CHANGES revision cdd271b14aebc6a3f076eb82a016e0a4d0d4247a
9c420baae0dce935d70df3852bc3abdfe5caf093Mark Andrews3346. [security] Bad-cache data could be used before it was
529035492ea0a427cc8d007cd743934d4494d9d3Mark Andrews initialized, causing an assert. [RT #30025]
ff6bd86d5778de50cb1b4e93591e22354062ee17Mark Andrews3345. [bug] Addressed race condition when removing the last item
11e43ff752bab2983d9328b6624bbcef613a93e1Mark Andrews or inserting the first item in an ISC_QUEUE.
444bbadb54d4a676aa4b20685d3178d7988534b3Mark Andrews3344. [func] New "dnssec-checkds" command checks a zone to
cd6d8d61b076eea02826596334a105b918393627Mark Andrews determine which DS records should be published
cd6d8d61b076eea02826596334a105b918393627Mark Andrews in the parent zone, or which DLV records should be
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews published in a DLV zone, and queries the DNS to
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews ensure that it exists. (Note: This tool depends
f04809663f4ba3df0e2ef1247d67bdd6ce0157d6Mark Andrews on python; it will not be built or installed on
7d7f929274e48808b4771162d6302a99e69865d8Mark Andrews systems that do not have a python interpreter.)
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews3343. [placeholder]
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
21b76ee598c937c6736cbc7ab69684bb3332428aMark Andrews resulting in excessive cpu usage in some cases.
5c45d30402af6860e1f66f5aa7d78dff58373b27Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
b66ca17f2990433a3e277b50cc3c15f19cdd0771Mark Andrews chains. [RT #23673]
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews3340. [func] Added new 'fast' zone file format, which is an image
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews of a zone database that can be loaded directly into
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews memory via mmap(), allowing much faster zone loading.
dc1f18f211a91735faf2771acc8438f0fbc70d4bMark Andrews (Note: Because of pointer sizes and other
7b68fa6229f1edadac44c7ec459c9ed77a8368c8Mark Andrews considerations, this file format is platform-dependent;
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews 'fast' zone files cannot always be transfered from one
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews server to another.) [RT #25419]
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews3339. [func] Allow the maximum supported rsa exponent size to be
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews specified: "max-rsa-exponent-size <value>;" [RT #29228]
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews3338. [bug] Address race condition in units tests: asyncload_zone
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews and asyncload_zt. [RT #26100]
6412902ffc0d255657f54db768f30b6efa819143Mark Andrews3337. [bug] Change #3294 broke support for the multiple keys
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr in controls. [RT #29694]
0d8971a4b8abed599ec9d9b7d1b51b8de8038ce2Shane Kerr3336. [func] Maintain statistics for RRsets tagged as "stale".
a8f950ff05e2e81d425a3411268cdf21f8f26b16Mark Andrews3335. [func] nslookup: return a nonzero exit code when unable
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews to get an answer. [RT #29492]
bc1467288a25b48446d3229fef0a19fad0cb6f2fMark Andrews3334. [bug] Hold a zone table reference while performing a
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins asyncronous load of a zone. [RT #28326]
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins3333. [bug] Setting resolver-query-timeout too low can cause
6ed53e5949d9fcd9715b440015b56e5a896d63dfDavid Hankins named to not recover if it loses connectivity.
84910d09ee8244027c7031e03999bc60a3d63adbMark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews3331. [security] dns_rdataslab_fromrdataset could produce bad
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews rdataslabs. [RT #29644]
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews3330. [func] Fix missing signatures on NOERROR results despite
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews RPZ rewriting. Also
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews - add optional "recursive-only yes|no" to the
d2ef84e07b67e72a4bd9c729c6b8228067d17584Mark Andrews response-policy statement
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews - add optional "max-policy-ttl" to the response-policy
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews statement to limit the false data that
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews "recursive-only no" can introduce into
cfe92110ce4eaf19f7f3255d2961710879bdc9ddMark Andrews resolvers' caches
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews - add a RPZ performance test to bin/tests/system/rpz
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews when queryperf is available.
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews - the encoding of PASSTHRU action to "rpz-passthru".
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews (The old encoding is still accepted.)
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews generate RRSIG records with the signer-name in
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews lower case. We accept them with any case, but if
fe6f384b2efde528dabbf822634eedc020be67e0Mark Andrews they fail to validate, we try again in lower case.
5929cde251d6d971fda14ac9ea927035421f6480Mark Andrews3328. [bug] Fixed inconsistent data checking in dst_parse.c.
