CHANGES revision 7ffe86618c91097b73cde82fb535180dbd5f8e91
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2972. [bug] win32: address windows socket errors. [RT #21906]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2971. [bug] Fixed a bug that caused journal files not to be
18c2aff776a775d34a4c9893a4c72e0434d68e36artem compacted on Windows systems as a result of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem non-POSIX-compliant rename() semantics. [RT #22434]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2970. [security] Adding a NO DATA negative cache entry failed to clear
18c2aff776a775d34a4c9893a4c72e0434d68e36artem any matching RRSIG records. A subsequent lookup of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of NO DATA cache entry could trigger a INSIST when the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem unexpected RRSIG was also returned with the NO DATA
18c2aff776a775d34a4c9893a4c72e0434d68e36artem cache entry.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem CVE-2010-3613, VU#706148. [RT #22288]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2969. [security] Fix acl type processing so that allow-query works
18c2aff776a775d34a4c9893a4c72e0434d68e36artem in options and view statements. Also add a new
18c2aff776a775d34a4c9893a4c72e0434d68e36artem set of tests to verify proper functioning.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem CVE-2010-3615, VU#510208. [RT #22418]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2968. [security] Named could fail to prove a data set was insecure
18c2aff776a775d34a4c9893a4c72e0434d68e36artem before marking it as insecure. One set of conditions
18c2aff776a775d34a4c9893a4c72e0434d68e36artem that can trigger this occurs naturally when rolling
18c2aff776a775d34a4c9893a4c72e0434d68e36artem DNSKEY algorithms.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem CVE-2010-3614, VU#837744. [RT #22309]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2967. [bug] 'host -D' now turns on debugging messages earlier.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #22361]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2966. [bug] isc_print_vsnprintf() failed to check if there was
18c2aff776a775d34a4c9893a4c72e0434d68e36artem space available in the buffer when adding a left
18c2aff776a775d34a4c9893a4c72e0434d68e36artem justified character with a non zero width,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem (e.g. "%-1c"). [RT #22270]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2965. [func] Test HMAC functions using test data from RFC 2104 and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem RFC 4634. [RT #21702]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2964. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2963. [security] The allow-query acl was being applied instead of the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem allow-query-cache acl to cache lookups. [RT #22114]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2962. [port] win32: add more dependencies to BINDBuild.dsw.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #22062]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2961. [bug] Be still more selective about the non-authoritative
18c2aff776a775d34a4c9893a4c72e0434d68e36artem answers we apply change 2748 to. [RT #22074]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2960. [func] Check that named accepts non-authoritative answers.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21594]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2959. [func] Check that named starts with a missing masterfile.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #22076]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2958. [bug] named failed to start with a missing master file.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #22076]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2957. [bug] entropy_get() and entropy_getpseudo() failed to match
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the API for RAND_bytes() and RAND_pseudo_bytes()
18c2aff776a775d34a4c9893a4c72e0434d68e36artem respectively. [RT #21962]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2955. [func] Provide more detail in the recursing log. [RT #22043]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
18c2aff776a775d34a4c9893a4c72e0434d68e36artem build_sqldbinstance failure. [RT #21623]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2953. [bug] Silence spurious "expected covering NSEC3, got an
18c2aff776a775d34a4c9893a4c72e0434d68e36artem exact match" message when returning a wildcard
18c2aff776a775d34a4c9893a4c72e0434d68e36artem no data response. [RT #21744]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2952. [port] win32: named-checkzone and named-checkconf failed
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to initialise winsock. [RT #21932]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2951. [bug] named failed to generate a correct signed response
18c2aff776a775d34a4c9893a4c72e0434d68e36artem in a optout, delegation only zone with no secure
18c2aff776a775d34a4c9893a4c72e0434d68e36artem delegations. [RT #22007]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2950. [bug] named failed to perform a SOA up to date check when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem falling back to TCP on UDP timeouts when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem ixfr-from-differences was set. [RT #21595]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2949. [bug] dns_view_setnewzones() contained a memory leak if
18c2aff776a775d34a4c9893a4c72e0434d68e36artem it was called multiple times. [RT #21942]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2948. [port] MacOS: provide a mechanism to configure the test
18c2aff776a775d34a4c9893a4c72e0434d68e36artem interfaces at reboot. See bin/tests/system/README
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for details.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2947. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2946. [doc] Document the default values for the minimum and maximum
18c2aff776a775d34a4c9893a4c72e0434d68e36artem zone refresh and retry values in the ARM. [RT #21886]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2945. [doc] Update empty-zones list in ARM. [RT #21772]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2944. [maint] Remove ORCHID prefix from built in empty zones.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21772]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2943. [func] Add support to load new keys into managed zones
18c2aff776a775d34a4c9893a4c72e0434d68e36artem without signing immediately with "rndc loadkeys".
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Add support to link keys with "dnssec-keygen -S"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and "dnssec-settime -S". [RT #21351]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2942. [contrib] zone2sqlite failed to setup the entropy sources.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21610]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2941. [bug] sdb and sdlz (dlz's zone database) failed to support
18c2aff776a775d34a4c9893a4c72e0434d68e36artem DNAME at the zone apex. [RT #21610]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2940. [port] Remove connection aborted error message on
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Windows. [RT #21549]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2939. [func] Check that named successfully skips NSEC3 records
18c2aff776a775d34a4c9893a4c72e0434d68e36artem that fail to match the NSEC3PARAM record currently
18c2aff776a775d34a4c9893a4c72e0434d68e36artem in use. [RT# 21868]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2938. [bug] When generating signed responses, from a signed zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem that uses NSEC3, named would use a uninitialised
18c2aff776a775d34a4c9893a4c72e0434d68e36artem pointer if it needed to skip a NSEC3 record because
18c2aff776a775d34a4c9893a4c72e0434d68e36artem it didn't match the selected NSEC3PARAM record for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem zone. [RT# 21868]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2937. [bug] Worked around an apparent race condition in over
18c2aff776a775d34a4c9893a4c72e0434d68e36artem memory conditions. Without this fix a DNS cache DB or
18c2aff776a775d34a4c9893a4c72e0434d68e36artem ADB could incorrectly stay in an over memory state,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem effectively refusing further caching, which
18c2aff776a775d34a4c9893a4c72e0434d68e36artem subsequently made a BIND 9 caching server unworkable.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem This fix prevents this problem from happening by
18c2aff776a775d34a4c9893a4c72e0434d68e36artem polling the state of the memory context, rather than
18c2aff776a775d34a4c9893a4c72e0434d68e36artem making a copy of the state, which appeared to cause
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a race. This is a "workaround" in that it doesn't
18c2aff776a775d34a4c9893a4c72e0434d68e36artem solve the possible race per se, but several experiments
18c2aff776a775d34a4c9893a4c72e0434d68e36artem proved this change solves the symptom. Also, the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem polling overhead hasn't been reported to be an issue.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem This bug should only affect a caching server that
18c2aff776a775d34a4c9893a4c72e0434d68e36artem specifies a finite max-cache-size. It's also quite
18c2aff776a775d34a4c9893a4c72e0434d68e36artem likely that the bug happens only when enabling threads,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem but it's not confirmed yet. [RT #21818]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2936. [func] Improved configuration syntax and multiple-view
18c2aff776a775d34a4c9893a4c72e0434d68e36artem support for addzone/delzone feature (see change
18c2aff776a775d34a4c9893a4c72e0434d68e36artem #2930). Removed "new-zone-file" option, replaced
18c2aff776a775d34a4c9893a4c72e0434d68e36artem with "allow-new-zones (yes|no)". The new-zone-file
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for each view is now created automatically, with
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a filename generated from a hash of the view name.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem It is no longer necessary to "include" the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem new-zone-file in named.conf; this happens
18c2aff776a775d34a4c9893a4c72e0434d68e36artem automatically. Zones that were not added via
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "rndc addzone" can no longer be removed with
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "rndc delzone". [RT #19447]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2935. [bug] nsupdate: improve 'file not found' error message.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21871]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21871]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2933. [bug] 'dig +nsid' used stack memory after it went out of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem scope. This could potentially result in a unknown,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem potentially malformed, EDNS option being sent instead
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of the desired NSID option. [RT #21781]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2932. [cleanup] Corrected a numbering error in the "dnssec" test.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21597]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2931. [bug] Temporarily and partially disable change 2864
18c2aff776a775d34a4c9893a4c72e0434d68e36artem because it would cause infinite attempts of RRSIG
18c2aff776a775d34a4c9893a4c72e0434d68e36artem queries. This is an urgent care fix; we'll
18c2aff776a775d34a4c9893a4c72e0434d68e36artem revisit the issue and complete the fix later.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21710]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2930. [experimental] New "rndc addzone" and "rndc delzone" commads
18c2aff776a775d34a4c9893a4c72e0434d68e36artem allow dynamic addition and deletion of zones.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem To enable this feature, specify a "new-zone-file"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem option at the view or options level in named.conf.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Zone configuration information for the new zones
18c2aff776a775d34a4c9893a4c72e0434d68e36artem will be written into that file. To make the new
18c2aff776a775d34a4c9893a4c72e0434d68e36artem zones persist after a restart, "include" the file
18c2aff776a775d34a4c9893a4c72e0434d68e36artem into named.conf in the appropriate view. (Note:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem This feature is not yet documented, and its syntax
18c2aff776a775d34a4c9893a4c72e0434d68e36artem is expected to change.) [RT #19447]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2929. [bug] Improved handling of GSS security contexts:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - added LRU expiration for generated TSIGs
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - added the ability to use a non-default realm
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - added new "realm" keyword in nsupdate
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - limited lifetime of generated keys to 1 hour
18c2aff776a775d34a4c9893a4c72e0434d68e36artem or the lifetime of the context (whichever is
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19737]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2928. [bug] Be more selective about the non-authoritative
18c2aff776a775d34a4c9893a4c72e0434d68e36artem answer we apply change 2748 to. [RT #21594]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2927. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2926. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2925. [bug] Named failed to accept uncachable negative responses
18c2aff776a775d34a4c9893a4c72e0434d68e36artem from insecure zones. [RT# 21555]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2924. [func] 'rndc secroots' dump a combined summary of the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem current managed keys combined with trusted keys.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20904]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2923. [bug] 'dig +trace' could drop core after "connection
18c2aff776a775d34a4c9893a4c72e0434d68e36artem timeout". [RT #21514]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2922. [contrib] Update zkt to version 1.0.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2921. [bug] The resolver could attempt to destroy a fetch context
18c2aff776a775d34a4c9893a4c72e0434d68e36artem too soon. [RT #19878]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to IPv4 clients. New acl 'filter-aaaa' (default any).
