CHANGES revision b00de53de2e37154d9046d481734cfb9a8573204
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2907. [bug] The export version of libdns had undefined references.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2905. [port] aix: set use_atomic=yes with native compiler.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2904. [bug] When using DLV, sub-zones of the zones in the DLV,
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff could be incorrectly marked as insecure instead of
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff secure leading to negative proofs failing. This was
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff a unintended outcome from change 2890. [RT# 21392]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2903. [bug] managed-keys-directory missing from namedconf.c.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2902. [func] Add regression test for change 2897. [RT #21040]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2900. [bug] The placeholder negative caching element was not
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff properly constructed triggering a INSIST in
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff dns_ncache_towire(). [RT #21346]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2899. [port] win32: Support linking against OpenSSL 1.0.0.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2898. [bug] nslookup leaked memory when -domain=value was
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff specified. [RT #21301]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2897. [bug] NSEC3 chains could be left behind when transitioning
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff to insecure. [RT #21040]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2896. [bug] "rndc sign" failed to properly update the zone
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff when adding a DNSKEY for publication only. [RT #21045]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2895. [func] genrandom: add support for the generation of multiple
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff files. [RT #20917]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2893. [bug] Improve managed keys support. New named.conf option
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff managed-keys-directory. [RT #20924]
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff2892. [bug] Handle REVOKED keys better. [RT #20961]
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2891. [maint] Update empty-zones list to match
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2890. [bug] Handle the introduction of new trusted-keys and
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley DS, DLV RRsets better. [RT #21097]
29f28fe573d4b3b318b3b026d567c1eb86738015Michael Graff2889. [bug] Elements of the grammar where not properly reported.
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff2888. [bug] Only the first EDNS option was displayed. [RT #21273]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2887. [bug] Report the keytag times in UTC in the .key file,
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff local time is presented as a comment within the
11efdeb076d65fa9f0c5fc067dc040e7c99dfba6Michael Graff comment. [RT #21223]
439c0011e642fb1d26011116144af698125262dbMichael Graff2886. [bug] ctime() is not thread safe. [RT #21223]
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff2885. [bug] Improve -fno-strict-aliasing support probing in
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff configure. [RT #21080]
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff2884. [bug] Insufficient valadation in dns_name_getlabelsequence().
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff2883. [bug] 'dig +short' failed to handle really large datasets.
31fab17bcdbe302592a6c0dc5374ef56333ee879Michael Graff2882. [bug] Remove memory context from list of active contexts
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff before clearing 'magic'. [RT #21274]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2881. [bug] Reduce the amount of time the rbtdb write lock
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley is held when closing a version. [RT #21198]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley consistent. [RT #21078]
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2878. [func] Incrementally write the master file after performing
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff a AXFR. [RT #21010]
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2877. [bug] The validator failed to skip obviously mismatching
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff RRSIGs. [RT #21138]
d947011dc393d9f9988d1349d585b246d19cc3c7Michael Graff2876. [bug] Named could return SERVFAIL for negative responses
d947011dc393d9f9988d1349d585b246d19cc3c7Michael Graff from unsigned zones. [RT #21131]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2875. [bug] dns_time64_fromtext() could accept non digits.
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2874. [bug] Cache lack of EDNS support only after the server
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley successfully responds to the query using plain DNS.
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2873. [bug] Canceling a dynamic update via the dns/client module
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff could trigger an assertion failure. [RT #21133]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2872. [bug] Modify dns/client.c:dns_client_createx() to only
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff require one of IPv4 or IPv6 rather than both.
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2871. [bug] Type mismatch in mem_api.c between the definition and
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff the header file, causing build failure with
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff --enable-exportlib. [RT #21138]
acafce24bbc6140464302fb18c729791f1bfddd6Michael Graff2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2868. [cleanup] Run "make clean" at the end of configure to ensure
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff any changes made by configure are integrated.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff Use --with-make-clean=no to disable. [RT #20994]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley don't like it. [RT #20986]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2866. [bug] Windows does not like the TSIG name being compressed.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2865. [bug] memset to zero event.data. [RT #20986]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2862. [bug] nsupdate didn't default to the parent zone when
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff updating DS records. [RT #20896]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2861. [doc] dnssec-settime man pages didn't correctly document the
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff inactivation time. [RT #21039]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2860. [bug] named-checkconf's usage was out of date. [RT #21039]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2859. [bug] When cancelling validation it was possible to leak
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff memory. [RT #20800]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2858. [bug] RTT estimates were not being adjusted on ICMP errors.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2857. [bug] named-checkconf did not fail on a bad trusted key.
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2856. [bug] The size of a memory allocation was not always properly
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff recorded. [RT #20927]
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff2855. [func] nsupdate will now preserve the entered case of domain
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley names in update requests it sends. [RT #20928]
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff2854. [func] dig: allow the final soa record in a axfr response to
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff be suppressed, dig +onesoa. [RT #20929]
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff2851. [doc] nslookup.1, removed <informalexample> from the docbook
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley source as it produced bad nroff. [RT #21007]
213973a334f92d4aef4ef62b4538fc2e4d0e8082Michael Graff2850. [bug] If isc_heap_insert() failed due to memory shortage
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff the heap would have corrupted entries. [RT #20951]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2849. [bug] Don't treat errors from the xml2 library as fatal.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
59c049874bbef182857c57bd9cca292898921c69Bob Halley README.rfc5011 into the ARM. [RT #20899]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2846. [bug] EOF on unix domain sockets was not being handled
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley correctly. [RT #20731]
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2844. [doc] notify-delay default in ARM was wrong. It should have
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff been five (5) seconds.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
1f90c108282533a23b8362c34bcde4267c1eb4b1Michael Graff creating key files if there is a chance that the new
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff key ID will collide with an existing one after
ebdd11e84734e28ddd64562e82a7c646a58a04f4Michael Graff either of the keys has been revoked. (To override
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley this in the case of dnssec-keyfromlabel, use the -y
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley option. dnssec-keygen will simply create a
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff different, non-colliding key, so an override is
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff not necessary.) [RT #20838]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2842. [func] Added "smartsign" and improved "autosign" and
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff "dnssec" regression tests. [RT #20865]
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff2841. [bug] Change 2836 was not complete. [RT #20883]
28ab8277a068f273f0a805a83b4811446cb78a5bBob Halley2840. [bug] Temporary fixed pkcs11-destroy usage check.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2839. [bug] A KSK revoked by named could not be deleted.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2838. [placeholder]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2837. [port] Prevent Linux spurious warnings about fwrite().
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2836. [bug] Keys that were scheduled to become active could
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley be delayed. [RT #20874]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff2835. [bug] Key inactivity dates were inadvertently stored in
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley the private key file with the outdated tag
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley "Unpublish" rather than "Inactive". This has been
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley fixed; however, any existing keys that had Inactive
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley dates set will now need to have them reset, using
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley 'dnssec-settime -I'. [RT #20868]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2834. [bug] HMAC-SHA* keys that were longer than the algorithm
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley digest length were used incorrectly, leading to
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff interoperability problems with other DNS
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff implementations. This has been corrected.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff (Note: If an oversize key is in use, and
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff compatibility is needed with an older release of
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff BIND, the new tool "isc-hmac-fixup" can convert
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff the key secret to a form that will work with all
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff versions.) [RT #20751]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff to avoid redefinition in some OSes [RT 20831]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2831. [security] Do not attempt to validate or cache
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff out-of-bailiwick data returned with a secure
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff answer; it must be re-fetched from its original
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff source and validated in that context. [RT #20819]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2830. [bug] Changing the OPTOUT setting could take multiple
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff passes. [RT #20813]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2829. [bug] Fixed potential node inconsistency in rbtdb.c.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2828. [security] Cached CNAME or DNAME RR could be returned to clients
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff without DNSSEC validation. [RT #20737]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff being released. [RT #20740]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff was in the process of being created was not properly
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff recorded in the zone. [RT #20786]
439c0011e642fb1d26011116144af698125262dbMichael Graff2824. [bug] "rndc sign" was not being run by the correct task.
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2822. [bug] rbtdb.c:loadnode() could return the wrong result.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2821. [doc] Add note that named-checkconf doesn't automatically
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff2820. [func] Handle read access failure of OpenSSL configuration
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff file more user friendly (PKCS#11 engine patch).
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
439c0011e642fb1d26011116144af698125262dbMichael Graff2818. [cleanup] rndc could return an incorrect error code
439c0011e642fb1d26011116144af698125262dbMichael Graff when a zone was not found. [RT #20767]
439c0011e642fb1d26011116144af698125262dbMichael Graff2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
439c0011e642fb1d26011116144af698125262dbMichael Graff2816. [bug] previous_closest_nsec() could fail to return
439c0011e642fb1d26011116144af698125262dbMichael Graff data for NSEC3 nodes [RT #29730]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2815. [bug] Exclusively lock the task when freezing a zone.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2814. [func] Provide a definitive error message when a master
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff zone is not loaded. [RT #20757]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff2813. [bug] Better handling of unreadable DNSSEC key files.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2812. [bug] Make sure updates can't result in a zone with
439c0011e642fb1d26011116144af698125262dbMichael Graff NSEC-only keys and NSEC3 records. [RT 20748]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
439c0011e642fb1d26011116144af698125262dbMichael Graff output. [RT #20733]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2810. [doc] Clarified the process of transitioning an NSEC3 zone
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff to insecure. [RT #20746]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2809. [cleanup] Restored accidentally-deleted text in usage output
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff in dnssec-settime and dnssec-revoke [RT #20739]
439c0011e642fb1d26011116144af698125262dbMichael Graff2808. [bug] Remove the attempt to install atomic.h from lib/isc.
439c0011e642fb1d26011116144af698125262dbMichael Graff atomic.h is correctly installed by the architecture
439c0011e642fb1d26011116144af698125262dbMichael Graff specific subdirectories. [RT #20722]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2807. [bug] Fixed a possible ASSERT when reconfiguring zone
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley keys. [RT #20720]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff --- 9.7.0rc1 released ---
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff when it had changed. [RT #20703]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2805. [bug] Fixed namespace problems encountered when building
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley external programs using non-exported BIND9 libraries
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff (i.e., built without --enable-exportlib). [RT #20679]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2804. [bug] Send notifies when a zone is signed with "rndc sign"
651228967966ba4fb2e52f92d1207c790af4b130Michael Graff or as a result of a scheduled key change. [RT #20700]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff and genrandom under windows. [RT #20670]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff2801. [func] Detect and report records that are different according
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff to DNSSEC but are sematically equal according to plain
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff DNS. Apply plain DNS comparisons rather than DNSSEC
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff comparisons when processing UPDATE requests.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff dnssec-signzone now removes such semantically duplicate
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff records prior to signing the RRset.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff named-checkzone -r {ignore|warn|fail} (default warn)
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff named-compilezone -r {ignore|warn|fail} (default warn)
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff named.conf: check-dup-records {ignore|warn|fail};
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2800. [func] Reject zones which have NS records which refer to
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff CNAMEs, DNAMEs or don't have address record (class IN
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff only). Reject UPDATEs which would cause the zone
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff to fail the above checks if committed. [RT #20678]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2799. [cleanup] Changed the "secure-to-insecure" option to
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff "dnssec-secure-to-insecure", and "dnskey-ksk-only"
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2798. [bug] Addressed bugs in managed-keys initialization
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff and rollover. [RT #20683]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2797. [bug] Don't decrement the dispatch manager's maxbuffers.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2796. [bug] Missing dns_rdataset_disassociate() call in
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff dns_nsec3_delnsec3sx(). [RT #20681]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2795. [cleanup] Add text to differentiate "update with no effect"
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff log messages. [RT #18889]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2794. [bug] Install <isc/namespace.h>. [RT #20677]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2793. [func] Add "autosign" and "metadata" tests to the
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff automatic tests. [RT #19946]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2792. [func] "filter-aaaa-on-v4" can now be set in view
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff options (if compiled in). [RT #20635]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2791. [bug] The installation of isc-config.sh was broken.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2790. [bug] Handle DS queries to stub zones. [RT #20440]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2788. [bug] dnssec-signzone could sign with keys that were
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff not requested [RT #20625]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2787. [bug] Spurious log message when zone keys were
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff dynamically reconfigured. [RT #20659]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2786. [bug] Additional could be promoted to answer. [RT #20663]
24a2d84aedbad12fba2ca319c98745e62ef0bc16Bob Halley --- 9.7.0b3 released ---
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2785. [bug] Revoked keys could fail to self-sign [RT #20652]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2784. [bug] TC was not always being set when required glue was
ffd9f879709c5fb35f25368e74e2e12eb6881d9bMichael Graff dropped. [RT #20655]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff buffer size of 512 or less. [RT #20654]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2782. [port] win32: use getaddrinfo() for hostname lookups.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2781. [bug] Inactive keys could be used for signing. [RT #20649]
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff2780. [bug] dnssec-keygen -A none didn't properly unset the
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff activation date in all cases. [RT #20648]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2779. [bug] Dynamic key revokation could fail. [RT #20644]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2778. [bug] dnssec-signzone could fail when a key was revoked
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff without deleting the unrevoked version. [RT #20638]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
78854e02c127f31ab90f56da0531542004b45377Michael Graff2776. [bug] Change #2762 was not correct. [RT #20647]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
78854e02c127f31ab90f56da0531542004b45377Michael Graff in dnssec-keyfromlabel. [RT #20643]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2774. [bug] Existing cache DB wasn't being reused after
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff reconfiguration. [RT #20629]
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley2773. [bug] In autosigned zones, the SOA could be signed
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley with the KSK. [RT #20628]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2772. [security] When validating, track whether pending data was from
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff the additional section or not and only return it if
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff validates as secure. [RT #20438]
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff2771. [bug] dnssec-signzone: DNSKEY records could be
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff corrupted when importing from key files [RT #20624]
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff2770. [cleanup] Add log messages to resolver.c to indicate events
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff causing FORMERR responses. [RT #20526]
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff2769. [cleanup] Change #2742 was incomplete. [RT #19589]
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2767. [bug] named could crash on startup if a zone was
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff configured with auto-dnssec and there was no
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff key-directory. [RT #20615]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2766. [bug] isc_socket_fdwatchpoke() should only update the
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff socketmgr state if the socket is not pending on a
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff read or write. [RT #20603]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2765. [bug] Skip masters for which the TSIG key cannot be found.
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2762. [bug] DLV validation failed with a local slave DLV zone.
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff2761. [cleanup] Enable internal symbol table for backtrace only for
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff systems that are known to work. Currently, BSD
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff variants, Linux and Solaris are supported. [RT# 20202]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2759. [doc] Add information about .jbk/.jnw files to
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff the ARM. [RT #20303]
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff2758. [bug] win32: Added a workaround for a windows 2008 bug
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff that could cause the UDP client handler to shut
f6f4ceece41f040cc43722afa9a5cd1f54a576b6Michael Graff down. [RT #19176]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2757. [bug] dig: assertion failure could occur in connect
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff timeout. [RT #20599]
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2755. [placeholder]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2754. [bug] Secure-to-insecure transitions failed when zone
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff was signed with NSEC3. [RT #20587]
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff2753. [bug] Removed an unnecessary warning that could appear when
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff building an NSEC chain. [RT #20589]
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff2752. [bug] Locking violation. [RT #20587]
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2750. [bug] dig: assertion failure could occur when a server
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff didn't have an address. [RT #20579]
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2749. [bug] ixfr-from-differences generated a non-minimal ixfr
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff for NSEC3 signed zones. [RT #20452]
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2748. [func] Identify bad answers from GTLD servers and treat them
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff as referrals. [RT #18884]
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2747. [bug] Journal roll forwards failed to set the re-signing
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff time of RRSIGs correctly. [RT #20541]
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2746. [port] hpux: address signed/unsigned expansion mismatch of
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2745. [bug] configure script didn't probe the return type of
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff gai_strerror(3) correctly. [RT #20573]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2744. [func] Log if a query was over TCP. [RT #19961]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff for a insecure delegation.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff --- 9.7.0b2 released ---
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2742. [cleanup] Clarify some DNSSEC-related log messages in
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2741. [func] Allow the dnssec-keygen progress messages to be
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff suppressed (dnssec-keygen -q). Automatically
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff suppress the progress messages when stdin is not
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley a tty. [RT #20474]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2740. [placeholder]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2739. [cleanup] Clean up API for initializing and clearing trust
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff anchors for a view. [RT #20211]
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff test. [RT #20453]
d1fb73ada84ee15ea078c80b1cd0ca8ddc6aa856Michael Graff2737. [func] UPDATE requests can leak existance information.