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews to 'filter-aaaa-on-v4' but applies to IPv6
1412643ba5bcc735c3731d8cebf71fd76eedec91Mark Andrews connections. (Use "configure --enable-filter-aaaa"
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews to enable this option.) [RT #27308]
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews3326. [func] Added task list statistics: task model, worker
6de9371826bd253eb29aa3965ef03670d9d0a06dMark Andrews threads, quantum, tasks running, tasks ready.
daba3af103617ce4dd49bfdd0d9e07df7f22d08dMark Andrews3325. [func] Report cache statistics: memory use, number of
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews nodes, number of hash buckets, hit and miss counts.
59d84d1b077678cb77f6cbcc53d8cfa60ff69cb7Mark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
d76ed813a51465e5c47d521ab09ea20c06f1428dMark Andrews3323. [func] Report the number of buckets the resolver is using.
b6d199bd6a505d84093874339056d9df4d21dfbcMark Andrews3322. [func] Monitor the number of active TCP and UDP dispatches.
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews3321. [func] Monitor the number of recursive fetches and the
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews number of open sockets, and report these values in
1d7b3b6dac1a0c6c586808c2add2ca2bef80512fMark Andrews the statistics channel. [RT #27054]
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews3320. [func] Added support for monitoring of recursing client
f27eae9cfeb5b6c3c38ead6a7a0b1dd36bba691dMark Andrews count. [RT #27009]
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews3319. [func] Added support for monitoring of ADB entry count and
9a8cec4995c1586d27e95f13d421e4de61a97eb5Mark Andrews hash size. [RT #27057]
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
25c18fded02c5df8391a333e90ea776b52bff079Mark Andrews bucket lock when finshed with a fetch context.
7042126e8a10315255144989f7723f0510558928Mark Andrews3317. [protocol] Add ECDSA support (RFC 6605). [RT #21918]
5581e28ed8c05350ce6119230c223da60dafdbafMark Andrews3316. [tuning] Improved locking performance when recursing.
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews queries; this can improve performance on busy
45e1bd63587102c3bb361eaca42ee7b714fb3542Mark Andrews multiprocessor systems by reducing lock contention.
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews3314. [bug] The masters list could be updated while refesh_callback
c4008fdd56a8045802ed125e40a06bf1df9b7fbeMark Andrews and stub_callback were using it. [RT #26732]
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
4f54d095945d6f60f146112d37d31815ad73eb02Mark Andrews3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
472ce617b7c19ae38dfaa2fc9e8699e3bf9be4a8Mark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
c5387e694299c41361660e54f23e89c7da3ede1dMark Andrews zone.c:zone_gotwritehandle. [RT #29028]
d00e58d4814b45c13434721b5771782e485dcb73Mark Andrews3310. [test] Increase table size for mutex profiling. [RT #28809]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3309. [bug] resolver.c:fctx_finddone() was not threadsafe.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3308. [placeholder]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
f3a8cd3835463b47a8e3dc84cd8e7a02bcd7fee8Mark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
3e9ab6efd14ad716e6815718207dac2bdef3fddfMark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
6e373c502584f9292e964378411d296c8259026bMark Andrews3303. [bug] named could die when reloading. [RT #28606]
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews keys if the zone name contained character that
3bf783a6d4627266d76b0ebdc05afdccb3d06ad0Mark Andrews required special mappings. [RT #28600]
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
a37e44f107f5f60d7e84de77eb33b13139bca03fMark Andrews for non-recursive queries. [RT #28565]
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
2a35dc09d6c14f4041116766c0f7b60f41be0c9eMark Andrews but was not compiled in. [RT #28338]
d53520b78d4a8726396efdbaa71f86f687a6f308Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews3298. [bug] Named could dereference a NULL pointer in
43501e6570e9081d459fb5c1a81b73c2c53c5df0Mark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
c2b2bd69faabd83143ffb30a132a2f20ebd9abdaMark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
d140ae28347065500e7efb1ebe884f1606f9ac7bMark Andrews3296. [bug] Named could die with a INSIST failure in
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews client.c:exit_check. [RT #28346]
d3bcf7adca7fc4a019364b0195818673448072f7Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews portable. [RT # 26542]
cf029c9369548e598379490a039cfbc2b83527eeMark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews error. [RT #28265]
c6d4f781529d2f28693546b25b2967d44ec89e60Mark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
c9eaf357a31ea5eaeeed24f2f4e800a6ef9512e0Mark Andrews3292. [func] Log messages in the axfr stream at debug 10.
