CHANGES revision 9ba2cef72dacb1dc1105415956e1c311ac25d02c
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews3779. [cleanup] Clarify the error message when using an option
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews that was not enabled at compile time. [RT #35504]
4b030f887e5e51c00dac499682d0b5b870ece45bMark Andrews3778. [bug] Log a warning when the wrong address family is
561863ed947f18c8bfcaa631ad83a6bee3b7200bMark Andrews used in "listen-on" or "listen-on-v6". [RT #17848]
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews3777. [bug] EDNS EXPIRE code could dump core when processing
3b9a0696f99c40222e50ddae4d0dd9611737c1daMark Andrews DLZ queries. [RT #35493]
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews3776. [func] "rndc -q" suppresses output from successful
7a1cba6262f099aa5ecf9ed4db9c0345489653ccMark Andrews rndc commands. Errors are printed on stderr.
bce2d35b4879d7878e339a9c60db9364508e38fdMark Andrews3775. [bug] dlz_dlopen driver could return the wrong error
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews code on API version mismatch, leading to a segfault.
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3774. [func] When using "request-nsid", log the NSID value in
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews printable form as well as hex. [RT #20864]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3773. [func] "host", "nslookup" and "nsupdate" now have
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews options to print the version number and exit.
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews (Based in part on a contribution from Tim Tessier.)
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews messages. [RT #24383]
41be71bae48846d9525be6f71e19944e34748e26Mark Andrews3770. [bug] "dig +trace" could fail with an assertion when it
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews needed to fall back to TCP due to a truncated
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews response. [RT #24660]
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews3769. [doc] Improved documentation of "rndc signing -list".
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
4f32995bf6af48ab410b6d14b160348f5ffe0556Mark Andrews algorithm. [RT #34000]
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews3767. [func] Log explicitly when using rndc.key to configure
817a7fb62d05222fb287bbcde910ab3669f6d237Mark Andrews command channel. [RT #35316]
8147940ae7a7280ba12dd35614b9c987b38363faMark Andrews3766. [cleanup] Fixed problems with building outside the source
8147940ae7a7280ba12dd35614b9c987b38363faMark Andrews tree when using native PKCS#11. [RT #35459]
a90cf89180ae8d9dfd281288cdc75940e46bfdd0Mark Andrews3765. [bug] Fixed a bug in "rndc secroots" that could crash
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews named when dumping an empty keynode. [RT #35469]
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews3764. [bug] The dnssec-keygen/settime -S and -i options
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews (to set up a successor key and set the prepublication
fa901545edc8bb62969121e14199d533a40d0b61Tatuya JINMEI 神明達哉 interval) were missing from dnssec-keyfromlabel.
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews3763. [bug] delve: Cache DNSSEC records to avoid the need to
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews re-fetch them when restarting validation. [RT #35476]
3bb3c75ebcf3a798d33a5c439b997e1f37910501Mark Andrews3762. [bug] Address build problems with --pkcs11-native +
3bb3c75ebcf3a798d33a5c439b997e1f37910501Mark Andrews --with-openssl with ECDSA support. [RT #35467]
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews3760. [bug] Improve SIT with native PKCS#11 and on Windows.
5639d60b40db2051eb7e737d86635c621ffbfa12Mark Andrews3759. [port] Enable delve on Windows. [RT #35441]
d0deea590e6e175c77f9b5f972fea3fc7a63577aMark Andrews3758. [port] Enable export library APIs on windows. [RT #35382]
689023771c563d8660e45d439a207e06e96de28fMark Andrews3757. [port] Enable Python tools (dnssec-coverage,
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews dnssec-checkds) to run on Windows. [RT #34355]
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews3756. [bug] GSSAPI Kerberos realm checking was broken in
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews check_config leading to spurious messages being
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews logged. [RT #35443]
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews --- 9.10.0b1 released ---
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉3755. [func] Add stats counters for known EDNS options + others.
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉3754. [cleanup] win32: Installer now places files in the
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews Program Files area rather than system services.
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews3752. [bug] Address potential REQUIRE failure if
e37dff26c6bb6e2ffbba7b089ca3599d5e3e04fbMark Andrews DNS_STYLEFLAG_COMMENTDATA is set when printing out
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews3751. [tuning] The default setting for the -U option (setting
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews the number of UDP listeners per interface) has
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews been adjusted to improve performance. [RT #35417]
9baab4b1a8a5a54c04e47742c7b48311d5575a87Mark Andrews3750. [experimental] Partially implement EDNS EXPIRE option as described
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews in draft-andrews-dnsext-expire-00. Retrieval of
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews the remaining time until expiry for slave zones
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews is supported.
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews EXPIRE uses an experimental option code (65002),
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews which is subject to change. [RT #35416]
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews3749. [func] "dig +subnet" sends an EDNS client subnet option
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews containing the specified address/prefix when
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews querying. (Thanks to Wilmer van der Gaast.)
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews3748. [test] Use delve to test dns_client interfaces. [RT #35383]
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews3747. [bug] A race condition could lead to a core dump when
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews destroying a resolver fetch object. [RT #35385]
351696ef9e44e31e200afc0b019f24af6b597471Rob Austein3746. [func] New "max-zone-ttl" option enforces maximum
fbdadf789f3057a5c90ebc026dbf2d174022bd28Rob Austein TTLs for zones. If loading a zone containing a
e9f33cdca0565d049941117d30e4c37ab3c5e990Mark Andrews higher TTL, the load fails. DDNS updates with
e9f33cdca0565d049941117d30e4c37ab3c5e990Mark Andrews higher TTLs are accepted but the TTL is truncated.
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews (Note: Currently supported for master zones only;
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews inline-signing slaves will be added.) [RT #38405]
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews3745. [func] "configure --with-tuning=large" adjusts various
c5a84548b24ffac37d0154d8f2f4fea36a3aeb23Mark Andrews compiled-in constants and default settings to
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews values suited to large servers with abundant
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews memory. [RT #29538]
c4f9e613e12f03795bee18cf2ca8e6a9d39d6468Mark Andrews3744. [experimental] SIT: send and process Source Identity Tokens
3b2032121d6e8ae1f4ad24b31a69e1a4b33c91a0Mark Andrews (similar to DNS Cookies by Donald Eastlake 3rd),
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews which are designed to help clients detect off-path
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews spoofed responses and for servers to identify
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews legitimate clients.
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews SIT uses an experimental EDNS option code (65001),
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews which will be changed to an IANA-assigned value
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews if the experiment is deemed a success.
bb3e43000807197e776407fd8d524a87dcc17a10Mark Andrews SIT can be enabled via "configure --enable-sit" (or
bb3e43000807197e776407fd8d524a87dcc17a10Mark Andrews --enable-developer). It is enabled by default in
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews Servers can be configured to send smaller responses
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews to clients that have not identified themselves via
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews SIT. RRL processing has also been updated;
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews legitimate clients are not subject to rate
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews limiting. [RT #35389]
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews3743. [bug] delegation-only flag wasn't working in forward zone
d562cb04df022606af43c7bee3111e4d17cbe4b2Mark Andrews declarations despite being documented. This is
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews needed to support turning off forwarding and turning
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews on delegation only at the same name. [RT #35392]
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews3742. [port] linux: libcap support: declare curval at start of
1bf8f4b77df1e1f8c1ce8326679ab02bac235c09Mark Andrews block. [RT #35387]
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews3741. [func] "delve" (domain entity lookup and validation engine):
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews A new tool with dig-like semantics for performing DNS
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews lookups, with internal DNSSEC validation, using the
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews same resolver and validator logic as named. This
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein allows easy validation of DNSSEC data in environments
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein with untrustworthy resolvers, and assists with
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews troubleshooting of DNSSEC problems. [RT #32406]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews3740. [contrib] Minor fixes to configure --with-dlz-bdb,
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews3739. [func] Added per-zone stats counters to track TCP and
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews UDP queries. [RT #35375]
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
3d8dfd44a3be708f00380064411c16b2fa28303aMark Andrews3737. [bug] 'rndc retransfer' could trigger a assertion failure
a46445468bb39318ad2a4291ace371a8c4ff9ac6Mark Andrews with inline zones. [RT #35353]
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews3736. [bug] nsupdate: When specifying a server by name,
5f059eef4360bc6c35a38241deb2561884dd9001Mark Andrews fall back to alternate addresses if the first
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews address for that name is not reachable. [RT #25784]
eeac8cfcd3ad738b435ad82fcd5c6387da643f90Mark Andrews3735. [cleanup] Merged the libiscpk11 library into libisc
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews to simplify dependencies. [RT #35205]
d1ef96c5fb81b1edbede4228480848b58e48799eMark Andrews3734. [bug] Improve building with libtool. [RT #35314]
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews3733. [func] Improve interface scanning support. Interface
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews information will be automatically updated if the
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews OS supports routing sockets (MacOS, *BSD, Linux).
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews Use "automatic-interface-scan no;" to disable.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews Add "rndc scan" to trigger a scan. [RT #23027]
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews driver to dump core on 64-bit systems. [RT #35324]
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews3731. [func] Added a "no-case-compress" ACL, which causes
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews named to use case-insensitive compression
3386e927950e1bacd2ae7bfdc03ee17885bd9993Mark Andrews (disabling change #3645) for specified
c80b5ef256d9c289c403bc90e0fbee3699552808Mark Andrews clients. (This is useful when dealing
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews with broken client implementations that
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews use case-sensitive name comparisons,
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews rejecting responses that fail to match the
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews capitalization of the query that was sent.)
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews3730. [cleanup] Added "never" as a synonym for "none" when
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews configuring key event dates in the dnssec tools.
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews3729. [bug] dnssec-keygen could set the publication date
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews incorrectly when only the activation date was
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews specified on the command line. [RT #35278]
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews3728. [doc] Expanded native-PKCS#11 documentation,
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews specifically pkcs11: URI labels. [RT #35287]
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews3727. [func] The isc_bitstring API is no longer used and
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews has been removed from libisc. [RT #35284]
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews3726. [cleanup] Clarified the error message when attempting
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews to configure more than 32 response-policy zones.
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews3725. [contrib] Updated zkt and nslint to newest versions,
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews cleaned up and rearranged the contrib
e94cf7074d8ac30820a715211ae914387996cca9Mark Andrews directory, and added a README.
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews --- 9.10.0a2 released ---
6ecbd11029fa201b5f273f4ef016617dc35206aeMark Andrews3724. [bug] win32: Fixed a bug that prevented dig and
6ecbd11029fa201b5f273f4ef016617dc35206aeMark Andrews host from exiting properly after completing
738bffe2ee7dd6f3efeae8e2cca9017acc9c5f94Mark Andrews a UDP query. [RT #35288]
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews3723. [cleanup] Imported keys are now handled the same way
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews regardless of DNSSEC algorithm. [RT #35215]
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews3722. [bug] Using geoip ACLs in a blackhole statement
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews could cause a segfault. [RT #35272]
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews3721. [doc] Improved documentation of the EDNS processing
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews enhancements introduced in change #3593. [RT #35275]
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews3720. [bug] Address compiler warnings. [RT #35261]
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews3719. [bug] Address memory leak in in peer.c. [RT #35255]
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews probing to see if it is possible to set dscp values
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews on a per packet basis. [RT #35252]
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews3716. [bug] The dns_request code was setting dcsp values when not
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews requested. [RT #35252]
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews3715. [bug] The region and city databases could fail to
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews initialize when using some versions of libGeoIP,
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews causing assertion failures when named was
1195e2e1f2853df56d7ec69d2e01a99d44e4d61dMark Andrews configured to use them. [RT #35427]
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews3714. [test] System tests that need to test for cryptography
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews support before running can now use a common
74def1c9c1880480bb62eb881e8a7ce28f9f7a20Mark Andrews "testcrypto.sh" script to do so. [RT #35213]
5efa612be0471cc4e133b795db3dd3addf18ba6cMark Andrews3713. [bug] Save memory by not storing "also-notify" addresses
da059d6dd4035c1f4736e7978065c4d51893b136Mark Andrews in zone objects that are configured not to send
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews notify requests. [RT #35195]
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews3712. [placeholder]
d9147148dde80db2ce3390ded26333d106d3c10bTatuya JINMEI 神明達哉3711. [placeholder]
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉3710. [bug] Address double dns_zone_detach when switching to
75654de87118c587629b5dc6882b6c1925d34983Tatuya JINMEI 神明達哉 using automatic empty zones from regular zones.
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews3709. [port] Use built-in versions of strptime() and timegm()
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews on all platforms to avoid portability issues.
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews3708. [bug] Address a portentry locking issue in dispatch.c.
445acbbea8bd5143749e97a8ff247a808321aa6cMark Andrews3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews on a missing resolv.conf file and initializes the
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews structure as if it had been configured with:
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews nameserver ::1
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews nameserver 127.0.0.1
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews Note: Callers will need to be updated to treat
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews ISC_R_FILENOTFOUND as a qualified success or else
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 they will leak memory. The following code fragment
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews will work with both old and new versions without
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews changing the behaviour of the existing code.
3dc3d557be91d59317b34fc5a9ae79b1925d5878Mark Andrews resconf = NULL;
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews result = irs_resconf_load(mctx, "/etc/resolv.conf",
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews if (result != ISC_SUCCESS) {
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews if (resconf != NULL)
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews irs_resconf_destroy(&resconf);
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews3706. [contrib] queryperf: Fixed a possible integer overflow when
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews printing results. [RT #35182]
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews3705. [func] "configure --enable-native-pkcs11" enables BIND
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews to use the PKCS#11 API for all cryptographic
ea38808b7dc1b2e760f18f2cc3ae07deaf15ba1aMark Andrews functions, so that it can drive a hardware service
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews module directly without the need to use a modified
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews OpenSSL as intermediary (so long as the HSM's vendor
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews provides a complete-enough implementation of the
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews PKCS#11 interface). This has been tested successfully
ed6e3610e3e56aac554dc93cad461a0016e961f9Mark Andrews with the Thales nShield HSM and with SoftHSMv2 from
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews the OpenDNSSEC project. [RT #29031]
c3c72c1033b9d085b1a1fe74a9e3efb6db724ce2Mark Andrews3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews3703. [func] To improve recursive resolver performance, cache
a0a19510c03e6004fd11ec278745d499751cd081Mark Andrews records which are still being requested by clients
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews can now be automatically refreshed from the
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews authoritative server before they expire, reducing
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews or eliminating the time window in which no answer
46ed893dd0c8096d2bcbf31e6dcf79b2786e7b7fMark Andrews is available in the cache. See the "prefetch" option
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews for more details. [RT #35041]
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews3702. [func] 'dnssec-coverage -l' option specifies a length
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews of time to check for coverage; events further into
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews the future are ignored. 'dnssec-coverage -z'
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews checks only ZSK events, and 'dnssec-coverage -k'
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews checks only KSK events. (Thanks to Peter Palfrader.)
7952b2b43e880b18e63613805f71fd3e8624bb44Mark Andrews3701. [func] named-checkconf can now obscure shared secrets
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews when printing by specifying '-x'. [RT #34465]
e1f638a7141a4c1364e4ca45025241c9e2fecf74Mark Andrews3700. [func] Allow access to subgroups of XML statistics via
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews special URLs http://<server>:<port>/xml/v3/server,
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews3699. [bug] Improvements to statistics channel XSL stylesheet:
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews the stylesheet can now be cached by the browser;
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews section headers are omitted from the stats display
154bd87b5c9d603329dd691b822525c6885f21d4Mark Andrews when there is no data in those sections to be
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews displayed; counters are now right-justified for
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews easier readability. [RT #35117]
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews3698. [cleanup] Replaced all uses of memcpy() with memmove().
d4e1933abc4bfa3d42dcc2f093c81816a317dde6Mark Andrews3697. [bug] Handle "." as a search list element when IDN support
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews is enabled. [RT #35133]
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews3696. [bug] dig failed to handle AXFR style IXFR responses which
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews span multiple messages. [RT #35137]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews3695. [bug] Address a possible race in dispatch.c. [RT #35107]
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews3694. [bug] Warn when a key-directory is configured for a zone,
39e5cab80a2abc95ca034ac79ea3f973fc66f5b3Mark Andrews but does not exist or is not a directory. [RT #35108]
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews3693. [security] memcpy was incorrectly called with overlapping
85315eb5361d92ba034cecc26c3526e121392386Mark Andrews ranges resulting in malformed names being generated
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews on some platforms. This could cause INSIST failures
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews when serving NSEC3 signed zones (CVE-2014-0591).
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
bdb609f5874056f6f1cd212ebf8700132e683fe5Mark Andrews was no data at the node. [RT #35080]
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews3691. [contrib] Address null pointer dereference in LDAP and
bae21f249ead77e442a025b9b18d90e21ebf72ceMark Andrews MySQL DLZ modules.
a3a09ca2497e925a9f0ba76f1525c6c60e5d5094Mark Andrews3690. [bug] Iterative responses could be missed when the source
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews port for an upstream query was the same as the
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews listener port (53). [RT #34925]
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews3689. [bug] Fixed a bug causing an insecure delegation from one
50105afc551903541608b11851d73278b23579a3Mark Andrews static-stub zone to another to fail with a broken
50105afc551903541608b11851d73278b23579a3Mark Andrews trust chain. [RT #35081]
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews3688. [bug] loadnode could return a freed node on out of memory.
ad35e0aec9dae18ee31e760beab1602f7eb4ef05Mark Andrews3687. [bug] Address null pointer dereference in zone_xfrdone.