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2736. [func] Improve the performance of NSEC signed zones with
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff more than a normal amount of glue below a delegation.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2735. [bug] dnssec-signzone could fail to read keys
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff that were specified on the command line with
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff full paths, but weren't in the current
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff directory. [RT #20421]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2734. [port] cygwin: arpaname did not compile. [RT #20473]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
d947011dc393d9f9988d1349d585b246d19cc3c7Michael Graff2732. [func] Add optional filter-aaaa-on-v4 option, available
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff if built with './configure --enable-filter-aaaa'.
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff Filters out AAAA answers to clients connecting
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff via IPv4. (This is NOT recommended for general
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff use.) [RT #20339]
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2731. [func] Additional work on change 2709. The key parser
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff will now ignore unrecognized fields when the
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff minor version number of the private key format
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff has been increased. It will reject any key with
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff the major version number increased. [RT #20310]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2730. [func] Have dnssec-keygen display a progress indication
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff a la 'openssl genrsa' on standard error. Note
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff when the first '.' is followed by a long stop
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff one has the choice between slow generation vs.
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff2729. [func] When constructing a CNAME from a DNAME use the DNAME
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff TTL. [RT #20451]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff dnssec-signzone now warn immediately if asked to
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff write into a nonexistent directory. [RT #20278]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2727. [func] The 'key-directory' option can now specify a relative
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff path. [RT #20154]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2726. [func] Added support for SHA-2 DNSSEC algorithms,
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff RSASHA256 and RSASHA512. [RT #20023]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2725. [doc] Added information about the file "managed-keys.bind"
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff to the ARM. [RT #20235]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2724. [bug] Updates to a existing node in secure zone using NSEC
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff were failing. [RT #20448]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
1ac7292ced16b8469bebf04356d50279eae78d97Bob Halley isc_base64_totext(), didn't always mark regions of
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff memory as fully consumed after conversion. [RT #20445]
288f9443ac447c9c14f3722dd6d32c1faef0f009Michael Graff2722. [bug] Ensure that the memory associated with the name of
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff a node in a rbt tree is not altered during the life
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff of the node. [RT #20431]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2721. [port] Have dst__entropy_status() prime the random number
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff generator. [RT #20369]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2720. [bug] RFC 5011 trust anchor updates could trigger an
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff assert if the DNSKEY record was unsigned. [RT #20406]
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2719. [func] Skip trusted/managed keys for unsupported algorithms.
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff2718. [bug] The space calculations in opensslrsa_todns() were
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff incorrect. [RT #20394]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2717. [bug] named failed to update the NSEC/NSEC3 record when
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff the last private type record was removed as a result
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff of completing the signing the zone with a key.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff --- 9.7.0b1 released ---
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2715. [bug] Require OpenSSL support to be explicitly disabled.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2713. [bug] powerpc: atomic operations missing asm("ics") /
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff __isync() calls.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2712. [func] New 'auto-dnssec' zone option allows zone signing
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff to be fully automated in zones configured for
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff dynamic DNS. 'auto-dnssec allow;' permits a zone
3115cd89bc1e1fd3ecc4705d253e3484a3f5c555Michael Graff to be signed by creating keys for it in the
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley key-directory and using 'rndc sign <zone>'.
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley 'auto-dnssec maintain;' allows that too, plus it
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley also keeps the zone's DNSSEC keys up to date
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley according to their timing metadata. [RT #19943]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2711. [port] win32: Add the bin/pkcs11 tools into the full
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff build. [RT #20372]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff zone option cause a zone to be signed with only KSKs
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff signing the DNSKEY RRset, not ZSKs. This reduces
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff the size of a DNSKEY answer. [RT #20340]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2709. [func] Added some data fields, currently unused, to the
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff private key file format, to allow implementation
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff of explicit key rollover in a future release
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff without impairing backward or forward compatibility.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2708. [func] Insecure to secure and NSEC3 parameter changes via
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff update are now fully supported and no longer require
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff defines to enable. We now no longer overload the
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff NSEC3PARAM flag field, nor the NSEC OPT bit at the
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff apex. Secure to insecure changes are controlled by
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff by the named.conf option 'secure-to-insecure'.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff Warning: If you had previously enabled support by
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff adding defines at compile time to BIND 9.6 you should
78854e02c127f31ab90f56da0531542004b45377Michael Graff ensure that all changes that are in progress have
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff completed prior to upgrading to BIND 9.7. BIND 9.7
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff is not backwards compatible.
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff2707. [func] dnssec-keyfromlabel no longer require engine name
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff to be specified in the label if there is a default
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff engine or the -E option has been used. Also, it
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff now uses default algorithms as dnssec-keygen does
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff2706. [bug] Loading a zone with a very large NSEC3 salt could
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff trigger an assert. [RT #20368]
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff2705. [placeholder]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2704. [bug] Serial of dynamic and stub zones could be inconsistent
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff with their SOA serial. [RT #19387]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2703. [func] Introduce an OpenSSL "engine" argument with -E
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff for all binaries which can take benefit of
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff crypto hardware. [RT #20230]
7ec42e4be45c0486ce80461293f377fb4b904dc0Michael Graff2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2701. [doc] Correction to ARM: hmac-md5 is no longer the only
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff supported TSIG key algorithm. [RT #18046]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2700. [doc] The match-mapped-addresses option is discouraged.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2699. [bug] Missing lock in rbtdb.c. [RT #20037]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2698. [placeholder]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff S_IFREG are defined after including <isc/stat.h>.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2696. [bug] named failed to successfully process some valid
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff acl constructs. [RT #20308]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2695. [func] DHCP/DDNS - update fdwatch code for use by
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff DHCP. Modify the api to isc_sockfdwatch_t (the
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff callback funciton for isc_socket_fdwatchcreate)
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff to include information about the direction (read
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff or write) and add isc_socket_fdwatchpoke.
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
93d3a6fd20aceb9998eca4723bba8810243e7689Michael Graff2693. [port] Add some noreturn attributes. [RT #20257]
93d3a6fd20aceb9998eca4723bba8810243e7689Michael Graff2692. [port] win32: 32/64 bit cleanups. [RT #20335]
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff chain when re-signing a previously-signed zone.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff Use -u to modify NSEC3 parameters or switch
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff between NSEC and NSEC3. [RT #20304]
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
93d3a6fd20aceb9998eca4723bba8810243e7689Michael Graff2689. [bug] Correctly handle snprintf result. [RT #20306]
93d3a6fd20aceb9998eca4723bba8810243e7689Michael Graff2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff to decide to fetch the destination address. [RT #20305]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley Also, added warnings when revoking a ZSK, as this is
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley not defined by protocol (but is legal). [RT #19943]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2686. [bug] dnssec-signzone should clean the old NSEC chain when
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley signing with NSEC3 and vice versa. [RT #20301]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2684. [cleanup] dig: formalize +ad and +cd as synonyms for
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff +adflag and +cdflag. [RT #19305]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff the NSEC3 parameters used to sign the zone change.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2682. [bug] "configure --enable-symtable=all" failed to
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff build. [RT #20282]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff decoded. [RT #20269]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2679. [func] dig -k can now accept TSIG keys in named.conf
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff format. [RT #20031]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2678. [func] Treat DS queries as if "minimal-response yes;"
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff was set. [RT #20258]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2677. [func] Changes to key metadata behavior:
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff - Keys without "publish" or "active" dates set will
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff no longer be used for smart signing. However,
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff those dates will be set to "now" by default when
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff a key is created; to generate a key but not use
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff it yet, use dnssec-keygen -G.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff - New "inactive" date (dnssec-keygen/settime -I)
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff sets the time when a key is no longer used for
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley signing but is still published.
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley - The "unpublished" date (-U) is deprecated in
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff favor of "deleted" (-D).
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2676. [bug] --with-export-installdir should have been
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley --with-export-includedir. [RT #20252]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2675. [bug] dnssec-signzone could crash if the key directory
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley did not exist. [RT #20232]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley --- 9.7.0a3 released ---
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2674. [bug] "dnssec-lookaside auto;" crashed if named was built
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley without openssl. [RT #20231]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2673. [bug] The managed-keys.bind zone file could fail to
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley load due to a spurious result from sync_keyzone()
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2672. [bug] Don't enable searching in 'host' when doing reverse
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley lookups. [RT #20218]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2671. [bug] Add support for PKCS#11 providers not returning
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley the public exponent in RSA private keys
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley (OpenCryptoki for instance) in
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley dnssec-keyfromlabel. [RT #19294]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2670. [bug] Unexpected connect failures failed to log enough
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley information to be useful. [RT #20205]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2669. [func] Update PKCS#11 support to support Keyper HSM.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley Update PKCS#11 patch to be against openssl-0.9.8i.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2668. [func] Several improvements to dnssec-* tools, including:
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff - dnssec-keygen and dnssec-settime can now set key
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff metadata fields 0 (to unset a value, use "none")
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff - dnssec-revoke sets the revocation date in
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff addition to the revoke bit
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff - dnssec-settime can now print individual metadata
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff fields instead of always printing all of them,
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff and can print them in unix epoch time format for
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff use by scripts
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff2667. [func] Add support for logging stack backtrace on assertion
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff failure (not available for all platforms). [RT #19780]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2666. [func] Added an 'options' argument to dns_name_fromstring()
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff (API change from 9.7.0a2). [RT #20196]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2665. [func] Clarify syntax for managed-keys {} statement, add
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff ARM documentation about RFC 5011 support. [RT #19874]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2664. [bug] create_keydata() and minimal_update() in zone.c
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff didn't properly check return values for some
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff functions. [RT #19956]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2663. [func] win32: allow named to run as a service using
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff "NT AUTHORITY\LocalService" as the account. [RT #19977]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley returned a misleading error code when lwresd was
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley down. [RT #20028]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley creating lwres context. [RT #20029]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2660. [func] Add a new set of DNS libraries for non-BIND9
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley applications. See README.libdns. [RT #19369]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2659. [doc] Clarify dnssec-keygen doc: key name must match zone
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley name for DNSSEC keys. [RT #19938]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2658. [bug] dnssec-settime and dnssec-revoke didn't process
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley key file paths correctly. [RT #20078]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2657. [cleanup] Lower "journal file <path> does not exist, creating it"
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley log level to debug 1. [RT #20058]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2656. [func] win32: add a "tools only" check box to the installer
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff which causes it to only install dig, host, nslookup,
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff nsupdate and relevant DLLs. [RT #19998]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2655. [doc] Document that key-directory does not affect
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2654. [bug] Improve error reporting on duplicated names for
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley deny-answer-xxx. [RT #20164]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2653. [bug] Treat ENGINE_load_private_key() failures as key
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley not found rather than out of memory. [RT #18033]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2652. [func] Provide more detail about what record is being
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley deleted. [RT #20061]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2651. [bug] Dates could print incorrectly in K*.key files on
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley 64-bit systems. [RT #20076]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2650. [bug] Assertion failure in dnssec-signzone when trying
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley to read keyset-* files. [RT #20075]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2649. [bug] Set the domain for forward only zones. [RT #19944]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2647. [bug] Remove unnecessary SOA updates when a new KSK is
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley added. [RT #19913]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley which default to 64 bits. [RT #19927]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley --- 9.7.0a2 released ---
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2644. [bug] Change #2628 caused a regression on some systems;
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley named was unable to write the PID file and would
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley fail on startup. [RT #20001]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2643. [bug] Stub zones interacted badly with NSEC3 support.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2642. [bug] nsupdate could dump core on solaris when reading
fbc09123cd0cac8d513165c441ef2b2ed9b3445cBob Halley improperly formatted key files. [RT #20015]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2641. [bug] Fixed an error in parsing update-policy syntax,
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley added a regression test to check it. [RT #20007]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2640. [security] A specially crafted update packet will cause named
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff to exit. [RT #20000]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff2638. [bug] Install arpaname. [RT #19957]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2636. [func] Simplify zone signing and key maintenance with the
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff dnssec-* tools. Major changes:
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley - all dnssec-* tools now take a -K option to
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley specify a directory in which key files will be
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff - DNSSEC can now store metadata indicating when
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff they are scheduled to be published, activated,
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley revoked or removed; these values can be set by
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff dnssec-keygen or overwritten by the new
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff dnssec-settime command
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff - dnssec-signzone -S (for "smart") option reads key
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff metadata and uses it to determine automatically
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff which keys to publish to the zone, use for
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff signing, revoke, or remove from the zone
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2634. [port] win32: Add support for libxml2, enable
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff statschannel. [RT #19773]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2633. [bug] Handle 15 bit rand() functions. [RT #19783]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2632. [func] util/kit.sh: warn if documentation appears to be out of
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff date. [RT #19922]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2630. [func] Improved syntax for DDNS autoconfiguration: use
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff "update-policy local;" to switch on local DDNS in a
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff zone. (The "ddns-autoconf" option has been removed.)
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2629. [port] Check for seteuid()/setegid(), use setresuid()/
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff setresgid() if not present. [RT #19932]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2628. [port] linux: Allow /var/run/named/named.pid to be opened
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff at startup with reduced capabilities in operation.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2627. [bug] Named aborted if the same key was included in
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff trusted-keys more than once. [RT #19918]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2626. [bug] Multiple trusted-keys could trigger an assertion
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff failure. [RT #19914]
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2624. [func] 'named-checkconf -p' will print out the parsed
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff configuration. [RT #18871]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2621. [doc] Made copyright boilterplate consistent. [RT #19833]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2620. [bug] Delay thawing the zone until the reload of it has
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley completed successfully. [RT #19750]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2619. [func] Add support for RFC 5011, automatic trust anchor
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley maintenance. The new "managed-keys" statement can
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley be used in place of "trusted-keys" for zones which
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley support this protocol. (Note: this syntax is
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley expected to change prior to 9.7.0 final.) [RT #19248]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2618. [bug] The sdb and sdlz db_interator_seek() methods could
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley loop infinitely. [RT #19847]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2617. [bug] ifconfig.sh failed to emit an error message when
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley run from the wrong location. [RT #19375]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2616. [bug] 'host' used the nameservers from resolv.conf even
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley when a explicit nameserver was specified. [RT #19852]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2615. [bug] "__attribute__((unused))" was in the wrong place
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley for ia64 gcc builds. [RT #19854]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2614. [port] win32: 'named -v' should automatically be executed
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley in the foreground. [RT #19844]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2613. [placeholder]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley --- 9.7.0a1 released ---
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2612. [func] Add default values for the arguments to
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley dnssec-keygen. Without arguments, it will now
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley generate a 1024-bit RSASHA1 zone-signing key,
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley or with the -f KSK option, a 2048-bit RSASHA1
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley key-signing key. [RT #19300]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2611. [func] Add -l option to dnssec-dsfromkey to generate
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley DLV records instead of DS records. [RT #19300]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2610. [port] sunos: Change #2363 was not complete. [RT #19796]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2609. [func] Simplify the configuration of dynamic zones:
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley - add ddns-confgen command to generate
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley configuration text for named.conf
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley - add zone option "ddns-autoconf yes;", which
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley causes named to generate a TSIG session key
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley and allow updates to the zone using that key
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley - add '-l' (localhost) option to nsupdate, which
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley causes nsupdate to connect to a locally-running
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley named process using the session key generated
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2608. [func] Perform post signing verification checks in
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley dnssec-signzone. These can be disabled with -P.
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley The post sign verification test ensures that for each
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley algorithm in use there is at least one non revoked
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley self signed KSK key. That all revoked KSK keys are
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley self signed. That all records in the zone are signed
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley by the algorithm. [RT #19653]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2607. [bug] named could incorrectly delete NSEC3 records for
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley empty nodes when processing a update request.
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2606. [bug] "delegation-only" was not being accepted in
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley delegation-only type zones. [RT #19717]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2605. [bug] Accept DS responses from delegation only zones.
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley [RT # 19296]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2604. [func] Add support for DNS rebinding attack prevention through
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley new options, deny-answer-addresses and
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley deny-answer-aliases. Based on contributed code from
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley JD Nurmi, Google. [RT #18192]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2603. [port] win32: handle .exe extension of named-checkzone and
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff named-comilezone argv[0] names under windows.
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2602. [port] win32: fix debugging command line build of libisccfg.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2601. [doc] Mention file creation mode mask in the
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff named manual page.
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2600. [doc] ARM: miscellaneous reformatting for different
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff page widths. [RT #19574]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2599. [bug] Address rapid memory growth when validation fails.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2598. [func] Reserve the -F flag. [RT #19657]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2597. [bug] Handle a validation failure with a insecure delegation
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff from a NSEC3 signed master/slave zone. [RT #19464]
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff long, leading to inefficient memory usage or rejecting
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff newer cache entries in the worst case. [RT #19563]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2594. [func] Have rndc warn if using its default configuration
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff file when the key file also exists. [RT #19424]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2591. [bug] named could die when processing a update in
78854e02c127f31ab90f56da0531542004b45377Michael Graff removed_orphaned_ds(). [RT #19507]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2590. [func] Report zone/class of "update with no effect".