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20840]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2917. [func] Virtual time test framework. [RT #20801]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2916. [func] Add framework to use IPv6 in tests.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2915. [cleanup] Be smarter about which objects we attempt to compile
18c2aff776a775d34a4c9893a4c72e0434d68e36artem based on configure options. [RT #21444]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2914. [bug] Make the "autosign" system test more portable.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20997]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2913. [func] Add pkcs#11 system tests. [RT #20784]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2912. [func] Windows clients don't like UPDATE responses that clear
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the zone section. [RT #20986]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2911. [bug] dnssec-signzone didn't handle out of zone records well.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21367]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2910. [func] Sanity check Kerberos credentials. [RT #20986]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2909. [bug] named-checkconf -p could die if "update-policy local;"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem was specified in named.conf. [RT #21416]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2908. [bug] It was possible for re-signing to stop after removing
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a DNSKEY. [RT #21384]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2907. [bug] The export version of libdns had undefined references.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21444]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2905. [port] aix: set use_atomic=yes with native compiler.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21402]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2904. [bug] When using DLV, sub-zones of the zones in the DLV,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem could be incorrectly marked as insecure instead of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem secure leading to negative proofs failing. This was
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a unintended outcome from change 2890. [RT# 21392]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2903. [bug] managed-keys-directory missing from namedconf.c.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21370]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2902. [func] Add regression test for change 2897. [RT #21040]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2900. [bug] The placeholder negative caching element was not
18c2aff776a775d34a4c9893a4c72e0434d68e36artem properly constructed triggering a INSIST in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dns_ncache_towire(). [RT #21346]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2899. [port] win32: Support linking against OpenSSL 1.0.0.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2898. [bug] nslookup leaked memory when -domain=value was
18c2aff776a775d34a4c9893a4c72e0434d68e36artem specified. [RT #21301]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2897. [bug] NSEC3 chains could be left behind when transitioning
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to insecure. [RT #21040]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2896. [bug] "rndc sign" failed to properly update the zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem when adding a DNSKEY for publication only. [RT #21045]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2895. [func] genrandom: add support for the generation of multiple
18c2aff776a775d34a4c9893a4c72e0434d68e36artem files. [RT #20917]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2893. [bug] Improve managed keys support. New named.conf option
18c2aff776a775d34a4c9893a4c72e0434d68e36artem managed-keys-directory. [RT #20924]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2892. [bug] Handle REVOKED keys better. [RT #20961]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2891. [maint] Update empty-zones list to match
18c2aff776a775d34a4c9893a4c72e0434d68e36artem draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2890. [bug] Handle the introduction of new trusted-keys and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem DS, DLV RRsets better. [RT #21097]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2889. [bug] Elements of the grammar where not properly reported.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21046]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2888. [bug] Only the first EDNS option was displayed. [RT #21273]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2887. [bug] Report the keytag times in UTC in the .key file,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem local time is presented as a comment within the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem comment. [RT #21223]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2886. [bug] ctime() is not thread safe. [RT #21223]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2885. [bug] Improve -fno-strict-aliasing support probing in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem configure. [RT #21080]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2884. [bug] Insufficient validation in dns_name_getlabelsequence().
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21283]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2883. [bug] 'dig +short' failed to handle really large datasets.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21113]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2882. [bug] Remove memory context from list of active contexts
18c2aff776a775d34a4c9893a4c72e0434d68e36artem before clearing 'magic'. [RT #21274]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2881. [bug] Reduce the amount of time the rbtdb write lock
18c2aff776a775d34a4c9893a4c72e0434d68e36artem is held when closing a version. [RT #21198]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
18c2aff776a775d34a4c9893a4c72e0434d68e36artem consistent. [RT #21078]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21106]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2878. [func] Incrementally write the master file after performing
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a AXFR. [RT #21010]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2877. [bug] The validator failed to skip obviously mismatching
18c2aff776a775d34a4c9893a4c72e0434d68e36artem RRSIGs. [RT #21138]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2876. [bug] Named could return SERVFAIL for negative responses
18c2aff776a775d34a4c9893a4c72e0434d68e36artem from unsigned zones. [RT #21131]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2875. [bug] dns_time64_fromtext() could accept non digits.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21033]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2874. [bug] Cache lack of EDNS support only after the server
18c2aff776a775d34a4c9893a4c72e0434d68e36artem successfully responds to the query using plain DNS.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20930]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2873. [bug] Cancelling a dynamic update via the dns/client module
18c2aff776a775d34a4c9893a4c72e0434d68e36artem could trigger an assertion failure. [RT #21133]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2872. [bug] Modify dns/client.c:dns_client_createx() to only
18c2aff776a775d34a4c9893a4c72e0434d68e36artem require one of IPv4 or IPv6 rather than both.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21122]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2871. [bug] Type mismatch in mem_api.c between the definition and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the header file, causing build failure with
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --enable-exportlib. [RT #21138]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20877]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2868. [cleanup] Run "make clean" at the end of configure to ensure
18c2aff776a775d34a4c9893a4c72e0434d68e36artem any changes made by configure are integrated.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Use --with-make-clean=no to disable. [RT #20994]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
18c2aff776a775d34a4c9893a4c72e0434d68e36artem don't like it. [RT #20986]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2866. [bug] Windows does not like the TSIG name being compressed.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20986]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2865. [bug] memset to zero event.data. [RT #20986]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21050]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #21056]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2862. [bug] nsupdate didn't default to the parent zone when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem updating DS records. [RT #20896]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2861. [doc] dnssec-settime man pages didn't correctly document the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem inactivation time. [RT #21039]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2860. [bug] named-checkconf's usage was out of date. [RT #21039]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2859. [bug] When cancelling validation it was possible to leak
18c2aff776a775d34a4c9893a4c72e0434d68e36artem memory. [RT #20800]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2858. [bug] RTT estimates were not being adjusted on ICMP errors.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20772]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2857. [bug] named-checkconf did not fail on a bad trusted key.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20705]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2856. [bug] The size of a memory allocation was not always properly
18c2aff776a775d34a4c9893a4c72e0434d68e36artem recorded. [RT #20927]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2855. [func] nsupdate will now preserve the entered case of domain
18c2aff776a775d34a4c9893a4c72e0434d68e36artem names in update requests it sends. [RT #20928]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2854. [func] dig: allow the final soa record in a axfr response to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem be suppressed, dig +onesoa. [RT #20929]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2851. [doc] nslookup.1, removed <informalexample> from the docbook
18c2aff776a775d34a4c9893a4c72e0434d68e36artem source as it produced bad nroff. [RT #21007]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2850. [bug] If isc_heap_insert() failed due to memory shortage
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the heap would have corrupted entries. [RT #20951]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2849. [bug] Don't treat errors from the xml2 library as fatal.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20945]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem README.rfc5011 into the ARM. [RT #20899]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2846. [bug] EOF on unix domain sockets was not being handled
18c2aff776a775d34a4c9893a4c72e0434d68e36artem correctly. [RT #20731]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2844. [doc] notify-delay default in ARM was wrong. It should have
18c2aff776a775d34a4c9893a4c72e0434d68e36artem been five (5) seconds.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
18c2aff776a775d34a4c9893a4c72e0434d68e36artem creating key files if there is a chance that the new
18c2aff776a775d34a4c9893a4c72e0434d68e36artem key ID will collide with an existing one after
18c2aff776a775d34a4c9893a4c72e0434d68e36artem either of the keys has been revoked. (To override
18c2aff776a775d34a4c9893a4c72e0434d68e36artem this in the case of dnssec-keyfromlabel, use the -y
18c2aff776a775d34a4c9893a4c72e0434d68e36artem option. dnssec-keygen will simply create a
18c2aff776a775d34a4c9893a4c72e0434d68e36artem different, non-colliding key, so an override is
18c2aff776a775d34a4c9893a4c72e0434d68e36artem not necessary.) [RT #20838]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2842. [func] Added "smartsign" and improved "autosign" and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "dnssec" regression tests. [RT #20865]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2841. [bug] Change 2836 was not complete. [RT #20883]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2840. [bug] Temporary fixed pkcs11-destroy usage check.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20760]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2839. [bug] A KSK revoked by named could not be deleted.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20881]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2838. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2837. [port] Prevent Linux spurious warnings about fwrite().