8c5d451ea2898586c00932efeb5123b41afc9650Mark Andrews3686. [func] "dnssec-signzone -Q" drops signatures from keys
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews that are still published but no longer active.
d81018ac98b287438248cd0e3a1c230eb40b0b55Mark Andrews3685. [bug] "rndc refresh" didn't work correctly with slave
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews zones using inline-signing. [RT #35105]
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews3684. [bug] The list of included files would grow on reload.
e9964e7db4467722300c0d7d52ec1d7a51a784c1Mark Andrews3683. [cleanup] Add a more detailed "not found" message to rndc
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews commands which specify a zone name. [RT #35059]
89783da064f4f9bf2e82d2b3941ddeffe2a8c30dMark Andrews3682. [bug] Correct the behavior of rndc retransfer to allow
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews inline-signing slave zones to retain NSEC3 parameters
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews instead of reverting to NSEC. [RT #34745]
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews3681. [port] Update the Windows build system to support feature
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews selection and WIN64 builds. This is a work in
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews progress. [RT #34160]
3ad4e307b64bcf8baa984e10a4e7549dbeaea31dMark Andrews3680. [bug] Ensure buffer space is available in "rndc zonestatus".
9ce4318edbab0b50f21df9ce28beb6fde71943ecMark Andrews3679. [bug] dig could fail to clean up TCP sockets still
91c79af4755df2d892511512e0fc886639518a92Mark Andrews waiting on connect(). [RT #35074]
bf74532c942054bccc3df5227009ce52063a9dafMark Andrews3678. [port] Update config.guess and config.sub. [RT #35060]
2558e3f25d4972a028c99141bd26d3f3087630d5Mark Andrews3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews times. [RT #35073]
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews3676. [bug] "named-checkconf -z" now checks zones of type
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews hint and redirect as well as master. [RT #35046]
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews3675. [misc] Provide a place for third parties to add version
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews information for their extensions in the version
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews file by setting the EXTENSIONS variable.
0e4f7c9d4e1a4bb66f0702e9f9975c392a15918bMark Andrews --- 9.10.0a1 released ---
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews3673. [func] New "in-view" zone option allows direct sharing
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews of zones between views. [RT #32968]
54a8b1e6ede781e9f4059512530046db8c4de1ddMark Andrews3672. [func] Local address can now be specified when using
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews dns_client API. [RT #34811]
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews3671. [bug] Don't allow dnssec-importkey overwrite a existing
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews non-imported private key.
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews3670. [bug] Address read after free in server side of
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews lwres_getrrsetbyname. [RT #29075]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews3667. [test] dig: add support to keep the TCP socket open between
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews successive queries (+[no]keepopen). [RT #34918]
6bd3b1fdb3915931ac158b2126fae35711bd0b26Mark Andrews3666. [func] Add a tool, named-rrchecker, for checking the syntax
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews of individual resource records. This tool is intended
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews to be called by provisioning systems so that the front
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews end does not need to be upgraded to support new DNS
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews record types. [RT #34778]
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews3665. [bug] Failure to release lock on error in receive_secure_db.
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews locking and other bugs. [RT #34855]
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews3663. [bug] Address bugs in dns_rdata_fromstruct and
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews3661. [bug] Address lock order reversal deadlock with inline zones.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3659. [port] solaris: don't add explict dependencies/rules for
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews python programs as make won't use the implicit rules.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3658. [port] linux: Address platform specific compilation issue
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews when libcap-devel is installed. [RT #34838]
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews3657. [port] Some readline clones don't accept NULL pointers when
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews calling add_history. [RT #34842]
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews3656. [security] Treat an all zero netmask as invalid when generating
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews the localnets acl. (The prior behavior could
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews allow unexpected matches when using some versions
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews of Winsock: CVE-2013-6320.) [RT #34687]
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews3655. [cleanup] Simplify TCP message processing when requesting a
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews zone transfer. [RT #34825]
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews3654. [bug] Address race condition with manual notify requests.
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews3653. [func] Create delegations for all "children" of empty zones
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews except "forward first". [RT #34826]
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews3651. [tuning] Adjust when a master server is deemed unreachable.
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews notify requests. [RT #30589]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews the associated view. [RT #34765]
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews3647. [bug] Address a race condition when shutting down a zone.
7052e191ce63fdf063a977695718ff426a27628eMark Andrews3646. [bug] Journal filename string could be set incorrectly,
7052e191ce63fdf063a977695718ff426a27628eMark Andrews causing garbage in log messages. [RT #34738]
7052e191ce63fdf063a977695718ff426a27628eMark Andrews3645. [protocol] Use case sensitive compression when responding to
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews queries. [RT #34737]
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews3643. [doc] Clarify RRL "slip" documentation.
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews3642. [func] Allow externally generated DNSKEY to be imported
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews into the DNSKEY management framework. A new tool
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews dnssec-importkey is used to do this. [RT #34698]
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews3641. [bug] Handle changes to sig-validity-interval settings
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews better. [RT #34625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3640. [bug] ndots was not being checked when searching. Only
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews continue searching on NXDOMAIN responses. Add the
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews ability to specify ndots to nslookup. [RT #34711]
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews in a key zone. [RT #34238]
37225662b64e44a3c59f92dd6156db37b52ca7a3Mark Andrews3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
eabf7ff29a88c578619fdc0d307f9e0bad0d6ce8Mark Andrews encountered. [RT #34668]
30b89a5ad95b5775abf6cce8ecc84a061babf76dMark Andrews3637. [bug] 'allow-query-on' was checking the source address
8f2b99738760449de3431b191c0c9c0ea08fdc2eMark Andrews rather than the destination address. [RT #34590]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews3636. [bug] Automatic empty zones now behave better with
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews forward only "zones" beneath them. [RT #34583]
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews3635. [bug] Signatures were not being removed from a zone with
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews only KSK keys for a algorithm. [RT #34439]
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews3634. [func] Report build-id in rndc status. Report build-id
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews when building from a git repository. [RT #20422]
1576cde466a8de10e84f9887ec073ebaf5973aefMark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
1edbf336252ea6a94d58f3f1a135567e2956e8caMark Andrews to support new EDNS options. [RT #34414]
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉3632. [bug] Signature from newly inactive keys were not being
8cb1558ff82868e45e76aa64e2ff72986aeebce2Tatuya JINMEI 神明達哉 removed. [RT #32178]
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉3631. [bug] Remove spurious warning about missing signatures when
582b6dc68b2defc1d8795df8f1da31bd1825c30bTatuya JINMEI 神明達哉 qtype is SIG. [RT #34600]
668767dc6471dfed4741869c8dd20af8e9ace3cdTatuya JINMEI 神明達哉3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews3629. [func] Allow the printing of cryptographic fields in DNSSEC
634d053dfe806ee6a3d9ed5c2bda7f68ba410de4Tatuya JINMEI 神明達哉 records by dig to be suppressed (dig +nocrypto).
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews3625. [bug] Don't send notify messages to machines outside of the
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews3624. [bug] Look for 'json_object_new_int64' when looking for a
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews the json library. [RT #34449]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews3623. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews cache statistics. [RT #34339]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can lead to a remotely triggerable REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-4854). [RT #34238]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
600cbd1fcea3c9cc9706dc1ff8fc0d0034ebdeacTatuya JINMEI 神明達哉 RPZ responses to be configured on the basis of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the client IP address; this can be used, for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews example, to blacklist misbehaving recursive
1160ecfd146301ff0d053ed054e5276f33f28b4eMark Andrews or stub resolvers. [RT #33605]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
73d74334741756eab4a9afd8d3c4e7c08da9a844Mark Andrews3618. [func] "rndc reload" now checks modification times of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews include files as well as master files to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews whether to skip reloading a zone. [RT #33936]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3617. [bug] Named was failing to answer queries during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc reload" [RT #34098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3616. [bug] Change #3613 was incomplete. [RT #34177]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3615. [cleanup] "configure" now finishes by printing a summary
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of optional BIND features and whether they are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews active or inactive. ("configure --enable-full-report"
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews increases the verbosity of the summary.) [RT #31777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3614. [port] Check for <linux/types.h>. [RT #34162]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews3613. [bug] named could crash when deleting inline-signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones with "rndc delzone". [RT #34066]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3611. [bug] Improved resistance to a theoretical authentication
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews attack based on differential timing. [RT #33939]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3610. [cleanup] win32: Some executables had been omitted from the
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews installer. [RT #34116]
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews3609. [bug] Corrected a possible deadlock in applications using
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews the export version of the isc_app API. [RT #33967]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3608. [port] win32: added todos.pl script to ensure all text files
2f025ec6fe68421d942330afaf1980b7a4976e30Mark Andrews the win32 build depends on are converted to DOS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews newline format. [RT #22067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews message. [RT #34045]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3606. [func] "rndc flushtree" now flushes matching
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews records in the address database and bad cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as well as the DNS cache. (Previously only the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNS cache was flushed.) [RT #33970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3605. [port] win32: Addressed several compatibility issues
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with newer versions of Visual Studio. [RT #33916]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3604. [bug] Fixed a compile-time error when building with
0451757ad8f7c49a0d3dcdf7fbdd4ea64fcec298Mark Andrews JSON but not XML. [RT #33959]
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews3603. [bug] Install <isc/stat.h>. [RT #33956]
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews integrate with named and serve DNS data.
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews (Contributed by John Eaglesham of Yahoo.)
87c7b822b7bcdd8bec7ba1c01937286308b4847cMark Andrews3601. [bug] Added to PKCS#11 openssl patches a value len
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attribute in DH derive key. [RT #33928]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3600. [cleanup] dig: Fixed a typo in the warning output when receiving
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an oversized response. [RT #33910]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3599. [tuning] Check for pointer equivalence in name comparisons.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3598. [cleanup] Improved portability of map file code. [RT #33820]
f488b1c311f2fc09ae8e45f7893185e608b17edeMark Andrews3597. [bug] Ensure automatic-resigning heaps are reconstructed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when loading zones in map format. [RT #33381]
4bb16c5856e5c6b05ac43c60f9f9376641bdcccfMark Andrews3596. [port] Updated win32 build documentation, added
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-verify. [RT #22067]
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews3595. [port] win32: Fix build problems introduced by change #3550.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3594. [maint] Update config.guess and config.sub. [RT #33816]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3593. [func] Update EDNS processing to better track remote server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews capabilities. [RT #30655]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3592. [doc] Moved documentation of rndc command options to the
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews rndc man page. [RT #33506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3591. [func] Use CRC-64 to detect map file corruption at load
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews time. [RT #33746]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3590. [bug] When using RRL on recursive servers, defer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rate-limiting until after recursion is complete;
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews also, use correct rcode for slipped NXDOMAIN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #33604]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3589. [func] Report serial numbers in when starting zone transfers.
3ca4b8062f845489a9c7e33a4af63cf9c863c1d4Mark Andrews Report accepted NOTIFY requests including serial.
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews3588. [bug] dig: addressed a memory leak in the sigchase code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that could cause a shutdown crash. [RT #33733]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3587. [func] 'named -g' now checks the logging configuration but
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews does not use it. [RT #33473]
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3585. [func] "rndc delzone -clean" option removes zone files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when deleting a zone. [RT #33570]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3584. [security] Caching data from an incompletely signed zone could
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews trigger an assertion failure in resolver.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-3919). [RT #33690]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3583. [bug] Address memory leak in GSS-API processing [RT #33574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3582. [bug] Silence false positive warning regarding missing file
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews directive for inline slave zones. [RT #33662]
21f1794606dce19928cf455029e173321f166380Mark Andrews3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3580. [bug] Addressed a possible race in acache.c [RT #33602]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3579. [maint] Updates to PKCS#11 openssl patches, supporting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
fc87397df60d3c5e5d9900ff5ac82da29fe1dbb7Mark Andrews3577. [bug] Handle zero TTL values better. [RT #33411]
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews3576. [bug] Address a shutdown race when validating. [RT #33573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3575. [func] Changed the logging category for RRL events from
1a4d687359d89ff3b3e4e3f7acc4b6b8d8c982e9Mark Andrews 'queries' to 'query-errors'. [RT #33540]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3574. [doc] The 'hostname' keyword was missing from server-id
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews description in the named.conf man page. [RT #33476]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone names containing punctuation marks and other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nonstandard characters. [RT #33419]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3572. [func] Threads are now enabled by default on most
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews operating systems. [RT #25483]
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews3571. [bug] Address race condition in dns_client_startresolve().
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews3570. [bug] Check internal pointers are valid when loading map
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files. [RT #33403]
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews module, and added multithread support. [RT #33394]
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews3568. [cleanup] Add a product description line to the version file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be reported by named -v/-V. [RT #33366]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3567. [bug] Silence clang static analyzer warnings. [RT #33365]
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews3566. [func] Log when forwarding updates to master. [RT #33240]
806c235ecf533b98d068b3f8df9d7abbe1e30cf9Mark Andrews3565. [placeholder]
935000aa6e2b9d08f363b2e698a258a458a5a7cfMark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3562. [func] Update map file header format to include a SHA-1 hash
2fd63cf561135572339d4e2ff0c06695e3dcf1baMark Andrews of the database content, so that corrupted map files
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be rejected at load time. [RT #32459]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or NOTIMP. Adjust usage message. [RT #33363]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when set via configure. [RT #33345]
7ec0f55f1542d8bb9475bbe93e911d7520f043caMark Andrews3559. [func] Check that both forms of Sender Policy Framework
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records exist or do not exist. [RT #33355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3557. [bug] Reloading redirect zones was broken. [RT #33292]
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3555. [bug] Address theoretical race conditions in acache.c
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews (change #3553 was incomplete). [RT #33252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3554. [bug] RRL failed to correctly rate-limit upward
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews referrals and failed to count dropped error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses in the statistics. [RT #33225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3553. [bug] Address suspected double free in acache. [RT #33252]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3552. [bug] Wrong getopt option string for 'nsupdate -r'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews3550. [func] Unified the internal and export versions of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND libraries, allowing external clients to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the same libraries as BIND. [RT #33131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3549. [doc] Documentation for "request-nsid" was missing.
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews3548. [bug] The NSID request code in resolver.c was broken
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in invalid EDNS options being sent.
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews3547. [bug] Some malformed unknown rdata records were not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews detected and rejected. [RT #33129]
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews3546. [func] Add EUI48 and EUI64 types. [RT #33082]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3544. [contrib] check5011.pl: Script to report the status of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews managed keys as recorded in managed-keys.bind.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Contributed by Tony Finch <dot@dotat.at>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3543. [bug] Update socket structure before attaching to socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews manager after accept. [RT #33084]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3542. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3541. [bug] Parts of libdns were not properly initialized when
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews built in libexport mode. [RT #33028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3540. [test] libt_api: t_info and t_assert were not thread safe.
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews3539. [port] win32: timestamp format didn't match other platforms.
463fc8f9d61e07613486e64b4b7b3f924ea2b25cMark Andrews3538. [test] Running "make test" now requires loopback interfaces
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be set up. [RT #32452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3537. [tuning] Slave zones, when updated, now send NOTIFY messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to peers before being dumped to disk rather than
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews after. [RT #27242]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3536. [func] Add support for setting Differentiated Services Code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Point (DSCP) values in named. Most configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options which take a "port" option (e.g.,
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews listen-on, forwarders, also-notify, masters,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews notify-source, etc) can now also take a "dscp"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option specifying a code point for use with
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews outgoing traffic, if supported by the underlying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OS. [RT #27596]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3535. [bug] Minor win32 cleanups. [RT #32962]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3534. [bug] Extra text after an embedded NULL was ignored when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parsing zone files. [RT #32699]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews3531. [bug] win32: A uninitialized value could be returned on out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory. [RT #32960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3529. [func] Named now listens on both IPv4 and IPv6 interfaces
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews by default. Named previously only listened on IPv4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces by default unless named was running in
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews IPv6 only mode. [RT #32945]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3528. [func] New "dnssec-coverage" command scans the timing
a207a2835e37de52e11d4c143c0425e749409c46Mark Andrews metadata for a set of DNSSEC keys and reports if a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lapse in signing coverage has been scheduled
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews inadvertently. (Note: This tool depends on python;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it will not be built or installed on systems that
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews do not have a python interpreter.) [RT #28098]
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews3527. [compat] Add a URI to allow applications to explicitly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews request a particular XML schema from the statistics
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews channel, returning 404 if not supported. [RT #32481]
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews3526. [cleanup] Set up dependencies for unit tests correctly during
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews build. [RT #32803]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3525. [func] Support for additional signing algorithms in rndc:
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The -A option to rndc-confgen can be used to
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews select the algorithm for the generated key.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (The default is still hmac-md5; this may
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews change in a future release.) [RT #20363]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3524. [func] Added an alternate statistics channel in JSON format,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when the server is built with the json-c library:
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews http://[address]:[port]/json. [RT #32630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews dynamically-loadable modules, and added the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "wildcard" module based on a contribution from
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews they ought to. [RT #32685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews3520. [bug] 'mctx' was not being referenced counted in some places
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where it should have been. [RT #32794]
ff2ef33a84550fa5dbd9e8fdcd82a33288f053adMark Andrews3519. [func] Full replay protection via four-way handshake is
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews now mandatory for rndc clients. Very old versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of rndc will no longer work. [RT #32798]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews so that all dns_rrl_rtype_t enum values fit regardless
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of whether it is teated as signed or unsigned by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the compiler. [RT #32792]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews3516. [placeholder]
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews3515. [port] '%T' is not portable in strftime(). [RT #32763]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3514. [bug] The ranges for valid key sizes in ddns-confgen and
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews rndc-confgen were too constrained. Keys up to 512
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bits are now allowed for most algorithms, and up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 1024 bits for hmac-sha384 and hmac-sha512.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3513. [func] "dig -u" prints times in microseconds rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews milliseconds. [RT #32704]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3512. [func] "rndc validation check" reports the current status
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews of DNSSEC validation. [RT #21397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3511. [doc] Improve documentation of redirect zones. [RT #32756]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3510. [func] "rndc status" and XML statistics channel now report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server start and reconfiguration times. [RT #21048]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3509. [cleanup] Added a product line to version file to allow for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews easy naming of different products (BIND
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews vs BIND ESV, for example). [RT #32755]
99776003811a413457a2c35a808ad860df877d24Mark Andrews3508. [contrib] queryperf was incorrectly rejecting the -T option.