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
78854e02c127f31ab90f56da0531542004b45377Michael Graff2588. [bug] SO_REUSEADDR could be set unconditionally after failure
78854e02c127f31ab90f56da0531542004b45377Michael Graff of bind(2) call. This should be rare and mostly
78854e02c127f31ab90f56da0531542004b45377Michael Graff harmless, but may cause interference with other
78854e02c127f31ab90f56da0531542004b45377Michael Graff processes that happen to use the same port. [RT #19642]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2587. [func] Improve logging by reporting serial numbers for
875e88e734b310976b178dc26a74d86fbebc935cBob Halley when zone serial has gone backwards or unchanged.
78854e02c127f31ab90f56da0531542004b45377Michael Graff2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
78854e02c127f31ab90f56da0531542004b45377Michael Graff or SDB. [RT #19577]
875e88e734b310976b178dc26a74d86fbebc935cBob Halley2585. [bug] Uninitialized socket name could be referenced via a
78854e02c127f31ab90f56da0531542004b45377Michael Graff statistics channel, triggering an assertion failure in
78854e02c127f31ab90f56da0531542004b45377Michael Graff XML rendering. [RT #19427]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2584. [bug] alpha: gcc optimization could break atomic operations.
78854e02c127f31ab90f56da0531542004b45377Michael Graff2583. [port] netbsd: provide a control to not add the compile
78854e02c127f31ab90f56da0531542004b45377Michael Graff date to the version string, -DNO_VERSION_DATE.
78854e02c127f31ab90f56da0531542004b45377Michael Graff2582. [bug] Don't emit warning log message when we attempt to
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff remove non-existent journal. [RT #19516]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
78854e02c127f31ab90f56da0531542004b45377Michael Graff Requires MySQL 5.0.19 or later. [RT #19084]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2580. [bug] UpdateRej statistics counter could be incremented twice
78854e02c127f31ab90f56da0531542004b45377Michael Graff for one rejection. [RT #19476]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2579. [bug] DNSSEC lookaside validation failed to handle unknown
78854e02c127f31ab90f56da0531542004b45377Michael Graff algorithms. [RT #19479]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2578. [bug] Changed default sig-signing-type to 65534, because
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff 65535 turns out to be reserved. [RT #19477]
2a0b8796d46265c078ba7f4dea2979c62ebf5badBob Halley2577. [doc] Clarified some statistics counters. [RT #19454]
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2576. [bug] NSEC record were not being correctly signed when
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff a zone transitions from insecure to secure.
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff Handle such incorrectly signed zones. [RT #19114]
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2575. [func] New functions dns_name_fromstring() and
2a0b8796d46265c078ba7f4dea2979c62ebf5badBob Halley dns_name_tostring(), to simplify conversion
78854e02c127f31ab90f56da0531542004b45377Michael Graff of a string to a dns_name structure and vice
78854e02c127f31ab90f56da0531542004b45377Michael Graff versa. [RT #19451]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2574. [doc] Document nsupdate -g and -o. [RT #19351]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2573. [bug] Replacing a non-CNAME record with a CNAME record in a
78854e02c127f31ab90f56da0531542004b45377Michael Graff single transaction in a signed zone failed. [RT #19397]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2572. [func] Simplify DLV configuration, with a new option
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff "dnssec-lookaside auto;" This is the equivalent
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff of "dnssec-lookaside . trust-anchor dlv.isc.org;"
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff plus setting a trusted-key for dlv.isc.org.
78854e02c127f31ab90f56da0531542004b45377Michael Graff Note: The trusted key is hard-coded into named,
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff but is also stored in (and can be overridden
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff by) $sysconfdir/bind.keys. As the ISC DLV key
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff rolls over it can be kept up to date by replacing
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff the bind.keys file with a key downloaded from
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff https://www.isc.org/solutions/dlv. [RT #18685]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2571. [func] Add a new tool "arpaname" which translates IP addresses
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2570. [func] Log the destination address the query was sent to.
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2569. [func] Move journalprint, nsec3hash, and genrandom
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley "make install" will put them in $sbindir. [RT #19301]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2568. [bug] Report when the write to indicate a otherwise
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley successful start fails. [RT #19360]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2567. [bug] dst__privstruct_writefile() could miss write errors.
59c049874bbef182857c57bd9cca292898921c69Bob Halley write_public_key() could miss write errors.
59c049874bbef182857c57bd9cca292898921c69Bob Halley dnssec-dsfromkey could miss write errors.
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2566. [cleanup] Clarify logged message when an insecure DNSSEC
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff response arrives from a zone thought to be secure:
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff "insecurity proof failed" instead of "not
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff insecure". [RT #19400]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2565. [func] Add support for HIP record. Includes new functions
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff dns_rdata_hip_first(), dns_rdata_hip_next()
59c049874bbef182857c57bd9cca292898921c69Bob Halley and dns_rdata_hip_current(). [RT #19384]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2564. [bug] Only take EDNS fallback steps when processing timeouts.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2563. [bug] Dig could leak a socket causing it to wait forever
59c049874bbef182857c57bd9cca292898921c69Bob Halley to exit. [RT #19359]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2562. [doc] ARM: miscellaneous improvements, reorganization,
59c049874bbef182857c57bd9cca292898921c69Bob Halley and some new content.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2559. [bug] dnssec-dsfromkey could compute bad DS records when
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley reading from a K* files. [RT #19357]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2558. [func] Set the ownership of missing directories created
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff for pid-file if -u has been specified on the command
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff line. [RT #19328]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2557. [cleanup] PCI compliance:
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley * new libisc log module file
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff * isc_dir_chroot() now also changes the working
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff directory to "/".
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff * additional INSISTs
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff * additional logging when files can't be removed.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff error checks in the correct order resulting in the
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff wrong error code sometimes being returned. [RT #19249]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2555. [func] dig: when emitting a hex dump also display the
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff corresponding characters. [RT #19258]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2554. [bug] Validation of uppercase queries from NSEC3 zones could
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff fail. [RT #19297]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2552. [bug] zero-no-soa-ttl-cache was not being honoured.
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2551. [bug] Potential Reference leak on return. [RT #19341]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2549. [port] linux: define NR_OPEN if not currently defined.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2548. [bug] Install iterated_hash.h. [RT #19335]
439c0011e642fb1d26011116144af698125262dbMichael Graff2547. [bug] openssl_link.c:mem_realloc() could reference an
439c0011e642fb1d26011116144af698125262dbMichael Graff out-of-range area of the source buffer. New public
439c0011e642fb1d26011116144af698125262dbMichael Graff function isc_mem_reallocate() was introduced to address
439c0011e642fb1d26011116144af698125262dbMichael Graff this bug. [RT #19313]
439c0011e642fb1d26011116144af698125262dbMichael Graff2546. [func] Add --enable-openssl-hash configure flag to use
439c0011e642fb1d26011116144af698125262dbMichael Graff OpenSSL (in place of internal routine) for hash
439c0011e642fb1d26011116144af698125262dbMichael Graff functions (MD5, SHA[12] and HMAC). [RT #18815]
439c0011e642fb1d26011116144af698125262dbMichael Graff2545. [doc] ARM: Legal hostname checking (check-names) is
439c0011e642fb1d26011116144af698125262dbMichael Graff for SRV RDATA too. [RT #19304]
439c0011e642fb1d26011116144af698125262dbMichael Graff2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
439c0011e642fb1d26011116144af698125262dbMichael Graff2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
439c0011e642fb1d26011116144af698125262dbMichael Graff2542. [doc] Update the description of dig +adflag. [RT #19290]
439c0011e642fb1d26011116144af698125262dbMichael Graff2541. [bug] Conditionally update dispatch manager statistics.
439c0011e642fb1d26011116144af698125262dbMichael Graff2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
439c0011e642fb1d26011116144af698125262dbMichael Graff2539. [security] Update the interaction between recursion, allow-query,
439c0011e642fb1d26011116144af698125262dbMichael Graff allow-query-cache and allow-recursion. [RT #19198]
439c0011e642fb1d26011116144af698125262dbMichael Graff2538. [bug] cache/ADB memory could grow over max-cache-size,
439c0011e642fb1d26011116144af698125262dbMichael Graff especially with threads and smaller max-cache-size
439c0011e642fb1d26011116144af698125262dbMichael Graff values. [RT #19240]
439c0011e642fb1d26011116144af698125262dbMichael Graff2537. [func] Added more statistics counters including those on socket
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley I/O events and query RTT histograms. [RT #18802]
439c0011e642fb1d26011116144af698125262dbMichael Graff2536. [cleanup] Silence some warnings when -Werror=format-security is
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley specified. [RT #19083]
439c0011e642fb1d26011116144af698125262dbMichael Graff2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
439c0011e642fb1d26011116144af698125262dbMichael Graff2534. [func] Check NAPTR records regular expressions and
439c0011e642fb1d26011116144af698125262dbMichael Graff replacement strings to ensure they are syntactically
439c0011e642fb1d26011116144af698125262dbMichael Graff valid and consistant. [RT #18168]
439c0011e642fb1d26011116144af698125262dbMichael Graff2533. [doc] ARM: document @ (at-sign). [RT #17144]
439c0011e642fb1d26011116144af698125262dbMichael Graff2532. [bug] dig: check the question section of the response to
439c0011e642fb1d26011116144af698125262dbMichael Graff see if it matches the asked question. [RT #18495]
439c0011e642fb1d26011116144af698125262dbMichael Graff2531. [bug] Change #2207 was incomplete. [RT #19098]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2530. [bug] named failed to reject insecure to secure transitions
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff via UPDATE. [RT #19101]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2529. [cleanup] Upgrade libtool to silence complaints from recent
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff version of autoconf. [RT #18657]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2528. [cleanup] Silence spurious configure warning about
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff --datarootdir [RT #19096]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2527. [placeholder]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2526. [func] New named option "attach-cache" that allows multiple
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff views to share a single cache to save memory and
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley improve lookup efficiency. Based on contributed code
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff from Barclay Osborn, Google. [RT #18905]
1f90c108282533a23b8362c34bcde4267c1eb4b1Michael Graff2525. [func] New logging category "query-errors" to provide detailed
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff internal information about query failures, especially
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff about server failures. [RT #19027]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2523. [bug] Random type rdata freed by dns_nsec_typepresent().
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff2521. [bug] Improve epoll cross compilation support. [RT #19047]
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff2520. [bug] Update xml statistics version number to 2.0 as change
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff #2388 made the schema incompatible to the previous
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff version. [RT #19080]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2519. [bug] dig/host with -4 or -6 didn't work if more than two
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff nameserver addresses of the excluded address family
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff preceded in resolv.conf. [RT #19081]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2518. [func] Add support for the new CERT types from RFC 4398.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2517. [bug] dig +trace with -4 or -6 failed when it chose a
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff nameserver address of the excluded address type.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2516. [bug] glue sort for responses was performed even when not
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff needed. [RT #19039]
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff a nameserver of the excluded address family.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2513. [bug] Fix windows cli build. [RT #19062]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2512. [func] Print a summary of the cached records which make up
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff the negative response. [RT #18885]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2509. [bug] Specifying a fixed query source port was broken.
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff2508. [placeholder]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2507. [func] Log the recursion quota values when killing the
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff oldest query or refusing to recurse due to quota.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2506. [port] solaris: Check at configure time if
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff hack_shutup_pthreadonceinit is needed. [RT #19037]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2505. [port] Treat amd64 similarly to x86_64 when determining
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff atomic operation support. [RT #19031]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2504. [bug] Address race condition in the socket code. [RT #18899]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2503. [port] linux: improve compatibility with Linux Standard
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff Base. [RT #18793]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2502. [cleanup] isc_radix: Improve compliance with coding style,
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff document function in <isc/radix.h>. [RT #18534]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2501. [func] $GENERATE now supports all rdata types. Multi-field
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff rdata types need to be quoted. See the ARM for
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff details. [RT #18368]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff function. [RT #18582]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
439c0011e642fb1d26011116144af698125262dbMichael Graff --- 9.6.0rc1 released ---
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff2498. [bug] Removed a bogus function argument used with
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff ISC_SOCKET_USE_POLLWATCH: it could cause compiler
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff warning or crash named with the debug 1 level
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff of logging. [RT #18917]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2496. [bug] Add sanity length checks to NSID option. [RT #18813]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2495. [bug] Tighten RRSIG checks. [RT #18795]
439c0011e642fb1d26011116144af698125262dbMichael Graff2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
439c0011e642fb1d26011116144af698125262dbMichael Graff installed. [RT #18826]
439c0011e642fb1d26011116144af698125262dbMichael Graff2493. [bug] The linux capabilities code was not correctly cleaning
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff up after itself. [RT #18767]
439c0011e642fb1d26011116144af698125262dbMichael Graff2492. [func] Rndc status now reports the number of cpus discovered
439c0011e642fb1d26011116144af698125262dbMichael Graff and the number of worker threads when running
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff multi-threaded. [RT #18273]
439c0011e642fb1d26011116144af698125262dbMichael Graff2491. [func] Attempt to re-use a local port if we are already using
439c0011e642fb1d26011116144af698125262dbMichael Graff the port. [RT #18548]
439c0011e642fb1d26011116144af698125262dbMichael Graff2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
439c0011e642fb1d26011116144af698125262dbMichael Graff is cleared when IPV6_V6ONLY is set. [RT #18785]
439c0011e642fb1d26011116144af698125262dbMichael Graff2489. [port] solaris: Workaround Solaris's kernel bug about
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff Define ISC_SOCKET_USE_POLLWATCH at build time to enable
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff this workaround. [RT #18870]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff from keyset and .key files. [RT #18694]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2487. [bug] Give TCP connections longer to complete. [RT #18675]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2486. [func] The default locations for named.pid and lwresd.pid
97a274369d7d132ae620845a290f14706fd2dff9Bob Halley This allows the owner of the containing directory
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff to be set, for "named -u" support, and allows there
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff to be a permanent symbolic link in the path, for
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff "named -t" support. [RT #18306]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2485. [bug] Change update's the handling of obscured RRSIG
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff records. Not all orphaned DS records were being
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff removed. [RT #18828]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2484. [bug] It was possible to trigger a REQUIRE failure when
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff adding NSEC3 proofs to the response in
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff query_addwildcardproof(). [RT #18828]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2483. [port] win32: chroot() is not supported. [RT #18805]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2482. [port] libxml2: support versions 2.7.* in addition
3f6a66689410910ef601a4d26f10a24f331ef83cMichael Graff to 2.6.*. [RT #18806]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff --- 9.6.0b1 released ---
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff collisions. [RT #18812]
439c0011e642fb1d26011116144af698125262dbMichael Graff2480. [bug] named could fail to emit all the required NSEC3
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff records. [RT #18812]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
3f6a66689410910ef601a4d26f10a24f331ef83cMichael Graff2478. [bug] 'addresses' could be used uninitialized in
3f6a66689410910ef601a4d26f10a24f331ef83cMichael Graff configure_forward(). [RT #18800]
3f6a66689410910ef601a4d26f10a24f331ef83cMichael Graff2477. [bug] dig: the global option to print the command line is
3f6a66689410910ef601a4d26f10a24f331ef83cMichael Graff +cmd not print_cmd. Update the output to reflect
3f6a66689410910ef601a4d26f10a24f331ef83cMichael Graff this. [RT #17008]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2476. [doc] ARM: improve documentation for max-journal-size and
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff ixfr-from-differences. [RT #15909] [RT #18541]
2992344aacdb08e4af936c176d49ef789f5673ddMichael Graff2475. [bug] LRU cache cleanup under overmem condition could purge
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff particular entries more aggressively. [RT #17628]
2992344aacdb08e4af936c176d49ef789f5673ddMichael Graff2474. [bug] ACL structures could be allocated with insufficient
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff space, causing an array overrun. [RT #18765]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2473. [port] linux: raise the limit on open files to the possible
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff maximum value before spawning threads; 'files'
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff specified in named.conf doesn't seem to work with
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff threads as expected. [RT #18784]
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff2472. [port] linux: check the number of available cpu's before
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff calling chroot as it depends on "/proc". [RT #16923]
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff2471. [bug] named-checkzone was not reporting missing mandatory
1f90c108282533a23b8362c34bcde4267c1eb4b1Michael Graff glue when sibling checks were disabled. [RT #18768]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2470. [bug] Elements of the isc_radix_node_t could be incorrectly
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff overwritten. [RT# 18719]
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff2469. [port] solaris: Work around Solaris's select() limitations.
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff2468. [bug] Resolver could try unreachable servers multiple times.