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20812]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2836. [bug] Keys that were scheduled to become active could
18c2aff776a775d34a4c9893a4c72e0434d68e36artem be delayed. [RT #20874]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2835. [bug] Key inactivity dates were inadvertently stored in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the private key file with the outdated tag
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "Unpublish" rather than "Inactive". This has been
18c2aff776a775d34a4c9893a4c72e0434d68e36artem fixed; however, any existing keys that had Inactive
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dates set will now need to have them reset, using
18c2aff776a775d34a4c9893a4c72e0434d68e36artem 'dnssec-settime -I'. [RT #20868]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2834. [bug] HMAC-SHA* keys that were longer than the algorithm
18c2aff776a775d34a4c9893a4c72e0434d68e36artem digest length were used incorrectly, leading to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem interoperability problems with other DNS
18c2aff776a775d34a4c9893a4c72e0434d68e36artem implementations. This has been corrected.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem (Note: If an oversize key is in use, and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem compatibility is needed with an older release of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem BIND, the new tool "isc-hmac-fixup" can convert
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the key secret to a form that will work with all
18c2aff776a775d34a4c9893a4c72e0434d68e36artem versions.) [RT #20751]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20851]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to avoid redefinition in some OSs [RT 20831]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2831. [security] Do not attempt to validate or cache
18c2aff776a775d34a4c9893a4c72e0434d68e36artem out-of-bailiwick data returned with a secure
18c2aff776a775d34a4c9893a4c72e0434d68e36artem answer; it must be re-fetched from its original
18c2aff776a775d34a4c9893a4c72e0434d68e36artem source and validated in that context. [RT #20819]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2830. [bug] Changing the OPTOUT setting could take multiple
18c2aff776a775d34a4c9893a4c72e0434d68e36artem passes. [RT #20813]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2829. [bug] Fixed potential node inconsistency in rbtdb.c.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20808]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2828. [security] Cached CNAME or DNAME RR could be returned to clients
18c2aff776a775d34a4c9893a4c72e0434d68e36artem without DNSSEC validation. [RT #20737]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
18c2aff776a775d34a4c9893a4c72e0434d68e36artem being released. [RT #20740]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
18c2aff776a775d34a4c9893a4c72e0434d68e36artem was in the process of being created was not properly
18c2aff776a775d34a4c9893a4c72e0434d68e36artem recorded in the zone. [RT #20786]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2824. [bug] "rndc sign" was not being run by the correct task.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20759]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2822. [bug] rbtdb.c:loadnode() could return the wrong result.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20802]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2821. [doc] Add note that named-checkconf doesn't automatically
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2820. [func] Handle read access failure of OpenSSL configuration
18c2aff776a775d34a4c9893a4c72e0434d68e36artem file more user friendly (PKCS#11 engine patch).
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20668]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20771]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2818. [cleanup] rndc could return an incorrect error code
18c2aff776a775d34a4c9893a4c72e0434d68e36artem when a zone was not found. [RT #20767]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20768]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2816. [bug] previous_closest_nsec() could fail to return
18c2aff776a775d34a4c9893a4c72e0434d68e36artem data for NSEC3 nodes [RT #29730]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2815. [bug] Exclusively lock the task when freezing a zone.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19838]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2814. [func] Provide a definitive error message when a master
18c2aff776a775d34a4c9893a4c72e0434d68e36artem zone is not loaded. [RT #20757]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2813. [bug] Better handling of unreadable DNSSEC key files.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20710]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2812. [bug] Make sure updates can't result in a zone with
18c2aff776a775d34a4c9893a4c72e0434d68e36artem NSEC-only keys and NSEC3 records. [RT 20748]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
18c2aff776a775d34a4c9893a4c72e0434d68e36artem output. [RT #20733]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2810. [doc] Clarified the process of transitioning an NSEC3 zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to insecure. [RT #20746]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2809. [cleanup] Restored accidentally-deleted text in usage output
18c2aff776a775d34a4c9893a4c72e0434d68e36artem in dnssec-settime and dnssec-revoke [RT #20739]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2808. [bug] Remove the attempt to install atomic.h from lib/isc.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem atomic.h is correctly installed by the architecture
18c2aff776a775d34a4c9893a4c72e0434d68e36artem specific subdirectories. [RT #20722]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2807. [bug] Fixed a possible ASSERT when reconfiguring zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem keys. [RT #20720]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --- 9.7.0rc1 released ---
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
18c2aff776a775d34a4c9893a4c72e0434d68e36artem when it had changed. [RT #20703]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2805. [bug] Fixed namespace problems encountered when building
18c2aff776a775d34a4c9893a4c72e0434d68e36artem external programs using non-exported BIND9 libraries
18c2aff776a775d34a4c9893a4c72e0434d68e36artem (i.e., built without --enable-exportlib). [RT #20679]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2804. [bug] Send notifies when a zone is signed with "rndc sign"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem or as a result of a scheduled key change. [RT #20700]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and genrandom under windows. [RT #20670]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2801. [func] Detect and report records that are different according
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to DNSSEC but are semantically equal according to plain
18c2aff776a775d34a4c9893a4c72e0434d68e36artem DNS. Apply plain DNS comparisons rather than DNSSEC
18c2aff776a775d34a4c9893a4c72e0434d68e36artem comparisons when processing UPDATE requests.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-signzone now removes such semantically duplicate
18c2aff776a775d34a4c9893a4c72e0434d68e36artem records prior to signing the RRset.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem named-checkzone -r {ignore|warn|fail} (default warn)
18c2aff776a775d34a4c9893a4c72e0434d68e36artem named-compilezone -r {ignore|warn|fail} (default warn)
18c2aff776a775d34a4c9893a4c72e0434d68e36artem named.conf: check-dup-records {ignore|warn|fail};
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2800. [func] Reject zones which have NS records which refer to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem CNAMEs, DNAMEs or don't have address record (class IN
18c2aff776a775d34a4c9893a4c72e0434d68e36artem only). Reject UPDATEs which would cause the zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to fail the above checks if committed. [RT #20678]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2799. [cleanup] Changed the "secure-to-insecure" option to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "dnssec-secure-to-insecure", and "dnskey-ksk-only"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2798. [bug] Addressed bugs in managed-keys initialization
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and rollover. [RT #20683]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2797. [bug] Don't decrement the dispatch manager's maxbuffers.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20613]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2796. [bug] Missing dns_rdataset_disassociate() call in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dns_nsec3_delnsec3sx(). [RT #20681]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2795. [cleanup] Add text to differentiate "update with no effect"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem log messages. [RT #18889]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2794. [bug] Install <isc/namespace.h>. [RT #20677]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2793. [func] Add "autosign" and "metadata" tests to the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem automatic tests. [RT #19946]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2792. [func] "filter-aaaa-on-v4" can now be set in view
18c2aff776a775d34a4c9893a4c72e0434d68e36artem options (if compiled in). [RT #20635]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2791. [bug] The installation of isc-config.sh was broken.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20667]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2790. [bug] Handle DS queries to stub zones. [RT #20440]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2788. [bug] dnssec-signzone could sign with keys that were
18c2aff776a775d34a4c9893a4c72e0434d68e36artem not requested [RT #20625]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2787. [bug] Spurious log message when zone keys were
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dynamically reconfigured. [RT #20659]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2786. [bug] Additional could be promoted to answer. [RT #20663]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --- 9.7.0b3 released ---
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2785. [bug] Revoked keys could fail to self-sign [RT #20652]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2784. [bug] TC was not always being set when required glue was