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews3507. [bug] Statistics channel XSL had a glitch when attempting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to chart query data before any queries had been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews received. [RT #32620]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the keyword "unlimited" is no longer defined as equal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 4 gigabytes (except on 32-bit platforms); it
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews means literally unlimited. [RT #32358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3505. [bug] When setting "max-cache-size" and "max-acache-size",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews larger values than 4 gigabytes could not be set
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews explicitly, though larger sizes were available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when setting cache size to 0. This has been
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews corrected; the full range is now available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3504. [func] Add support for ACLs based on geographic location,
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉 using MaxMind GeoIP databases. Based on code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contributed by Ken Brownfield <kb@slide.com>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3503. [doc] Clarify size_spec syntax. [RT #32449]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3502. [func] zone-statistics: "no" is now a synonym for "none",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of "terse". [RT #29165]
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉3501. [func] zone-statistics now takes three options: full,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews terse, and none. "yes" and "no" are retained as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews synonyms for full and terse, respectively. [RT #29165]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3500. [security] Support NAPTR regular expression validation on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews all platforms without using libregex, which
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉 can be vulnerable to memory exhaustion attack
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (CVE-2013-2266). [RT #32688]
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews3499. [doc] Corrected ARM documentation of built-in zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3498. [bug] zone statistics for zones which matched a potential
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews empty zone could have their zone-statistics setting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3497. [func] When deleting a slave/stub zone using 'rndc delzone'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews report the files that were being used so they can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be cleaned up if desired. [RT #27899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3496. [placeholder]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3495. [func] Support multiple response-policy zones (up to 32),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while improving RPZ performance. "response-policy"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews syntax now includes a "min-ns-dots" clause, with
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews default 1, to exclude top-level domains from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSIP and NSDNAME checking. --enable-rpz-nsip and
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews --enable-rpz-nsdname are now the default. [RT #32251]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3494. [func] DNS RRL: Blunt the impact of DNS reflection and
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews amplification attacks by rate-limiting substantially-
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews identical responses. [RT #28130]
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contributed by Mark Goldfinch. [RT #32549]
550085fed1d0af54ba5b2f588898afec158195deMark Andrews3492. [bug] Fixed a regression in zone loading performance
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews due to lock contention. [RT #30399]
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews3491. [bug] Slave zones using inline-signing must specify a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file name. [RT #31946]
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉3490. [bug] When logging RDATA during update, truncate if it's
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too long. [RT #32365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews dns_dlzcreate() failed to properly initialize
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dlzdb.link. When cloning a rdataset do not copy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the link contents. [RT #32651]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3488. [bug] Use after free error with DH generated keys. [RT #32649]
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews3487. [bug] Change 3444 was not complete. There was a additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews place where the NOQNAME proof needed to be saved.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3486. [bug] named could crash when using TKEY-negotiated keys
b6309ed962c4988a314d61742c4fbc4935467d68Mark Andrews that had been deleted and then recreated. [RT #32506]
39fe146f2ab82cb8e49caa319a3345174fa2d69aMark Andrews3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews3484. [bug] Some statistics were incorrectly rendered in XML.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3483. [placeholder]
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews3482. [func] dig +nssearch now prints name servers that don't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have address records (missing AAAA or A, or the name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews doesn't exist). [RT #29348]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3481. [cleanup] Removed use of const const in atf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3480. [bug] Silence logging noise when setting up zone
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews statistics. [RT #32525]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3479. [bug] Address potential memory leaks in gssapi support
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews code. [RT #32405]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3478. [port] Fix a build failure in strict C99 environments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3477. [func] Expand logging when adding records via DDNS update
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3476. [bug] "rndc zonestatus" could report a spurious "not
a6211a2f234767a015a6a30b85d5da087fa907f1Mark Andrews found" error on inline-signing zones. [RT #29226]
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews3475. [cleanup] Changed name of 'map' zone file format (previously
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'fast'). [RT #32458]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3474. [bug] nsupdate could assert when the local and remote
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews address families didn't match. [RT #22897]
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews3473. [bug] dnssec-signzone/verify could incorrectly report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an error condition due to an empty node above an
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews opt-out delegation lacking an NSEC3. [RT #32072]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3472. [bug] The active-connections counter in the socket
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews statistics could underflow. [RT #31747]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3471. [bug] The number of UDP dispatches now defaults to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the number of CPUs even if -n has been set to
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews a higher value. [RT #30964]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3470. [bug] Slave zones could fail to dump when successfully
7c5d5a7932b8ac27281eeff64506dff8220bb3eaMark Andrews refreshing after an initial failure. [RT #31276]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3469. [bug] Handle DLZ lookup failures more gracefully. Improve
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer backward compatibility between versions of DLZ dlopen
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API. [RT #32275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3468. [security] RPZ rules to generate A records (but not AAAA records)
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews could trigger an assertion failure when used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews conjunction with DNS64 (CVE-2012-5689). [RT #32141]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3467. [bug] Added checks in dnssec-keygen and dnssec-settime
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews to check for delete date < inactive date. [RT #31719]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews in DLZ example driver. [RT #32275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3465. [bug] Handle isolated reserved ports. [RT #31778]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3464. [maint] Updates to PKCS#11 openssl patches, supporting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews3462. [doc] Clarify server selection behavior of dig when using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews -4 or -6 options. [RT #32181]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3461. [bug] Negative responses could incorrectly have AD=1
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews set. [RT #32237]
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3459. [func] Added -J option to named-checkzone/named-compilezone
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews to specify the path to the journal file. [RT #30958]
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews3458. [bug] Return FORMERR when presented with a overly long
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews domain named in a request. [RT #29682]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3456. [port] g++47: ATF failed to compile. [RT #32012]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews failed. [RT #31960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3452. [bug] Accept duplicate singleton records. [RT #32329]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3451. [port] Increase per thread stack size from 64K to 1M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3450. [bug] Stop logfileconfig system test spam system logs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3449. [bug] gen.c: use the pre-processor to construct format
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews strings so that compiler can perform sanity checks;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews check the snprintf results. [RT #17576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3445. [bug] Warn about zone files with blank owner names
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews immediately after $ORIGIN directives. [RT #31848]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews insecure responses. [RT #21409]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews rejected when generating keys. [RT #31927]
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews3442. [port] Net::DNS 0.69 introduced a non backwards compatible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews change. [RT #32216]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3440. [bug] Reorder get_key_struct to not trigger a assertion when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cleaning up due to out of memory error. [RT #32131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3439. [placeholder]
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
020f7361a49c5b1cda91927cf8206c1283fc7496Mark Andrews3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews buffers with constant data. [RT #32064]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3436. [bug] Check malloc/calloc return values. [RT #32088]
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews3435. [bug] Cross compilation support in configure was broken.
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews3434. [bug] Pass client info to the DLZ findzone() entry
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews point in addition to lookup(). This makes it
33c538015323f4576679e427088372eea614feebMark Andrews possible for a database to answer differently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews whether it's authoritative for a name depending
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews on the address of the client. [RT #31775]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3433. [bug] dlz_findzone() did not correctly handle
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews ISC_R_NOMORE. [RT #31172]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews3432. [func] Multiple DLZ databases can now be configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLZ databases are searched in the order configured,
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews unless set to "search no", in which case a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone can be configured to be retrieved from a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular DLZ database by using a "dlz <name>"
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews option in the zone statement. DLZ databases can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support type "master" and "redirect" zones.
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews3431. [bug] ddns-confgen: Some valid key algorithms were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not accepted. [RT #31927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'T' between the date and time. [RT #32044]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3429. [bug] dns_zone_getserial2 could a return success without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews returning a valid serial. [RT #32007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3427. [bug] dig +trace incorrectly displayed name server
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews addresses instead of names. [RT #31641]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3426. [bug] dnssec-checkds: Clearer output when records are not
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews found. [RT #31968]
e2cf63c5df79eb7c8b86b6278289883fa760cda5Mark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in use after free. [RT #31908]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews3423. [bug] "rndc signing -nsec3param" didn't accept the full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range of possible values. Address portability issues.
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews3422. [bug] Added a clear error message for when the SOA does not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews match the referral. [RT #31281]
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews3421. [bug] Named loops when re-signing if all keys are offline.
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3418. [func] New XML schema (version 3.0) for the statistics channel
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adds query type statistics at the zone level, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews flattens the XML tree and uses compressed format to
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews optimize parsing. Includes new XSL that permits
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews charting via the Google Charts API on browsers that
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews support javascript in XSL. The old XML schema has been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecated. [RT #30023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3417. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dispatches per interface. [RT #31743]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3415. [bug] named could die with a REQUIRE failure if a validation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was canceled. [RT #31804]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3414. [bug] Address locking issues found by Coverity. [RT #31626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3413. [func] Record the number of DNS64 AAAA RRsets that have been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews synthesized. [RT #27636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3412. [bug] Copy timeval structure from control message data.
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to UDP. [RT #31690]
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews3410. [bug] Addressed Coverity warnings. [RT #31626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews from X.509 certificates, for use with DANE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (DNS-based Authentication of Named Entities).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3408. [bug] Some DNSSEC-related options (update-check-ksk,
5b1627d469d07c5bfe7f193e3ddd85d0dd6ad4b0Mark Andrews dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews are now legal in slave zones as long as
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews inline-signing is in use. [RT #31078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3407. [placeholder]
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews3406. [bug] mem.c: Fix compilation errors when building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3405. [bug] Handle time going backwards in acache. [RT #31253]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews RRSIG and NSEC records from nodes that used to be
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews in-zone but are now below a zone cut. [RT #31556]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3402. [test] The IPv6 interface numbers used for system
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews tests were incorrect on some platforms. [RT #25085]
9549a96654ead15b264c9159d48eb485e4f9db55Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the "srcid" file in the build tree and normally set
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews to the most recent git hash. [RT #31494]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews clash. [RT #31515]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3398. [bug] SOA parameters were not being updated with inline
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews signed zones if the zone was modified while the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server was offline. [RT #29272]
57e0f58b3fd4cb49a57200c8af9cb58d984d871aMark Andrews3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews3396. [bug] OPT records were incorrectly removed from signed,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews truncated responses. [RT #31439]
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3394. [bug] Adjust 'successfully validated after lower casing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signer' log level and category. [RT #31414]
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
88c2b83cc548a217cc92a2bf75ca1ef1d4237d4fMark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3388. [bug] Fixed several Coverity warnings.
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews Note: This change includes a fix for a bug that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was subsequently determined to be an exploitable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews security vulnerability, CVE-2012-5688: named could
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews die on specific queries with dns64 enabled.
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews3387. [func] DS digest can be disabled at runtime with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disable-ds-digests. [RT #21581]
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews3386. [bug] Address locking violation when generating new NSEC /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3 chains. [RT #31224]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3385. [bug] named-checkconf didn't detect missing master lists
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in also-notify clauses. [RT #30810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3384. [bug] Improved logging of crypto errors. [RT #30963]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3383. [security] A certain combination of records in the RBT could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause named to hang while populating the additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews section of a response. [RT #31090]
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if set, regardless of the address family in use.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3381. [contrib] Update queryperf to support more RR types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3380. [bug] named could die if a nonexistent master list was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews referenced in a also-notify. [RT #31004]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3379. [bug] isc_interval_zero and isc_time_epoch should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "const (type)* const". [RT #31069]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3377. [bug] Removed spurious newline from NSEC3 multiline
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output. [RT #31044]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3376. [bug] Lack of EDNS support was being recorded without a
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews successful response. [RT #30811]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3374. [bug] isc_parse_uint32 failed to return a range error on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems with 64 bit longs. [RT #30232]
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews messages. [RT #30501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3371. [bug] AD=1 should behave like DO=1 when deciding whether to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews add NS RRsets to the additional section or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3370. [bug] Address use after free while shutting down. [RT #30241]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3369. [bug] nsupdate terminated unexpectedly in interactive mode
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews if built with readline support. [RT #29550]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews were not C++ safe.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3367. [bug] dns_dnsseckey_create() result was not being checked.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3366. [bug] Fixed Read-After-Write dependency violation for IA64
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic operations. [RT #25181]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3365. [bug] Removed spurious newlines from log messages in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3364. [security] Named could die on specially crafted record.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews in static-stub zones; this had been overlooked.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3362. [bug] Setting some option values to 0 in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could trigger an assertion failure on startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3361. [bug] "rndc signing -nsec3param" didn't work correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when salt was set to '-' (no salt). [RT #30099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3360. [bug] 'host -w' could die. [RT #18723]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3359. [bug] An improperly-formed TSIG secret could cause a
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews memory leak. [RT #30607]
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington3358. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews approaching their expiry, so they don't remain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in caches after expiry. [RT #26429]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3355. [port] Use more portable awk in verify system test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3353. [bug] Use a single task for task exclusive operations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3352. [bug] Ensure that learned server attributes timeout of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adb cache. [RT #29856]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews memory debugging flags are set. [RT #30243]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3350. [bug] Memory read overrun in isc___mem_reallocate if
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews ISC_MEM_DEBUGCTX memory debugging flag is set.
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews3349. [bug] Change #3345 was incomplete. [RT #30233]
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews3348. [bug] Prevent RRSIG data from being cached if a negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record matching the covering type exists at a higher
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trust level. Such data already can't be retrieved from
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews the cache since change 3218 -- this prevents it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being inserted into the cache as well. [RT #26809]
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews private key file would cause a change in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews permissions of the existing file. [RT #27724]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3346. [security] Bad-cache data could be used before it was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialized, causing an assert. [RT #30025]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3345. [bug] Addressed race condition when removing the last item
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews or inserting the first item in an ISC_QUEUE.
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews3344. [func] New "dnssec-checkds" command checks a zone to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews determine which DS records should be published
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the parent zone, or which DLV records should be
27269e9dd45b619160f90db1a0f6b2b3f6f4bbb8Mark Andrews published in a DLV zone, and queries the DNS to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ensure that it exists. (Note: This tool depends
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on python; it will not be built or installed on
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews systems that do not have a python interpreter.)
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews3343. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews resulting in excessive cpu usage in some cases.
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chains. [RT #23673]
986be654feec852eb9da0d15599f18d0035e569bMark Andrews3340. [func] Added new 'map' zone file format, which is an image
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of a zone database that can be loaded directly into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory via mmap(), allowing much faster zone loading.
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews (Note: Because of pointer sizes and other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews considerations, this file format is platform-dependent;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'map' zone files cannot always be transferred from one
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews server to another.) [RT #25419]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3339. [func] Allow the maximum supported rsa exponent size to be
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews specified: "max-rsa-exponent-size <value>;" [RT #29228]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3338. [bug] Address race condition in units tests: asyncload_zone
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews and asyncload_zt. [RT #26100]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3337. [bug] Change #3294 broke support for the multiple keys
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews in controls. [RT #29694]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews3336. [func] Maintain statistics for RRsets tagged as "stale".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3335. [func] nslookup: return a nonzero exit code when unable
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews to get an answer. [RT #29492]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3334. [bug] Hold a zone table reference while performing a
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews asynchronous load of a zone. [RT #28326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3333. [bug] Setting resolver-query-timeout too low can cause
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews named to not recover if it loses connectivity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3331. [security] dns_rdataslab_fromrdataset could produce bad
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataslabs. [RT #29644]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3330. [func] Fix missing signatures on NOERROR results despite
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews RPZ rewriting. Also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add optional "recursive-only yes|no" to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response-policy statement
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews - add optional "max-policy-ttl" to the response-policy
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement to limit the false data that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "recursive-only no" can introduce into
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews resolvers' caches
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add a RPZ performance test to bin/tests/system/rpz
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when queryperf is available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - the encoding of PASSTHRU action to "rpz-passthru".
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington (The old encoding is still accepted.)
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson3329. [bug] Handle RRSIG signer-name case consistently: We
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generate RRSIG records with the signer-name in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lower case. We accept them with any case, but if
cde7dfea4c1267a2b526114f4ea80fe9db1fc557Brian Wellington they fail to validate, we try again in lower case.