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff2465. [bug] Adb's handling of lame addresses was different
519b4a1a27c8b767a57a981dda69a3c6394bd49dMichael Graff for IPv4 and IPv6. [RT #18738]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2464. [port] linux: check that a capability is present before
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff trying to set it. [RT #18135]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
2992344aacdb08e4af936c176d49ef789f5673ddMichael Graff API and glibc hides parts of the IPv6 Advanced Socket
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff API as a result. This is stupid as it breaks how the
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff two halves (Basic and Advanced) of the IPv6 Socket API
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff were designed to be used but we have to live with it.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff API. [RT #18388]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2462. [doc] Document -m (enable memory usage debugging)
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff option for dig. [RT #18757]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2461. [port] sunos: Change #2363 was not complete. [RT #17513]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff --- 9.6.0a1 released ---
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2458. [doc] ARM: update and correction for max-cache-size.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2457. [tuning] max-cache-size is reverted to 0, the previous
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff default. It should be safe because expired cache
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff entries are also purged. [RT #18684]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff address, regardless of family. They now correctly
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff distinguish IPv4 from IPv6. [RT #18559]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2455. [bug] Stop metadata being transferred via axfr/ixfr.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2453. [bug] Remove NULL pointer dereference in dns_journal_print().
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2452. [func] Improve bin/test/journalprint. [RT #18316]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2451. [port] solaris: handle runtime linking better. [RT #18356]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2450. [doc] Fix lwresd docbook problem for manual page.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2449. [placeholder]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2448. [func] Add NSEC3 support. [RT #15452]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2447. [cleanup] libbind has been split out as a separate product.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2446. [func] Add a new log message about build options on startup.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff A new command-line option '-V' for named is also
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff provided to show this information. [RT# 18645]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2445. [doc] ARM out-of-date on empty reverse zones (list includes
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff RFC1918 address, but these are not yet compiled in).
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff (clear DF) for UDP responses and requests.
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2443. [bug] win32: UDP connect() would not generate an event,
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley and so connected UDP sockets would never clean up.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley Fix this by doing an immediate WSAConnect() rather
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley than an io completion port type for UDP.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2442. [bug] A lock could be destroyed twice. [RT# 18626]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2441. [bug] isc_radix_insert() could copy radix tree nodes
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley incompletely. [RT #18573]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2440. [bug] named-checkconf used an incorrect test to determine
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley if an ACL was set to none.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley2438. [bug] Timeouts could be logged incorrectly under win32.
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley2437. [bug] Sockets could be closed too early, leading to
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley inconsistent states in the socket module. [RT #18298]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2435. [bug] Fixed an ACL memory leak affecting win32.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2434. [bug] Fixed a minor error-reporting bug in
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2433. [tuning] Set initial timeout to 800ms.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2432. [bug] More Windows socket handling improvements. Stop
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley using I/O events and use IO Completion Ports
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley throughout. Rewrite the receive path logic to make
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley it easier to support multiple simultaneous
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley requesters in the future. Add stricter consistency
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley checking as a compile-time option (define
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2431. [bug] Acl processing could leak memory. [RT #18323]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2430. [bug] win32: isc_interval_set() could round down to
59c049874bbef182857c57bd9cca292898921c69Bob Halley zero if the input was less than NS_INTERVAL
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley nanoseconds. Round up instead. [RT #18549]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2429. [doc] nsupdate should be in section 1 of the man pages.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2428. [bug] dns_iptable_merge() mishandled merges of negative
9af545a6bdb70a31893beaa420cee7557ffa4742Bob Halley tables. [RT #18409]
9af545a6bdb70a31893beaa420cee7557ffa4742Bob Halley2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
9af545a6bdb70a31893beaa420cee7557ffa4742Bob Halley was set. [RT #18528]
9af545a6bdb70a31893beaa420cee7557ffa4742Bob Halley2426. [bug] libbind: inet_net_pton() can sometimes return the
9af545a6bdb70a31893beaa420cee7557ffa4742Bob Halley wrong value if excessively large net masks are
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley supplied. [RT #18512]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2425. [bug] named didn't detect unavailable query source addresses
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley at load time. [RT #18536]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2424. [port] configure now probes for a working epoll
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley implementation. Allow the use of kqueue,
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff epoll and /dev/poll to be selected at compile
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley time. [RT #18277]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2423. [security] Randomize server selection on queries, so as to
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley make forgery a little more difficult. Instead of
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley always preferring the server with the lowest RTT,
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley pick a server with RTT within the same 128
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley millisecond band. [RT #18441]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2422. [bug] Handle the special return value of a empty node as
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley if it was a NXRRSET in the validator. [RT #18447]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff2421. [func] Add new command line option '-S' for named to specify
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley the max number of sockets. [RT #18493]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley Use caution: this option may not work for some
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley operating systems without rebuilding named.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2420. [bug] Windows socket handling cleanup. Let the io
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley completion event send out canceled read/write
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley done events, which keeps us from writing to memory
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley we no longer have ownership of. Add debugging
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley socket_log() function. Rework TCP socket handling
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley to not leak sockets.
c8b60c24abf816a48691ed8a06281c5a4e35e482Bob Halley2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
c8b60c24abf816a48691ed8a06281c5a4e35e482Bob Halley should not be used for isc_sockettype_fdwatch sockets.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2417. [bug] Connecting UDP sockets for outgoing queries could
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley unexpectedly fail with an 'address already in use'
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley error. [RT #18411]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2416. [func] Log file descriptors that cause exceeding the
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley internal maximum. [RT #18460]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2415. [bug] 'rndc dumpdb' could trigger various assertion failures
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley in rbtdb.c. [RT #18455]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2414. [bug] A masterdump context held the database lock too long,
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley causing various troubles such as dead lock and
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley recursive lock acquisition. [RT #18311, #18456]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2412. [bug] win32: address a resource leak. [RT #18374]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley at compilation time. [RT #18433]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley Note: with changes #2469 and #2421 above, there is no
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2410. [bug] Correctly delete m_versionInfo. [RT #18432]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2409. [bug] Only log that we disabled EDNS processing if we were
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley subsequently successful. [RT #18029]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley2408. [bug] A duplicate TCP dispatch event could be sent, which
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley could then trigger an assertion failure in
439c0011e642fb1d26011116144af698125262dbMichael Graff resquery_response(). [RT #18275]
439c0011e642fb1d26011116144af698125262dbMichael Graff2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
439c0011e642fb1d26011116144af698125262dbMichael Graff2406. [placeholder]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2405. [cleanup] The default value for dnssec-validation was changed to
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff "yes" in 9.5.0-P1 and all subsequent releases; this
439c0011e642fb1d26011116144af698125262dbMichael Graff was inadvertently omitted from CHANGES at the time.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2404. [port] hpux: files unlimited support.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2403. [bug] TSIG context leak. [RT #18341]
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2402. [port] Support Solaris 2.11 and over. [RT #18362]
439c0011e642fb1d26011116144af698125262dbMichael Graff2401. [bug] Expect to get E[MN]FILE errno internal_accept()
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff (from accept() or fcntl() system calls). [RT #18358]
439c0011e642fb1d26011116144af698125262dbMichael Graff2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2399. [placeholder]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2398. [bug] Improve file descriptor management. New,
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff temporary, named.conf option reserved-sockets,
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff default 512. [RT #18344]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2397. [bug] gssapi_functions had too many elements. [RT #18355]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2396. [bug] Don't set SO_REUSEADDR for randomized ports.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2395. [port] Avoid warning and no effect from "files unlimited"
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff on Linux when running as root. [RT #18335]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2394. [bug] Default configuration options set the limit for
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff open files to 'unlimited' as described in the
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff documentation. [RT #18331]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2393. [bug] nested acls containing keys could trigger an
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff assertion in acl.c. [RT #18166]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2392. [bug] remove 'grep -q' from acl test script, some platforms
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff don't support it. [RT #18253]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2391. [port] hpux: cover additional recvmsg() error codes.
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2390. [bug] dispatch.c could make a false warning on 'odd socket'.
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2389. [bug] Move the "working directory writable" check to after
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff the ns_os_changeuser() call. [RT #18326]
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2388. [bug] Avoid using tables for layout purposes in
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff statistics XSL [RT #18159].
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff2387. [bug] Silence compiler warnings in lib/isc/radix.c.
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff [RT #18147] [RT #18258]
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2386. [func] Add warning about too small 'open files' limit.
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2385. [bug] A condition variable in socket.c could leak in
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff rare error handling [RT #17968].
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2384. [security] Fully randomize UDP query ports to improve
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff forgery resilience. [RT #17949, #18098]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2383. [bug] named could double queries when they resulted in
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff SERVFAIL due to overkilling EDNS0 failure detection.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2381. [port] dlz/mysql: support multiple install layouts for
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff mysql. <prefix>/include/{,mysql/}mysql.h and
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff <prefix>/lib/{,mysql/}. [RT #18152]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff proofs which, in turn, caused validation failures
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff for insecure zones immediately below a secure zone
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff the server was authoritative for. [RT #18112]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff TLDs and supported RRs with TTLs [RT #17972]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2376. [bug] Change #2144 was not complete.
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff2375. [placeholder]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2374. [bug] "blackhole" ACLs could cause named to segfault due
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff to some uninitialized memory. [RT #18095]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2373. [bug] Default values of zone ACLs were re-parsed each time a
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff new zone was configured, causing an overconsumption
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff of memory. [RT #18092]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2371. [doc] Add +nsid option to dig man page. [RT #18039]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2370. [bug] "rndc freeze" could trigger an assertion in named
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff when called on a nonexistent zone. [RT #18050]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2369. [bug] libbind: Array bounds overrun on read in bitncmp().
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2368. [port] Linux: use libcap for capability management if
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff possible. [RT# 18026]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2367. [bug] Improve counting of dns_resstatscounter_retry
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2366. [bug] Adb shutdown race. [RT #18021]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2365. [bug] Fix a bug that caused dns_acl_isany() to return
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff spurious results. [RT #18000]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2364. [bug] named could trigger a assertion when serving a
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff malformed signed zone. [RT #17828]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2362. [cleanup] Make "rrset-order fixed" a compile-time option.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff settable by "./configure --enable-fixed-rrset".
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff Disabled by default. [RT #17977]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2361. [bug] "recursion" statistics counter could be counted
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff multiple times for a single query. [RT #17990]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2360. [bug] Fix a condition where we release a database version
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff (which may acquire a lock) while holding the lock.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2359. [bug] Fix NSID bug. [RT #17942]
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2358. [doc] Update host's default query description. [RT #17934]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2357. [port] Don't use OpenSSL's engine support in versions before
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff OpenSSL 0.9.7f. [RT #17922]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2356. [bug] Built in mutex profiler was not scalable enough.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2355. [func] Extend the number statistics counters available.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2354. [bug] Failed to initialize some rdatasetheader_t elements.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2353. [func] Add support for Name Server ID (RFC 5001).
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff 'dig +nsid' requests NSID from server.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff 'request-nsid yes;' causes recursive server to send
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff NSID requests to upstream servers. Server responds
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff to NSID requests with the string configured by
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff 'server-id' option. [RT #17091]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2352. [bug] Various GSS_API fixups. [RT #17729]
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2350. [port] win32: IPv6 support. [RT #17797]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2349. [func] Provide incremental re-signing support for secure
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff dynamic zones. [RT #1091]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff Documentation is in the new README.pkcs11 file.
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff New tool, dnssec-keyfromlabel, which takes the
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff label of a key pair in a HSM and constructs a DNS
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff key pair for use by named and dnssec-signzone.
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff2347. [bug] Delete now traverses the RB tree in the canonical
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff order. [RT #17451]
439c0011e642fb1d26011116144af698125262dbMichael Graff2346. [func] Memory statistics now cover all active memory contexts
439c0011e642fb1d26011116144af698125262dbMichael Graff in increased detail. [RT #17580]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2345. [bug] named-checkconf failed to detect when forwarders
439c0011e642fb1d26011116144af698125262dbMichael Graff were set at both the options/view level and in
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff a root zone. [RT #17671]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2344. [bug] Improve "logging{ file ...; };" documentation.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2343. [bug] (Seemingly) duplicate IPv6 entries could be
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff created in ADB. [RT #17837]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2341. [bug] libbind: add missing -I../include for off source
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff tree builds. [RT #17606]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2340. [port] openbsd: interface configuration. [RT #17700]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2339. [port] tru64: support for libbind. [RT #17589]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2338. [bug] check_ds() could be called with a non DS rdataset.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2336. [func] If "named -6" is specified then listen on all IPv6
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff interfaces if there are not listen-on-v6 clauses in
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2335. [port] sunos: libbind and *printf() support for long long.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff bug in fromstruct_txt(). [RT #17609]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2333. [bug] Fix off by one error in isc_time_nowplusinterval().
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff2332. [contrib] query-loc-0.4.0. [RT #17602]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2331. [bug] Failure to regenerate any signatures was not being
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff reported nor being past back to the UPDATE client.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2330. [bug] Remove potential race condition when handling
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff over memory events. [RT #17572]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff WARNING: API CHANGE: over memory callback
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff function now needs to call isc_mem_waterack().
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff See <isc/mem.h> for details.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2329. [bug] Clearer help text for dig's '-x' and '-i' options.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff2327. [bug] It was possible to dereference a NULL pointer in
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff rbtdb.c. Implement dead node processing in zones as
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff we do for caches. [RT #17312]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2326. [bug] It was possible to trigger a INSIST in the acache
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2325. [port] Linux: use capset() function if available. [RT #17557]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2323. [port] tru64: namespace clash. [RT #17547]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2322. [port] MacOS: work around the limitation of setrlimit()
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff for RLIMIT_NOFILE. [RT #17526]
439c0011e642fb1d26011116144af698125262dbMichael Graff2321. [placeholder]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff2320. [func] Make statistics counters thread-safe for platforms
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff that support certain atomic operations. [RT #17466]
439c0011e642fb1d26011116144af698125262dbMichael Graff2319. [bug] Silence Coverity warnings in
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2318. [port] sunos fixes for libbind. [RT #17514]
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
651228967966ba4fb2e52f92d1207c790af4b130Michael Graff2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2315. [bug] Used incorrect address family for mapped IPv4
08d131595373326ec4a3af793b536df8c33115ecMichael Graff addresses in acl.c. [RT #17519]
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2314. [bug] Uninitialized memory use on error path in
59c049874bbef182857c57bd9cca292898921c69Bob Halley2313. [cleanup] Silence Coverity warnings. Handle private stacks.
08d131595373326ec4a3af793b536df8c33115ecMichael Graff [RT #17447] [RT #17478]
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2311. [bug] IPv6 addresses could match IPv4 ACL entries and
08d131595373326ec4a3af793b536df8c33115ecMichael Graff vice versa. [RT #17462]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2310. [bug] dig, host, nslookup: flush stdout before emitting
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff debug/fatal messages. [RT #17501]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2306. [bug] Remove potential race from lib/dns/resolver.c.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2305. [security] inet_network() buffer overflow. CVE-2008-0122.
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff2304. [bug] Check returns from all dns_rdata_tostruct() calls.
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2301. [bug] Remove resource leak and fix error messages in
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2300. [bug] Fixed failure to close open file in
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2299. [bug] Remove unnecessary NULL check in
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2298. [bug] isc_mutex_lock() failure not caught in
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2297. [bug] isc_entropy_createfilesource() failure not caught in
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2296. [port] Allow docbook stylesheet location to be specified to
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley configure. [RT #17457]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2294. [func] Allow the experimental statistics channels to have
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley multiple connections and ACL.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley Note: the stats-server and stats-server-v6 options
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley available in the previous beta releases are replaced
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley with the generic statistics-channels statement.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2293. [func] Add ACL regression test. [RT #17375]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2292. [bug] Log if the working directory is not writable.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff failure to set PR_SET_DUMPABLE. [RT #17312]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2290. [bug] Let AD in the query signal that the client wants AD
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff set in the response. [RT #17301]
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2289. [func] named-checkzone now reports the out-of-zone CNAME
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff found. [RT #17309]
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2288. [port] win32: mark service as running when we have finished
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff loading. [RT #17441]
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2286. [func] Allow a TCP connection to be used as a weak
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff authentication method for reverse zones.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff New update-policy methods tcp-self and 6to4-self.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2285. [func] Test framework for client memory context management.
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2284. [bug] Memory leak in UPDATE prerequisite processing.
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff2283. [bug] TSIG keys were not attaching to the memory
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff context. TSIG keys should use the rings
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff memory context rather than the clients memory
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff context. [RT #17377]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2281. [bug] Attempts to use undefined acls were not being logged.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2280. [func] Allow the experimental http server to be reached
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley over IPv6 as well as IPv4. [RT #17332]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley to protect applications from receiving spurious
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley SIGPIPE signals when using the resolver.