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dropped. [RT #20655]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
18c2aff776a775d34a4c9893a4c72e0434d68e36artem buffer size of 512 or less. [RT #20654]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2782. [port] win32: use getaddrinfo() for hostname lookups.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20650]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2781. [bug] Inactive keys could be used for signing. [RT #20649]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2780. [bug] dnssec-keygen -A none didn't properly unset the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem activation date in all cases. [RT #20648]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2779. [bug] Dynamic key revocation could fail. [RT #20644]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2778. [bug] dnssec-signzone could fail when a key was revoked
18c2aff776a775d34a4c9893a4c72e0434d68e36artem without deleting the unrevoked version. [RT #20638]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2776. [bug] Change #2762 was not correct. [RT #20647]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
18c2aff776a775d34a4c9893a4c72e0434d68e36artem in dnssec-keyfromlabel. [RT #20643]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2774. [bug] Existing cache DB wasn't being reused after
18c2aff776a775d34a4c9893a4c72e0434d68e36artem reconfiguration. [RT #20629]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2773. [bug] In autosigned zones, the SOA could be signed
18c2aff776a775d34a4c9893a4c72e0434d68e36artem with the KSK. [RT #20628]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2772. [security] When validating, track whether pending data was from
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the additional section or not and only return it if
18c2aff776a775d34a4c9893a4c72e0434d68e36artem validates as secure. [RT #20438]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2771. [bug] dnssec-signzone: DNSKEY records could be
18c2aff776a775d34a4c9893a4c72e0434d68e36artem corrupted when importing from key files [RT #20624]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2770. [cleanup] Add log messages to resolver.c to indicate events
18c2aff776a775d34a4c9893a4c72e0434d68e36artem causing FORMERR responses. [RT #20526]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2769. [cleanup] Change #2742 was incomplete. [RT #19589]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2767. [bug] named could crash on startup if a zone was
18c2aff776a775d34a4c9893a4c72e0434d68e36artem configured with auto-dnssec and there was no
18c2aff776a775d34a4c9893a4c72e0434d68e36artem key-directory. [RT #20615]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2766. [bug] isc_socket_fdwatchpoke() should only update the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem socketmgr state if the socket is not pending on a
18c2aff776a775d34a4c9893a4c72e0434d68e36artem read or write. [RT #20603]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2765. [bug] Skip masters for which the TSIG key cannot be found.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20595]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2762. [bug] DLV validation failed with a local slave DLV zone.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20577]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2761. [cleanup] Enable internal symbol table for backtrace only for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem systems that are known to work. Currently, BSD
18c2aff776a775d34a4c9893a4c72e0434d68e36artem variants, Linux and Solaris are supported. [RT# 20202]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2759. [doc] Add information about .jbk/.jnw files to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the ARM. [RT #20303]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2758. [bug] win32: Added a workaround for a windows 2008 bug
18c2aff776a775d34a4c9893a4c72e0434d68e36artem that could cause the UDP client handler to shut
18c2aff776a775d34a4c9893a4c72e0434d68e36artem down. [RT #19176]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2757. [bug] dig: assertion failure could occur in connect
18c2aff776a775d34a4c9893a4c72e0434d68e36artem timeout. [RT #20599]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2755. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2754. [bug] Secure-to-insecure transitions failed when zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem was signed with NSEC3. [RT #20587]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2753. [bug] Removed an unnecessary warning that could appear when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem building an NSEC chain. [RT #20589]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2752. [bug] Locking violation. [RT #20587]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2750. [bug] dig: assertion failure could occur when a server
18c2aff776a775d34a4c9893a4c72e0434d68e36artem didn't have an address. [RT #20579]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2749. [bug] ixfr-from-differences generated a non-minimal ixfr
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for NSEC3 signed zones. [RT #20452]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2748. [func] Identify bad answers from GTLD servers and treat them
18c2aff776a775d34a4c9893a4c72e0434d68e36artem as referrals. [RT #18884]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2747. [bug] Journal roll forwards failed to set the re-signing
18c2aff776a775d34a4c9893a4c72e0434d68e36artem time of RRSIGs correctly. [RT #20541]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2746. [port] hpux: address signed/unsigned expansion mismatch of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2745. [bug] configure script didn't probe the return type of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem gai_strerror(3) correctly. [RT #20573]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2744. [func] Log if a query was over TCP. [RT #19961]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for a insecure delegation.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --- 9.7.0b2 released ---
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2742. [cleanup] Clarify some DNSSEC-related log messages in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2741. [func] Allow the dnssec-keygen progress messages to be
18c2aff776a775d34a4c9893a4c72e0434d68e36artem suppressed (dnssec-keygen -q). Automatically
18c2aff776a775d34a4c9893a4c72e0434d68e36artem suppress the progress messages when stdin is not
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a tty. [RT #20474]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2740. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2739. [cleanup] Clean up API for initializing and clearing trust
18c2aff776a775d34a4c9893a4c72e0434d68e36artem anchors for a view. [RT #20211]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
18c2aff776a775d34a4c9893a4c72e0434d68e36artem test. [RT #20453]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2737. [func] UPDATE requests can leak existence information.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #17261]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2736. [func] Improve the performance of NSEC signed zones with
18c2aff776a775d34a4c9893a4c72e0434d68e36artem more than a normal amount of glue below a delegation.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20191]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2735. [bug] dnssec-signzone could fail to read keys
18c2aff776a775d34a4c9893a4c72e0434d68e36artem that were specified on the command line with
18c2aff776a775d34a4c9893a4c72e0434d68e36artem full paths, but weren't in the current
18c2aff776a775d34a4c9893a4c72e0434d68e36artem directory. [RT #20421]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2734. [port] cygwin: arpaname did not compile. [RT #20473]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2732. [func] Add optional filter-aaaa-on-v4 option, available
18c2aff776a775d34a4c9893a4c72e0434d68e36artem if built with './configure --enable-filter-aaaa'.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Filters out AAAA answers to clients connecting
18c2aff776a775d34a4c9893a4c72e0434d68e36artem via IPv4. (This is NOT recommended for general
18c2aff776a775d34a4c9893a4c72e0434d68e36artem use.) [RT #20339]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2731. [func] Additional work on change 2709. The key parser
18c2aff776a775d34a4c9893a4c72e0434d68e36artem will now ignore unrecognized fields when the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem minor version number of the private key format
18c2aff776a775d34a4c9893a4c72e0434d68e36artem has been increased. It will reject any key with
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the major version number increased. [RT #20310]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2730. [func] Have dnssec-keygen display a progress indication
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a la 'openssl genrsa' on standard error. Note
18c2aff776a775d34a4c9893a4c72e0434d68e36artem when the first '.' is followed by a long stop
18c2aff776a775d34a4c9893a4c72e0434d68e36artem one has the choice between slow generation vs.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20284]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2729. [func] When constructing a CNAME from a DNAME use the DNAME
18c2aff776a775d34a4c9893a4c72e0434d68e36artem TTL. [RT #20451]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-signzone now warn immediately if asked to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem write into a nonexistent directory. [RT #20278]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2727. [func] The 'key-directory' option can now specify a relative
18c2aff776a775d34a4c9893a4c72e0434d68e36artem path. [RT #20154]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2726. [func] Added support for SHA-2 DNSSEC algorithms,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem RSASHA256 and RSASHA512. [RT #20023]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2725. [doc] Added information about the file "managed-keys.bind"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to the ARM. [RT #20235]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2724. [bug] Updates to a existing node in secure zone using NSEC
18c2aff776a775d34a4c9893a4c72e0434d68e36artem were failing. [RT #20448]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem isc_base64_totext(), didn't always mark regions of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem memory as fully consumed after conversion. [RT #20445]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2722. [bug] Ensure that the memory associated with the name of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a node in a rbt tree is not altered during the life