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington3328. [bug] Fixed inconsistent data checking in dst_parse.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington to 'filter-aaaa-on-v4' but applies to IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections. (Use "configure --enable-filter-aaaa"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to enable this option.) [RT #27308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3326. [func] Added task list statistics: task model, worker
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews threads, quantum, tasks running, tasks ready.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3325. [func] Report cache statistics: memory use, number of
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews nodes, number of hash buckets, hit and miss counts.
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3323. [func] Report the number of buckets the resolver is using.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3322. [func] Monitor the number of active TCP and UDP dispatches.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3321. [func] Monitor the number of recursive fetches and the
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington number of open sockets, and report these values in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the statistics channel. [RT #27054]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3320. [func] Added support for monitoring of recursing client
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington count. [RT #27009]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3319. [func] Added support for monitoring of ADB entry count and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hash size. [RT #27057]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews bucket lock when finished with a fetch context.
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3316. [tuning] Improved locking performance when recursing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries; this can improve performance on busy
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews multiprocessor systems by reducing lock contention.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3314. [bug] The masters list could be updated while stub_callback
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or refresh_callback were using it. [RT #26732]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone.c:zone_gotwritehandle. [RT #29028]
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson3310. [test] Increase table size for mutex profiling. [RT #28809]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3309. [bug] resolver.c:fctx_finddone() was not thread safe.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3308. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews3303. [bug] named could die when reloading. [RT #28606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews keys if the zone name contained character that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews required special mappings. [RT #28600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for non-recursive queries. [RT #28565]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but was not compiled in. [RT #28338]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3298. [bug] Named could dereference a NULL pointer in
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3296. [bug] Named could die with a INSIST failure in
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson client.c:exit_check. [RT #28346]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews portable. [RT # 26542]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #28265]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews3292. [func] Log messages in the axfr stream at debug 10.
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by the DLZ dlopen driver. [RT #28056]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after 'rndc reconfig'. [RT #26786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews proveunsecure after calling startfinddlvsep.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3284. [bug] Address race conditions with the handling of
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to load. [RT #27863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson of the old NS RRset when replacing it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #27792] [RT #27884]
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington3281. [bug] SOA refresh queries could be treated as cancelled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews despite succeeding over the loopback interface.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3280. [bug] Potential double free of a rdataset on out of memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with DNS64. [RT #27762]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3279. [bug] Hold a internal reference to the zone while performing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a asynchronous load. Address potential memory leak
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington if the asynchronous is cancelled. [RT #27750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3278. [bug] Make sure automatic key maintenance is started
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when "auto-dnssec maintain" is turned on during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc reconfig". [RT #26805]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews safe_open failure. [RT #27696]
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option had been misspelled as '-clear'. (To avoid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews future confusion, both options now work.) [RT #27173]
1e4bfff1855795853648f507422b96fc8fecbff1Mark Andrews3274. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3273. [bug] AAAA responses could be returned in the additional
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson section even when filter-aaaa-on-v4 was in use.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3272. [func] New "rndc zonestatus" command prints information
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews about the specified zone. [RT #21671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3271. [port] darwin: mksymtbl is not always stable, loop several
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson times before giving up. mksymtbl was using non
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews --- 9.9.0rc2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews when inline-signing was in use. [RT #27650]
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson3269. [port] darwin 11 and later now built threaded by default.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews out the earliest expiry time. [RT #23311]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3267. [bug] Memory allocation failures could be mis-reported as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpected error. New ISC_R_UNSET result code.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson DNSKEY RRset was not being properly computed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington inline-signing code. [RT #27557]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3264. [bug] Automatic regeneration of signatures in an
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson inline-signing zone could stall when the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was restarted. [RT #27344]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews inline-signing zone. [RT #27337]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson for some query patterns. [RT #27170/27185]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews message when writing to stdout. [RT #27109]
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a pipe or socket. [RT #27109]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3255. [func] No longer require that a empty zones be explicitly
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson enabled or that a empty zone is disabled for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RFC 1918 empty zones to be configured. [RT #27139]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too long. [RT #26956]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews3252. [bug] When master zones using inline-signing were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updated while the server was offline, the source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone could fall out of sync with the signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews copy. They can now resynchronize. [RT #26676]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory dns_sdlz_putrr() can allocate per record to
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson prevent run away memory consumption on ISC_R_NOSPACE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3250. [func] 'configure --enable-developer'; turn on various
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure options, normally off by default, that
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer we want developers to build and test with. [RT #27103]
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson3249. [bug] Update log message when saving slave zones files for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews analysis after load failures. [RT #27087]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3248. [bug] Configure options --enable-fixed-rrset and
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews --enable-exportlib were incompatible with each
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews other. [RT #27087]
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews3247. [bug] 'raw' format zones failed to preserve load order
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews breaking 'fixed' sort order. [RT #27087]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3246. [bug] Named failed to start with a empty also-notify list.
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3245. [bug] Don't report a error unchanged serials unless there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were other changes when thawing a zone with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-fromdifferences. [RT #26845]
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington3244. [func] Added readline support to nslookup and nsupdate.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also simplified nsupdate syntax to make "update"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and "prereq" optional. [RT #24659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson being properly set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3242. [func] Extended the header of raw-format master files to
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews include the serial number of the zone from which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they were generated, if different (as in the case
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews of inline-signing zones). This is to be used in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inline-signing zones, to track changes between the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unsigned and signed versions of the zone, which may
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews have different serial numbers.
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews (Note: raw zonefiles generated by this version of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND are no longer compatible with prior versions.
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews To generate a backward-compatible raw zonefile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using dnssec-signzone or named-compilezone, specify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output format "raw=0" instead of simply "raw".)
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews3241. [bug] Address race conditions in the resolver code.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timestamp. [RT #26883]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews3238. [bug] keyrdata was not being reinitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lib/dns/rbtdb.c:iszonesecure. [RT#26913]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EDNS(0) fallback behavior. [RT #26416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews the generated diff and optionally writes it to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews journal. [RT #26386]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3232. [bug] Zero zone->curmaster before return in
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews3231. [bug] named could fail to send a incompressible zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews axfr with a serial of 0. [RT #26796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3229. [bug] Fix local variable to struct var assignment
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews found by CLANG warning.
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson3228. [tuning] Dynamically grow symbol table to improve zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loading performance. [RT #26523]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3227. [bug] Interim fix to make WKS's use of getprotobyname()
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson and getservbyname() self thread safe. [RT #26232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #26507]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3221. [bug] Fixed a potential core dump on shutdown due to
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews referencing fetch context after it's been freed.
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson --- 9.9.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could fail to set the database version correctly,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing an assertion failure. [RT #26180]
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson nonexistent records, leading to an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #26590]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson3214. [func] Add 'named -U' option to set the number of UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listener threads per interface. [RT #26485]
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews list prior to adding a reference to it leading a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible assertion failure. [RT #23219]
b19619260fbd447b0fe3e709b2cc8ae38f27ec3fMark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option prints in single-line-per-record format.
1255d388f034dc556d235a002527101781dbeb29Mark Andrews3210. [bug] Canceling the oldest query due to recursive-client
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overload could trigger an assertion failure. [RT #26463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews3208. [bug] 'dig -y' handle unknown tsig algorithm better.
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver behavior. Enable "dig +adflag" and
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson "dig +edns=0" by default. Enable "+dnssec" when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews running "dig +trace". [RT #23497]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3204. [bug] When a master server that has been marked as
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson unreachable sends a NOTIFY, mark it reachable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews again. [RT #25960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3203. [bug] Increase log level to 'info' for validation failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3202. [bug] NOEDNS caching on timeout was too aggressive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of only being used as a toggle. [RT #18351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3200. [doc] Some rndc functions were undocumented or were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews missing from 'rndc -h' output. [RT #25555]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3199. [func] When logging client information, include the name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being queried. [RT #25944]
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews permissions. [RT #24866]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson3197. [bug] Don't try to log the filename and line number when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the config parser can't open a file. [RT #22263]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews doesn't exist. [RT #25783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3195. [cleanup] Silence "file not found" warnings when loading
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson managed-keys zone. [RT #26340]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews documentation. [RT #25203]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3192. [bug] A query structure could be used after being freed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3190. [bug] Underflow in error handling in isc_mutexblock_init.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3189. [test] Added a summary report after system tests. [RT #25517]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3188. [bug] zone.c:zone_refreshkeys() could fail to detach
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references correctly when errors occurred, causing
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson a hang on shutdown. [RT #26372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - 'rndc signing -list' displays the current
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews state of signing operations
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - 'rndc signing -clear' clears the signing state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records for keys that have fully signed the zone
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson - 'rndc signing -nsec3param' sets the NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameters for the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson3184. [bug] named had excessive cpu usage when a redirect zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured. [RT #26013]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3182. [bug] Auth servers behind firewalls which block packets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews greater than 512 bytes may cause other servers to
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson perform poorly. Now, adb retains edns information
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and caches noedns servers. [RT #23392/24964]
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson3181. [func] Inline-signing is now supported for master zones.
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson3180. [func] Local copies of slave zones are now saved in raw
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format by default, to improve startup performance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'masterfile-format text;' can be used to override
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson the default, if desired. [RT #25867]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews3178. [bug] A race condition introduced by change #3163 could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cause an assertion failure on shutdown. [RT #26271]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3177. [func] 'rndc keydone', remove the indicator record that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named has finished signing the zone with the
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews corresponding key. [RT #26206]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3176. [doc] Corrected example code and added a README to the
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews sample external DLZ module in contrib/dlz/example.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews NSEC3 signed zone are validated. Stop sending a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unnecessary NSEC3 record when generating such
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #26200]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3174. [bug] Always compute to revoked key tag from scratch.
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc addzone'. [RT #25600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3170. [func] RPZ update:
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson - fix precedence among competing rules
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - improve ARM text including documenting rule precedence
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - try to rewrite CNAME chains until first hit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - new "rpz" logging channel
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson - RDATA for CNAME rules can include wildcards
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - replace "NO-OP" named.conf policy override with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson is still recognized)
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson3169. [func] Catch db/version mis-matches when calling dns_db_*().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a ANY query. [RT #26017]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3167. [bug] Negative answers from forwarders were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly tagged making them appear to not be cached.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3165. [bug] dnssec-signzone could generate new signatures when
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson resigning, even when valid signatures were already
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews present. [RT #26025]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3164. [func] Enable DLZ modules to retrieve client information,
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson so that responses can be changed depending on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source address of the query. [RT #25768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3163. [bug] Use finer-grained locking in client.c to address
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson concurrency problems with large numbers of threads.
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson3162. [test] start.pl: modified to allow for "named.args" in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ns*/ subdirectory to override stock arguments to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named. Largely from RT#26044, but no separate ticket.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion failures. [RT #25880]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the newline was not being printed causing type codes
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson to be run together. [RT #25873]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3159. [bug] On some platforms, named could assert on startup
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when running in a chrooted environment without
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson /proc. [RT #25863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3158. [bug] Recursive servers would prefer a particular UDP
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson socket instead of using all available sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson the config file before pausing the server. [RT #21373]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3156. [placeholder]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson --- 9.9.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews an assert. [RT #25452]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3153. [func] Extend request-ixfr to zone level and remove the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews side effect of forcing an AXFR. [RT #25156]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrect use of __builtin_expect. [RT #25183]
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson3151. [bug] Queries for type RRSIG or SIG could be handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly. [RT #21050]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3150. [func] Improved startup and reconfiguration time by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews enabling zones to load in multiple threads. [RT #25333]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3149. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3148. [bug] Processing of normal queries could be stalled when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews forwarding a UPDATE message. [RT #24711]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3147. [func] Initial inline signing support. [RT #23657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.9.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews there were any errors while running them. [RT #25527]
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews3144. [bug] dns_dbiterator_seek() could trigger an assert when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used with a nonexistent database node. [RT #25358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3142. [bug] NAPTR is class agnostic. [RT #25429]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews associated with empty zones. [RT #25079]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3140. [func] New command "rndc flushtree <name>" clears the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified name from the server cache along with
56d69016f4fae2eda4d39c92fe13595251aaadd3Mark Andrews all names under it. [RT #19970]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for the hashing algorithms (md5, sha1 - sha512, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews their hmac counterparts). [RT #25067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3138. [bug] Address memory leaks and out-of-order operations when
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews shutting named down. [RT #25210]
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson3137. [func] Improve hardware scalability by allowing multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews worker threads to process incoming UDP packets.
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson This can significantly increase query throughput
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on some systems. [RT #22992]
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson3136. [func] Add RFC 1918 reverse zones to the list of built-in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty zones switched on by the 'empty-zones-enable'
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson option. [RT #24990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews statistics. [RT #16030]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3133. [bug] Change #3114 was incomplete. [RT #24577]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3132. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews per 100 zones at startup time, rather than using a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fixed-size task table. [RT #24406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3130. [func] Support alternate methods for managing a dynamic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone's serial number. Two methods are currently
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson defined using serial-update-method, "increment"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (default) and "unixtime". [RT #23849]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-new-zones was set to yes and named ACLs
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson were used. [RT #22739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington auto-dnssec zone that has not been signed yet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews will cause it to be signed with the specified NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parameters when keys are activated. The
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson NSEC3PARAM record will not appear in the zone until
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it is signed, but the parameters will be stored.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3127. [bug] 'rndc thaw' will now remove a zone's journal file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if the zone serial number has been changed and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences is not in use. [RT #24687]
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews3126. [security] Using DNAME record to generate replacements caused
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ to exit with a assertion failure. [RT #24766]
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews3125. [security] Using wildcard CNAME records as a replacement with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RPZ caused named to exit with a assertion failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3124. [bug] Use an rdataset attribute flag to indicate
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson negative-cache records rather than using rrtype 0;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this will prevent problems when that rrtype is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used in actual DNS packets. [RT #24777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3123. [security] Change #2912 exposed a latent flaw in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdataset_totext() that could cause named to
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews crash with an assertion failure. [RT #24777]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews3121. [security] An authoritative name server sending a negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response containing a very large RRset could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an off-by-one error in the ncache code
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews and crash named. [RT #24650]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3120. [bug] Named could fail to validate zones listed in a DLV
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that validated insecure without using DLV and had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DS records in the parent zone. [RT #24631]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record could be created and never marked complete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3118. [bug] nsupdate could dump core on shutdown when using
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer SIG(0) keys. [RT #24604]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3117. [cleanup] Remove doc and parser references to the
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer never-implemented 'auto-dnssec create' option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of DNSSEC records in signed dynamic zones. Set to
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews 'no-resign' to disable automatic RRSIG regeneration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews while retaining the ability to sign new or changed
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson data. [RT #24533]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3115. [bug] Named could fail to return requested data when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews following a CNAME that points into the same zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
330b421487d7c3a5e699472fe889aa633772057fMark Andrews inactive and there is no replacement key. [RT #23136]
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews3113. [doc] Document the relationship between serial-query-rate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and NOTIFY messages.
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews3112. [doc] Add missing descriptions of the update policy name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "krb5-subdomain", which allow machines to update
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews their own records, to the BIND 9 ARM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews dnssec-validation, added test cases to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checkconf system test. [RT #24398]
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when attempting to sign with no KSK. [RT #24369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3109. [func] The also-notify option now uses the same syntax
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as a zone's masters clause. This means it is
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson now possible to specify a TSIG key to use when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sending notifies to a given server, or to include
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an explicit named masters list in an also-notify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statement. [RT #23508]
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson3108. [cleanup] dnssec-signzone: Clarified some error and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews code (use -P instead). [RT #20852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
4e400cb7a2edd25af98ebc25fcbb5b36ca08f9a0Mark Andrews when using -x. [RT #20852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3106. [func] When logging client requests, include the name of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the TSIG key if any. [RT #23619]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3105. [bug] GOST support can be suppressed by "configure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --without-gost" [RT #24367]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3103. [bug] Configuring 'dnssec-validation auto' in a view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews instead of in the options statement could trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an assertion failure in named-checkconf. [RT #24382]
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson3102. [func] New 'dnssec-loadkeys-interval' option configures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews how often, in minutes, to check the key repository
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for updates when using automatic key maintenance.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Default is every 60 minutes (formerly hard-coded
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson to 12 hours). [RT #23744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3101. [bug] Zones using automatic key maintenance could fail
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to check the key repository for updates. [RT #23744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3100. [security] Certain response policy zone configurations could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an INSIST when receiving a query of type
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson RRSIG. [RT #24280]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3099. [test] "dlz" system test now runs but gives R:SKIPPED if
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson not compiled with --with-dlz-filesystem. [RT #24146]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson3098. [bug] DLZ zones were answering without setting the AA bit.
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington3097. [test] Add a tool to test handling of malformed packets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_gssapi_acceptctx(). [RT #24004]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3095. [bug] Handle isolated reserved ports in the port range.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3094. [doc] Expand dns64 documentation.
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3092. [bug] Signatures for records at the zone apex could go
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington stale due to an incorrect timer setting. [RT #23769]
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington3091. [bug] Fixed a bug in which zone keys that were published
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and then subsequently activated could fail to trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatic signing. [RT #22911]
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews3090. [func] Make --with-gssapi default [RT #23738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington standard input "dnssec-dsfromkey -f -". [RT# 20662]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson and add setup.sh in order to resolve changing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.conf issue. [RT #23687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington type "external" could cause a crash. [RT #23735]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now force an update to the new key format even if no
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews other change has been specified, using "-P now -A now"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as default values. [RT #22474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of signatures which have not yet expired but
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews were generated by a key that no longer exists.
