indicate a otherwise
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington successful start fails. [RT #19360]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2567. [bug] dst__privstruct_writefile() could miss write errors.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington write_public_key() could miss write errors.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington dnssec-dsfromkey could miss write errors.
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson2566. [cleanup] Clarify logged message when an insecure DNSSEC
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley response arrives from a zone thought to be secure:
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson "insecurity proof failed" instead of "not
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley insecure". [RT #19400]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2565. [func] Add support for HIP record. Includes new functions
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley dns_rdata_hip_first(), dns_rdata_hip_next()
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson and dns_rdata_hip_current(). [RT #19384]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson2564. [bug] Only take EDNS fallback steps when processing timeouts.
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson2563. [bug] Dig could leak a socket causing it to wait forever
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington to exit. [RT #19359]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2562. [doc] ARM: miscellaneous improvements, reorganization,
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson and some new content.
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2559. [bug] dnssec-dsfromkey could compute bad DS records when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence reading from a K* files. [RT #19357]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2558. [func] Set the ownership of missing directories created
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson for pid-file if -u has been specified on the command
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence line. [RT #19328]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2557. [cleanup] PCI compliance:
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence * new libisc log module file
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence * isc_dir_chroot() now also changes the working
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence directory to "/".
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence * additional INSISTs
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence * additional logging when files can't be removed.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister error checks in the correct order resulting in the
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister wrong error code sometimes being returned. [RT #19249]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2555. [func] dig: when emitting a hex dump also display the
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister corresponding characters. [RT #19258]
6253eaa03c49aac035bdd8b1d9ec4853b45e94a0Andreas Gustafsson2554. [bug] Validation of uppercase queries from NSEC3 zones could
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister fail. [RT #19297]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2552. [bug] zero-no-soa-ttl-cache was not being honored.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2551. [bug] Potential Reference leak on return. [RT #19341]
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2549. [port] linux: define NR_OPEN if not currently defined.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2548. [bug] Install iterated_hash.h. [RT #19335]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2547. [bug] openssl_link.c:mem_realloc() could reference an
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson out-of-range area of the source buffer. New public
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson function isc_mem_reallocate() was introduced to address
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson this bug. [RT #19313]
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington2546. [func] Add --enable-openssl-hash configure flag to use
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington OpenSSL (in place of internal routine) for hash
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence functions (MD5, SHA[12] and HMAC). [RT #18815]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2545. [doc] ARM: Legal hostname checking (check-names) is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for SRV RDATA too. [RT #19304]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2542. [doc] Update the description of dig +adflag. [RT #19290]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2541. [bug] Conditionally update dispatch manager statistics.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2539. [security] Update the interaction between recursion, allow-query,
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister allow-query-cache and allow-recursion. [RT #19198]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2538. [bug] cache/ADB memory could grow over max-cache-size,
be768c2e952c34438025999125f984995a2c675fBob Halley especially with threads and smaller max-cache-size
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence values. [RT #19240]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2537. [func] Added more statistics counters including those on socket
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley I/O events and query RTT histograms. [RT #18802]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2536. [cleanup] Silence some warnings when -Werror=format-security is
be768c2e952c34438025999125f984995a2c675fBob Halley specified. [RT #19083]
be768c2e952c34438025999125f984995a2c675fBob Halley2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley2534. [func] Check NAPTR records regular expressions and
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley replacement strings to ensure they are syntactically
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley valid and consistent. [RT #18168]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2533. [doc] ARM: document @ (at-sign). [RT #17144]
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley2532. [bug] dig: check the question section of the response to
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley see if it matches the asked question. [RT #18495]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2531. [bug] Change #2207 was incomplete. [RT #19098]
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister2530. [bug] named failed to reject insecure to secure transitions
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence via UPDATE. [RT #19101]
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson2529. [cleanup] Upgrade libtool to silence complaints from recent
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence version of autoconf. [RT #18657]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2528. [cleanup] Silence spurious configure warning about
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence --datarootdir [RT #19096]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2527. [placeholder]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2526. [func] New named option "attach-cache" that allows multiple
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister views to share a single cache to save memory and
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley improve lookup efficiency. Based on contributed code
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley from Barclay Osborn, Google. [RT #18905]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2525. [func] New logging category "query-errors" to provide detailed
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley internal information about query failures, especially
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley about server failures. [RT #19027]
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington2523. [bug] Random type rdata freed by dns_nsec_typepresent().
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2521. [bug] Improve epoll cross compilation support. [RT #19047]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2520. [bug] Update xml statistics version number to 2.0 as change
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley #2388 made the schema incompatible to the previous
a5a5371b756f3bbbe33dac1dde196fbd6c063640Bob Halley version. [RT #19080]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2519. [bug] dig/host with -4 or -6 didn't work if more than two
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence nameserver addresses of the excluded address family
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT #17359]
stub/slave master and journal files. [RT #17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT #16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT #13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which