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of the node. [RT #20431]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2721. [port] Have dst__entropy_status() prime the random number
18c2aff776a775d34a4c9893a4c72e0434d68e36artem generator. [RT #20369]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2720. [bug] RFC 5011 trust anchor updates could trigger an
18c2aff776a775d34a4c9893a4c72e0434d68e36artem assert if the DNSKEY record was unsigned. [RT #20406]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2719. [func] Skip trusted/managed keys for unsupported algorithms.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20392]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2718. [bug] The space calculations in opensslrsa_todns() were
18c2aff776a775d34a4c9893a4c72e0434d68e36artem incorrect. [RT #20394]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2717. [bug] named failed to update the NSEC/NSEC3 record when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the last private type record was removed as a result
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of completing the signing the zone with a key.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20399]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --- 9.7.0b1 released ---
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2715. [bug] Require OpenSSL support to be explicitly disabled.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20288]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2713. [bug] powerpc: atomic operations missing asm("ics") /
18c2aff776a775d34a4c9893a4c72e0434d68e36artem __isync() calls.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2712. [func] New 'auto-dnssec' zone option allows zone signing
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to be fully automated in zones configured for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dynamic DNS. 'auto-dnssec allow;' permits a zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to be signed by creating keys for it in the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem key-directory and using 'rndc sign <zone>'.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem 'auto-dnssec maintain;' allows that too, plus it
18c2aff776a775d34a4c9893a4c72e0434d68e36artem also keeps the zone's DNSSEC keys up to date
18c2aff776a775d34a4c9893a4c72e0434d68e36artem according to their timing metadata. [RT #19943]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2711. [port] win32: Add the bin/pkcs11 tools into the full
18c2aff776a775d34a4c9893a4c72e0434d68e36artem build. [RT #20372]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
18c2aff776a775d34a4c9893a4c72e0434d68e36artem zone option cause a zone to be signed with only KSKs
18c2aff776a775d34a4c9893a4c72e0434d68e36artem signing the DNSKEY RRset, not ZSKs. This reduces
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the size of a DNSKEY answer. [RT #20340]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2709. [func] Added some data fields, currently unused, to the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem private key file format, to allow implementation
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of explicit key rollover in a future release
18c2aff776a775d34a4c9893a4c72e0434d68e36artem without impairing backward or forward compatibility.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20310]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2708. [func] Insecure to secure and NSEC3 parameter changes via
18c2aff776a775d34a4c9893a4c72e0434d68e36artem update are now fully supported and no longer require
18c2aff776a775d34a4c9893a4c72e0434d68e36artem defines to enable. We now no longer overload the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem NSEC3PARAM flag field, nor the NSEC OPT bit at the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem apex. Secure to insecure changes are controlled by
18c2aff776a775d34a4c9893a4c72e0434d68e36artem by the named.conf option 'secure-to-insecure'.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Warning: If you had previously enabled support by
18c2aff776a775d34a4c9893a4c72e0434d68e36artem adding defines at compile time to BIND 9.6 you should
18c2aff776a775d34a4c9893a4c72e0434d68e36artem ensure that all changes that are in progress have
18c2aff776a775d34a4c9893a4c72e0434d68e36artem completed prior to upgrading to BIND 9.7. BIND 9.7
18c2aff776a775d34a4c9893a4c72e0434d68e36artem is not backwards compatible.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2707. [func] dnssec-keyfromlabel no longer require engine name
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to be specified in the label if there is a default
18c2aff776a775d34a4c9893a4c72e0434d68e36artem engine or the -E option has been used. Also, it
18c2aff776a775d34a4c9893a4c72e0434d68e36artem now uses default algorithms as dnssec-keygen does
18c2aff776a775d34a4c9893a4c72e0434d68e36artem (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20371]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2706. [bug] Loading a zone with a very large NSEC3 salt could
18c2aff776a775d34a4c9893a4c72e0434d68e36artem trigger an assert. [RT #20368]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2705. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2704. [bug] Serial of dynamic and stub zones could be inconsistent
18c2aff776a775d34a4c9893a4c72e0434d68e36artem with their SOA serial. [RT #19387]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2703. [func] Introduce an OpenSSL "engine" argument with -E
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for all binaries which can take benefit of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem crypto hardware. [RT #20230]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2701. [doc] Correction to ARM: hmac-md5 is no longer the only
18c2aff776a775d34a4c9893a4c72e0434d68e36artem supported TSIG key algorithm. [RT #18046]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2700. [doc] The match-mapped-addresses option is discouraged.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #12252]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2699. [bug] Missing lock in rbtdb.c. [RT #20037]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2698. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem S_IFREG are defined after including <isc/stat.h>.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20309]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2696. [bug] named failed to successfully process some valid
18c2aff776a775d34a4c9893a4c72e0434d68e36artem acl constructs. [RT #20308]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2695. [func] DHCP/DDNS - update fdwatch code for use by
18c2aff776a775d34a4c9893a4c72e0434d68e36artem DHCP. Modify the api to isc_sockfdwatch_t (the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem callback funciton for isc_socket_fdwatchcreate)
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to include information about the direction (read
18c2aff776a775d34a4c9893a4c72e0434d68e36artem or write) and add isc_socket_fdwatchpoke.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20253]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19970]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2693. [port] Add some noreturn attributes. [RT #20257]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2692. [port] win32: 32/64 bit cleanups. [RT #20335]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
18c2aff776a775d34a4c9893a4c72e0434d68e36artem chain when re-signing a previously-signed zone.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Use -u to modify NSEC3 parameters or switch
18c2aff776a775d34a4c9893a4c72e0434d68e36artem between NSEC and NSEC3. [RT #20304]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20315]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2689. [bug] Correctly handle snprintf result. [RT #20306]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to decide to fetch the destination address. [RT #20305]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Also, added warnings when revoking a ZSK, as this is
18c2aff776a775d34a4c9893a4c72e0434d68e36artem not defined by protocol (but is legal). [RT #19943]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2686. [bug] dnssec-signzone should clean the old NSEC chain when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem signing with NSEC3 and vice versa. [RT #20301]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2684. [cleanup] dig: formalize +ad and +cd as synonyms for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem +adflag and +cdflag. [RT #19305]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the NSEC3 parameters used to sign the zone change.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20246]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2682. [bug] "configure --enable-symtable=all" failed to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem build. [RT #20282]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
18c2aff776a775d34a4c9893a4c72e0434d68e36artem decoded. [RT #20269]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2679. [func] dig -k can now accept TSIG keys in named.conf
18c2aff776a775d34a4c9893a4c72e0434d68e36artem format. [RT #20031]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2678. [func] Treat DS queries as if "minimal-response yes;"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem was set. [RT #20258]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2677. [func] Changes to key metadata behavior:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - Keys without "publish" or "active" dates set will
18c2aff776a775d34a4c9893a4c72e0434d68e36artem no longer be used for smart signing. However,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem those dates will be set to "now" by default when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a key is created; to generate a key but not use
18c2aff776a775d34a4c9893a4c72e0434d68e36artem it yet, use dnssec-keygen -G.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - New "inactive" date (dnssec-keygen/settime -I)
18c2aff776a775d34a4c9893a4c72e0434d68e36artem sets the time when a key is no longer used for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem signing but is still published.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - The "unpublished" date (-U) is deprecated in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem favor of "deleted" (-D).