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
219a8f14a864aca47c340729dfff008a5050dd26Mark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
d14e4f3a9916f2159de4c5995006195072e05085Mark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
fde1a334ee0d437ccbada347ff09e8ea0eaff221Mark Andrews by the DLZ dlopen driver. [RT #28056]
8549bc9b78d7664ac99436d36a1ce615f772378aMark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
a957b9ccdccf519018e06213a27e1b70b8dc4640Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
4ff0e3c8afbbbc30473701c47d75e1d7829bae3eMark Andrews after 'rndc reconfig'. [RT #26786]
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
9a33e2d135b0de7d2e2d768f2b9c45b2627fe4e6Mark Andrews proveunsecure after calling startfinddlvsep.
dc6da18ccbb808d21f123cc6bda399b44ad11445Mark Andrews3284. [bug] Address race conditions with the handling of
94b58e01ae98764a045e18581d7aaf05d2889e60Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews failed to load. [RT #27863]
a687a0592bbe3a582860eb5f03725bf80d7ac1d8Mark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews of the old NS RRset when replacing it.
a295fbb55cfed38bcf2853c60410cce52ab6cebbMark Andrews [RT #27792] [RT #27884]
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
6eb8591f005f3e270d9ffb23769753952d0ec286Mark Andrews despite succeeding over the loopback interface.
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews3280. [bug] Potential double free of a rdataset on out of memory
a1bc94109313bf4ebb6e6ff655d71d45582d2e43Mark Andrews with DNS64. [RT #27762]
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews3279. [bug] Hold a internal reference to the zone while performing
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews a asynchronous load. Address potential memory leak
d9c4f954a1ddf7fcd5bf86bb7bbc12f669f81507Mark Andrews if the asynchronous is cancelled. [RT #27750]
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews3278. [bug] Make sure automatic key maintenance is started
6657a9e2d8c039be0bec367cae59a91d77ccaad4Mark Andrews when "auto-dnssec maintain" is turned on during
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews "rndc reconfig". [RT #26805]
118394ef2ec7cef253c55359a3d70d202ddc2fa0Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
6178552326050b16f5706ee63c931e9388d74318Mark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
6178552326050b16f5706ee63c931e9388d74318Mark Andrews safe_open failure. [RT #27696]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews option had been misspelled as '-clear'. (To avoid
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews future confusion, both options now work.) [RT #27173]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews3274. [placeholder]
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews3273. [bug] AAAA responses could be returned in the additional
08c90261660649ca7d92065f6f13a61ec5a9a86dMark Andrews section even when filter-aaaa-on-v4 was in use.
f8f65e2de40b1e9874b88f392f3abeb057ce6172Mark Andrews3272. [func] New "rndc zonestatus" command prints information
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews about the specified zone. [RT #21671]
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews3271. [port] darwin: mksymtbl is not always stable, loop several
05d32f6b0f6590ca22136b753309f070ce769000Mark Andrews times before giving up. mksymtbl was using non
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
2b66a51a7d72e9cc07917fb583ad528b0539d2a3Mark Andrews --- 9.9.0rc2 released ---
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
e9733bc599f30033ffe7af69f5fca254fb59d46eMark Andrews when inline-signing was in use. [RT #27650]
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews3269. [port] darwin 11 and later now built threaded by default.
332ed11af0e9837421160ab67619e025520a73f4Mark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews out the earliest expiry time. [RT #23311]
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews3267. [bug] Memory allocation failures could be mis-reported as
fabf2ee6b01ee06a0de940b83d53cf57f9f79265Mark Andrews unexpected error. New ISC_R_UNSET result code.
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
1c91b0a6516319d81670da2325e2bd08a7703707Mark Andrews DNSKEY RRset was not being properly computed.