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2278. [bug] win32: handle the case where Windows returns no
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff search list or DNS suffix. [RT #17354]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2277. [bug] Empty zone names were not correctly being caught at
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley in the post parse checks. [RT #17357]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2275. [func] Add support to dig to perform IXFR queries over UDP.
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2274. [func] Log zone transfer statistics. [RT #17336]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2273. [bug] Adjust log level to WARNING when saving inconsistent
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff stub/slave master and journal files. [RT# 17279]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2271. [bug] Fix a memory leak in http server code [RT #17100]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2270. [bug] dns_db_closeversion() version->writer could be reset
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley before it is tested. [RT #17290]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff --- 9.5.0b1 released ---
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2267. [bug] Radix tree node_num value could be set incorrectly,
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff causing positive ACL matches to look like negative
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff ones. [RT #17311]
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2266. [bug] client.c:get_clientmctx() returned the same mctx
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff once the pool of mctx's was filled. [RT #17218]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2265. [bug] Test that the memory context's basic_table is non NULL
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff before freeing. [RT #17265]
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff2264. [bug] Server prefix length was being ignored. [RT #17308]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2263. [bug] "named-checkconf -z" failed to set default value
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff for "check-integrity". [RT #17306]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2262. [bug] Error status from all but the last view could be
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff lost. [RT #17292]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2260. [bug] Reported wrong clients-per-query when increasing the
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff value. [RT #17236]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2259. [placeholder]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff --- 9.5.0a7 released ---
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2257. [bug] win32: Use the full path to vcredist_x86.exe when
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff calling it. [RT #17222]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2256. [bug] win32: Correctly register the installation location of
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2254. [bug] timer.c:dispatch() failed to lock timer->lock
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff when reading timer->idle allowing it to see
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff intermediate values as timer->idle was reset by
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff isc_timer_touch(). [RT #17243]
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff2253. [func] "max-cache-size" defaults to 32M.
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff "max-acache-size" defaults to 16M.
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2252. [bug] Fixed errors in sortlist code [RT #17216]
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2251. [placeholder]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2250. [func] New flag 'memstatistics' to state whether the
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff memory statistics file should be written or not.
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff Additionally named's -m option will cause the
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff statistics file to be written. [RT #17113]
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff2249. [bug] Only set Authentic Data bit if client requested
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff DNSSEC, per RFC 3655 [RT #17175]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff2247. [doc] Sort doc/misc/options. [RT #17067]
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff2246. [bug] Make the startup of test servers (ans.pl) more
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley robust. [RT #17147]
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff2245. [bug] Validating lack of DS records at trust anchors wasn't
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff working. [RT #17151]
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2244. [func] Allow the check of nameserver names against the
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff SOA MNAME field to be disabled by specifying
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff 'notify-to-soa yes;'. [RT #17073]
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff2243. [func] Configuration files without a newline at the end now
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff parse without error. [RT #17120]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff library could require a source of random data.
11efdeb076d65fa9f0c5fc067dc040e7c99dfba6Michael Graff2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff a number of INSIST()s into plain fatal() errors
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff which report the triggering result code.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff The 'key' command wasn't disabling GSS-TSIG.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2238. [bug] It was possible to trigger a REQUIRE when a
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff validation was canceled. [RT #17106]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2236. [bug] dnssec-signzone failed to preserve the case of
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff of wildcard owner names. [RT #17085]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2233. [func] Add support for O(1) ACL processing, based on
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff radix tree code originally written by Kevin
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff Brintnall. [RT #16288]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2232. [bug] dns_adb_findaddrinfo() could fail and return
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff ISC_R_SUCCESS. [RT #17137]
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2230. [bug] We could INSIST reading a corrupted journal.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2229. [bug] Null pointer dereference on query pool creation
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff failure. [RT #17133]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2228. [contrib] contrib: Change 2188 was incomplete.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2227. [cleanup] Tidied up the FAQ. [RT #17121]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2226. [placeholder]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2225. [bug] More support for systems with no IPv4 addresses.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2224. [bug] Defer journal compaction if a xfrin is in progress.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2223. [bug] Make a new journal when compacting. [RT #17119]
651228967966ba4fb2e52f92d1207c790af4b130Michael Graff2222. [func] named-checkconf now checks server key references.
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2221. [bug] Set the event result code to reflect the actual
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff record turned to caller when a cache update is
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley rejected due to a more credible answer existing.
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2220. [bug] win32: Address a race condition in final shutdown of
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff the Windows socket code. [RT #17028]
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff2219. [bug] Apply zone consistency checks to additions, not
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff removals, when updating. [RT #17049]
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2217. [func] Adjust update log levels. [RT #17092]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2216. [cleanup] Fix a number of errors reported by Coverity.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley2214. [bug] Deregister OpenSSL lock callback when cleaning
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley up. Reorder OpenSSL cleanup so that RAND_cleanup()
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley is called before the locks are destroyed. [RT #17098]
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff2213. [bug] SIG0 diagnostic failure messages were looking at the
3024dbecbac365171bc6de0f3fa04951d6558be3Michael Graff wrong status code. [RT #17101]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2212. [func] 'host -m' now causes memory statistics and active
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff memory to be printed at exit. [RT 17028]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2211. [func] Update "dynamic update temporarily disabled" message.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2210. [bug] Deleting class specific records via UPDATE could
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff fail. [RT #17074]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2209. [port] osx: linking against user supplied static OpenSSL
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff libraries failed as the system ones were still being
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff found. [RT #17078]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2208. [port] win32: make sure both build methods produce the
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff same output. [RT #17058]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2207. [port] Some implementations of getaddrinfo() fail to set
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff ai_canonname correctly. [RT #17061]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff --- 9.5.0a6 released ---
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff2206. [security] "allow-query-cache" and "allow-recursion" now
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley cross inherit from each other.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff If allow-query-cache is not set in named.conf then
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff allow-recursion is used if set, otherwise allow-query
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff is used if set, otherwise the default (localnets;
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff localhost;) is used.
738b9aa3ded1ef724922d6695cb04ec2e721bdd1Bob Halley If allow-recursion is not set in named.conf then
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff allow-query-cache is used if set, otherwise allow-query
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff is used if set, otherwise the default (localnets;
e485d16462b0a66b835107fae04fe9d562e77af0Bob Halley localhost;) is used.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2204. [bug] "rndc flushanme name unknown-view" caused named
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff to crash. [RT #16984]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2203. [security] Query id generation was cryptographically weak.
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2202. [security] The default acls for allow-query-cache and
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff allow-recursion were not being applied. [RT #16960]
419dd7129fe3447544b68c220b09a4968cf98d75Michael Graff2201. [bug] The build failed in a separate object directory.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2200. [bug] The search for cached NSEC records was stopping to
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff early leading to excessive DLV queries. [RT #16930]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2199. [bug] win32: don't call WSAStartup() while loading dlls.
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2198. [bug] win32: RegCloseKey() could be called when
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff RegOpenKeyEx() failed. [RT #16911]
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff2197. [bug] Add INSIST to catch negative responses which are
3ac63b472022ff92691d1fe69ac715a729671965Michael Graff not setting the event result code appropriately.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2196. [port] win32: yield processor while waiting for once to
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff to complete. [RT #16958]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2195. [func] dnssec-keygen now defaults to nametype "ZONE"
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff when generating DNSKEYs. [RT #16954]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2194. [bug] Close journal before calling 'done' in xfrin.c.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff --- 9.5.0a5 released ---
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2193. [port] win32: BINDInstall.exe is now linked statically.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2192. [port] win32: use vcredist_x86.exe to install Visual
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff Studio's redistributable dlls if building with
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff Visual Stdio 2005 or later.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff2191. [func] named-checkzone now allows dumping to stdout (-).
bb143613cf26e0f27dfd9caf1a7336065d064b26Michael Graff named-checkconf now has -h for help.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff named-checkzone now has -h for help.
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff rndc now has -h for help.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff Better handling of '-?' for usage summaries.
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2190. [func] Make fallback to plain DNS from EDNS due to timeouts
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff more visible. New logging category "edns-disabled".
f181f94ec8da8b1dbcc6353e8be965ea4a5ea282Michael Graff2189. [bug] Handle socket() returning EINTR. [RT #15949]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2188. [contrib] queryperf: autoconf changes to make the search for
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff libresolv or libbind more robust. [RT #16299]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2187. [bug] query_addds(), query_addwildcardproof() and
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff query_addnxrrsetnsec() should take a version
9b8057fce9ee7cdc39ad35f6e16d4ff5e623a941Mark Andrews argument. [RT #16368]
9b8057fce9ee7cdc39ad35f6e16d4ff5e623a941Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
9b8057fce9ee7cdc39ad35f6e16d4ff5e623a941Mark Andrews independently of IPv6. [RT #16482]
9b8057fce9ee7cdc39ad35f6e16d4ff5e623a941Mark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
9b8057fce9ee7cdc39ad35f6e16d4ff5e623a941Mark Andrews memchr(). [RT #16463]
9b8057fce9ee7cdc39ad35f6e16d4ff5e623a941Mark Andrews2184. [bug] bind9.xsl.h didn't build out of the source tree.
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff2183. [bug] dnssec-signzone didn't handle offline private keys
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff well. [RT #16832]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff could return ISC_R_SUCCESS when they ran out of
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff memory. [RT #16365]
ad3a5c4b7e21af04d1b872f933c2e19e5c0a135bMichael Graff2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2180. [cleanup] Remove bit test from 'compress_test' as they
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff are no longer needed. [RT #16497]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2179. [func] 'rndc command zone' will now find 'zone' if it is
59c049874bbef182857c57bd9cca292898921c69Bob Halley unique to all the views. [RT #16821]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2178. [bug] 'rndc reload' of a slave or stub zone resulted in
59c049874bbef182857c57bd9cca292898921c69Bob Halley a reference leak. [RT #16867]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2177. [bug] Array bounds overrun on read (rcodetext) at
59c049874bbef182857c57bd9cca292898921c69Bob Halley debug level 10+. [RT #16798]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2176. [contrib] dbus update to handle race condition during
59c049874bbef182857c57bd9cca292898921c69Bob Halley initialization (Bugzilla 235809). [RT #16842]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2175. [bug] win32: windows broadcast condition variable support
59c049874bbef182857c57bd9cca292898921c69Bob Halley was broken. [RT #16592]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2174. [bug] I/O errors should always be fatal when reading
59c049874bbef182857c57bd9cca292898921c69Bob Halley master files. [RT #16825]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2173. [port] win32: When compiling with MSVS 2005 SP1 we also
59c049874bbef182857c57bd9cca292898921c69Bob Halley --- 9.5.0a4 released ---
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2172. [bug] query_addsoa() was being called with a non zone db.
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2171. [bug] Handle breaks in DNSSEC trust chains where the parent
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley servers are not DS aware (DS queries to the parent
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley return a referral to the child).
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley2170. [func] Add acache processing to test suite. [RT #16711]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2169. [bug] host, nslookup: when reporting NXDOMAIN report the
59c049874bbef182857c57bd9cca292898921c69Bob Halley given name and not the last name searched for.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2168. [bug] nsupdate: in non-interactive mode treat syntax errors
59c049874bbef182857c57bd9cca292898921c69Bob Halley as fatal errors. [RT #16785]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2167. [bug] When re-using a automatic zone named failed to
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff attach it to the new view. [RT #16786]
59c049874bbef182857c57bd9cca292898921c69Bob Halley --- 9.5.0a3 released ---
59c049874bbef182857c57bd9cca292898921c69Bob Halley2166. [bug] When running in batch mode, dig could misinterpret
59c049874bbef182857c57bd9cca292898921c69Bob Halley a server address as a name to be looked up, causing
59c049874bbef182857c57bd9cca292898921c69Bob Halley unexpected output. [RT #16743]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2165. [func] Allow the destination address of a query to determine
59c049874bbef182857c57bd9cca292898921c69Bob Halley if we will answer the query or recurse.
59c049874bbef182857c57bd9cca292898921c69Bob Halley allow-query-on, allow-recursion-on and
59c049874bbef182857c57bd9cca292898921c69Bob Halley allow-query-cache-on. [RT #16291]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2164. [bug] The code to determine how named-checkzone /
59c049874bbef182857c57bd9cca292898921c69Bob Halley named-compilezone was called failed under windows.
59c049874bbef182857c57bd9cca292898921c69Bob Halley2163. [bug] If only one of query-source and query-source-v6
a253e35c2451818fb39f9b808c7641adb5275fb3Michael Graff specified a port the query pools code broke (change
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley 2129). [RT #16768]
59c049874bbef182857c57bd9cca292898921c69Bob Halley2162. [func] Allow "rrset-order fixed" to be disabled at compile
59c049874bbef182857c57bd9cca292898921c69Bob Halley time. [RT #16665]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2161. [bug] Fix which log messages are emitted for 'rndc flush'.
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff from getifaddrs(). [RT #16708]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff --- 9.5.0a2 released ---
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2159. [bug] Array bounds overrun in acache processing. [RT #16710]
439c0011e642fb1d26011116144af698125262dbMichael Graff2158. [bug] ns_client_isself() failed to initialize key
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff leading to a REQUIRE failure. [RT #16688]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2157. [func] dns_db_transfernode() created. [RT #16685]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff resolver.c:validated() and resolver.c:cache_name().
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff Fix a memory leak in rbtdb.c:free_noqname().
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff Make lookup.c:lookup_find() robust against
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff event leaks. [RT #16685]
439c0011e642fb1d26011116144af698125262dbMichael Graff2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff matched in acls by omitting the scope. [RT #16599]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2153. [bug] nsupdate could leak memory. [RT #16691]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2152. [cleanup] Use sizeof(buf) instead of fixed number in
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley dighost.c:get_trusted_key(). [RT #16678]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2151. [bug] Missing newline in usage message for journalprint.
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff2150. [bug] 'rrset-order cyclic' uniformly distribute the
58aaab3687aac838542ee4ef65a9c094a5d34ab0Michael Graff starting point for the first response for a given
58aaab3687aac838542ee4ef65a9c094a5d34ab0Michael Graff RRset. [RT #16655]
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff2149. [bug] isc_mem_checkdestroyed() failed to abort on
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley if there were still active memory contexts.
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff2148. [func] Add positive logging for rndc commands. [RT #14623]
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff2147. [bug] libbind: remove potential buffer overflow from
439c0011e642fb1d26011116144af698125262dbMichael Graff2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff SO_BSDCOMPAT" message. [RT #16641]
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff2145. [bug] Check DS/DLV digest lengths for known digests.
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff2143. [bug] We failed to restart the IPv6 client when the
50b5857f1ad137624a18ce67b26b9941e316b007Michael Graff kernel failed to return the destination the
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley packet was sent to. [RT #16613]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2142. [bug] Handle master files with a modification time that
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff matches the epoch. [RT# 16612]
439c0011e642fb1d26011116144af698125262dbMichael Graff2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff equivalent of LDH checks). [RT #16609]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2140. [bug] libbind: missing unlock on pthread_key_create()
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff failures. [RT #16654]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2139. [bug] dns_view_find() was being called with wrong type
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff in adb.c. [RT #16670]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2138. [bug] Lock order reversal in resolver.c. [RT #16653]
439c0011e642fb1d26011116144af698125262dbMichael Graff2137. [port] Mips little endian and/or mips 64 bit are now
439c0011e642fb1d26011116144af698125262dbMichael Graff supported for atomic operations. [RT#16648]
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2136. [bug] nslookup/host looped if there was no search list
78854e02c127f31ab90f56da0531542004b45377Michael Graff and the host didn't exist. [RT #16657]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2134. [func] Additional statistics support. [RT #16666]
fc4fe6e5e61dbc916707ab2e071ffd22aef9de7fMichael Graff2133. [port] powerpc: Support both IBM and MacOS Power PC
fc4fe6e5e61dbc916707ab2e071ffd22aef9de7fMichael Graff assembler syntaxes. [RT #16647]
fc4fe6e5e61dbc916707ab2e071ffd22aef9de7fMichael Graff2132. [bug] Missing unlock on out of memory in
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff dns_dispatchmgr_setudp().