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20247]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2676. [bug] --with-export-installdir should have been
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --with-export-includedir. [RT #20252]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2675. [bug] dnssec-signzone could crash if the key directory
18c2aff776a775d34a4c9893a4c72e0434d68e36artem did not exist. [RT #20232]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --- 9.7.0a3 released ---
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2674. [bug] "dnssec-lookaside auto;" crashed if named was built
18c2aff776a775d34a4c9893a4c72e0434d68e36artem without openssl. [RT #20231]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2673. [bug] The managed-keys.bind zone file could fail to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem load due to a spurious result from sync_keyzone()
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #20045]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2672. [bug] Don't enable searching in 'host' when doing reverse
18c2aff776a775d34a4c9893a4c72e0434d68e36artem lookups. [RT #20218]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2671. [bug] Add support for PKCS#11 providers not returning
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the public exponent in RSA private keys
18c2aff776a775d34a4c9893a4c72e0434d68e36artem (OpenCryptoki for instance) in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-keyfromlabel. [RT #19294]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2670. [bug] Unexpected connect failures failed to log enough
18c2aff776a775d34a4c9893a4c72e0434d68e36artem information to be useful. [RT #20205]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2669. [func] Update PKCS#11 support to support Keyper HSM.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Update PKCS#11 patch to be against openssl-0.9.8i.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2668. [func] Several improvements to dnssec-* tools, including:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - dnssec-keygen and dnssec-settime can now set key
18c2aff776a775d34a4c9893a4c72e0434d68e36artem metadata fields 0 (to unset a value, use "none")
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - dnssec-revoke sets the revocation date in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem addition to the revoke bit
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - dnssec-settime can now print individual metadata
18c2aff776a775d34a4c9893a4c72e0434d68e36artem fields instead of always printing all of them,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and can print them in unix epoch time format for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem use by scripts
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19942]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2667. [func] Add support for logging stack backtrace on assertion
18c2aff776a775d34a4c9893a4c72e0434d68e36artem failure (not available for all platforms). [RT #19780]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2666. [func] Added an 'options' argument to dns_name_fromstring()
18c2aff776a775d34a4c9893a4c72e0434d68e36artem (API change from 9.7.0a2). [RT #20196]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2665. [func] Clarify syntax for managed-keys {} statement, add
18c2aff776a775d34a4c9893a4c72e0434d68e36artem ARM documentation about RFC 5011 support. [RT #19874]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2664. [bug] create_keydata() and minimal_update() in zone.c
18c2aff776a775d34a4c9893a4c72e0434d68e36artem didn't properly check return values for some
18c2aff776a775d34a4c9893a4c72e0434d68e36artem functions. [RT #19956]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2663. [func] win32: allow named to run as a service using
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "NT AUTHORITY\LocalService" as the account. [RT #19977]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
18c2aff776a775d34a4c9893a4c72e0434d68e36artem returned a misleading error code when lwresd was
18c2aff776a775d34a4c9893a4c72e0434d68e36artem down. [RT #20028]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem creating lwres context. [RT #20029]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2660. [func] Add a new set of DNS libraries for non-BIND9
18c2aff776a775d34a4c9893a4c72e0434d68e36artem applications. See README.libdns. [RT #19369]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2659. [doc] Clarify dnssec-keygen doc: key name must match zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem name for DNSSEC keys. [RT #19938]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2658. [bug] dnssec-settime and dnssec-revoke didn't process
18c2aff776a775d34a4c9893a4c72e0434d68e36artem key file paths correctly. [RT #20078]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2657. [cleanup] Lower "journal file <path> does not exist, creating it"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem log level to debug 1. [RT #20058]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2656. [func] win32: add a "tools only" check box to the installer
18c2aff776a775d34a4c9893a4c72e0434d68e36artem which causes it to only install dig, host, nslookup,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem nsupdate and relevant DLLs. [RT #19998]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2655. [doc] Document that key-directory does not affect
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2654. [bug] Improve error reporting on duplicated names for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem deny-answer-xxx. [RT #20164]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2653. [bug] Treat ENGINE_load_private_key() failures as key
18c2aff776a775d34a4c9893a4c72e0434d68e36artem not found rather than out of memory. [RT #18033]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2652. [func] Provide more detail about what record is being
18c2aff776a775d34a4c9893a4c72e0434d68e36artem deleted. [RT #20061]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2651. [bug] Dates could print incorrectly in K*.key files on
18c2aff776a775d34a4c9893a4c72e0434d68e36artem 64-bit systems. [RT #20076]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2650. [bug] Assertion failure in dnssec-signzone when trying
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to read keyset-* files. [RT #20075]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2649. [bug] Set the domain for forward only zones. [RT #19944]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2647. [bug] Remove unnecessary SOA updates when a new KSK is
18c2aff776a775d34a4c9893a4c72e0434d68e36artem added. [RT #19913]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
18c2aff776a775d34a4c9893a4c72e0434d68e36artem which default to 64 bits. [RT #19927]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --- 9.7.0a2 released ---
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2644. [bug] Change #2628 caused a regression on some systems;
18c2aff776a775d34a4c9893a4c72e0434d68e36artem named was unable to write the PID file and would
18c2aff776a775d34a4c9893a4c72e0434d68e36artem fail on startup. [RT #20001]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2643. [bug] Stub zones interacted badly with NSEC3 support.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19777]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2642. [bug] nsupdate could dump core on solaris when reading
18c2aff776a775d34a4c9893a4c72e0434d68e36artem improperly formatted key files. [RT #20015]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2641. [bug] Fixed an error in parsing update-policy syntax,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem added a regression test to check it. [RT #20007]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2640. [security] A specially crafted update packet will cause named
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to exit. [RT #20000]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2638. [bug] Install arpaname. [RT #19957]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19959]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2636. [func] Simplify zone signing and key maintenance with the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-* tools. Major changes:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - all dnssec-* tools now take a -K option to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem specify a directory in which key files will be
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - DNSSEC can now store metadata indicating when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem they are scheduled to be published, activated,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem revoked or removed; these values can be set by
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-keygen or overwritten by the new
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-settime command
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - dnssec-signzone -S (for "smart") option reads key
18c2aff776a775d34a4c9893a4c72e0434d68e36artem metadata and uses it to determine automatically
18c2aff776a775d34a4c9893a4c72e0434d68e36artem which keys to publish to the zone, use for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem signing, revoke, or remove from the zone
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19816]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19716]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2634. [port] win32: Add support for libxml2, enable
18c2aff776a775d34a4c9893a4c72e0434d68e36artem statschannel. [RT #19773]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2633. [bug] Handle 15 bit rand() functions. [RT #19783]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2632. [func] util/kit.sh: warn if documentation appears to be out of
18c2aff776a775d34a4c9893a4c72e0434d68e36artem date. [RT #19922]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19926 ]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2630. [func] Improved syntax for DDNS autoconfiguration: use
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "update-policy local;" to switch on local DDNS in a
18c2aff776a775d34a4c9893a4c72e0434d68e36artem zone. (The "ddns-autoconf" option has been removed.)
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19875]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2629. [port] Check for seteuid()/setegid(), use setresuid()/
18c2aff776a775d34a4c9893a4c72e0434d68e36artem setresgid() if not present. [RT #19932]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2628. [port] linux: Allow /var/run/named/named.pid to be opened
18c2aff776a775d34a4c9893a4c72e0434d68e36artem at startup with reduced capabilities in operation.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19884]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2627. [bug] Named aborted if the same key was included in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem trusted-keys more than once. [RT #19918]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2626. [bug] Multiple trusted-keys could trigger an assertion
18c2aff776a775d34a4c9893a4c72e0434d68e36artem failure. [RT #19914]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2624. [func] 'named-checkconf -p' will print out the parsed
18c2aff776a775d34a4c9893a4c72e0434d68e36artem configuration. [RT #18871]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2621. [doc] Made copyright boilterplate consistent. [RT #19833]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2620. [bug] Delay thawing the zone until the reload of it has
18c2aff776a775d34a4c9893a4c72e0434d68e36artem completed successfully. [RT #19750]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2619. [func] Add support for RFC 5011, automatic trust anchor
18c2aff776a775d34a4c9893a4c72e0434d68e36artem maintenance. The new "managed-keys" statement can
18c2aff776a775d34a4c9893a4c72e0434d68e36artem be used in place of "trusted-keys" for zones which
18c2aff776a775d34a4c9893a4c72e0434d68e36artem support this protocol. (Note: this syntax is
18c2aff776a775d34a4c9893a4c72e0434d68e36artem expected to change prior to 9.7.0 final.) [RT #19248]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2618. [bug] The sdb and sdlz db_interator_seek() methods could
18c2aff776a775d34a4c9893a4c72e0434d68e36artem loop infinitely. [RT #19847]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2617. [bug] ifconfig.sh failed to emit an error message when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem run from the wrong location. [RT #19375]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2616. [bug] 'host' used the nameservers from resolv.conf even
18c2aff776a775d34a4c9893a4c72e0434d68e36artem when a explicit nameserver was specified. [RT #19852]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2615. [bug] "__attribute__((unused))" was in the wrong place
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for ia64 gcc builds. [RT #19854]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2614. [port] win32: 'named -v' should automatically be executed