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3084. [func] A new command "rndc sync" dumps pending changes in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson removes the journal file after syncing. Also,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc freeze" no longer removes journal files.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3083. [bug] NOTIFY messages were not being sent when generating
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a NSEC3 chain incrementally. [RT #23702]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3082. [port] strtok_r is threads only. [RT #23747]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3081. [bug] Failure of DNAME substitution did not return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews YXDOMAIN. [RT #23591]
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3078. [func] Added a new include file with function typedefs
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington for the DLZ "dlopen" driver. [RT #23629]
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington3077. [bug] zone.c:zone_refreshkeys() incorrectly called
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keyfromlabel sets the default TTL of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key. When possible, automatic signing will use that
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson TTL when the key is published. [RT #23304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley timestamp when determining which keys are active.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3074. [bug] Make the adb cache read through for zone data and
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington glue learn for zone named is authoritative for.
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington3073. [bug] managed-keys changes were not properly being recorded.
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3071. [bug] has_nsec could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update.c:next_active. [RT #20256]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3070. [bug] dnssec-signzone potential NULL pointer dereference.
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3069. [cleanup] Silence warnings messages from clang static analysis.
debff476ad3512687a354499c25d2793e2009acdBrian Wellington3068. [bug] Named failed to build with a OpenSSL without engine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support. [RT #23473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews select the master/slave zones. [RT #23580]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3066. [func] The DLZ "dlopen" driver is now built by default,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no longer requiring a configure option. To
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews disable it, use "configure --without-dlopen".
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington Driver also supported on win32. [RT #23467]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews operations. [RT #23469]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3062. [func] Made several changes to enhance human readability
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson of DNSSEC data in dig output and in generated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - DNSKEY record comments are more verbose, no
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson longer used in multiline mode only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - multiline RRSIG records reformatted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - multiline output mode for NSEC3PARAM records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - "dig +norrcomments" suppresses DNSKEY comments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - "dig +split=X" breaks hex/base64 records into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fields of width X; "dig +nosplit" disables this.
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence3061. [func] New option "dnssec-signzone -D", only write out
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generated DNSSEC records. [RT #22896]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specification of a separate expiration date
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence3059. [test] Added a regression test for change #3023.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reload to fail, if a log file specified in the conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file isn't a plain file. [RT #22771]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3057. [bug] "rndc secroots" would abort after the first error
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and so could miss some views. [RT #23488]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson3056. [func] Added support for URI resource record. [RT #23386]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3055. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3054. [bug] Added elliptic curve support check in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews GOST OpenSSL engine detection. [RT #23485]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3053. [bug] Under a sustained high query load with a finite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-cache-size, it was possible for cache memory
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson to be exhausted and not recovered. [RT #23371]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3052. [test] Fixed last autosign test report. [RT #23256]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3051. [bug] NS records obscure DNAME records at the bottom of the
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson zone if both are present. [RT #23035]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3050. [bug] The autosign system test was timing dependent.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Wait for the initial autosigning to complete
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before running the rest of the test. [RT #23035]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3049. [bug] Save and restore the gid when creating creating
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson named.pid at startup. [RT #23290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3048. [bug] Fully separate view key management. [RT #23419]
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson3047. [bug] DNSKEY NODATA responses not cached fixed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validator.c. Tests added to dnssec system test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and RRSIG TTL. [RT #23332]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence3045. [removed] Replaced by change #3050.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence version 0.12) for development of future unit tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use configure --with-atf to build ATF internally
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or configure --with-atf=prefix to use an external
6c35e4dd17e6562a6b4d106cbf1d824b9f529356David Lawrence copy. [RT #23209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3042. [bug] dig +trace could fail attempting to use IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses on systems with only IPv4 connectivity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ttl changes. [RT #23330]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson with a CNAME existed between the trust anchor and the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews top of the zone. [RT #23338]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson3038. [bug] Install <dns/rpz.h>. [RT #23342]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews copyright notices that cover various parts.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson3036. [bug] Check built-in zone arguments to see if the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is re-usable or not. [RT #21914]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3035. [cleanup] Simplify by using strlcpy. [RT #22521]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3029. [bug] isc_netaddr_format() handle a zero sized buffer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews catch NULL pointer dereferences before they happen.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after calling grow_headerspace() and if not
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews re-call grow_headerspace() until we do. [RT #22521]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3024. [func] RTT Banding removed due to minor security increase
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews but major impact on resolver latency. [RT #23310]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3023. [bug] Named could be left in an inconsistent state when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews receiving multiple AXFR response messages that were
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews not all TSIG-signed. [RT #23254]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews changing the DNSKEY RRset. [RT #23232]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3019. [test] Test: check apex NSEC3 records after adding DNSKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record via UPDATE. [RT #23229]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson3018. [bug] Named failed to check for the "none;" acl when deciding
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if a zone may need to be re-signed. [RT #23120]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3014. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3012. [bug] Remove DNSKEY TTL change pairs before generating
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews signing records for any remaining DNSKEY changes.
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington3011. [func] Change the default query timeout from 30 seconds
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 10. Allow setting this in named.conf using the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'resolver-query-timeout' option, which specifies a max
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time in seconds. 0 means 'default' and anything longer
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence than 30 will be silently set to 30. [RT #22852]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for refreshing managed-keys. [RT #22296]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3009. [bug] clients-per-query code didn't work as expected with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular query patterns. [RT #22972]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.8.0b1 released ---
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3008. [func] Response policy zones (RPZ) support. [RT #21726]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews rdata which is not compressible when writing master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files. [RT #22863]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3006. [func] Allow dynamically generated TSIG keys to be preserved
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews across restarts of named. Initially this is for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TSIG keys generated using GSSAPI. [RT #22639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3005. [port] Solaris: Work around the lack of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gsskrb5_register_acceptor_identity() by setting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the KRB5_KTNAME environment variable to the
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews contents of tkey-gssapi-keytab. Also fixed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews test errors on MacOSX. [RT #22853]
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews3004. [func] DNS64 reverse support. [RT #22769]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3003. [experimental] Added update-policy match type "external",
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence enabling named to defer the decision of whether to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow a dynamic update to an external daemon.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Contributed by Andrew Tridgell.) [RT #22758]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews3001. [func] Added a default trust anchor for the root zone, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews can be switched on by setting "dnssec-validation auto;"
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence in the named.conf options. [RT #21727]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3000. [bug] More TKEY/GSS fixes:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - nsupdate can now get the default realm from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the user's Kerberos principal
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence - corrected gsstest compilation flags
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - improved documentation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - fixed some NULL dereferences
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2999. [func] Add GOST support (RFC 5933). [RT #20639]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence to the task api. [RT #22776]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2997. [func] named -V now reports the OpenSSL and libxml2 verions
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence it was compiled against. [RT #22687]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2996. [security] Temporarily disable SO_ACCEPTFILTER support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2995. [bug] The Kerberos realm was not being correctly extracted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the signer's identity. [RT #22770]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews do not use threads on earlier versions. Also kill
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the unproven-pthreads, mit-pthreads, and ptl2 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2993. [func] Dynamically grow adb hash tables. [RT #21186]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for looking at a secure delegation. [RT #22059]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington dynamic zones. [RT #22365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington interval validity when the interval is set to 0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2989. [func] Added support for writable DLZ zones. (Contributed
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson of external DLZ drivers that can be loaded as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews shared objects at runtime rather than linked with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named. Currently this is switched on via a
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson compile-time option, "configure --with-dlz-dlopen".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: the syntax for configuring DLZ zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is likely to be refined in future releases.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson (Contributed by Andrew Tridgell of the Samba
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews project.) [RT #22629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adding a "tkey-gssapi-keytab" option. If set,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updates will be allowed with any key matching
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson a principal in the specified keytab file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "tkey-gssapi-credential" is no longer required
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and is expected to be deprecated. (Contributed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by Andrew Tridgell of the Samba project.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone, but the nameserver names and/or their IP
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson addresses are statically configured. [RT #21474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson2984. [bug] Don't run MX checks when the target of the MX record
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is ".". [RT #22645]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.8.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
751aa24c98fea02215cad95a08411af547d70e41Bob Halley increment the reference count.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: dns_tsigkey_createfromkey() callers should now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews always call dst_key_free() rather than setting it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to NULL on success. [RT #22672]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson2980. [bug] named didn't properly handle UPDATES that changed the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson2979. [bug] named could deadlock during shutdown if two
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc stop" commands were issued at the same
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews time. [RT #22108]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key. [RT #22573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong lock which could lead to server deadlock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistency check examining the existing version
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson of the zone rather than the new version resulting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the UPDATE. [RT #22413]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley at the end of configure resulting in build failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews where there is very old version of perl installed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Move it to "make maintainer-clean". [RT #22230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2971. [bug] Fixed a bug that caused journal files not to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compacted on Windows systems as a result of
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson non-POSIX-compliant rename() semantics. [RT #22434]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence2970. [security] Adding a NO DATA negative cache entry failed to clear
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews any matching RRSIG records. A subsequent lookup of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of NO DATA cache entry could trigger a INSIST when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpected RRSIG was also returned with the NO DATA
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CVE-2010-3613, VU#706148. [RT #22288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2969. [security] Fix acl type processing so that allow-query works
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson in options and view statements. Also add a new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set of tests to verify proper functioning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CVE-2010-3615, VU#510208. [RT #22418]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2968. [security] Named could fail to prove a data set was insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before marking it as insecure. One set of conditions
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson that can trigger this occurs naturally when rolling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY algorithms.
cedd0ab1e812ec7cf05d57c3e602db41b79f0a2aAndreas Gustafsson CVE-2010-3614, VU#837744. [RT #22309]
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington2967. [bug] 'host -D' now turns on debugging messages earlier.
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington2966. [bug] isc_print_vsnprintf() failed to check if there was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space available in the buffer when adding a left
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews justified character with a non zero width,
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington (e.g. "%-1c"). [RT #22270]
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RFC 4634. [RT #21702]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2964. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2963. [security] The allow-query acl was being applied instead of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2961. [bug] Be still more selective about the non-authoritative
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington answers we apply change 2748 to. [RT #22074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2960. [func] Check that named accepts non-authoritative answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2959. [func] Check that named starts with a missing masterfile.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2958. [bug] named failed to start with a missing master file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington respectively. [RT #21962]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build_sqldbinstance failure. [RT #21623]
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2953. [bug] Silence spurious "expected covering NSEC3, got an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews exact match" message when returning a wildcard
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no data response. [RT #21744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to initialize winsock. [RT #21932]
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington2951. [bug] named failed to generate a correct signed response
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a optout, delegation only zone with no secure
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington delegations. [RT #22007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington falling back to TCP on UDP timeouts when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences was set. [RT #21595]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it was called multiple times. [RT #21942]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2948. [port] MacOS: provide a mechanism to configure the test
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces at reboot. See bin/tests/system/README
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson2947. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2946. [doc] Document the default values for the minimum and maximum
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson zone refresh and retry values in the ARM. [RT #21886]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington2944. [maint] Remove ORCHID prefix from built in empty zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2943. [func] Add support to load new keys into managed zones
3bd8e7cf1c082cd1021e5a6cae1cf21911217858Brian Wellington without signing immediately with "rndc loadkeys".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Add support to link keys with "dnssec-keygen -S"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and "dnssec-settime -S". [RT #21351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2941. [bug] sdb and sdlz (dlz's zone database) failed to support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNAME at the zone apex. [RT #21610]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2940. [port] Remove connection aborted error message on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Windows. [RT #21549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that fail to match the NSEC3PARAM record currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in use. [RT# 21868]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2938. [bug] When generating signed responses, from a signed zone
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson that uses NSEC3, named would use a uninitialized
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pointer if it needed to skip a NSEC3 record because
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it didn't match the selected NSEC3PARAM record for
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington zone. [RT# 21868]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2937. [bug] Worked around an apparent race condition in over
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory conditions. Without this fix a DNS cache DB or
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson ADB could incorrectly stay in an over memory state,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews effectively refusing further caching, which
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson subsequently made a BIND 9 caching server unworkable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This fix prevents this problem from happening by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polling the state of the memory context, rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews making a copy of the state, which appeared to cause
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington a race. This is a "workaround" in that it doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews solve the possible race per se, but several experiments
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews proved this change solves the symptom. Also, the
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews polling overhead hasn't been reported to be an issue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This bug should only affect a caching server that
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson specifies a finite max-cache-size. It's also quite
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews likely that the bug happens only when enabling threads,
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence but it's not confirmed yet. [RT #21818]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2936. [func] Improved configuration syntax and multiple-view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support for addzone/delzone feature (see change
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews #2930). Removed "new-zone-file" option, replaced
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson with "allow-new-zones (yes|no)". The new-zone-file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for each view is now created automatically, with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a filename generated from a hash of the view name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It is no longer necessary to "include" the
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington new-zone-file in named.conf; this happens
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatically. Zones that were not added via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "rndc addzone" can no longer be removed with
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington "rndc delzone". [RT #19447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley scope. This could potentially result in a unknown,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews potentially malformed, EDNS option being sent instead
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley of the desired NSID option. [RT #21781]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2931. [bug] Temporarily and partially disable change 2864
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson because it would cause infinite attempts of RRSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries. This is an urgent care fix; we'll
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews revisit the issue and complete the fix later.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commands
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow dynamic addition and deletion of zones.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson To enable this feature, specify a "new-zone-file"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option at the view or options level in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Zone configuration information for the new zones
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington will be written into that file. To make the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zones persist after a restart, "include" the file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews into named.conf in the appropriate view. (Note:
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley This feature is not yet documented, and its syntax
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is expected to change.) [RT #19447]
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington2929. [bug] Improved handling of GSS security contexts:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - added LRU expiration for generated TSIGs
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson - added the ability to use a non-default realm
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - added new "realm" keyword in nsupdate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - limited lifetime of generated keys to 1 hour
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or the lifetime of the context (whichever is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2928. [bug] Be more selective about the non-authoritative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answer we apply change 2748 to. [RT #21594]
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews2927. [placeholder]
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews2926. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2925. [bug] Named failed to accept uncachable negative responses
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson from insecure zones. [RT# 21555]
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2924. [func] 'rndc secroots' dump a combined summary of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews current managed keys combined with trusted keys.
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2923. [bug] 'dig +trace' could drop core after "connection
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeout". [RT #21514]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2922. [contrib] Update zkt to version 1.0.
df0f58959ed82a2a43ca8d816ce9592541df9f2fMark Andrews2921. [bug] The resolver could attempt to destroy a fetch context
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews too soon. [RT #19878]
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2917. [func] Virtual time test framework. [RT #20801]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2916. [func] Add framework to use IPv6 in tests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews based on configure options. [RT #21444]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2914. [bug] Make the "autosign" system test more portable.
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson2913. [func] Add pkcs#11 system tests. [RT #20784]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2912. [func] Windows clients don't like UPDATE responses that clear
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley the zone section. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson2910. [func] Sanity check Kerberos credentials. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was specified in named.conf. [RT #21416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington a DNSKEY. [RT #21384]
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington2907. [bug] The export version of libdns had undefined references.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could be incorrectly marked as insecure instead of
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson secure leading to negative proofs failing. This was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a unintended outcome from change 2890. [RT# 21392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2902. [func] Add regression test for change 2897. [RT #21040]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2900. [bug] The placeholder negative caching element was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews properly constructed triggering a INSIST in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_ncache_towire(). [RT #21346]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2899. [port] win32: Support linking against OpenSSL 1.0.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2898. [bug] nslookup leaked memory when -domain=value was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified. [RT #21301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to insecure. [RT #21040]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2896. [bug] "rndc sign" failed to properly update the zone
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson when adding a DNSKEY for publication only. [RT #21045]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2895. [func] genrandom: add support for the generation of multiple
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson files. [RT #20917]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2893. [bug] Improve managed keys support. New named.conf option
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington managed-keys-directory. [RT #20924]
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington2892. [bug] Handle REVOKED keys better. [RT #20961]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2891. [maint] Update empty-zones list to match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley2890. [bug] Handle the introduction of new trusted-keys and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DS, DLV RRsets better. [RT #21097]
8e68489885e744ab48907414b4199c36858c27ddMark Andrews2889. [bug] Elements of the grammar where not properly reported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2888. [bug] Only the first EDNS option was displayed. [RT #21273]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2887. [bug] Report the keytag times in UTC in the .key file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews local time is presented as a comment within the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comment. [RT #21223]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2885. [bug] Improve -fno-strict-aliasing support probing in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure. [RT #21080]
7427490a67b9547242b57c255254f7e146127c48Bob Halley2884. [bug] Insufficient validation in dns_name_getlabelsequence().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2883. [bug] 'dig +short' failed to handle really large datasets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2882. [bug] Remove memory context from list of active contexts
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson before clearing 'magic'. [RT #21274]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews is held when closing a version. [RT #21198]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson consistent. [RT #21078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2878. [func] Incrementally write the master file after performing
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington a AXFR. [RT #21010]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2877. [bug] The validator failed to skip obviously mismatching
a12d9cfa59b5981c52e1aaafedf652d5128f3448Brian Wellington RRSIGs. [RT #21138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington from unsigned zones. [RT #21131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2874. [bug] Cache lack of EDNS support only after the server
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson successfully responds to the query using plain DNS.