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
2a90390deeff6ba07125bfb2c81ab4b582eb2777Mark Andrews inline-signing code. [RT #27557]
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews3264. [bug] Automatic regeneration of signatures in an
be2c2c29a88db96bd51f11d671ec207f0b6b0d45Mark Andrews inline-signing zone could stall when the server
01db0feafa67200a07ff8f81dde9029f675bbb5cMark Andrews was restarted. [RT #27344]
503ab4e136b843ef431f904709698231f1bc39e3Mark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews inline-signing zone. [RT #27337]
cf224bbf7bab87bc28b12f5b30f5ca3f3e5bf604Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
00afe78ab290fec3041731c1fac146a24f556de4Mark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
2674e1a455d4f71de09b2b60e7a8304b9a305588Mark Andrews for some query patterns. [RT #27170/27185]
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews --- 9.9.0rc1 released ---
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews message when writing to stdout. [RT #27109]
60ab03125c137c48a6b2ed6df1d2c8657757e09dMark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
405ae948cc01c5fb9fee511ce32de86f8077e01bMark Andrews3257. [bug] Do not generate a error message when calling fsync()
57e4191a112bf57a1eab6d37212df2531b6f8a16Mark Andrews in a pipe or socket. [RT #27109]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews3255. [func] No longer require that a empty zones be explicitly
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews enabled or that a empty zone is disabled for
faa4af28cff84d7ac45c1da98e40c00f65a24aa3Mark Andrews RFC 1918 empty zones to be configured. [RT #27139]
eba8a27e55258ee4470d7c3caa6bb3a335b9731eMark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
8af4e7aa4e2a6fe84bf4ebe09ca1d4ef1d8ab593Mark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
d08c5dfcd4d1f69004c1382ffc00cc1848dcd1a3Mark Andrews too long. [RT #26956]
982a2cfef37a39842ff53dc2e00b947c554fa78eTatuya JINMEI 神明達哉3252. [bug] When master zones using inline-signing were
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews updated while the server was offline, the source
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews zone could fall out of sync with the signed
16ee4fe11bad616a76c79e9f626a7e04a88ef4abMark Andrews copy. They can now resynchronize. [RT #26676]
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
a5b66bf342440688739d7207e437bf743e8b7ac0Mark Andrews memory dns_sdlz_putrr() can allocate per record to
982e072a5000bfc072aee8b34f64112cf54369a5Mark Andrews prevent run away memory consumption on ISC_R_NOSPACE.
e24089c5c33f31a39cea0123765165fa31308343Tatuya JINMEI 神明達哉3250. [func] 'configure --enable-developer'; turn on various
9547d3e03bb082d73aeabb497b60632ebfdc78a6Mark Andrews configure options, normally off by default, that
6f3c2ee187d690f96ffef3ba5a6c2e112bb3798cMark Andrews we want developers to build and test with. [RT #27103]
9547d3e03bb082d73aeabb497b60632ebfdc78a6Mark Andrews3249. [bug] Update log message when saving slave zones files for
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews analysis after load failures. [RT #27087]
9de05727e334336ceb0abcca404d770abd23b876Mark Andrews3248. [bug] Configure options --enable-fixed-rrset and
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews --enable-exportlib were incompatible with each
7c61d798f54f7c19f87d46a0df775e0e58fe7d30Mark Andrews other. [RT #27087]
e23932d3c8c154cff3fea0ecff64e26c6ac6f5d8Mark Andrews3247. [bug] 'raw' format zones failed to preserve load order
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews breaking 'fixed' sort order. [RT #27087]
72160d9b51d902a7cf18de84953bc651941f73c2Mark Andrews3246. [bug] Named failed to start with a empty also-notify list.
8ec056723666c71a499880ffa415661f37ffd08eMark Andrews3245. [bug] Don't report a error unchanged serials unless there
037b732f88edc943f3141e0342dc993156e3abf3Mark Andrews were other changes when thawing a zone with
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews ixfr-fromdifferences. [RT #26845]
80a609bf44ee09766aeb9ae02cfbf7f9fe86dd83Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 Also simplified nsupdate syntax to make "update"
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 and "prereq" optional. [RT #24659]
bd5c8a564b21781fe6b608fe6a75c2e7152200acTatuya JINMEI 神明達哉3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
85708f9aabbfe31fc648c90258ae18ce0edc3488Mark Andrews being properly set.
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews3242. [func] Extended the header of raw-format master files to
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews include the serial number of the zone from which
49732e4d6008d7d99dfce596a17e17aa13425502Mark Andrews they were generated, if different (as in the case
cae2cb086244dfb883739edbe79e34756079f70eMark Andrews of inline-signing zones). This is to be used in
cae2cb086244dfb883739edbe79e34756079f70eMark Andrews inline-signing zones, to track changes between the
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews unsigned and signed versions of the zone, which may
cf0bcc2c80ca99f1e6e53dcdd0eba03fe70723dfMark Andrews have different serial numbers.
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews (Note: raw zonefiles generated by this version of
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews BIND are no longer compatble with prior versions.
0da29be670f6fa5b2a6320d9d843bc8b802c153aMark Andrews To generate a backward-compatible raw zonefile
03e200df5dc283f24a6a349f0b31d3eab26da893Mark Andrews using dnssec-signzone or named-compilezone, specify
03e200df5dc283f24a6a349f0b31d3eab26da893Mark Andrews output format "raw=0" instead of simply "raw".)
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3241. [bug] Address race conditions in the resolver code.