18c2aff776a775d34a4c9893a4c72e0434d68e36artem in the foreground. [RT #19844]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2613. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --- 9.7.0a1 released ---
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2612. [func] Add default values for the arguments to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-keygen. Without arguments, it will now
18c2aff776a775d34a4c9893a4c72e0434d68e36artem generate a 1024-bit RSASHA1 zone-signing key,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem or with the -f KSK option, a 2048-bit RSASHA1
18c2aff776a775d34a4c9893a4c72e0434d68e36artem key-signing key. [RT #19300]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2611. [func] Add -l option to dnssec-dsfromkey to generate
18c2aff776a775d34a4c9893a4c72e0434d68e36artem DLV records instead of DS records. [RT #19300]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2610. [port] sunos: Change #2363 was not complete. [RT #19796]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2609. [func] Simplify the configuration of dynamic zones:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - add ddns-confgen command to generate
18c2aff776a775d34a4c9893a4c72e0434d68e36artem configuration text for named.conf
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - add zone option "ddns-autoconf yes;", which
18c2aff776a775d34a4c9893a4c72e0434d68e36artem causes named to generate a TSIG session key
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and allow updates to the zone using that key
18c2aff776a775d34a4c9893a4c72e0434d68e36artem - add '-l' (localhost) option to nsupdate, which
18c2aff776a775d34a4c9893a4c72e0434d68e36artem causes nsupdate to connect to a locally-running
18c2aff776a775d34a4c9893a4c72e0434d68e36artem named process using the session key generated
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19284]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2608. [func] Perform post signing verification checks in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-signzone. These can be disabled with -P.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem The post sign verification test ensures that for each
18c2aff776a775d34a4c9893a4c72e0434d68e36artem algorithm in use there is at least one non revoked
18c2aff776a775d34a4c9893a4c72e0434d68e36artem self signed KSK key. That all revoked KSK keys are
18c2aff776a775d34a4c9893a4c72e0434d68e36artem self signed. That all records in the zone are signed
18c2aff776a775d34a4c9893a4c72e0434d68e36artem by the algorithm. [RT #19653]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2607. [bug] named could incorrectly delete NSEC3 records for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem empty nodes when processing a update request.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19749]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2606. [bug] "delegation-only" was not being accepted in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem delegation-only type zones. [RT #19717]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2605. [bug] Accept DS responses from delegation only zones.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT # 19296]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2604. [func] Add support for DNS rebinding attack prevention through
18c2aff776a775d34a4c9893a4c72e0434d68e36artem new options, deny-answer-addresses and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem deny-answer-aliases. Based on contributed code from
18c2aff776a775d34a4c9893a4c72e0434d68e36artem JD Nurmi, Google. [RT #18192]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2603. [port] win32: handle .exe extension of named-checkzone and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem named-comilezone argv[0] names under windows.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19767]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2602. [port] win32: fix debugging command line build of libisccfg.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19767]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2601. [doc] Mention file creation mode mask in the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem named manual page.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2600. [doc] ARM: miscellaneous reformatting for different
18c2aff776a775d34a4c9893a4c72e0434d68e36artem page widths. [RT #19574]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2599. [bug] Address rapid memory growth when validation fails.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19654]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2598. [func] Reserve the -F flag. [RT #19657]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2597. [bug] Handle a validation failure with a insecure delegation
18c2aff776a775d34a4c9893a4c72e0434d68e36artem from a NSEC3 signed master/slave zone. [RT #19464]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
18c2aff776a775d34a4c9893a4c72e0434d68e36artem long, leading to inefficient memory usage or rejecting
18c2aff776a775d34a4c9893a4c72e0434d68e36artem newer cache entries in the worst case. [RT #19563]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2594. [func] Have rndc warn if using its default configuration
18c2aff776a775d34a4c9893a4c72e0434d68e36artem file when the key file also exists. [RT #19424]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2591. [bug] named could die when processing a update in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem removed_orphaned_ds(). [RT #19507]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2590. [func] Report zone/class of "update with no effect".
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19542]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19626]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2588. [bug] SO_REUSEADDR could be set unconditionally after failure
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of bind(2) call. This should be rare and mostly
18c2aff776a775d34a4c9893a4c72e0434d68e36artem harmless, but may cause interference with other
18c2aff776a775d34a4c9893a4c72e0434d68e36artem processes that happen to use the same port. [RT #19642]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2587. [func] Improve logging by reporting serial numbers for
18c2aff776a775d34a4c9893a4c72e0434d68e36artem when zone serial has gone backwards or unchanged.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19506]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
18c2aff776a775d34a4c9893a4c72e0434d68e36artem or SDB. [RT #19577]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2585. [bug] Uninitialized socket name could be referenced via a
18c2aff776a775d34a4c9893a4c72e0434d68e36artem statistics channel, triggering an assertion failure in
18c2aff776a775d34a4c9893a4c72e0434d68e36artem XML rendering. [RT #19427]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2584. [bug] alpha: gcc optimization could break atomic operations.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19227]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2583. [port] netbsd: provide a control to not add the compile
18c2aff776a775d34a4c9893a4c72e0434d68e36artem date to the version string, -DNO_VERSION_DATE.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2582. [bug] Don't emit warning log message when we attempt to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem remove non-existent journal. [RT #19516]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Requires MySQL 5.0.19 or later. [RT #19084]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2580. [bug] UpdateRej statistics counter could be incremented twice
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for one rejection. [RT #19476]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2579. [bug] DNSSEC lookaside validation failed to handle unknown
18c2aff776a775d34a4c9893a4c72e0434d68e36artem algorithms. [RT #19479]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2578. [bug] Changed default sig-signing-type to 65534, because
18c2aff776a775d34a4c9893a4c72e0434d68e36artem 65535 turns out to be reserved. [RT #19477]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2577. [doc] Clarified some statistics counters. [RT #19454]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2576. [bug] NSEC record were not being correctly signed when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a zone transitions from insecure to secure.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Handle such incorrectly signed zones. [RT #19114]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2575. [func] New functions dns_name_fromstring() and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dns_name_tostring(), to simplify conversion
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of a string to a dns_name structure and vice
18c2aff776a775d34a4c9893a4c72e0434d68e36artem versa. [RT #19451]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2574. [doc] Document nsupdate -g and -o. [RT #19351]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2573. [bug] Replacing a non-CNAME record with a CNAME record in a
18c2aff776a775d34a4c9893a4c72e0434d68e36artem single transaction in a signed zone failed. [RT #19397]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2572. [func] Simplify DLV configuration, with a new option
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "dnssec-lookaside auto;" This is the equivalent
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of "dnssec-lookaside . trust-anchor dlv.isc.org;"
18c2aff776a775d34a4c9893a4c72e0434d68e36artem plus setting a trusted-key for dlv.isc.org.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Note: The trusted key is hard-coded into named,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem but is also stored in (and can be overridden
18c2aff776a775d34a4c9893a4c72e0434d68e36artem by) $sysconfdir/bind.keys. As the ISC DLV key
18c2aff776a775d34a4c9893a4c72e0434d68e36artem rolls over it can be kept up to date by replacing
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the bind.keys file with a key downloaded from
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2571. [func] Add a new tool "arpaname" which translates IP addresses
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #18976]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2570. [func] Log the destination address the query was sent to.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19209]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2569. [func] Move journalprint, nsec3hash, and genrandom
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "make install" will put them in $sbindir. [RT #19301]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2568. [bug] Report when the write to indicate a otherwise
18c2aff776a775d34a4c9893a4c72e0434d68e36artem successful start fails. [RT #19360]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2567. [bug] dst__privstruct_writefile() could miss write errors.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem write_public_key() could miss write errors.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dnssec-dsfromkey could miss write errors.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19360]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2566. [cleanup] Clarify logged message when an insecure DNSSEC
18c2aff776a775d34a4c9893a4c72e0434d68e36artem response arrives from a zone thought to be secure:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem "insecurity proof failed" instead of "not
18c2aff776a775d34a4c9893a4c72e0434d68e36artem insecure". [RT #19400]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2565. [func] Add support for HIP record. Includes new functions
18c2aff776a775d34a4c9893a4c72e0434d68e36artem dns_rdata_hip_first(), dns_rdata_hip_next()
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and dns_rdata_hip_current(). [RT #19384]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2564. [bug] Only take EDNS fallback steps when processing timeouts.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19405]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2563. [bug] Dig could leak a socket causing it to wait forever
18c2aff776a775d34a4c9893a4c72e0434d68e36artem to exit. [RT #19359]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2562. [doc] ARM: miscellaneous improvements, reorganization,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and some new content.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2559. [bug] dnssec-dsfromkey could compute bad DS records when
18c2aff776a775d34a4c9893a4c72e0434d68e36artem reading from a K* files. [RT #19357]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2558. [func] Set the ownership of missing directories created
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for pid-file if -u has been specified on the command
18c2aff776a775d34a4c9893a4c72e0434d68e36artem line. [RT #19328]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2557. [cleanup] PCI compliance:
18c2aff776a775d34a4c9893a4c72e0434d68e36artem * new libisc log module file
18c2aff776a775d34a4c9893a4c72e0434d68e36artem * isc_dir_chroot() now also changes the working
18c2aff776a775d34a4c9893a4c72e0434d68e36artem directory to "/".