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2130. [func] Log if CD or DO were set. [RT #16640]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2129. [func] Provide a pool of UDP sockets for queries to be
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff made over. See use-queryport-pool, queryport-pool-ports
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff and queryport-pool-updateinterval. [RT #16415]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
f3d059d1155aa016f75a4047a2a15b4b2c5b7e01Michael Graff2126. [security] Serialize validation of type ANY responses. [RT #16555]
f3d059d1155aa016f75a4047a2a15b4b2c5b7e01Michael Graff2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff was defined. [RT #16574]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2124. [security] It was possible to dereference a freed fetch
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley context. [RT #16584]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley --- 9.5.0a1 released ---
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2123. [func] Use Doxygen to generate internal documentation.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2122. [func] Experimental http server and statistics support
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley for named via xml.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley second timeout. [RT #16553]
f3d059d1155aa016f75a4047a2a15b4b2c5b7e01Michael Graff2120. [doc] Fix markup on nsupdate man page. [RT #16556]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2119. [compat] libbind: allow res_init() to succeed enough to
f3d059d1155aa016f75a4047a2a15b4b2c5b7e01Michael Graff return the default domain even if it was unable
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff to allocate memory.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2118. [bug] Handle response with long chains of domain name
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff compression pointers which point to other compression
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff pointers. [RT #16427]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff which could lead to validation failures. named didn't
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff handle negative DS responses that were in the process
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff of being validated. Check CNAME bit before accepting
f3d059d1155aa016f75a4047a2a15b4b2c5b7e01Michael Graff NODATA proof. To be able to ignore a child NSEC there
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley must be SOA (and NS) set in the bitmap. [RT #16399]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2116. [bug] 'rndc reload' could cause the cache to continually
02a0f2f08328c23d414306ce0bab81e54e22f6afMichael Graff be cleaned. [RT #16401]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2115. [bug] 'rndc reconfig' could trigger a INSIST if the
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley number of masters for a zone was reduced. [RT #16444]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2114. [bug] dig/host/nslookup: searches for names with multiple
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley labels were failing. [RT #16447]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2113. [bug] nsupdate: if a zone is specified it should be used
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff for server discover. [RT# 16455]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2112. [security] Warn if weak RSA exponent is used. [RT #16460]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2111. [bug] Fix a number of errors reported by Coverity.
ea6228c9ce45dafa26e4cd79d71629c8ba5cd7c7Michael Graff2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
ea6228c9ce45dafa26e4cd79d71629c8ba5cd7c7Michael Graff priming queries. [RT #16491]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff2108. [func] DHCID support. [RT #16456]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff2106. [func] 'rndc status' now reports named's version. [RT #16426]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2105. [func] GSS-TSIG support (RFC 3645).
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2104. [port] Fix Solaris SMF error message.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2103. [port] Add /usr/sfw to list of locations for OpenSSL
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley under Solaris.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2102. [port] Silence Solaris 10 warnings.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2101. [bug] OpenSSL version checks were not quite right.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2100. [port] win32: copy libeay32.dll to Build\Debug.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley Copy Debug\named-checkzone to Debug\named-compilezone.
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2099. [port] win32: more manifest issues.
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff2098. [bug] Race in rbtdb.c:no_references(), which occasionally
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley triggered an INSIST failure about the node lock
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley reference. [RT #16411]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2097. [bug] named could reference a destroyed memory context
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley after being reloaded / reconfigured. [RT #16428]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2096. [bug] libbind: handle applications that fail to detect
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley res_init() failures better.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley net_cidr_ntop_ipv6(). [RT #16388]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2094. [contrib] Update named-bootconf. [RT# 16404]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff2093. [bug] named-checkzone -s was broken.
24a2d84aedbad12fba2ca319c98745e62ef0bc16Bob Halley2092. [bug] win32: dig, host, nslookup. Use registry config
24a2d84aedbad12fba2ca319c98745e62ef0bc16Bob Halley if resolv.conf does not exist or no nameservers
24a2d84aedbad12fba2ca319c98745e62ef0bc16Bob Halley listed. [RT #15877]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2091. [port] dighost.c: race condition on cleanup. [RT #16417]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2090. [port] win32: Visual C++ 2005 command line manifest support.
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2089. [security] Raise the minimum safe OpenSSL versions to
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley prior to these have known security flaws which
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley are (potentially) exploitable in named. [RT #16391]
4a3ad0da975d7115d401700f955814a0dff1adb0Bob Halley2088. [security] Change the default RSA exponent from 3 to 65537.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff2086. [port] libbind: FreeBSD now has get*by*_r() functions.
439c0011e642fb1d26011116144af698125262dbMichael Graff2085. [doc] win32: added index.html and README to zip. [RT #16201]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2084. [contrib] dbus update for 9.3.3rc2.
439c0011e642fb1d26011116144af698125262dbMichael Graff2083. [port] win32: Visual C++ 2005 support.
dec90b6caef758fe2890ee50db148cff6acffb90Michael Graff2082. [doc] Document 'cache-file' as a test only option.
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2080. [port] libbind: res_init.c did not compile on older versions
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff of Solaris. [RT #16363]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2079. [bug] The lame cache was not handling multiple types
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff correctly. [RT #16361]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2078. [bug] dnssec-checkzone output style "default" was badly
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff named. It is now called "relative". [RT #16326]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff complete signed zone. [RT #16326]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2076. [bug] Several files were missing #include <config.h>
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley causing build failures on OSF. [RT #16341]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff2075. [bug] The spillat timer event hander could leak memory.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff dns_request_createraw2() and dns_request_createraw3()
78854e02c127f31ab90f56da0531542004b45377Michael Graff failed to send multiple UDP requests. [RT #16349]
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff2073. [bug] Incorrect semantics check for update policy "wildcard".
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2072. [bug] We were not generating valid HMAC SHA digests.
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2071. [port] Test whether gcc accepts -fno-strict-aliasing.
5a675fa40aa755b21ab2906e90b1b80e2105291fMichael Graff2070. [bug] The remote address was not always displayed when
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff reporting dispatch failures. [RT #16315]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2069. [bug] Cross compiling was not working. [RT #16330]
439c0011e642fb1d26011116144af698125262dbMichael Graff2068. [cleanup] Lower incremental tuning message to debug 1.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2067. [bug] 'rndc' could close the socket too early triggering
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley a INSIST under Windows. [RT #16317]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2066. [security] Handle SIG queries gracefully. [RT #16300]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2065. [bug] libbind: probe for HPUX prototypes for
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley endprotoent_r() and endservent_r(). [RT 16313]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff2063. [bug] Change #1955 introduced a bug which caused the first
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff 'rndc flush' call to not free memory. [RT #16244]
439c0011e642fb1d26011116144af698125262dbMichael Graff2062. [bug] 'dig +nssearch' was reusing a buffer before it had
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff been returned by the socket code. [RT #16307]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff2061. [bug] Accept expired wildcard message reversed. [RT #16296]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff2060. [bug] Enabling DLZ support could leave views partially
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff configured. [RT #16295]
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2059. [bug] Search into cache rbtdb could trigger an INSIST
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff failure while cleaning up a stale rdataset.
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff2058. [bug] Adjust how we calculate rtt estimates in the presence
439c0011e642fb1d26011116144af698125262dbMichael Graff of authoritative servers that drop EDNS and/or CD
439c0011e642fb1d26011116144af698125262dbMichael Graff requests. Also fallback to EDNS/512 and plain DNS
439c0011e642fb1d26011116144af698125262dbMichael Graff faster for zones with less than 3 servers. [RT #16187]
3c5148c4d98af51d6dcb449c6dbd45fe8c645f61Michael Graff2057. [bug] Make setting "ra" dependent on both allow-query-cache
3c5148c4d98af51d6dcb449c6dbd45fe8c645f61Michael Graff and allow-recursion. [RT #16290]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2056. [bug] dig: ixfr= was not being treated case insensitively
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff at all times. [RT #15955]
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2055. [bug] Missing goto after dropping multicast query.
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff2054. [port] freebsd: do not explicitly link against -lpthread.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff2052. [bug] 'rndc' improve connect failed message to report
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff the failing address. [RT #15978]
2d083fead27c474feff3a6f79fc3da09d3637a09Andreas Gustafsson2051. [port] More strtol() fixes. [RT #16249]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2050. [bug] Parsing of NSAP records was not case insensitive.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2049. [bug] Restore SOA before AXFR when falling back from
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff a attempted IXFR when transferring in a zone.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff Allow a initial SOA query before attempting
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff a AXFR to be requested. [RT #16156]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2048. [bug] It was possible to loop forever when using
11fcc67616fac1bc6a28b3d4fed24641137888e7Michael Graff avoid-v4-udp-ports / avoid-v6-udp-ports when
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff the OS always returned the same local port.
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2047. [bug] Failed to initialize the interface flags to zero.
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff cleanup [RT #16247].
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2045. [func] Use lock buckets for acache entries to limit memory
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff consumption. [RT #16183]
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2044. [port] Add support for atomic operations for Itanium.
6d14fe95e9ea5bbc5e863e5aab4618f7b3dbcc0fMichael Graff2043. [port] nsupdate/nslookup: Force the flushing of the prompt
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff for interactive sessions. [RT#16148]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2042. [bug] named-checkconf was incorrectly rejecting the
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff logging category "config". [RT #16117]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff set of libraries to be linked. [RT #16129]
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff2040. [bug] rbtdb no_references() could trigger an INSIST
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff failure with --enable-atomic. [RT #16022]
08d131595373326ec4a3af793b536df8c33115ecMichael Graff2039. [func] Check that all buffers passed to the socket code
66bd3b3c6b171271c705b897823dcdcf29464698Michael Graff have been retrieved when the socket event is freed.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2038. [bug] dig/nslookup/host was unlinking from wrong list
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff when handling errors. [RT #16122]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2037. [func] When unlinking the first or last element in a list
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff check that the list head points to the element to
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff be unlinked. [RT #15959]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
78854e02c127f31ab90f56da0531542004b45377Michael Graff2035. [func] Make falling back to TCP on UDP refresh failure
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff optional. Default "try-tcp-refresh yes;" for BIND 8
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff compatibility. [RT #16123]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2033. [bug] We weren't creating multiple client memory contexts
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff on demand as expected. [RT #16095]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2031. [bug] Emit a error message when "rndc refresh" is called on
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff a non slave/stub zone. [RT # 16073]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2030. [bug] We were being overly conservative when disabling
a44bd6a6edccd4c8e3884a13fcff037e7e2dd868Michael Graff openssl engine support. [RT #16030]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2029. [bug] host printed out the server multiple times when
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff specified on the command line. [RT #15992]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff2028. [port] linux: socket.c compatibility for old systems.
a44bd6a6edccd4c8e3884a13fcff037e7e2dd868Michael Graff2027. [port] libbind: Solaris x86 support. [RT #16020]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2026. [bug] Rate limit the two recursive client exceeded messages.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff2025. [func] Update "zone serial unchanged" message. [RT #16026]
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2024. [bug] named emitted spurious "zone serial unchanged"
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff messages on reload. [RT #16027]
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff2023. [bug] "make install" should create ${localstatedir}/run and
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff ${sysconfdir} if they do not exist. [RT #16033]
78854e02c127f31ab90f56da0531542004b45377Michael Graff2022. [bug] If dnssec validation is disabled only assert CD if
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff CD was requested. [RT #16037]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff2019. [tuning] Reduce the amount of work performed per quantum
897c9ddb4d745b2bfecf98b17e5487bb6656299aMichael Graff when cleaning the cache. [RT #15986]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2018. [bug] Checking if the HMAC MD5 private file was broken.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2017. [bug] allow-query default was not correct. [RT #15946]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2016. [bug] Return a partial answer if recursion is not
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff allowed but requested and we had the answer
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff to the original qname. [RT #15945]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2015. [cleanup] use-additional-cache is now acache-enable for
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff consistency. Default acache-enable off in BIND 9.4
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff as it requires memory usage to be configured.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff It may be enabled by default in BIND 9.5 once we
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff have more experience with it.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2014. [func] Statistics about acache now recorded and sent
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff to log. [RT #15976]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff responses more gracefully. [RT #15941]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2012. [func] Don't insert new acache entries if acache is full.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff2011. [func] dnssec-signzone can now update the SOA record of
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff the signed zone, either as an increment or as the
11e89b9b44862128b46994a87484027b3c7d533aMichael Graff system time(). [RT #15633]
58aaab3687aac838542ee4ef65a9c094a5d34ab0Michael Graff2010. [placeholder] rt15958
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff2009. [bug] libbind: Coverity fixes. [RT #15808]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff2008. [func] It is now possible to enable/disable DNSSEC
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff validation from rndc. This is useful for the
30251e07d1705d1a85b0e1d5a969496e1aed612eMichael Graff mobile hosts where the current connection point
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff breaks DNSSEC (firewall/proxy). [RT #15592]
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff rndc validation newstate [view]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2007. [func] It is now possible to explicitly enable DNSSEC
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff validation. default dnssec-validation no; to
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff be changed to yes in 9.5.0. [RT #15674]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff2006. [security] Allow-query-cache and allow-recursion now default
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff to the built in acls "localnets" and "localhost".
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff This is being done to make caching servers less
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff attractive as reflective amplifying targets for
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff spoofed traffic. This still leave authoritative
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff servers exposed.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff The best fix is for full BCP 38 deployment to
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff remove spoofed traffic.
11e89b9b44862128b46994a87484027b3c7d533aMichael Graff2005. [bug] libbind: Retransmission timeouts should be
11e89b9b44862128b46994a87484027b3c7d533aMichael Graff based on which attempt it is to the nameserver
11e89b9b44862128b46994a87484027b3c7d533aMichael Graff and not the nameserver itself. [RT #13548]
11e89b9b44862128b46994a87484027b3c7d533aMichael Graff2004. [bug] dns_tsig_sign() could pass a NULL pointer to
11e89b9b44862128b46994a87484027b3c7d533aMichael Graff dst_context_destroy() when cleaning up after a
fd1c538c9d5a747ffc7d3a983a598ad6c5583263Bob Halley error. [RT #15835]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2003. [bug] libbind: The DNS name/address lookup functions could
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley occasionally follow a random pointer due to
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley structures not being completely zeroed. [RT #15806]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley2002. [bug] libbind: tighten the constraints on when
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff struct addrinfo._ai_pad exists. [RT #15783]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley2001. [func] Check the KSK flag when updating a secure dynamic zone.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley New zone option "update-check-ksk yes;". [RT #15817]
e51511aa3281f8dc384eb1283115c7f8d5c402aeMichael Graff2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1999. [func] Implement "rrset-order fixed". [RT #13662]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1998. [bug] Restrict handling of fifos as sockets to just SunOS.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff This allows named to connect to entropy gathering
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff daemons that use fifos instead of sockets. [RT #15840]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1997. [bug] Named was failing to replace negative cache entries
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff when a positive one for the type was learnt.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1996. [bug] nsupdate: if a zone has been specified it should
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff appear in the output of 'show'. [RT #15797]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1995. [bug] 'host' was reporting multiple "is an alias" messages.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1994. [port] OpenSSL 0.9.8 support. [RT #15694]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1993. [bug] Log messages, via syslog, were missing the space
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff after the timestamp if "print-time yes" was specified.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1992. [bug] Not all incoming zone transfer messages included the
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff view. [RT #15825]
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff1991. [cleanup] The configuration data, once read, should be treated
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff as read only. Expand the use of const to enforce this
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff at compile time. [RT #15813]
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff1990. [bug] libbind: isc's override of broken gettimeofday()
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff implementations was not always effective.
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff1989. [bug] win32: don't check the service password when
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff re-installing. [RT #15882]
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff1988. [bug] Remove a bus error from the SHA256/SHA512 support.
a9ece9973c35d4d780338e89e288fb6a59575324Michael Graff1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
c50f9f4103b364334fc2abfe6f4ae7eb46df0532Michael Graff1986. [func] Report when a zone is removed. [RT #15849]
a385f150bb21b8b81f70ed7df545357a83f1da82Michael Graff1985. [protocol] DLV has now been assigned a official type code of
c50f9f4103b364334fc2abfe6f4ae7eb46df0532Michael Graff 32769. [RT #15807]
c50f9f4103b364334fc2abfe6f4ae7eb46df0532Michael Graff Note: care should be taken to ensure you upgrade
c50f9f4103b364334fc2abfe6f4ae7eb46df0532Michael Graff both named and dnssec-signzone at the same time for
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff zones with DLV records where named is the master
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff server for the zone. Also any zones that contain
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff DLV records should be removed when upgrading a slave
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff zone. You do not however have to upgrade all
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff servers for a zone with DLV records simultaneously.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1984. [func] dig, nslookup and host now advertise a 4096 byte
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff EDNS UDP buffer size by default. [RT #15855]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1983. [func] Two new update policies. "selfsub" and "selfwild".
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1982. [bug] DNSKEY was being accepted on the parent side of
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff a delegation. KEY is still accepted there for
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff RFC 3007 validated updates. [RT #15620]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1981. [bug] win32: condition.c:wait() could fail to reattain
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff the mutex lock.
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1980. [func] dnssec-signzone: output the SOA record as the
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff first record in the signed zone. [RT #15758]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1979. [port] linux: allow named to drop core after changing
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff user ids. [RT #15753]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1978. [port] Handle systems which have a broken recvmsg().