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
5be3685b0e57677c0cc03113099cb8f99f9a070bMark Andrews timestamp. [RT #26883]
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews3238. [bug] keyrdata was not being reinitialized in
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews lib/dns/rbtdb.c:iszonesecure. [RT#26913]
715361d0c3800e5ad886e5df971936ce6cd1ca89Mark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
3d711f2f75cb9a9ddcbf1fca9b2de192e75340e6Mark Andrews EDNS(0) fallback behavior. [RT #26416]
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
a268fec7f54a89a0772a91da0511c8eae09e6157Mark Andrews the generated diff and optionally writes it to a
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews journal. [RT #26386]
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
4e1d3e67cdc76609bad5f0310ac48de10b442b9fMark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews3232. [bug] Zero zone->curmaster before return in
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews3231. [bug] named could fail to send a uncompressable zone.
74a14c4eb8518a9cc31cb5a918547a93d0c0e838Mark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews axfr with a serial of 0. [RT #26796]
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews3229. [bug] Fix local variable to struct var assignment
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews found by CLANG warning.
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
261a6a1f7d95eaf0cd882f3123dcfd775517a54fMark Andrews loading performance. [RT #26523]
7c678cfe0bd477ded2995b9490d72edf7bc76a84Mark Andrews3227. [bug] Interim fix to make WKS's use of getprotobyname()
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews and getservbyname() self thread safe. [RT #26232]
a20e888bde4b307050d76e09266b2fb49f03bc30Mark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
f4f0eedb8916a824124cf56d4c3f18eb6c77b42eMark Andrews messages. [RT #26507]
611ec5dd43d31fd6385f1a94c2f0865375f452b4Mark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
8abe06b25d245ab2955d81525bfe6bd29b80908eMark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3221. [bug] Fixed a potential coredump on shutdown due to
7755f5932a3e59d0c6a2506cc94519de92b91ca6Mark Andrews referencing fetch context after it's been freed.
b5ad6dfea4cc3e7d1d322ac99f1e5a31096837c4Mark Andrews --- 9.9.0b2 released ---
6e9efadbea9febb0494e713e54dfea6f7ef70383Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews could fail to set the database version correctly,
aa0f0779d1ea7150991c3e6eec1cc532086c13fdMark Andrews causing an assertion failure. [RT #26180]
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
0563d476dea35a60a59857cc8bd26ef276d78799Mark Andrews nonexistent records, leading to an assertion
0563d476dea35a60a59857cc8bd26ef276d78799Mark Andrews failure. [RT #26590]
b2f160f266005ceaed77a3f575109f74cd13d548Mark Andrews3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
0bb7c66ef8e3e8740cbac4a4de607060dfc4d6c8Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
2b3e34f03675d6c71a654fe2094f3b9c063a70eaMark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3214. [func] Add 'named -U' option to set the number of UDP
7216566bd596f8fbc98eafd5e9359ec7fa92c8b8Mark Andrews listener threads per interface. [RT #26485]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews list prior to adding a reference to it leading a
42b37d29c7709ce5bfe0110d07f1ec163be220d2Mark Andrews possible assertion failure. [RT #23219]
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
7c386b0c3194aa18089c6fa2e9856b576ec99c81Mark Andrews option prints in single-line-per-record format.
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews3210. [bug] Canceling the oldest query due to recursive-client
fd780f3d47179d68ba2d4661fb9cac9ce1e74928Mark Andrews overload could trigger an assertion failure. [RT #26463]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3208. [bug] 'dig -y' handle unknown tsig alorithm better.
bcf369e513a1cc2209e2a987f5772afa79813540Mark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
9b80f3a7c739a99b498a37a711a51b6a88df3a78Mark Andrews nameserver behaviour. Enable "dig +adflag" and
016c0a82f1ce3fe4d362d7c9cf8de4377ffaf5a9Mark Andrews "dig +edns=0" by default. Enable "+dnssec" when
9b80f3a7c739a99b498a37a711a51b6a88df3a78Mark Andrews running "dig +trace". [RT #23497]
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews3204. [bug] When a master server that has been marked as
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews unreachable sends a NOTIFY, mark it reachable
83a56f1e4f2d11fa895ceff4342fff7157910036Mark Andrews again. [RT #25960]
1425217e5c3a2cbab7f8344e600e0c16047289ffMark Andrews3203. [bug] Increase log level to 'info' for validation failures
d4d68515d23668cfe804ab2a174a7e427decedd8Mark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
e8e62bb7829e88fc56360f7edc021dc8493a8704Mark Andrews3202. [bug] NOEDNS caching on timeout was too agressive.