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2873. [bug] Canceling a dynamic update via the dns/client module
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could trigger an assertion failure. [RT #21133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews require one of IPv4 or IPv6 rather than both.
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the header file, causing build failure with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --enable-exportlib. [RT #21138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews any changes made by configure are integrated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews don't like it. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington2865. [bug] memset to zero event.data. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updating DS records. [RT #20896]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inactivation time. [RT #21039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington2859. [bug] When canceling validation it was possible to leak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #20800]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington2858. [bug] RTT estimates were not being adjusted on ICMP errors.
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson2857. [bug] named-checkconf did not fail on a bad trusted key.
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews2856. [bug] The size of a memory allocation was not always properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recorded. [RT #20927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2855. [func] nsupdate will now preserve the entered case of domain
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson names in update requests it sends. [RT #20928]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson be suppressed, dig +onesoa. [RT #20929]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington2851. [doc] nslookup.1, removed <informalexample> from the docbook
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source as it produced bad nroff. [RT #21007]
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the heap would have corrupted entries. [RT #20951]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
d72269740049af28b091ba81d68a067c88f53547Mark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews README.rfc5011 into the ARM. [RT #20899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews2846. [bug] EOF on unix domain sockets was not being handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly. [RT #20731]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington been five (5) seconds.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson creating key files if there is a chance that the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key ID will collide with an existing one after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews either of the keys has been revoked. (To override
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this in the case of dnssec-keyfromlabel, use the -y
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington option. dnssec-keygen will simply create a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews different, non-colliding key, so an override is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not necessary.) [RT #20838]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec" regression tests. [RT #20865]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2839. [bug] A KSK revoked by named could not be deleted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2838. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington2836. [bug] Keys that were scheduled to become active could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be delayed. [RT #20874]
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the private key file with the outdated tag
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "Unpublish" rather than "Inactive". This has been
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington fixed; however, any existing keys that had Inactive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dates set will now need to have them reset, using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'dnssec-settime -I'. [RT #20868]
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington2834. [bug] HMAC-SHA* keys that were longer than the algorithm
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews digest length were used incorrectly, leading to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interoperability problems with other DNS
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson implementations. This has been corrected.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (Note: If an oversize key is in use, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatibility is needed with an older release of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND, the new tool "isc-hmac-fixup" can convert
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson the key secret to a form that will work with all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions.) [RT #20751]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to avoid redefinition in some OSs [RT 20831]
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2831. [security] Do not attempt to validate or cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews out-of-bailiwick data returned with a secure
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson answer; it must be re-fetched from its original
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source and validated in that context. [RT #20819]
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington2830. [bug] Changing the OPTOUT setting could take multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews passes. [RT #20813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2829. [bug] Fixed potential node inconsistency in rbtdb.c.
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington2828. [security] Cached CNAME or DNAME RR could be returned to clients
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without DNSSEC validation. [RT #20737]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being released. [RT #20740]
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was in the process of being created was not properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recorded in the zone. [RT #20786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file more user friendly (PKCS#11 engine patch).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2818. [cleanup] rndc could return an incorrect error code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a zone was not found. [RT #20767]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson2816. [bug] previous_closest_nsec() could fail to return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews data for NSEC3 nodes [RT #29730]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2814. [func] Provide a definitive error message when a master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone is not loaded. [RT #20757]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews2812. [bug] Make sure updates can't result in a zone with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output. [RT #20733]
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson2810. [doc] Clarified the process of transitioning an NSEC3 zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to insecure. [RT #20746]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic.h is correctly installed by the architecture
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington specific subdirectories. [RT #20722]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence keys. [RT #20720]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0rc1 released ---
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when it had changed. [RT #20703]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2805. [bug] Fixed namespace problems encountered when building
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews external programs using non-exported BIND9 libraries
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence (i.e., built without --enable-exportlib). [RT #20679]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington or as a result of a scheduled key change. [RT #20700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence and genrandom under windows. [RT #20670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence2801. [func] Detect and report records that are different according
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to DNSSEC but are semantically equal according to plain
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington DNS. Apply plain DNS comparisons rather than DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comparisons when processing UPDATE requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone now removes such semantically duplicate
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson records prior to signing the RRset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkzone -r {ignore|warn|fail} (default warn)
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson named.conf: check-dup-records {ignore|warn|fail};
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2800. [func] Reject zones which have NS records which refer to
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington CNAMEs, DNAMEs or don't have address record (class IN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only). Reject UPDATEs which would cause the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to fail the above checks if committed. [RT #20678]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2798. [bug] Addressed bugs in managed-keys initialization
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and rollover. [RT #20683]
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington2797. [bug] Don't decrement the dispatch manager's maxbuffers.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2796. [bug] Missing dns_rdataset_disassociate() call in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews log messages. [RT #18889]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2793. [func] Add "autosign" and "metadata" tests to the
f53848e17123569387b279578f0100dca5407da5Mark Andrews automatic tests. [RT #19946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington options (if compiled in). [RT #20635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2791. [bug] The installation of isc-config.sh was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2788. [bug] dnssec-signzone could sign with keys that were
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington not requested [RT #20625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2787. [bug] Spurious log message when zone keys were
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson dynamically reconfigured. [RT #20659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b3 released ---
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2785. [bug] Revoked keys could fail to self-sign [RT #20652]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2784. [bug] TC was not always being set when required glue was
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson dropped. [RT #20655]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson buffer size of 512 or less. [RT #20654]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence2781. [bug] Inactive keys could be used for signing. [RT #20649]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews activation date in all cases. [RT #20648]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without deleting the unrevoked version. [RT #20638]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington in dnssec-keyfromlabel. [RT #20643]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2774. [bug] Existing cache DB wasn't being reused after
253f774e358dba38742a484426a4cadf4f248817Brian Wellington reconfiguration. [RT #20629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2773. [bug] In autosigned zones, the SOA could be signed
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington with the KSK. [RT #20628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2772. [security] When validating, track whether pending data was from
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson the additional section or not and only return it if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validates as secure. [RT #20438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson corrupted when importing from key files [RT #20624]
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington2770. [cleanup] Add log messages to resolver.c to indicate events
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing FORMERR responses. [RT #20526]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer2769. [cleanup] Change #2742 was incomplete. [RT #19589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2767. [bug] named could crash on startup if a zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured with auto-dnssec and there was no
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington key-directory. [RT #20615]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer socketmgr state if the socket is not pending on a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews read or write. [RT #20603]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2765. [bug] Skip masters for which the TSIG key cannot be found.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington2762. [bug] DLV validation failed with a local slave DLV zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2761. [cleanup] Enable internal symbol table for backtrace only for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems that are known to work. Currently, BSD
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington variants, Linux and Solaris are supported. [RT# 20202]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2759. [doc] Add information about .jbk/.jnw files to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the ARM. [RT #20303]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson2758. [bug] win32: Added a workaround for a windows 2008 bug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that could cause the UDP client handler to shut
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down. [RT #19176]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2757. [bug] dig: assertion failure could occur in connect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeout. [RT #20599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2755. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was signed with NSEC3. [RT #20587]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2753. [bug] Removed an unnecessary warning that could appear when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews building an NSEC chain. [RT #20589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2752. [bug] Locking violation. [RT #20587]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2750. [bug] dig: assertion failure could occur when a server
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson didn't have an address. [RT #20579]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for NSEC3 signed zones. [RT #20452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as referrals. [RT #18884]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson time of RRSIGs correctly. [RT #20541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2745. [bug] configure script didn't probe the return type of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gai_strerror(3) correctly. [RT #20573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for a insecure delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b2 released ---
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley2742. [cleanup] Clarify some DNSSEC-related log messages in
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2741. [func] Allow the dnssec-keygen progress messages to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppressed (dnssec-keygen -q). Automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppress the progress messages when stdin is not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a tty. [RT #20474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2740. [placeholder]
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews anchors for a view. [RT #20211]
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews test. [RT #20453]
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews2737. [func] UPDATE requests can leak existence information.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more than a normal amount of glue below a delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2735. [bug] dnssec-signzone could fail to read keys
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson that were specified on the command line with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews full paths, but weren't in the current
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory. [RT #20421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2732. [func] Add optional filter-aaaa-on-v4 option, available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if built with './configure --enable-filter-aaaa'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Filters out AAAA answers to clients connecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via IPv4. (This is NOT recommended for general
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley use.) [RT #20339]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2731. [func] Additional work on change 2709. The key parser
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley will now ignore unrecognized fields when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews minor version number of the private key format
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been increased. It will reject any key with
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson the major version number increased. [RT #20310]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2730. [func] Have dnssec-keygen display a progress indication
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a la 'openssl genrsa' on standard error. Note
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when the first '.' is followed by a long stop
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson one has the choice between slow generation vs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington TTL. [RT #20451]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone now warn immediately if asked to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews write into a nonexistent directory. [RT #20278]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2727. [func] The 'key-directory' option can now specify a relative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews path. [RT #20154]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2725. [doc] Added information about the file "managed-keys.bind"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the ARM. [RT #20235]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2724. [bug] Updates to a existing node in secure zone using NSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were failing. [RT #20448]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_base64_totext(), didn't always mark regions of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory as fully consumed after conversion. [RT #20445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2722. [bug] Ensure that the memory associated with the name of
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington a node in a rbt tree is not altered during the life
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the node. [RT #20431]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson generator. [RT #20369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrect. [RT #20394]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2717. [bug] named failed to update the NSEC/NSEC3 record when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the last private type record was removed as a result
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of completing the signing the zone with a key.
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson --- 9.7.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2713. [bug] powerpc: atomic operations missing asm("ics") /
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer __isync() calls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be fully automated in zones configured for
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer dynamic DNS. 'auto-dnssec allow;' permits a zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be signed by creating keys for it in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-directory and using 'rndc sign <zone>'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson also keeps the zone's DNSSEC keys up to date
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews according to their timing metadata. [RT #19943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build. [RT #20372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington zone option cause a zone to be signed with only KSKs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews the size of a DNSKEY answer. [RT #20340]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington2709. [func] Added some data fields, currently unused, to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews private key file format, to allow implementation
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews of explicit key rollover in a future release
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without impairing backward or forward compatibility.
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update are now fully supported and no longer require
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defines to enable. We now no longer overload the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews apex. Secure to insecure changes are controlled by
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews by the named.conf option 'secure-to-insecure'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Warning: If you had previously enabled support by
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence adding defines at compile time to BIND 9.6 you should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ensure that all changes that are in progress have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence is not backwards compatible.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews to be specified in the label if there is a default
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews engine or the -E option has been used. Also, it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now uses default algorithms as dnssec-keygen does
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trigger an assert. [RT #20368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2705. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2704. [bug] Serial of dynamic and stub zones could be inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with their SOA serial. [RT #19387]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for all binaries which can take benefit of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews crypto hardware. [RT #20230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported TSIG key algorithm. [RT #18046]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2698. [placeholder]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews S_IFREG are defined after including <isc/stat.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2696. [bug] named failed to successfully process some valid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews acl constructs. [RT #20308]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews callback function for isc_socket_fdwatchcreate)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to include information about the direction (read
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews or write) and add isc_socket_fdwatchpoke.
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chain when re-signing a previously-signed zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use -u to modify NSEC3 parameters or switch
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews between NSEC and NSEC3. [RT #20304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2689. [bug] Correctly handle snprintf result. [RT #20306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to decide to fetch the destination address. [RT #20305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, added warnings when revoking a ZSK, as this is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not defined by protocol (but is legal). [RT #19943]
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer +adflag and +cdflag. [RT #19305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
588b63e1a86fb707172830e14897da624ed380edMark Andrews the NSEC3 parameters used to sign the zone change.
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington2682. [bug] "configure --enable-symtable=all" failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build. [RT #20282]
452d75b18f9d050086964fa39c326cf388517396Mark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews decoded. [RT #20269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format. [RT #20031]
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was set. [RT #20258]
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews2677. [func] Changes to key metadata behavior:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - Keys without "publish" or "active" dates set will
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington no longer be used for smart signing. However,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews those dates will be set to "now" by default when
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews a key is created; to generate a key but not use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it yet, use dnssec-keygen -G.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews sets the time when a key is no longer used for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing but is still published.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - The "unpublished" date (-U) is deprecated in
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer favor of "deleted" (-D).
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2676. [bug] --with-export-installdir should have been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-export-includedir. [RT #20252]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2675. [bug] dnssec-signzone could crash if the key directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not exist. [RT #20232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without openssl. [RT #20231]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2673. [bug] The managed-keys.bind zone file could fail to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews load due to a spurious result from sync_keyzone()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookups. [RT #20218]
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington2671. [bug] Add support for PKCS#11 providers not returning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the public exponent in RSA private keys
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington (OpenCryptoki for instance) in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keyfromlabel. [RT #19294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews information to be useful. [RT #20205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2668. [func] Several improvements to dnssec-* tools, including:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-keygen and dnssec-settime can now set key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews metadata fields 0 (to unset a value, use "none")
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson - dnssec-revoke sets the revocation date in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addition to the revoke bit
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-settime can now print individual metadata
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson fields instead of always printing all of them,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and can print them in unix epoch time format for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use by scripts
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews2667. [func] Add support for logging stack backtrace on assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure (not available for all platforms). [RT #19780]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington (API change from 9.7.0a2). [RT #20196]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer2665. [func] Clarify syntax for managed-keys {} statement, add
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ARM documentation about RFC 5011 support. [RT #19874]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2664. [bug] create_keydata() and minimal_update() in zone.c
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer didn't properly check return values for some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions. [RT #19956]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2663. [func] win32: allow named to run as a service using
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson "NT AUTHORITY\LocalService" as the account. [RT #19977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews returned a misleading error code when lwresd was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down. [RT #20028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews creating lwres context. [RT #20029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews applications. See README.libdns. [RT #19369]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name for DNSSEC keys. [RT #19938]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson key file paths correctly. [RT #20078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson log level to debug 1. [RT #20058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2656. [func] win32: add a "tools only" check box to the installer
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson which causes it to only install dig, host, nslookup,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nsupdate and relevant DLLs. [RT #19998]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson2655. [doc] Document that key-directory does not affect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bind.keys, rndc.key or session.key. [RT #20155]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2654. [bug] Improve error reporting on duplicated names for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deny-answer-xxx. [RT #20164]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not found rather than out of memory. [RT #18033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2652. [func] Provide more detail about what record is being
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson deleted. [RT #20061]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 64-bit systems. [RT #20076]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2650. [bug] Assertion failure in dnssec-signzone when trying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to read keyset-* files. [RT #20075]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2647. [bug] Remove unnecessary SOA updates when a new KSK is
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington added. [RT #19913]
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews which default to 64 bits. [RT #19927]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews --- 9.7.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews named was unable to write the PID file and would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail on startup. [RT #20001]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2642. [bug] nsupdate could dump core on solaris when reading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improperly formatted key files. [RT #20015]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer added a regression test to check it. [RT #20007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2640. [security] A specially crafted update packet will cause named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to exit. [RT #20000]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2638. [bug] Install arpaname. [RT #19957]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer2636. [func] Simplify zone signing and key maintenance with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-* tools. Major changes:
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer - all dnssec-* tools now take a -K option to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specify a directory in which key files will be
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer - DNSSEC can now store metadata indicating when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they are scheduled to be published, activated,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews revoked or removed; these values can be set by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keygen or overwritten by the new
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews dnssec-settime command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-signzone -S (for "smart") option reads key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews metadata and uses it to determine automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which keys to publish to the zone, use for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing, revoke, or remove from the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2634. [port] win32: Add support for libxml2, enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statschannel. [RT #19773]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2632. [func] util/kit.sh: warn if documentation appears to be out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews date. [RT #19922]
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #19926 ]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley "update-policy local;" to switch on local DDNS in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. (The "ddns-autoconf" option has been removed.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer setresgid() if not present. [RT #19932]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer2628. [port] linux: Allow /var/run/named/named.pid to be opened
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at startup with reduced capabilities in operation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2627. [bug] Named aborted if the same key was included in
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley trusted-keys more than once. [RT #19918]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2626. [bug] Multiple trusted-keys could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #19914]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration. [RT #18871]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson2621. [doc] Made copyright boilerplate consistent. [RT #19833]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2620. [bug] Delay thawing the zone until the reload of it has
ba43c53451d5c38765f376eeede457178b36951aBob Halley completed successfully. [RT #19750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews maintenance. The new "managed-keys" statement can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be used in place of "trusted-keys" for zones which
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews support this protocol. (Note: this syntax is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff loop infinitely. [RT #19847]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2617. [bug] ifconfig.sh failed to emit an error message when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews run from the wrong location. [RT #19375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a explicit nameserver was specified. [RT #19852]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2615. [bug] "__attribute__((unused))" was in the wrong place
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for ia64 gcc builds. [RT #19854]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2614. [port] win32: 'named -v' should automatically be executed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the foreground. [RT #19844]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2613. [placeholder]
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson --- 9.7.0a1 released ---
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2612. [func] Add default values for the arguments to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keygen. Without arguments, it will now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generate a 1024-bit RSASHA1 zone-signing key,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or with the -f KSK option, a 2048-bit RSASHA1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-signing key. [RT #19300]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLV records instead of DS records. [RT #19300]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2610. [port] sunos: Change #2363 was not complete. [RT #19796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2609. [func] Simplify the configuration of dynamic zones:
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff - add ddns-confgen command to generate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration text for named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add zone option "ddns-autoconf yes;", which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes named to generate a TSIG session key
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington and allow updates to the zone using that key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add '-l' (localhost) option to nsupdate, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes nsupdate to connect to a locally-running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named process using the session key generated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2608. [func] Perform post signing verification checks in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone. These can be disabled with -P.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The post sign verification test ensures that for each
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm in use there is at least one non revoked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews self signed KSK key. That all revoked KSK keys are
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson self signed. That all records in the zone are signed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by the algorithm. [RT #19653]
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson2607. [bug] named could incorrectly delete NSEC3 records for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty nodes when processing a update request.