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1977. [bug] Silence noisy log message. [RT #15704]
78854e02c127f31ab90f56da0531542004b45377Michael Graff1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
78854e02c127f31ab90f56da0531542004b45377Michael Graff1975. [bug] libbind: isc_gethexstring() could misparse multi-line
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff hex strings with comments. [RT #15814]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1974. [doc] List each of the zone types and associated zone
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff options separately in the ARM.
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff HMACSHA512 support. [RT #13606]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1972. [contrib] DBUS dynamic forwarders integration from
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff Jason Vas Dias <jvdias@redhat.com>.
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1971. [port] linux: make detection of missing IF_NAMESIZE more
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff robust. [RT #15443]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1970. [bug] nsupdate: adjust UDP timeout when falling back to
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff unsigned SOA query. [RT #15775]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1969. [bug] win32: the socket code was freeing the socket
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff structure too early. [RT #15776]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
c50f9f4103b364334fc2abfe6f4ae7eb46df0532Michael Graff1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1966. [bug] Don't set CD when we have fallen back to plain DNS.
c50f9f4103b364334fc2abfe6f4ae7eb46df0532Michael Graff1965. [func] Suppress spurious "recursion requested but not
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff available" warning with 'dig +qr'. [RT #15780].
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff1963. [port] Tru64 4.0E doesn't support send() and recv().
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1962. [bug] Named failed to clear old update-policy when it
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff was removed. [RT #15491]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1961. [bug] Check the port and address of responses forwarded
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff to dispatch. [RT #15474]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1959. [func] Control the zeroing of the negative response TTL to
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff a soa query. Defaults "zero-no-soa-ttl yes;" and
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley "zero-no-soa-ttl-cache no;". [RT #15460]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1958. [bug] Named failed to update the zone's secure state
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley until the zone was reloaded. [RT #15412]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1957. [bug] Dig mishandled responses to class ANY queries.
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1956. [bug] Improve cross compile support, 'gen' is now built
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff by native compiler. See README for additional
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff cross compile support information. [RT #15148]
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff1954. [func] Named now falls back to advertising EDNS with a
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff 512 byte receive buffer if the initial EDNS queries
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff fail. [RT #14852]
21e7034ec046105c00a0dab86c83732e2e77ad99Michael Graff1953. [func] The maximum EDNS UDP response named will send can
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff now be set in named.conf (max-udp-size). This is
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff independent of the advertised receive buffer
64828244e04e86dfa40f0a4f0c05f27923da499dMichael Graff (edns-udp-size). [RT #14852]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1952. [port] hpux: tell the linker to build a runtime link
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff path "-Wl,+b:". [RT #14816].
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1951. [security] Drop queries from particular well known ports.
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff Don't return FORMERR to queries from particular
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff well known ports. [RT #15636]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff a TCP socket. This prevents the source address being
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff set for TCP connections. [RT #15628]
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff1949. [func] Addition memory leakage checks. [RT #15544]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1948. [bug] If was possible to trigger a REQUIRE failure in
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff xfrin.c:maybe_free() if named ran out of memory.
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1947. [func] It is now possible to configure named to accept
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff expired RRSIGs. Default "dnssec-accept-expired no;".
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff Setting "dnssec-accept-expired yes;" leaves named
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff vulnerable to replay attacks. [RT #14685]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1946. [bug] resume_dslookup() could trigger a REQUIRE failure
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff when using forwarders. [RT #15549]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff To generate a RSAMD5 key you must explicitly request
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff RSAMD5. [RT #13780]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1944. [cleanup] isc_hash_create() does not need a read/write lock.
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff1943. [bug] Set the loadtime after rolling forward the journal.
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff1942. [bug] If the name of a DNSKEY match that of one in
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff trusted-keys do not attempt to validate the DNSKEY
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff using the parents DS RRset. [RT #15649]
c803787146cadcb2d7e10cbf4491f3be513dfa1aMichael Graff1941. [bug] ncache_adderesult() should set eresult even if no
86944a4c8002e80ae9b6eb5a5e29b797879be45fMichael Graff rdataset is passed to it. [RT #15642]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff1940. [bug] Fixed a number of error conditions reported by
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff1939. [bug] The resolver could dereference a null pointer after
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff validation if all the queries have timed out.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff1938. [bug] The validator was not correctly handling unsecure
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley negative responses at or below a SEP. [RT #15528]
d8590892d10fc9528b0dde7e2781935e7b8d7a87Michael Graff1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff1936. [bug] The validator could leak memory. [RT #15544]
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff1935. [bug] 'acache' was DO sensitive. [RT #15430]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1934. [func] Validate pending NS RRsets, in the authority section,
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley prior to returning them if it can be done without
29f28fe573d4b3b318b3b026d567c1eb86738015Michael Graff requiring DNSKEYs to be fetched. [RT #15430]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1931. [bug] Per-client mctx could require a huge amount of memory,
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff particularly for a busy caching server. [RT #15519]
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff1930. [port] HPUX: ia64 support. [RT #15473]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1927. [bug] Access to soanode or nsnode in rbtdb violated the
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff lock order rule and could cause a dead lock.
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley1926. [bug] The Windows installer did not check for empty
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley passwords. BINDinstall was being installed in
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley the wrong place. [RT #15483]
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley1925. [port] All outer level AC_TRY_RUNs need cross compiling
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley defaults. [RT #15469]
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley1924. [port] libbind: hpux ia64 support. [RT #15473]
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley1923. [bug] ns_client_detach() called too early. [RT #15499]
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley1922. [bug] check-tool.c:setup_logging() missing call to
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley dns_log_setcontext().
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley1921. [bug] Client memory contexts were not using internal
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley malloc. [RT# 15434]
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley1920. [bug] The cache rbtdb lock array was too small to
daf83a29374c487a2800333d371e98e77e5a0d64Bob Halley have the desired performance characteristics.
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1919. [contrib] queryperf: a set of new features: collecting/printing
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff response delays, printing intermediate results, and
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff adjusting query rate for the "target" qps.
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1918. [bug] Memory leak when checking acls. [RT #15391]
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff when generating man pages. [RT #15385]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1915. [bug] dig +ndots was broken. [RT #15215]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1914. [protocol] DS is required to accept mnemonic algorithms
6dde125c2f47617ceef1518cf9e5588e8f366b71Michael Graff (RFC 4034). Still emit numeric algorithms for
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff compatibility with RFC 3658. [RT #15354]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1913. [func] Integrate contributed DLZ code into named. [RT #11382]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1912. [port] aix: atomic locking for powerpc. [RT #15020]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff1911. [bug] Update windows socket code. [RT #14965]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff1910. [bug] dig's +sigchase code overhauled. [RT #14933]
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff1909. [bug] The DLV code has been re-worked to make no longer
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley query order sensitive. [RT #14933]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1908. [func] dig now warns if 'RA' is not set in the answer when
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley 'RD' was set in the query. host/nslookup skip servers
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley that fail to set 'RA' when 'RD' is set unless a server
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley is explicitly set. [RT #15005]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1906. [func] dig now has a '-q queryname' and '+showsearch' options.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1905. [bug] Strings returned from cfg_obj_asstring() should be
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff treated as read-only. The prototype for
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff cfg_obj_asstring() has been updated to reflect this.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff friends. Note: RFC 1918 zones are not yet covered by
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff this but are likely to be in a future release.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff New options: empty-server, empty-contact,
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff empty-zones-enable and disable-empty-zone.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1903. [func] ISC string copy API.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1902. [func] Attempt to make the amount of work performed in a
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley iteration self tuning. The covers nodes clean from
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley the cache per iteration, nodes written to disk when
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff rewriting a master file and nodes destroyed per
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff iteration when destroying a zone or a cache.
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1901. [cleanup] Don't add DNSKEY records to the additional section.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1900. [bug] ixfr-from-differences failed to ensure that the
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff serial number increased. [RT #15036]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1899. [func] named-checkconf now validates update-policy entries.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff ISC_NETADDR_FORMATSIZE to allow for scope details.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff1897. [func] x86 and x86_64 now have separate atomic locking
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff implementations.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1896. [bug] Recursive clients soft quota support wasn't working
419590499823ce15b5d2ad4fe71eaf04bd5a86c0Michael Graff as expected. [RT #15103]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1895. [bug] A escaped character is, potentially, converted to
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff the output character set too early. [RT #14666]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1894. [doc] Review ARM for BIND 9.4.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1893. [port] Use uintptr_t if available. [RT #14606]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1892. [func] Support for SPF rdata type. [RT #15033]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1891. [port] freebsd: pthread_mutex_init can fail if it runs out
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley of memory. [RT #14995]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1890. [func] Raise the UDP receive buffer size to 32k if it is
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley less than 32k. [RT #14953]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1889. [port] sunos: non blocking i/o support. [RT #14951]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1888. [func] Support for IPSECKEY rdata type. [RT #14967]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1887. [bug] The cache could delete expired records too fast for
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley clients with a virtual time in the past. [RT #14991]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1886. [bug] fctx_create() could return success even though it
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley failed. [RT #14993]
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1885. [func] dig: report the number of extra bytes still left in
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff the packet after processing all the records.
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley levels. [RT #14962]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1882. [func] Limit the number of recursive clients that can be
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff waiting for a single query (<qname,qtype,qclass>) to
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley resolve. New options clients-per-query and
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley max-clients-per-query.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1881. [func] Add a system test for named-checkconf. [RT #14931]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1880. [func] The lame cache is now done on a <qname,qclass,qtype>
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley basis as some servers only appear to be lame for
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley certain query types. [RT #14916]
02a0f2f08328c23d414306ce0bab81e54e22f6afMichael Graff1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1878. [func] Detect duplicates of UDP queries we are recursing on
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley and drop them. New stats category "duplicate".
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1877. [bug] Fix unreasonably low quantum on call to
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff dns_rbt_destroy2(). Remove unnecessary unhash_node()
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff call. [RT #14919]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1876. [func] Additional memory debugging support to track size
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff and mctx arguments. [RT #14814]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1875. [bug] process_dhtkey() was using the wrong memory context
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff to free some memory. [RT #14890]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1874. [port] sunos: portability fixes. [RT #14814]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1873. [port] win32: isc__errno2result() now reports its caller.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
2bcb48cfcae36398454c98e40c563e2cde748e07Michael Graff1871. [placeholder]
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1870. [func] Added framework for handling multiple EDNS versions.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1869. [func] dig can now specify the EDNS version when making
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff a query. [RT #14873]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1868. [func] edns-udp-size can now be overridden on a per
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff server basis. [RT #14851]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1867. [bug] It was possible to trigger a INSIST in
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff dlv_validatezonekey(). [RT #14846]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1866. [bug] resolv.conf parse errors were being ignored by
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff bad addresses. [RT #14841]
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff1864. [bug] Don't try the alternative transfer source if you
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff got a answer / transfer with the main source
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff address. [RT #14802]
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff1863. [bug] rrset-order "fixed" error messages not complete.
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff1862. [func] Add additional zone data constancy checks.
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff named-checkzone has extended checking of NS, MX and
c68421fffe3dd7fcc4ae5a228d9eb888df4b5e72Michael Graff SRV record and the hosts they reference.
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff named has extended post zone load checks.
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff New zone options: check-mx and integrity-check.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1861. [bug] dig could trigger a INSIST on certain malformed
84c46a7acb961cac19c0d857bfdd00f3383a9bc6Michael Graff responses. [RT #14801]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff incorrectly set. [RT #14775]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1859. [func] Add support for CH A record. [RT #14695]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1858. [bug] The flush-zones-on-shutdown option wasn't being
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff parsed. [RT #14686]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1857. [bug] named could trigger a INSIST() if reconfigured /
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff reloaded too fast. [RT #14673]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1855. [bug] ixfr-from-differences was failing to detect changes
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff of ttl due to dns_diff_subtract() was ignoring the ttl
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff of records. [RT #14616]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1854. [bug] lwres also needs to know the print format for
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley (long long). [RT #13754]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1853. [bug] Rework how DLV interacts with proveunsecure().
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1852. [cleanup] Remove last vestiges of dnssec-signkey and
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff dnssec-makekeyset (removed from Makefile years ago).
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1851. [doc] Doxygen comment markup. [RT #11398]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1849. [doc] All forms of the man pages (docbook, man, html) should
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff have consistent copyright dates.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1848. [bug] Improve SMF integration. [RT #13238]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1847. [bug] isc_ondestroy_init() is called too late in
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley dns_rbtdb_create()/dns_rbtdb64_create().
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff <bortzmeyer@nic.fr>.
d947011dc393d9f9988d1349d585b246d19cc3c7Michael Graff1845. [bug] Improve error reporting to distinguish between
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff accept()/fcntl() and socket()/fcntl() errors.
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff for each 16 bit piece of the IPv6 address. The text
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff representation of a IPv6 address has been tightened
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff when CFLAGS contains "-I /usr/local/include"
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff resulting in old header files being used.
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1842. [port] cmsg_len() could produce incorrect results on
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff some platform. [RT #13744]
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley1841. [bug] "dig +nssearch" now makes a recursive query to
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley find the list of nameservers to query. [RT #13694]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1840. [func] dnssec-signzone can now randomize signature end times
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley (dnssec-signzone -j jitter). [RT #13609]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1839. [bug] <isc/hash.h> was not being installed.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1838. [cleanup] Don't allow Linux capabilities to be inherited.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1837. [bug] Compile time option ISC_FACILITY was not effective
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley for 'named -u <user>'. [RT #13714]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1836. [cleanup] Silence compiler warnings in hash_test.c.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1834. [bug] Bad memset in rdata_test.c. [RT #13658]
8cdfd17426179ae6f629a9b7475d46a22f535047Bob Halley1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
ef5e39139c46f8b953845dbfd37339fcf4472e44Michael Graff1831. [doc] Update named-checkzone documentation. [RT#13604]
ef5e39139c46f8b953845dbfd37339fcf4472e44Michael Graff1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
ef5e39139c46f8b953845dbfd37339fcf4472e44Michael Graff1829. [bug] win32: "pid-file none;" broken. [RT #13563]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1828. [bug] isc_rwlock_init() failed to properly cleanup if it
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff encountered a error. [RT #13549]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1827. [bug] host: update usage message for '-a'. [RT #37116]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff of memory error. [RT #13537]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1825. [bug] Missing UNLOCK() on out of memory error from in
58aaab3687aac838542ee4ef65a9c094a5d34ab0Michael Graff rbtdb.c:subtractrdataset(). [RT #13519]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1824. [bug] Memory leak on dns_zone_setdbtype() failure.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1823. [bug] Wrong macro used to check for point to point interface.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1822. [bug] check-names test for RT was reversed. [RT #13382]
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1821. [placeholder]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1820. [bug] Gracefully handle acl loops. [RT #13659]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1819. [bug] The validator needed to check both the algorithm and
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley digest types of the DS to determine if it could be
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley used to introduce a secure zone. [RT #13593]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1817. [func] Add support for additional zone file formats for
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley improving loading performance. The masterfile-format
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley option in named.conf can be used to specify a
59c049874bbef182857c57bd9cca292898921c69Bob Halley non-default format. A separate command
59c049874bbef182857c57bd9cca292898921c69Bob Halley named-compilezone was provided to generate zone files
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley in the new format. Additionally, the -I and -O options
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley for dnssec-signzone specify the input and output
e44487bfc23599b6b240e09d83d1c862fecfcc82Michael Graff1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1815. [bug] nsupdate triggered a REQUIRE if the server was set
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley without also setting the zone and it encountered
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley a CNAME and was using TSIG. [RT #13086]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1814. [func] UNIX domain controls are now supported.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1813. [func] Restructured the data locking framework using
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff architecture dependent atomic operations (when
288f9443ac447c9c14f3722dd6d32c1faef0f009Michael Graff available), improving response performance on
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley multi-processor machines significantly.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley x86, x86_64, alpha, powerpc, and mips are currently
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1811. [func] Preserve the case of domain names in rdata during
78854e02c127f31ab90f56da0531542004b45377Michael Graff zone transfers. [RT #13547]
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1810. [bug] configure, lib/bind/configure make different default
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley decisions about whether to do a threaded build.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1809. [bug] "make distclean" failed for libbind if the platform
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley is not supported.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1808. [bug] zone.c:notify_zone() contained a race condition,
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley zone->db could change underneath it. [RT #13511]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1807. [bug] When forwarding (forward only) set the active domain
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley from the forward zone name. [RT #13526]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1806. [bug] The resolver returned the wrong result when a CNAME /
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley DNAME was encountered when fetching glue from a
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff secure namespace. [RT #13501]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1805. [bug] Pending status was not being cleared when DLV was
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley active. [RT #13501]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1804. [bug] Ensure that if we are queried for glue that it fits
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley in the additional section or TC is set to tell the
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley client to retry using TCP. [RT #10114]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1803. [bug] dnssec-signzone sometimes failed to remove old
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley RRSIGs. [RT #13483]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1802. [bug] Handle connection resets better. [RT #11280]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1801. [func] Report differences between hints and real NS rrset
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley and associated address records.