18c2aff776a775d34a4c9893a4c72e0434d68e36artem * additional INSISTs
18c2aff776a775d34a4c9893a4c72e0434d68e36artem * additional logging when files can't be removed.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem error checks in the correct order resulting in the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem wrong error code sometimes being returned. [RT #19249]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2555. [func] dig: when emitting a hex dump also display the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem corresponding characters. [RT #19258]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2554. [bug] Validation of uppercase queries from NSEC3 zones could
18c2aff776a775d34a4c9893a4c72e0434d68e36artem fail. [RT #19297]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2552. [bug] zero-no-soa-ttl-cache was not being honoured.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19340]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2551. [bug] Potential Reference leak on return. [RT #19341]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19343]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2549. [port] linux: define NR_OPEN if not currently defined.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19344]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2548. [bug] Install iterated_hash.h. [RT #19335]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2547. [bug] openssl_link.c:mem_realloc() could reference an
18c2aff776a775d34a4c9893a4c72e0434d68e36artem out-of-range area of the source buffer. New public
18c2aff776a775d34a4c9893a4c72e0434d68e36artem function isc_mem_reallocate() was introduced to address
18c2aff776a775d34a4c9893a4c72e0434d68e36artem this bug. [RT #19313]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2546. [func] Add --enable-openssl-hash configure flag to use
18c2aff776a775d34a4c9893a4c72e0434d68e36artem OpenSSL (in place of internal routine) for hash
18c2aff776a775d34a4c9893a4c72e0434d68e36artem functions (MD5, SHA[12] and HMAC). [RT #18815]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2545. [doc] ARM: Legal hostname checking (check-names) is
18c2aff776a775d34a4c9893a4c72e0434d68e36artem for SRV RDATA too. [RT #19304]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2542. [doc] Update the description of dig +adflag. [RT #19290]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2541. [bug] Conditionally update dispatch manager statistics.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19247]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2539. [security] Update the interaction between recursion, allow-query,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem allow-query-cache and allow-recursion. [RT #19198]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2538. [bug] cache/ADB memory could grow over max-cache-size,
18c2aff776a775d34a4c9893a4c72e0434d68e36artem especially with threads and smaller max-cache-size
18c2aff776a775d34a4c9893a4c72e0434d68e36artem values. [RT #19240]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2537. [func] Added more statistics counters including those on socket
18c2aff776a775d34a4c9893a4c72e0434d68e36artem I/O events and query RTT histograms. [RT #18802]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2536. [cleanup] Silence some warnings when -Werror=format-security is
18c2aff776a775d34a4c9893a4c72e0434d68e36artem specified. [RT #19083]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2534. [func] Check NAPTR records regular expressions and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem replacement strings to ensure they are syntactically
18c2aff776a775d34a4c9893a4c72e0434d68e36artem valid and consistant. [RT #18168]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2533. [doc] ARM: document @ (at-sign). [RT #17144]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2532. [bug] dig: check the question section of the response to
18c2aff776a775d34a4c9893a4c72e0434d68e36artem see if it matches the asked question. [RT #18495]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2531. [bug] Change #2207 was incomplete. [RT #19098]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2530. [bug] named failed to reject insecure to secure transitions
18c2aff776a775d34a4c9893a4c72e0434d68e36artem via UPDATE. [RT #19101]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2529. [cleanup] Upgrade libtool to silence complaints from recent
18c2aff776a775d34a4c9893a4c72e0434d68e36artem version of autoconf. [RT #18657]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2528. [cleanup] Silence spurious configure warning about
18c2aff776a775d34a4c9893a4c72e0434d68e36artem --datarootdir [RT #19096]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2527. [placeholder]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2526. [func] New named option "attach-cache" that allows multiple
18c2aff776a775d34a4c9893a4c72e0434d68e36artem views to share a single cache to save memory and
18c2aff776a775d34a4c9893a4c72e0434d68e36artem improve lookup efficiency. Based on contributed code
18c2aff776a775d34a4c9893a4c72e0434d68e36artem from Barclay Osborn, Google. [RT #18905]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2525. [func] New logging category "query-errors" to provide detailed
18c2aff776a775d34a4c9893a4c72e0434d68e36artem internal information about query failures, especially
18c2aff776a775d34a4c9893a4c72e0434d68e36artem about server failures. [RT #19027]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2523. [bug] Random type rdata freed by dns_nsec_typepresent().
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19112]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2521. [bug] Improve epoll cross compilation support. [RT #19047]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2520. [bug] Update xml statistics version number to 2.0 as change
18c2aff776a775d34a4c9893a4c72e0434d68e36artem #2388 made the schema incompatible to the previous
18c2aff776a775d34a4c9893a4c72e0434d68e36artem version. [RT #19080]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2519. [bug] dig/host with -4 or -6 didn't work if more than two
18c2aff776a775d34a4c9893a4c72e0434d68e36artem nameserver addresses of the excluded address family
18c2aff776a775d34a4c9893a4c72e0434d68e36artem preceded in resolv.conf. [RT #19081]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2518. [func] Add support for the new CERT types from RFC 4398.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19077]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2517. [bug] dig +trace with -4 or -6 failed when it chose a
18c2aff776a775d34a4c9893a4c72e0434d68e36artem nameserver address of the excluded address type.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #18843]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2516. [bug] glue sort for responses was performed even when not
18c2aff776a775d34a4c9893a4c72e0434d68e36artem needed. [RT #19039]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19063]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
18c2aff776a775d34a4c9893a4c72e0434d68e36artem a nameserver of the excluded address family.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #18848]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2513. [bug] Fix windows cli build. [RT #19062]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2512. [func] Print a summary of the cached records which make up
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the negative response. [RT #18885]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #18885]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19033]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2509. [bug] Specifying a fixed query source port was broken.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19051]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2508. [placeholder]
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov2507. [func] Log the recursion quota values when killing the
18c2aff776a775d34a4c9893a4c72e0434d68e36artem oldest query or refusing to recurse due to quota.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #19022]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2506. [port] solaris: Check at configure time if
18c2aff776a775d34a4c9893a4c72e0434d68e36artem hack_shutup_pthreadonceinit is needed. [RT #19037]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2505. [port] Treat amd64 similarly to x86_64 when determining
18c2aff776a775d34a4c9893a4c72e0434d68e36artem atomic operation support. [RT #19031]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2504. [bug] Address race condition in the socket code. [RT #18899]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2503. [port] linux: improve compatibility with Linux Standard
18c2aff776a775d34a4c9893a4c72e0434d68e36artem Base. [RT #18793]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2502. [cleanup] isc_radix: Improve compliance with coding style,
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov document function in <isc/radix.h>. [RT #18534]
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov2501. [func] $GENERATE now supports all rdata types. Multi-field
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov rdata types need to be quoted. See the ARM for
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov details. [RT #18368]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
18c2aff776a775d34a4c9893a4c72e0434d68e36artem function. [RT #18582]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem [RT #18837]
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov --- 9.6.0rc1 released ---
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov2498. [bug] Removed a bogus function argument used with
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov ISC_SOCKET_USE_POLLWATCH: it could cause compiler
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov warning or crash named with the debug 1 level
18c2aff776a775d34a4c9893a4c72e0434d68e36artem of logging. [RT #18917]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
18c2aff776a775d34a4c9893a4c72e0434d68e36artem delegation.
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2496. [bug] Add sanity length checks to NSID option. [RT #18813]
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov2495. [bug] Tighten RRSIG checks. [RT #18795]
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov installed. [RT #18826]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2493. [bug] The linux capabilities code was not correctly cleaning
18c2aff776a775d34a4c9893a4c72e0434d68e36artem up after itself. [RT #18767]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2492. [func] Rndc status now reports the number of cpus discovered
18c2aff776a775d34a4c9893a4c72e0434d68e36artem and the number of worker threads when running
18c2aff776a775d34a4c9893a4c72e0434d68e36artem multi-threaded. [RT #18273]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2491. [func] Attempt to re-use a local port if we are already using
18c2aff776a775d34a4c9893a4c72e0434d68e36artem the port. [RT #18548]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
18c2aff776a775d34a4c9893a4c72e0434d68e36artem is cleared when IPV6_V6ONLY is set. [RT #18785]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2489. [port] solaris: Workaround Solaris's kernel bug about
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
1c755acb8b54d6f80f5596caa88a09843742ae97Alexander Pyhalov Define ISC_SOCKET_USE_POLLWATCH at build time to enable
18c2aff776a775d34a4c9893a4c72e0434d68e36artem this workaround. [RT #18870]
18c2aff776a775d34a4c9893a4c72e0434d68e36artem2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
18c2aff776a775d34a4c9893a4c72e0434d68e36artem from keyset and .key files. [RT #18694]
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which