e7fb847ed570dd8c1bcdacabb3d69bd81feb79aeMark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews instead of only being used as a toggle. [RT #18351]
ab9871e71eac6b33ce92a0ad26dc50d0ff241e3bMark Andrews3200. [doc] Some rndc functions were undocumented or were
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews missing from 'rndc -h' output. [RT #25555]
539f477cd03db1ac173bcb5257da136283e57849Mark Andrews3199. [func] When logging client information, include the name
2c6f9101f99cc663074376a5cc1d954d33bdbe36Mark Andrews being queried. [RT #25944]
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews permissions. [RT #24866]
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews3197. [bug] Don't try to log the filename and line number when
1fc4793844c9613b17866c33dbeab8aaa94b66ffMark Andrews the config parser can't open a file. [RT #22263]
1c153afce556ff3c687986fb7c4a0b0a7f5e7cd8Mark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
81bdad57bd2c0c4b9a0684fe6e222ba95da625ecMark Andrews doesn't exist. [RT #25783]
116e6b4257e3efceca3e82af1e695579129af93dMark Andrews3195. [cleanup] Silence "file not found" warnings when loading
a5768d889b4e139e78f2b1d9433f3e9f8d225ff4Mark Andrews managed-keys zone. [RT #26340]
3d247992c4a500caa7703edaee68612e545af602Mark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
5c08d19fb17f0684e6424b94910cef61cec7592fMark Andrews documentation. [RT #25203]
3d247992c4a500caa7703edaee68612e545af602Mark Andrews3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
9eca2b9b95df456545e1bc298c8337400aa24e8eMark Andrews3192. [bug] A query structure could be used after being freed.
05331ce161276d879711342fadbc6144af7f5ba6Mark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews3190. [bug] Underflow in error handling in isc_mutexblock_init.
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews3189. [test] Added a summary report after system tests. [RT #25517]
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews3188. [bug] zone.c:zone_refreshkeys() could fail to detach
c5223c9cb7c22620d5ee6611228673e95b48a270Mark Andrews references correctly when errors occurred, causing
2fa0485e9e969dd42dd10339354d7949db46111aMark Andrews a hang on shutdown. [RT #26372]
092f7679306989293bbe755f31ade0a5f456b370Mark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
7d5b32acb1898844afa19123d07483b46edac7cbMark Andrews --- 9.9.0b1 released ---
ef67e6d8fa86d98a2c0defc43b624434324d9ce7Mark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews - 'rndc signing -list' displays the current
e5a5c60a5e690ee9858c9e3facba189b8646f0b7Mark Andrews state of signing operations
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews - 'rndc signing -clear' clears the signing state
16b9ee24b96a1c1d21d809e88238091c4afa25c9Mark Andrews records for keys that have fully signed the zone
afa3f2fab7144761bbf481b9d40d667529c6ec76Mark Andrews - 'rndc signing -nsec3param' sets the NSEC3
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein parameters for the zone
60e5e10f8d2e2b0c41e8abad38cacd867caa6ab2Rob Austein The 'rndc keydone' syntax is removed. [RT #23729]
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews3184. [bug] named had excessive cpu usage when a redirect zone was
da53179d1055c75e64dc2c9623b38cb2b8629eb6Mark Andrews configured. [RT #26013]
2941824604f9c5aa70f216d1f2941b3c59aa37dcMark Andrews3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews3182. [bug] Auth servers behind firewalls which block packets
b4028939fdffc92cf659764deb9c6e3c805cc948Mark Andrews greater than 512 bytes may cause other servers to
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews perform poorly. Now, adb retains edns information
9840a0767d02f6c6b9d1f73d54e0cab2e8192a93Mark Andrews and caches noedns servers. [RT #23392/24964]
57ed0bab5b92f66af3dc3b86081bd42ab8d4ba09Rob Austein3181. [func] Inline-signing is now supported for master zones.
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein3180. [func] Local copies of slave zones are now saved in raw
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein format by default, to improve startup performance.
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews 'masterfile-format text;' can be used to override
1cb73c69f76c8c2c66b767a8b9ad04f3988cf6a9Mark Andrews the default, if desired. [RT #25867]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews3178. [bug] A race condition introduced by change #3163 could
f754fa97bc698cc251d227173a95e4d39a88ac01Mark Andrews cause an assertion failure on shutdown. [RT #26271]
40a547174fb7d14f74bc375f076c8c390498f68eMark Andrews3177. [func] 'rndc keydone', remove the indicator record that
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews named has finished signing the zone with the
a8f1c013b0fdc405ca4b5ec8316d3c9e3ad9d31bMark Andrews corresponding key. [RT #26206]
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews3176. [doc] Corrected example code and added a README to the
959fb01017fa83578e7c8776ed3baba3076a2409Mark Andrews sample external DLZ module in contrib/dlz/example.
d73541ea2eebe01cafc5ff1b2ba4b9a8f75237b1Mark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
46cb442c5c53f16ece23bfe7f7f7bf44f78b0e46Mark Andrews NSEC3 signed zone are validated. Stop sending a
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews unnecessary NSEC3 record when generating such
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews responses. [RT #26200]
0f222d322b25373c4ef59d7c79f265b082ee98cdMark Andrews3174. [bug] Always compute to revoked key tag from scratch.