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1800. [bug] Changes #1719 allowed a INSIST to be triggered.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1799. [bug] 'rndc flushname' failed to flush negative cache
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley entries. [RT #13438]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1798. [func] The server syntax has been extended to support a
58aaab3687aac838542ee4ef65a9c094a5d34ab0Michael Graff range of servers. [RT #11132]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1797. [func] named-checkconf now check acls to verify that they
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff only refer to existing acls. [RT #13101]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1795. [bug] "rndc dumpdb" was not fully documented. Minor
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff formating issues with "rndc dumpdb -all". [RT #13396]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1794. [func] Named and named-checkzone can now both check for
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff non-terminal wildcard records.
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1793. [func] Extend adjusting TTL warning messages. [RT #13378]
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley1792. [func] New zone option "notify-delay". Specify a minimum
d947011dc393d9f9988d1349d585b246d19cc3c7Michael Graff delay between sets of NOTIFY messages.
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1791. [bug] 'host -t a' still printed out AAAA and MX records.
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff allow parallel make to succeed.
4abed3e3563c7ad346178433130e6d150d3ffeafBob Halley1789. [bug] Prerequisite test for tkey and dnssec could fail
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley with "configure --with-libtool".
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1788. [bug] libbind9.la/libbind9.so needs to link against
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1786. [port] AIX: libt_api needs to be taught to look for
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley T_testlist in the main executable (--with-libtool).
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1785. [bug] libbind9.la/libbind9.so needs to link against
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1784. [cleanup] "libtool -allow-undefined" is the default.
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley Leave hooks in configure to allow it to be set
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley if needed in the future.
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley source tree.
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1782. [port] OSX: --with-libtool + --enable-libbind broke on
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley __evOptMonoTime. [RT #13219]
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
fe197676cc48d9b81940a0031a340bb5d23e1dcbBob Halley1780. [bug] Update libtool to 1.5.10.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff IN6ADDR_LOOPBACK_INIT macros.
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff IN6ADDR_LOOPBACK_INIT macros.
1a0e33bc2044e1902493111db14cbf793083ac47Michael Graff1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff IN6ADDR_LOOPBACK_INIT macros.
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1774. [port] Aix: Silence compiler warnings / build failures.
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1773. [bug] Fast retry on host / net unreachable. [RT #13153]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1772. [placeholder]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1771. [placeholder]
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff1770. [bug] named-checkconf failed to report missing a missing
294802790e8030f1c19b6c2c5d5204b6f464c729Michael Graff file clause for rbt{64} master/hint zones. [RT#13009]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1769. [port] win32: change compiler flags /MTd ==> /MDd,
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff rdataset. [RT #12907]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff support for (struct in6_pktinfo) failed. [RT #13077]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1766. [bug] Update the master file timestamp on successful refresh
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff as well as the journal's timestamp. [RT# 13062]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1765. [bug] configure --with-openssl=auto failed. [RT #12937]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1764. [bug] dns_zone_replacedb failed to emit a error message
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley if there was no SOA record in the replacement db.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1763. [func] Perform sanity checks on NS records which refer to
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley 'in zone' names. [RT #13002]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley even when it failed. [RT #12995]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1760. [bug] Host / net unreachable was not penalising rtt
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley estimates. [RT #12970]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1759. [bug] Named failed to startup if the OS supported IPv6
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley but had no IPv6 interfaces configured. [RT #12942]
4281fe4a80af7402613f0d5c3eeff8829a4ede1fMichael Graff1758. [func] Don't send notify messages to self. [RT #12933]
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1757. [func] host now can turn on memory debugging flags with '-m'.
fe14eafefa91fada7cea0a55b09196c01477406cBob Halley1756. [func] named-checkconf now checks the logging configuration.
ea6228c9ce45dafa26e4cd79d71629c8ba5cd7c7Michael Graff1755. [func] allow-update is now settable at the options / view
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley level. [RT #6636]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1754. [bug] We weren't always attempting to query the parent
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff server for the DS records at the zone cut.
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1753. [bug] Don't serve a slave zone which has no NS records.
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff1752. [port] Move isc_app_start() to after ns_os_daemonise()
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff as some fork() implementations unblock the signals
ff9bb3fc5453bbf310b67c560fbf04a5c0fb60daMichael Graff that are blocked by isc_app_start(). [RT #12810]
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1749. [bug] 'check-names response ignore;' failed to ignore.
24a2d84aedbad12fba2ca319c98745e62ef0bc16Bob Halley1748. [func] dig now returns the byte count for axfr/ixfr.
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1747. [bug] BIND 8 compatibility: named/named-checkconf failed
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley to parse "host-statistics-max" in named.conf.
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1746. [func] Make public the function to read a key file,
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley dst_key_read_public(). [RT #12450]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1745. [bug] Dig/host/nslookup accept replies from link locals
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff regardless of scope if no scope was specified when
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff query was sent. [RT #12745]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1744. [bug] If tuple2msgname() failed to convert a tuple to
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff a name a REQUIRE could be triggered. [RT #12796]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1743. [bug] If isc_taskmgr_create() was not able to create the
16508d9185e5eb96af2ebe900a08c46a6e5eb7edBob Halley requested number of worker threads then destruction
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley of the manager would trigger an INSIST() failure.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1742. [bug] Deleting all records at a node then adding a
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff previously existing record, in a single UPDATE
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff transaction, failed to leave / regenerate the
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff associated RRSIG records. [RT #12788]
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1741. [bug] Deleting all records at a node in a secure zone
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff using a update-policy grant failed. [RT #12787]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1740. [bug] Replace rbt's hash algorithm as it performed badly
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff with certain zones. [RT #12729]
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley NOTE: a hash context now needs to be established
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff via isc_hash_create() if the application was not
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff already doing this.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1739. [bug] dns_rbt_deletetree() could incorrectly return
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff ISC_R_QUOTA. [RT #12695]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1738. [bug] Enable overrun checking by default. [RT #12695]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1737. [bug] named failed if more than 16 masters were specified.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1736. [bug] dst_key_fromnamedfile() could fail to read a
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff public key. [RT #12687]
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1733. [bug] Return non-zero exit status on initial load failure.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
3d12fa7e76c02d06e1adeaa7846b60378a3cd204Michael Graff1731. [port] darwin: relax version test in ifconfig.sh.
528829aa8ad69238e674cd81078bc14d4199691bMichael Graff1730. [port] Determine the length type used by the socket API.
59e22acc4f79ff481f7bfa46ef0558957ae53cfcMichael Graff1729. [func] Improve check-names error messages.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1728. [doc] Update check-names documentation.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1727. [bug] named-checkzone: check-names support didn't match
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff documentation.
1c3bc66ada38236cc81c41b7174a9f0a872c9ab6Michael Graff1726. [port] aix5: add support for aix5.
ea6228c9ce45dafa26e4cd79d71629c8ba5cd7c7Michael Graff1725. [port] linux: update error message on interaction of threads,
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff capabilities and setuid support (named -u). [RT #12541]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1724. [bug] Look for DNSKEY records with "dig +sigtrace".
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1722. [bug] Don't commit the journal on malformed ixfr streams.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1721. [bug] Error message from the journal processing were not
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff always identifying the relevant journal. [RT #12519]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
517274e709a3c730cd42f37dc1260dde95d1ea38Michael Graff negative response. [RT #12506]
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1719. [bug] named was not correctly caching a RFC 2308 Type 1
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley negative response. [RT #12506]
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
24a2d84aedbad12fba2ca319c98745e62ef0bc16Bob Halley responses when looking for the zone / master server.
24a2d84aedbad12fba2ca319c98745e62ef0bc16Bob Halley1717. [port] solaris: ifconfig.sh did not support Solaris 10.
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley "ifconfig.sh down" didn't work for Solaris 9.
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1716. [doc] named.conf(5) was being installed in the wrong
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley location. [RT# 12441]
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1715. [func] 'dig +trace' now randomly selects the next servers
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff to try. Report if there is a bad delegation.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1714. [bug] dig/host/nslookup were only trying the first
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff address when a nameserver was specified by name.
65f6d2e1c1fce0989c13c2efb44b8dd26cd977f3Michael Graff1713. [port] linux: extend capset failure message to say:
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff please ensure that the capset kernel module is
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff loaded. see insmod(8)
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff messages for the specified zone. [RT #9479]
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1709. [port] solaris: add SMF support from Sun.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff for conformance to the name space convention. Binary
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff backward compatibility to the old function name is
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff provided. [RT #12376]
eafe61bee806a89893e5339e372a4bdc4fc5b5a5Bob Halley1707. [contrib] sdb/ldap updated to version 1.0-beta.
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff1706. [bug] 'rndc stop' failed to cause zones to be flushed
e883738546c7c73b761bce8a15e08661863d3ae1Michael Graff sometimes. [RT #12328]
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1705. [func] Allow the journal's name to be changed via named.conf.
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff1704. [port] lwres needed a snprintf() implementation for
14b98cb34eda66c87ce41a207704a2c232280eafMichael Graff platforms without snprintf(). Add missing
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff "#include <isc/print.h>". [RT #12321]
f00d96a15cdd11e764437f9359e67328631caaeaMichael Graff1703. [bug] named would loop sending NOTIFY messages when it
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff failed to receive a response. [RT #12322]
f00d96a15cdd11e764437f9359e67328631caaeaMichael Graff1702. [bug] also-notify should not be applied to built in zones.
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff1701. [doc] A minimal named.conf man page.
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff1700. [func] nslookup is no longer to be treated as deprecated.
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff Remove "deprecated" warning message. Add man page.
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff1699. [bug] dnssec-signzone can generate "not exact" errors
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff when resigning. [RT #12281]
f00d96a15cdd11e764437f9359e67328631caaeaMichael Graff1698. [doc] Use reserved IPv6 documentation prefix.
f00d96a15cdd11e764437f9359e67328631caaeaMichael Graff1697. [bug] xxx-source{,-v6} was not effective when it
d43c2cc7bc4022701f141e299ea8f3fb1d0640c2Michael Graff specified one of listening addresses and a
f00d96a15cdd11e764437f9359e67328631caaeaMichael Graff different port than the listening port. [RT #12257]
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff1696. [bug] dnssec-signzone failed to clean out nodes that
f36a81c88493985ee2d1c53cc6fe88f4b00dbbc8Michael Graff consisted of only NSEC and RRSIG records.
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1695. [bug] DS records when forwarding require special handling.
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1694. [bug] Report if the builtin views of "_default" / "_bind"
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff are defined in named.conf. [RT #12023]
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff1693. [bug] max-journal-size was not effective for master zones
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff with ixfr-from-differences set. [RT# 12024]
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1691. [bug] sdb's attachversion was not complete. [RT #11990]
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1690. [bug] Delay detaching view from the client until UPDATE
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff processing completes when shutting down. [RT #11714]
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff contained gratuitous semicolons. [RT #11707]
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1688. [bug] LDFLAGS was not supported.
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1687. [bug] Race condition in dispatch. [RT #10272]
9e89140c97a5f5e8f09a14d8e45ffbfe9ec2b6b1Bob Halley1686. [bug] Named sent a extraneous NOTIFY when it received a
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff redundant UPDATE request. [RT #11943]
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1685. [bug] Change #1679 loop tests weren't quite right.
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1684. [func] ixfr-from-differences now takes master and slave in
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff addition to yes and no at the options and view levels.
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1683. [bug] dig +sigchase could leak memory. [RT #11445]
ca924f706b53b895a662de8345d88437b23b8f01Michael Graff1682. [port] Update configure test for (long long) printf format.
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff1681. [bug] Only set SO_REUSEADDR when a port is specified in
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff isc_socket_bind(). [RT #11742]
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff1680. [func] rndc: the source address can now be specified.
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff1679. [bug] When there was a single nameserver with multiple
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff addresses for a zone not all addresses were tried.
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
42fe494186d386ddda15eb9403038c3558bbd5bfMichael Graff1676. [func] New option "allow-query-cache". This lets
42fe494186d386ddda15eb9403038c3558bbd5bfMichael Graff allow-query be used to specify the default zone
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff access level rather than having to have every
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff zone override the global value. allow-query-cache
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff can be set at both the options and view levels.
beb2b4f19624af46230a8e3df97e54d6c596573eMichael Graff If allow-query-cache is not set allow-query applies.
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff1675. [bug] named would sometimes add extra NSEC records to
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff the authority section.
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff1674. [port] linux: increase buffer size used to scan
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff1673. [port] linux: issue a error messages if IPv6 interface
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff1672. [cleanup] Tests which only function in a threaded build
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff now return R:THREADONLY (rather than R:UNTESTED)
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff in a non-threaded build.
70b065bd9297ae7baf203a2335211fc7b4544818Bob Halley1671. [contrib] queryperf: add NAPTR to the list of known types.
70b065bd9297ae7baf203a2335211fc7b4544818Bob Halley1670. [func] Log UPDATE requests to slave zones without an acl as
70b065bd9297ae7baf203a2335211fc7b4544818Bob Halley "disabled" at debug level 3. [RT# 11657]
70b065bd9297ae7baf203a2335211fc7b4544818Bob Halley1669. [placeholder]
4f6dd51441290a9feacbe62991a2cdfdc7554e8bMichael Graff1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1667. [port] linux: not all versions have IF_NAMESIZE.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1666. [bug] The optional port on hostnames in dual-stack-servers
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff was being ignored.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1665. [func] rndc now allows addresses to be set in the
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff server clauses.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1663. [func] Look for OpenSSL by default.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1662. [bug] Change #1658 failed to change one use of 'type'
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff to 'keytype'.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1661. [bug] Restore dns_name_concatenate() call in
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff adb.c:set_target(). [RT #11582]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1660. [bug] win32: connection_reset_fix() was being called
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley unconditionally. [RT #11595]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1659. [cleanup] Cleanup some messages that were referring to KEY vs
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley DNSKEY, NXT vs NSEC and SIG vs RRSIG.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley and DH. Tighten which options apply to KEY and
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley DNSKEY records.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1657. [doc] ARM: document query log output.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff DNSKEY and RRSIG. [RT #11542]
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1655. [bug] Logging multiple versions w/o a size was broken.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1654. [bug] isc_result_totext() contained array bounds read
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1653. [func] Add key type checking to dst_key_fromfilename(),
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley DST_TYPE_KEY should be used to read TSIG, TKEY and
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley SIG(0) keys.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1652. [bug] TKEY still uses KEY.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1651. [bug] dig: process multiple dash options.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1650. [bug] dig, nslookup: flush standard out after each command.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1649. [bug] Silence "unexpected non-minimal diff" message.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1648. [func] Update dnssec-lookaside named.conf syntax to support
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley multiple dnssec-lookaside namespaces (not yet
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley implemented).
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1647. [bug] It was possible trigger a INSIST when chasing a DS
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff record that required walking back over a empty node.
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff1646. [bug] win32: logging file versions didn't work with
69a7905cf392ce5ddb6a9c0b090262598cf02294Michael Graff non-UNC filenames. [RT#11486]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1645. [bug] named could trigger a REQUIRE failure if multiple
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley masters with keys are specified.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1644. [bug] Update the journal modification time after a
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley successful refresh query. [RT #11436]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1643. [bug] dns_db_closeversion() could leak memory / node
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley references. [RT #11163]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1642. [port] Support OpenSSL implementations which don't have
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley DSA support. [RT #11360]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1641. [bug] Update the check-names description in ARM. [RT #11389]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley incorrectly closing the socket. [RT #11291]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1639. [func] Initial dlv system test.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1638. [bug] "ixfr-from-differences" could generate a REQUIRE
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley failure if the journal open failed. [RT #11347]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1637. [bug] Node reference leak on error in addnoqname().
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley a error had occurred. The database version no longer
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley matched the version of the database that was dumped.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1635. [bug] Memory leak on error in query_addds().
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1634. [bug] named didn't supply a useful error message when it
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley detected duplicate views. [RT #11208]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1633. [bug] named should return NOTIMP to update requests to a
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley slaves without a allow-update-forwarding acl specified.
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1632. [bug] nsupdate failed to send prerequisite only UPDATE
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley messages. [RT #11288]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1631. [bug] dns_journal_compact() could sometimes corrupt the
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley journal. [RT #11124]
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley1630. [contrib] queryperf: add support for IPv6 transport.
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1629. [func] dig now supports IPv6 scoped addresses with the
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley extended format in the local-server part. [RT #8753]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
45dadd25ba4b72ec2d8eecc342edc787d8421e3aBob Halley1627. [bug] win32: sockets were not being closed when the
a44c12b332b867f29631e235eb11d1263c73d6c0Bob Halley last external reference was removed. [RT# 11179]
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which