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2606. [bug] "delegation-only" was not being accepted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegation-only type zones. [RT #19717]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2605. [bug] Accept DS responses from delegation only zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT # 19296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new options, deny-answer-addresses and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deny-answer-aliases. Based on contributed code from
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff JD Nurmi, Google. [RT #18192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-comilezone argv[0] names under windows.
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson2602. [port] win32: fix debugging command line build of libisccfg.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2601. [doc] Mention file creation mode mask in the
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson named manual page.
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2600. [doc] ARM: miscellaneous reformatting for different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews page widths. [RT #19574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2599. [bug] Address rapid memory growth when validation fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2598. [func] Reserve the -F flag. [RT #19657]
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson2597. [bug] Handle a validation failure with a insecure delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington long, leading to inefficient memory usage or rejecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews newer cache entries in the worst case. [RT #19563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2594. [func] Have rndc warn if using its default configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file when the key file also exists. [RT #19424]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson2591. [bug] named could die when processing a update in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed_orphaned_ds(). [RT #19507]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2590. [func] Report zone/class of "update with no effect".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2588. [bug] SO_REUSEADDR could be set unconditionally after failure
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson of bind(2) call. This should be rare and mostly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews harmless, but may cause interference with other
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processes that happen to use the same port. [RT #19642]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2587. [func] Improve logging by reporting serial numbers for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when zone serial has gone backwards or unchanged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington or SDB. [RT #19577]
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson2585. [bug] Uninitialized socket name could be referenced via a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics channel, triggering an assertion failure in
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson XML rendering. [RT #19427]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2583. [port] netbsd: provide a control to not add the compile
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington date to the version string, -DNO_VERSION_DATE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2582. [bug] Don't emit warning log message when we attempt to
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson remove non-existent journal. [RT #19516]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2580. [bug] UpdateRej statistics counter could be incremented twice
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for one rejection. [RT #19476]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2579. [bug] DNSSEC lookaside validation failed to handle unknown
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithms. [RT #19479]
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 65535 turns out to be reserved. [RT #19477]
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson2577. [doc] Clarified some statistics counters. [RT #19454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2576. [bug] NSEC record were not being correctly signed when
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson a zone transitions from insecure to secure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Handle such incorrectly signed zones. [RT #19114]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2575. [func] New functions dns_name_fromstring() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_tostring(), to simplify conversion
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews of a string to a dns_name structure and vice
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versa. [RT #19451]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2573. [bug] Replacing a non-CNAME record with a CNAME record in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews single transaction in a signed zone failed. [RT #19397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2572. [func] Simplify DLV configuration, with a new option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec-lookaside auto;" This is the equivalent
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews plus setting a trusted-key for dlv.isc.org.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: The trusted key is hard-coded into named,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but is also stored in (and can be overridden
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rolls over it can be kept up to date by replacing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the bind.keys file with a key downloaded from
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson https://www.isc.org/solutions/dlv. [RT #18685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington2570. [func] Log the destination address the query was sent to.
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson2569. [func] Move journalprint, nsec3hash, and genrandom
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "make install" will put them in $sbindir. [RT #19301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2568. [bug] Report when the write to indicate a otherwise
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successful start fails. [RT #19360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews write_public_key() could miss write errors.
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington dnssec-dsfromkey could miss write errors.
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington2566. [cleanup] Clarify logged message when an insecure DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response arrives from a zone thought to be secure:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "insecurity proof failed" instead of "not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews insecure". [RT #19400]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2565. [func] Add support for HIP record. Includes new functions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington and dns_rdata_hip_current(). [RT #19384]
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson2564. [bug] Only take EDNS fallback steps when processing timeouts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to exit. [RT #19359]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and some new content.
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2559. [bug] dnssec-dsfromkey could compute bad DS records when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reading from a K* files. [RT #19357]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2558. [func] Set the ownership of missing directories created
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for pid-file if -u has been specified on the command
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson line. [RT #19328]
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson2557. [cleanup] PCI compliance:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * new libisc log module file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * isc_dir_chroot() now also changes the working
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson directory to "/".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional INSISTs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional logging when files can't be removed.
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error checks in the correct order resulting in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong error code sometimes being returned. [RT #19249]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2555. [func] dig: when emitting a hex dump also display the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corresponding characters. [RT #19258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail. [RT #19297]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2552. [bug] zero-no-soa-ttl-cache was not being honored.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2551. [bug] Potential Reference leak on return. [RT #19341]
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2548. [bug] Install iterated_hash.h. [RT #19335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence out-of-range area of the source buffer. New public
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function isc_mem_reallocate() was introduced to address
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this bug. [RT #19313]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL (in place of internal routine) for hash
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for SRV RDATA too. [RT #19304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington2542. [doc] Update the description of dig +adflag. [RT #19290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2541. [bug] Conditionally update dispatch manager statistics.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2539. [security] Update the interaction between recursion, allow-query,
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson allow-query-cache and allow-recursion. [RT #19198]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington especially with threads and smaller max-cache-size
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews values. [RT #19240]
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson2537. [func] Added more statistics counters including those on socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews I/O events and query RTT histograms. [RT #18802]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2536. [cleanup] Silence some warnings when -Werror=format-security is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified. [RT #19083]
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2534. [func] Check NAPTR records regular expressions and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replacement strings to ensure they are syntactically
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington valid and consistent. [RT #18168]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2532. [bug] dig: check the question section of the response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews see if it matches the asked question. [RT #18495]
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer2531. [bug] Change #2207 was incomplete. [RT #19098]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer2530. [bug] named failed to reject insecure to secure transitions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via UPDATE. [RT #19101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews version of autoconf. [RT #18657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2528. [cleanup] Silence spurious configure warning about
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --datarootdir [RT #19096]
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson2527. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2526. [func] New named option "attach-cache" that allows multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views to share a single cache to save memory and
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson improve lookup efficiency. Based on contributed code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from Barclay Osborn, Google. [RT #18905]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews internal information about query failures, especially
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson about server failures. [RT #19027]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2523. [bug] Random type rdata freed by dns_nsec_typepresent().
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson #2388 made the schema incompatible to the previous
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews version. [RT #19080]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2519. [bug] dig/host with -4 or -6 didn't work if more than two
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver addresses of the excluded address family
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews preceded in resolv.conf. [RT #19081]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington2518. [func] Add support for the new CERT types from RFC 4398.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver address of the excluded address type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2516. [bug] glue sort for responses was performed even when not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews needed. [RT #19039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson a nameserver of the excluded address family.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2513. [bug] Fix windows cli build. [RT #19062]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2512. [func] Print a summary of the cached records which make up
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews the negative response. [RT #18885]
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2509. [bug] Specifying a fixed query source port was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2508. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2507. [func] Log the recursion quota values when killing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews oldest query or refusing to recurse due to quota.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2506. [port] solaris: Check at configure time if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews hack_shutup_pthreadonceinit is needed. [RT #19037]
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson2505. [port] Treat amd64 similarly to x86_64 when determining
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic operation support. [RT #19031]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2504. [bug] Address race condition in the socket code. [RT #18899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2503. [port] linux: improve compatibility with Linux Standard
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Base. [RT #18793]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews document function in <isc/radix.h>. [RT #18534]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2501. [func] $GENERATE now supports all rdata types. Multi-field
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdata types need to be quoted. See the ARM for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews details. [RT #18368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson function. [RT #18582]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson --- 9.6.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2498. [bug] Removed a bogus function argument used with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning or crash named with the debug 1 level
5096958739769958dd7a6b69356bf41260033873David Lawrence of logging. [RT #18917]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence2496. [bug] Add sanity length checks to NSID option. [RT #18813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews installed. [RT #18826]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews up after itself. [RT #18767]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2492. [func] Rndc status now reports the number of cpus discovered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and the number of worker threads when running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multi-threaded. [RT #18273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2491. [func] Attempt to re-use a local port if we are already using
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister the port. [RT #18548]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington is cleared when IPV6_V6ONLY is set. [RT #18785]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this workaround. [RT #18870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington from keyset and .key files. [RT #18694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2486. [func] The default locations for named.pid and lwresd.pid
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister This allows the owner of the containing directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be set, for "named -u" support, and allows there
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be a permanent symbolic link in the path, for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "named -t" support. [RT #18306]
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2485. [bug] Change update's the handling of obscured RRSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records. Not all orphaned DS records were being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed. [RT #18828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adding NSEC3 proofs to the response in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query_addwildcardproof(). [RT #18828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 2.6.*. [RT #18806]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews collisions. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2480. [bug] named could fail to emit all the required NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2478. [bug] 'addresses' could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure_forward(). [RT #18800]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2477. [bug] dig: the global option to print the command line is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews +cmd not print_cmd. Update the output to reflect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this. [RT #17008]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2476. [doc] ARM: improve documentation for max-journal-size and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2475. [bug] LRU cache cleanup under overmem condition could purge
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular entries more aggressively. [RT #17628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2474. [bug] ACL structures could be allocated with insufficient
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space, causing an array overrun. [RT #18765]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2473. [port] linux: raise the limit on open files to the possible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maximum value before spawning threads; 'files'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified in named.conf doesn't seem to work with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews threads as expected. [RT #18784]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2472. [port] linux: check the number of available cpu's before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2471. [bug] named-checkzone was not reporting missing mandatory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews glue when sibling checks were disabled. [RT #18768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2470. [bug] Elements of the isc_radix_node_t could be incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overwritten. [RT# 18719]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2469. [port] solaris: Work around Solaris's select() limitations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2468. [bug] Resolver could try unreachable servers multiple times.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2465. [bug] Adb's handling of lame addresses was different
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv4 and IPv6. [RT #18738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2464. [port] linux: check that a capability is present before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trying to set it. [RT #18135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API and glibc hides parts of the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API as a result. This is stupid as it breaks how the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two halves (Basic and Advanced) of the IPv6 Socket API
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews were designed to be used but we have to live with it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API. [RT #18388]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2462. [doc] Document -m (enable memory usage debugging)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option for dig. [RT #18757]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2461. [port] sunos: Change #2363 was not complete. [RT #17513]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2458. [doc] ARM: update and correction for max-cache-size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence default. It should be safe because expired cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries are also purged. [RT #18684]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence address, regardless of family. They now correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews distinguish IPv4 from IPv6. [RT #18559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2453. [bug] Remove NULL pointer dereference in dns_journal_print().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence2451. [port] solaris: handle runtime linking better. [RT #18356]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2450. [doc] Fix lwresd docbook problem for manual page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2449. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2448. [func] Add NSEC3 support. [RT #15452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2447. [cleanup] libbind has been split out as a separate product.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2446. [func] Add a new log message about build options on startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A new command-line option '-V' for named is also
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister provided to show this information. [RT# 18645]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2445. [doc] ARM out-of-date on empty reverse zones (list includes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RFC1918 address, but these are not yet compiled in).
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (clear DF) for UDP responses and requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and so connected UDP sockets would never clean up.
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence Fix this by doing an immediate WSAConnect() rather
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than an io completion port type for UDP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2442. [bug] A lock could be destroyed twice. [RT# 18626]
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence2441. [bug] isc_radix_insert() could copy radix tree nodes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incompletely. [RT #18573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2440. [bug] named-checkconf used an incorrect test to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if an ACL was set to none.
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
99524919752c9b9abe1814007732b86592011cc1Brian Wellington2437. [bug] Sockets could be closed too early, leading to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inconsistent states in the socket module. [RT #18298]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2435. [bug] Fixed an ACL memory leak affecting win32.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2434. [bug] Fixed a minor error-reporting bug in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2433. [tuning] Set initial timeout to 800ms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using I/O events and use IO Completion Ports
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington throughout. Rewrite the receive path logic to make
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it easier to support multiple simultaneous
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requesters in the future. Add stricter consistency
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews checking as a compile-time option (define
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2430. [bug] win32: isc_interval_set() could round down to
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson zero if the input was less than NS_INTERVAL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nanoseconds. Round up instead. [RT #18549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2429. [doc] nsupdate should be in section 1 of the man pages.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tables. [RT #18409]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews was set. [RT #18528]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong value if excessively large net masks are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supplied. [RT #18512]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2425. [bug] named didn't detect unavailable query source addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at load time. [RT #18536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2424. [port] configure now probes for a working epoll
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementation. Allow the use of kqueue,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews epoll and /dev/poll to be selected at compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #18277]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2423. [security] Randomize server selection on queries, so as to
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews make forgery a little more difficult. Instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews always preferring the server with the lowest RTT,
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington pick a server with RTT within the same 128
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews millisecond band. [RT #18441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2422. [bug] Handle the special return value of a empty node as
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister if it was a NXRRSET in the validator. [RT #18447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2421. [func] Add new command line option '-S' for named to specify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the max number of sockets. [RT #18493]
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister Use caution: this option may not work for some
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews operating systems without rebuilding named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2420. [bug] Windows socket handling cleanup. Let the io
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completion event send out canceled read/write
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews done events, which keeps us from writing to memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews we no longer have ownership of. Add debugging
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson socket_log() function. Rework TCP socket handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to not leak sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson should not be used for isc_sockettype_fdwatch sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2417. [bug] Connecting UDP sockets for outgoing queries could
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister unexpectedly fail with an 'address already in use'
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #18411]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2416. [func] Log file descriptors that cause exceeding the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews internal maximum. [RT #18460]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2415. [bug] 'rndc dumpdb' could trigger various assertion failures
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2414. [bug] A masterdump context held the database lock too long,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing various troubles such as dead lock and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recursive lock acquisition. [RT #18311, #18456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2412. [bug] win32: address a resource leak. [RT #18374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
47c196192afa37b2dea728e52579779f190bf07fJames Brister for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at compilation time. [RT #18433]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: with changes #2469 and #2421 above, there is no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2409. [bug] Only log that we disabled EDNS processing if we were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subsequently successful. [RT #18029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2408. [bug] A duplicate TCP dispatch event could be sent, which
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister could then trigger an assertion failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resquery_response(). [RT #18275]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2406. [placeholder]
0380c44d0238a88e167526954d630d071739ed28Mark Andrews2405. [cleanup] The default value for dnssec-validation was changed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "yes" in 9.5.0-P1 and all subsequent releases; this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was inadvertently omitted from CHANGES at the time.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2404. [port] hpux: files unlimited support.
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2403. [bug] TSIG context leak. [RT #18341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence2401. [bug] Expect to get E[MN]FILE errno internal_accept()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (from accept() or fcntl() system calls). [RT #18358]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2399. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2398. [bug] Improve file descriptor management. New,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews temporary, named.conf option reserved-sockets,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews default 512. [RT #18344]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2397. [bug] gssapi_functions had too many elements. [RT #18355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2396. [bug] Don't set SO_REUSEADDR for randomized ports.
d5399cc351a549db957185993b320a3bffa40e41James Brister2395. [port] Avoid warning and no effect from "files unlimited"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on Linux when running as root. [RT #18335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2394. [bug] Default configuration options set the limit for
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister open files to 'unlimited' as described in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation. [RT #18331]
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews2393. [bug] nested acls containing keys could trigger an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion in acl.c. [RT #18166]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2392. [bug] remove 'grep -q' from acl test script, some platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews don't support it. [RT #18253]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2390. [bug] dispatch.c could make a false warning on 'odd socket'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #18301].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2389. [bug] Move the "working directory writable" check to after
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister the ns_os_changeuser() call. [RT #18326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2388. [bug] Avoid using tables for layout purposes in
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence statistics XSL [RT #18159].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #18147] [RT #18258]
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson2386. [func] Add warning about too small 'open files' limit.
0b056755b2f423ba5f6adac8f7851d78f7d11437David Lawrence2385. [bug] A condition variable in socket.c could leak in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rare error handling [RT #17968].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2384. [security] Fully randomize UDP query ports to improve
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews forgery resilience. [RT #17949, #18098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2383. [bug] named could double queries when they resulted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews mysql. <prefix>/include/{,mysql/}mysql.h and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson proofs which, in turn, caused validation failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for insecure zones immediately below a secure zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the server was authoritative for. [RT #18112]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2376. [bug] Change #2144 was not complete.
f34984369fbc87f6cc5c5d1059303377a1724d79James Brister2375. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2374. [bug] "blackhole" ACLs could cause named to segfault due
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson to some uninitialized memory. [RT #18095]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson new zone was configured, causing an overconsumption
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory. [RT #18092]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington2370. [bug] "rndc freeze" could trigger an assertion in named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when called on a nonexistent zone. [RT #18050]
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington2369. [bug] libbind: Array bounds overrun on read in bitncmp().