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
ae4f85dde3abb7d4afef9e869a83783cbf0aa29cMark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
2132a56b5c6628925838165ae0640e55e3f36188Mark Andrews 'rndc addzone'. [RT #25600]
b514e0cd0e7959a98dd59665553c8a3635ada10eMark Andrews --- 9.9.0a3 released ---
d9ec2891475b8ed894a524a83370cfce30328569Mark Andrews3170. [func] RPZ update:
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews - fix precedence among competing rules
6e8a8077faf96d8da0b6cf738913f5f1f86e4008Mark Andrews - improve ARM text including documenting rule precedence
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews - try to rewrite CNAME chains until first hit
5cb7e15551f502ab6948689cf3bc7dac6b56571eMark Andrews - new "rpz" logging channel
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews - RDATA for CNAME rules can include wildcards
bb99a72b219ad4f1daa80c636883ab485174c9a6Mark Andrews - replace "NO-OP" named.conf policy override with
5a6874e4ed544186ccb8519765be8c3a1804e033Mark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
3b4405aba93729eead9f8f006d426f24fc4c3d78Mark Andrews is still recognized)
c553b3308e34edfaddbec57b3308bbbe362ef715Mark Andrews3169. [func] Catch db/version mis-matches when calling dns_db_*().
24efdccd68d157b400bf68926798bc8f3f71c24cMark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
a5bb4ad5dbd08f9178e807b1e55cb449b69d8173Mark Andrews a ANY query. [RT #26017]
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews3167. [bug] Negative answers from forwarders were not being
5e5b467e8c8abda496b7896241a46b05256cd22cMark Andrews correctly tagged making them appear to not be cached.
713ad87a7f95d06f4bb3e0b92b91172cbebd6c68Mark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews3165. [bug] dnssec-signzone could generate new signatures when
4f21f7feaff27d5356827e39a4537a60a5e4054cMark Andrews resigning, even when valid signatures were already
1439214380abcc123e27a42d43a23ba441209ebeMark Andrews present. [RT #26025]
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews3164. [func] Enable DLZ modules to retrieve client information,
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews so that responses can be changed depending on the
7d9b632906c756b215d65a3a08d77fe022807c2dMark Andrews source address of the query. [RT #25768]
5d3083c4b5b11dfb653b15fd0eeb8e0cc9b175e0Mark Andrews3163. [bug] Use finer-grained locking in client.c to address
52188225731669cd571984c45a1407a55c74ee78Mark Andrews concurrency problems with large numbers of threads.
52188225731669cd571984c45a1407a55c74ee78Mark Andrews3162. [test] start.pl: modified to allow for "named.args" in
52188225731669cd571984c45a1407a55c74ee78Mark Andrews ns*/ subdirectory to override stock arguments to
3cbc87c31f76262980d54ddbcdda7875be37b684Mark Andrews named. Largely from RT#26044, but no separate ticket.
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
bc29bb9062ab804cd79f4a1f8f366af8a040b636Mark Andrews assertion failures. [RT #25880]
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
5a4854e226ce5eca99bcfb5557b36ea210bb25bcMark Andrews the newline was not being printed causing type codes
b101c1e9989d0a010a3146ad823e168d15cb10c7Mark Andrews to be run together. [RT #25873]
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews3159. [bug] On some platforms, named could assert on startup
989d7b844bdf2d804fda57b9b53a4eff3a6bea91Mark Andrews when running in a chrooted environment without
d5af5bb38b9b2626b97626569adde258c8f6b808Mark Andrews /proc. [RT #25863]
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews3158. [bug] Recursive servers would prefer a particular UDP
c941e32d221fbb0cb760e3bc24c7f221c0cf8b97Mark Andrews socket instead of using all available sockets.