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2368. [port] Linux: use libcap for capability management if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible. [RT# 18026]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2367. [bug] Improve counting of dns_resstatscounter_retry
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2366. [bug] Adb shutdown race. [RT #18021]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
6deb631b20b7e212d9a350759e472fa60f9e92e4David Lawrence spurious results. [RT #18000]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2364. [bug] named could trigger a assertion when serving a
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington malformed signed zone. [RT #17828]
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence2362. [cleanup] Make "rrset-order fixed" a compile-time option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews settable by "./configure --enable-fixed-rrset".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Disabled by default. [RT #17977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2361. [bug] "recursion" statistics counter could be counted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multiple times for a single query. [RT #17990]
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence2360. [bug] Fix a condition where we release a database version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (which may acquire a lock) while holding the lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2359. [bug] Fix NSID bug. [RT #17942]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2358. [doc] Update host's default query description. [RT #17934]
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence2357. [port] Don't use OpenSSL's engine support in versions before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL 0.9.7f. [RT #17922]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2356. [bug] Built in mutex profiler was not scalable enough.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2355. [func] Extend the number statistics counters available.
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2354. [bug] Failed to initialize some rdatasetheader_t elements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson 'dig +nsid' requests NSID from server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'request-nsid yes;' causes recursive server to send
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSID requests to upstream servers. Server responds
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to NSID requests with the string configured by
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff 'server-id' option. [RT #17091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2350. [port] win32: IPv6 support. [RT #17797]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2349. [func] Provide incremental re-signing support for secure
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff dynamic zones. [RT #1091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson Documentation is in the new README.pkcs11 file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New tool, dnssec-keyfromlabel, which takes the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews label of a key pair in a HSM and constructs a DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key pair for use by named and dnssec-signzone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews order. [RT #17451]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister in increased detail. [RT #17580]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2345. [bug] named-checkconf failed to detect when forwarders
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were set at both the options/view level and in
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence a root zone. [RT #17671]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2344. [bug] Improve "logging{ file ...; };" documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2343. [bug] (Seemingly) duplicate IPv6 entries could be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews created in ADB. [RT #17837]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2341. [bug] libbind: add missing -I../include for off source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tree builds. [RT #17606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2338. [bug] check_ds() could be called with a non DS rdataset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces if there are not listen-on-v6 clauses in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2335. [port] sunos: libbind and *printf() support for long long.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson bug in fromstruct_txt(). [RT #17609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2333. [bug] Fix off by one error in isc_time_nowplusinterval().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2331. [bug] Failure to regenerate any signatures was not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported nor being past back to the UPDATE client.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2330. [bug] Remove potential race condition when handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews over memory events. [RT #17572]
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence WARNING: API CHANGE: over memory callback
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function now needs to call isc_mem_waterack().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See <isc/mem.h> for details.
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence2329. [bug] Clearer help text for dig's '-x' and '-i' options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
34b394b43e2207e8f8f3703f0402422121455638David Lawrence2327. [bug] It was possible to dereference a NULL pointer in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rbtdb.c. Implement dead node processing in zones as
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister we do for caches. [RT #17312]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2326. [bug] It was possible to trigger a INSIST in the acache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2325. [port] Linux: use capset() function if available. [RT #17557]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2323. [port] tru64: namespace clash. [RT #17547]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2322. [port] MacOS: work around the limitation of setrlimit()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for RLIMIT_NOFILE. [RT #17526]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2321. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2320. [func] Make statistics counters thread-safe for platforms
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister that support certain atomic operations. [RT #17466]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2319. [bug] Silence Coverity warnings in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2318. [port] sunos fixes for libbind. [RT #17514]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2315. [bug] Used incorrect address family for mapped IPv4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addresses in acl.c. [RT #17519]
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson2314. [bug] Uninitialized memory use on error path in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #17447] [RT #17478]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2311. [bug] IPv6 addresses could match IPv4 ACL entries and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews vice versa. [RT #17462]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2310. [bug] dig, host, nslookup: flush stdout before emitting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug/fatal messages. [RT #17501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2306. [bug] Remove potential race from lib/dns/resolver.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2304. [bug] Check returns from all dns_rdata_tostruct() calls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2301. [bug] Remove resource leak and fix error messages in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2300. [bug] Fixed failure to close open file in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2299. [bug] Remove unnecessary NULL check in
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews2298. [bug] isc_mutex_lock() failure not caught in
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister2297. [bug] isc_entropy_createfilesource() failure not caught in
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2296. [port] Allow docbook stylesheet location to be specified to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure. [RT #17457]
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2294. [func] Allow the experimental statistics channels to have
e411a986b94276c28e6a971f9c3b61d45c635456James Brister multiple connections and ACL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: the stats-server and stats-server-v6 options
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews available in the previous beta releases are replaced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with the generic statistics-channels statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2293. [func] Add ACL regression test. [RT #17375]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2292. [bug] Log if the working directory is not writable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure to set PR_SET_DUMPABLE. [RT #17312]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2290. [bug] Let AD in the query signal that the client wants AD
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson set in the response. [RT #17301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2289. [func] named-checkzone now reports the out-of-zone CNAME
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson found. [RT #17309]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2288. [port] win32: mark service as running when we have finished
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister loading. [RT #17441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2286. [func] Allow a TCP connection to be used as a weak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews authentication method for reverse zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New update-policy methods tcp-self and 6to4-self.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2285. [func] Test framework for client memory context management.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2284. [bug] Memory leak in UPDATE prerequisite processing.
36357e4304862fb47e9fae03c704cb6720310c45James Brister2283. [bug] TSIG keys were not attaching to the memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews context. TSIG keys should use the rings
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory context rather than the clients memory
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence context. [RT #17377]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2280. [func] Allow the experimental http server to be reached
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence over IPv6 as well as IPv4. [RT #17332]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to protect applications from receiving spurious
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence SIGPIPE signals when using the resolver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2278. [bug] win32: handle the case where Windows returns no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews search list or DNS suffix. [RT #17354]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2277. [bug] Empty zone names were not correctly being caught at
b99d080717fdd741961d736581270d37bad8bec0David Lawrence in the post parse checks. [RT #17357]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2275. [func] Add support to dig to perform IXFR queries over UDP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2273. [bug] Adjust log level to WARNING when saving inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stub/slave master and journal files. [RT# 17279]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence2271. [bug] Fix a memory leak in http server code [RT #17100]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before it is tested. [RT #17290]
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2267. [bug] Radix tree node_num value could be set incorrectly,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing positive ACL matches to look like negative
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence ones. [RT #17311]
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence2266. [bug] client.c:get_clientmctx() returned the same mctx
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews once the pool of mctx's was filled. [RT #17218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2265. [bug] Test that the memory context's basic_table is non NULL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before freeing. [RT #17265]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2264. [bug] Server prefix length was being ignored. [RT #17308]
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence2263. [bug] "named-checkconf -z" failed to set default value
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for "check-integrity". [RT #17306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2262. [bug] Error status from all but the last view could be
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson lost. [RT #17292]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2260. [bug] Reported wrong clients-per-query when increasing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews value. [RT #17236]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2259. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a7 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence2257. [bug] win32: Use the full path to vcredist_x86.exe when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling it. [RT #17222]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2256. [bug] win32: Correctly register the installation location of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence2254. [bug] timer.c:dispatch() failed to lock timer->lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when reading timer->idle allowing it to see
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence intermediate values as timer->idle was reset by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_timer_touch(). [RT #17243]
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence2253. [func] "max-cache-size" defaults to 32M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "max-acache-size" defaults to 16M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence2251. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory statistics file should be written or not.
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews Additionally named's -m option will cause the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics file to be written. [RT #17113]
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2249. [bug] Only set Authentic Data bit if client requested
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC, per RFC 3655 [RT #17175]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2247. [doc] Sort doc/misc/options. [RT #17067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews robust. [RT #17147]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2245. [bug] Validating lack of DS records at trust anchors wasn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews working. [RT #17151]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2244. [func] Allow the check of nameserver names against the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SOA MNAME field to be disabled by specifying
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence 'notify-to-soa yes;'. [RT #17073]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2243. [func] Configuration files without a newline at the end now
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer parse without error. [RT #17120]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews library could require a source of random data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a number of INSIST()s into plain fatal() errors
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence which report the triggering result code.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The 'key' command wasn't disabling GSS-TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2238. [bug] It was possible to trigger a REQUIRE when a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence validation was canceled. [RT #17106]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2236. [bug] dnssec-signzone failed to preserve the case of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of wildcard owner names. [RT #17085]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2233. [func] Add support for O(1) ACL processing, based on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews radix tree code originally written by Kevin
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Brintnall. [RT #16288]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2232. [bug] dns_adb_findaddrinfo() could fail and return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_SUCCESS. [RT #17137]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2230. [bug] We could INSIST reading a corrupted journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2229. [bug] Null pointer dereference on query pool creation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #17133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2228. [contrib] contrib: Change 2188 was incomplete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2227. [cleanup] Tidied up the FAQ. [RT #17121]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2226. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2225. [bug] More support for systems with no IPv4 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2224. [bug] Defer journal compaction if a xfrin is in progress.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2223. [bug] Make a new journal when compacting. [RT #17119]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2222. [func] named-checkconf now checks server key references.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2221. [bug] Set the event result code to reflect the actual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record turned to caller when a cache update is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence rejected due to a more credible answer existing.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2220. [bug] win32: Address a race condition in final shutdown of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the Windows socket code. [RT #17028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2219. [bug] Apply zone consistency checks to additions, not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removals, when updating. [RT #17049]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence2217. [func] Adjust update log levels. [RT #17092]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2216. [cleanup] Fix a number of errors reported by Coverity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2214. [bug] Deregister OpenSSL lock callback when cleaning
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence up. Reorder OpenSSL cleanup so that RAND_cleanup()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is called before the locks are destroyed. [RT #17098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2213. [bug] SIG0 diagnostic failure messages were looking at the
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence wrong status code. [RT #17101]
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence2212. [func] 'host -m' now causes memory statistics and active
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory to be printed at exit. [RT 17028]
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence2211. [func] Update "dynamic update temporarily disabled" message.
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson2210. [bug] Deleting class specific records via UPDATE could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail. [RT #17074]
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence2209. [port] osx: linking against user supplied static OpenSSL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews libraries failed as the system ones were still being
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence found. [RT #17078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2208. [port] win32: make sure both build methods produce the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews same output. [RT #17058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ai_canonname correctly. [RT #17061]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a6 released ---
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2206. [security] "allow-query-cache" and "allow-recursion" now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cross inherit from each other.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-query-cache is not set in named.conf then
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley allow-recursion is used if set, otherwise allow-query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is used if set, otherwise the default (localnets;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews localhost;) is used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-recursion is not set in named.conf then
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache is used if set, otherwise allow-query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is used if set, otherwise the default (localnets;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews localhost;) is used.
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2204. [bug] "rndc flushname name unknown-view" caused named
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence to crash. [RT #16984]
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence2203. [security] Query id generation was cryptographically weak.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT # 16915]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2202. [security] The default acls for allow-query-cache and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-recursion were not being applied. [RT #16960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2201. [bug] The build failed in a separate object directory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2200. [bug] The search for cached NSEC records was stopping to
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence early leading to excessive DLV queries. [RT #16930]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2199. [bug] win32: don't call WSAStartup() while loading dlls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2198. [bug] win32: RegCloseKey() could be called when
8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence RegOpenKeyEx() failed. [RT #16911]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2197. [bug] Add INSIST to catch negative responses which are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not setting the event result code appropriately.
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence2196. [port] win32: yield processor while waiting for once to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to complete. [RT #16958]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when generating DNSKEYs. [RT #16954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2194. [bug] Close journal before calling 'done' in xfrin.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a5 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2193. [port] win32: BINDInstall.exe is now linked statically.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
6f17d90364f01c3e81073a9ffb40b0093878c8e2Brian Wellington Studio's redistributable dlls if building with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Visual Stdio 2005 or later.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2191. [func] named-checkzone now allows dumping to stdout (-).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkconf now has -h for help.
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington named-checkzone now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Better handling of '-?' for usage summaries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2190. [func] Make fallback to plain DNS from EDNS due to timeouts
d111a46c88adda33a93839f4934e127b6147d87dBob Halley more visible. New logging category "edns-disabled".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2189. [bug] Handle socket() returning EINTR. [RT #15949]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2188. [contrib] queryperf: autoconf changes to make the search for
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews libresolv or libbind more robust. [RT #16299]
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson2187. [bug] query_addds(), query_addwildcardproof() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query_addnxrrsetnsec() should take a version
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff argument. [RT #16368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington independently of IPv6. [RT #16482]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley memchr(). [RT #16463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2184. [bug] bind9.xsl.h didn't build out of the source tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2183. [bug] dnssec-signzone didn't handle offline private keys
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington well. [RT #16832]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington could return ISC_R_SUCCESS when they ran out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #16365]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2180. [cleanup] Remove bit test from 'compress_test' as they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are no longer needed. [RT #16497]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2179. [func] 'rndc command zone' will now find 'zone' if it is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unique to all the views. [RT #16821]
4716e94840921878b26e493576f84afe4fe08752Mark Andrews2178. [bug] 'rndc reload' of a slave or stub zone resulted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a reference leak. [RT #16867]
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence2177. [bug] Array bounds overrun on read (rcodetext) at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug level 10+. [RT #16798]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2176. [contrib] dbus update to handle race condition during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews initialization (Bugzilla 235809). [RT #16842]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley2175. [bug] win32: windows broadcast condition variable support
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was broken. [RT #16592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2174. [bug] I/O errors should always be fatal when reading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews master files. [RT #16825]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2173. [port] win32: When compiling with MSVS 2005 SP1 we also
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a4 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2172. [bug] query_addsoa() was being called with a non zone db.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2171. [bug] Handle breaks in DNSSEC trust chains where the parent
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington servers are not DS aware (DS queries to the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews return a referral to the child).
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2170. [func] Add acache processing to test suite. [RT #16711]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2169. [bug] host, nslookup: when reporting NXDOMAIN report the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews given name and not the last name searched for.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2168. [bug] nsupdate: in non-interactive mode treat syntax errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as fatal errors. [RT #16785]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2167. [bug] When re-using a automatic zone named failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attach it to the new view. [RT #16786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a3 released ---
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson2166. [bug] When running in batch mode, dig could misinterpret
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a server address as a name to be looked up, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpected output. [RT #16743]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2165. [func] Allow the destination address of a query to determine
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson if we will answer the query or recurse.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-on, allow-recursion-on and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache-on. [RT #16291]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2164. [bug] The code to determine how named-checkzone /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-compilezone was called failed under windows.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2163. [bug] If only one of query-source and query-source-v6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified a port the query pools code broke (change
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson 2129). [RT #16768]
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence2162. [func] Allow "rrset-order fixed" to be disabled at compile
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time. [RT #16665]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2161. [bug] Fix which log messages are emitted for 'rndc flush'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister from getifaddrs(). [RT #16708]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2159. [bug] Array bounds overrun in acache processing. [RT #16710]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2158. [bug] ns_client_isself() failed to initialize key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leading to a REQUIRE failure. [RT #16688]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2157. [func] dns_db_transfernode() created. [RT #16685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolver.c:validated() and resolver.c:cache_name().
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence Fix a memory leak in rbtdb.c:free_noqname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Make lookup.c:lookup_find() robust against
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews event leaks. [RT #16685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched in acls by omitting the scope. [RT #16599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2152. [cleanup] Use sizeof(buf) instead of fixed number in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dighost.c:get_trusted_key(). [RT #16678]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2151. [bug] Missing newline in usage message for journalprint.
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington2150. [bug] 'rrset-order cyclic' uniformly distribute the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews starting point for the first response for a given
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRset. [RT #16655]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2149. [bug] isc_mem_checkdestroyed() failed to abort on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if there were still active memory contexts.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2148. [func] Add positive logging for rndc commands. [RT #14623]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2147. [bug] libbind: remove potential buffer overflow from
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SO_BSDCOMPAT" message. [RT #16641]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence2145. [bug] Check DS/DLV digest lengths for known digests.
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2143. [bug] We failed to restart the IPv6 client when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews kernel failed to return the destination the
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley packet was sent to. [RT #16613]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2142. [bug] Handle master files with a modification time that
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley matches the epoch. [RT# 16612]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
be768c2e952c34438025999125f984995a2c675fBob Halley equivalent of LDH checks). [RT #16609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2140. [bug] libbind: missing unlock on pthread_key_create()
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley failures. [RT #16654]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2139. [bug] dns_view_find() was being called with wrong type
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in adb.c. [RT #16670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2138. [bug] Lock order reversal in resolver.c. [RT #16653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2137. [port] Mips little endian and/or mips 64 bit are now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews supported for atomic operations. [RT#16648]
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister2136. [bug] nslookup/host looped if there was no search list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and the host didn't exist. [RT #16657]
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2134. [func] Additional statistics support. [RT #16666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2133. [port] powerpc: Support both IBM and MacOS Power PC
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister assembler syntaxes. [RT #16647]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2132. [bug] Missing unlock on out of memory in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dispatchmgr_setudp().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2130. [func] Log if CD or DO were set. [RT #16640]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2129. [func] Provide a pool of UDP sockets for queries to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews made over. See use-queryport-pool, queryport-pool-ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and queryport-pool-updateinterval. [RT #16415]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington2126. [security] Serialize validation of type ANY responses. [RT #16555]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley was defined. [RT #16574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2124. [security] It was possible to dereference a freed fetch
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews context. [RT #16584]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a1 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2123. [func] Use Doxygen to generate internal documentation.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2122. [func] Experimental http server and statistics support
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for named via xml.
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which