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
77b101ced9801cdb226919784bfc1aa0650ace6aMark Andrews the config file before pausing the server. [RT #21373]
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews3156. [placeholder]
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews --- 9.9.0a2 released ---
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
e174044290953a2499f574e35cc9c22ba126a303Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
25899e7f1ff0db5322362ada01f7aec3006ff0beTatuya JINMEI 神明達哉3154. [bug] Attempting to print an empty rdataset could trigger
4f082b58b17ce39087930d5affc2ada90ef386e6Mark Andrews an assert. [RT #25452]
3d79c437d8cc10651b22601b55f4098b4cfe5979Mark Andrews3153. [func] Extend request-ixfr to zone level and remove the
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews side effect of forcing an AXFR. [RT #25156]
0da70bc50a320a3bb16aa7cecb2727fed2c0683cMark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews incorrect use of __builtin_expect. [RT #25183]
686bcdcb4c63e8dd9bbe9607265061a4d3934bbcMark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 incorrectly. [RT #21050]
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉3150. [func] Improved startup and reconfiguration time by
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉 enabling zones to load in multiple threads. [RT #25333]
5597be9bb88de138dfec9fa9176708443813925eTatuya JINMEI 神明達哉3149. [placeholder]
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews3148. [bug] Processing of normal queries could be stalled when
fde0a3f89b9c42e9e4ef9aaf8e044e6b18c4978cMark Andrews forwarding a UPDATE message. [RT #24711]
39c7fc7e00af20144b94ef332943f62c1b3a622fMark Andrews3147. [func] Initial inline signing support. [RT #23657]
073dfc245fd921958b1ccd869ed3471f828cf283Mark Andrews --- 9.9.0a1 released ---
9738408dcbd4c1f7eb2b105c83388608fafd7808Mark Andrews3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
65d64acb51b0655f04b165c8045d1aed556489abMark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
e9aca33f362d017fe0d5f7b729bce646038cf1eeMark Andrews there were any errors while running them. [RT #25527]
28e36fcc1eea8b5283aa33d3a6d21d42df8fdaf2Mark Andrews3144. [bug] dns_dbiterator_seek() could trigger an assert when
5cf146c586f69af7c65e4a4f612ae3ef6c9cf8deMark Andrews used with a nonexistent database node. [RT #25358]
2a2e9c7a1a8cded637be17f32dc1bbdef519ca81Mark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
8a713ca49ddddb36e432d4717800f9258a5c2ea9Mark Andrews3142. [bug] NAPTR is class agnostic. [RT #25429]
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews associated with empty zones. [RT #25079]
f93d6e86ded924cb23d80a6d45a4c830b57984ddMark Andrews3140. [func] New command "rndc flushtree <name>" clears the
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews specified name from the server cache along with
0ad024cc4272894e877e3a7896f80a2892bc703cMark Andrews all names under it. [RT #19970]
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews for the hashing algorithms (md5, sha1 - sha512, and
e50b75e36ca79f84e2c9b2a12f6e28cbf22aaa83Mark Andrews their hmac counterparts). [RT #25067]
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews3138. [bug] Address memory leaks and out-of-order operations when
797944723c8de672430cc59c11bf4eeacd913649Mark Andrews shutting named down. [RT #25210]
8cd830d7c806cac681b057e0c0185f29992fa35fMark Andrews3137. [func] Improve hardware scalability by allowing multiple
11b399514e4af7f370fe3948c3e3779a182ac5acMark Andrews worker threads to process incoming UDP packets.
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews This can significantly increase query throughput
4296c5480dde48ea555f5916be8612e173f1edebMark Andrews on some systems. [RT #22992]
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews empty zones switched on by the 'empty-zones-enable'
164e2a6f83cc3172bc9ba0c97a326a5eca80bc18Mark Andrews option. [RT #24990]
e90994e3f358bdc6fe03005da08567c807a14c1dMark Andrews3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
7087b3dc9298e85909df7a10f83bbd0588310f0cMark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
db2649bad98fc08054feb1a1ed234d8b9b011ea8Mark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews statistics. [RT #16030]
ad5bc22a819190839bdcc4d102d023782dc23660Mark Andrews3133. [bug] Change #3114 was incomplete. [RT #24577]
82572925f8942b599667bf47f22403f5dfd79ab9Mark Andrews3132. [placeholder]
b326d7e3a3a50eb65dd06db007d2fddc62606bbfMark Andrews3131. [tuning] Improve scalability by allocating one zone task
c0a1ebb1adecc5da1f1ad6f9b06a2b4356d2b135Mark Andrews per 100 zones at startup time, rather than using a
508f61f8d699c46f962b682f388e54b446a7194dMark Andrews fixed-size task table. [RT #24406]
4834c6a7f0054b8f4a8a267d60ef78204521e39eMark Andrews3130. [func] Support alternate methods for managing a dynamic
f450814ab8989820a7bc9a2c484eb9f2c1c7b915Mark Andrews zone's serial number. Two methods are currently
4c47c184b98a5ec1b303281959c1f3b0db85d733Mark Andrews defined using serial-update-method, "increment"
48f929d315bafeeffe0a37082ab4c9661a928c39Mark Andrews (default) and "unixtime". [RT #23849]
0e93730a02a4cafbc5cdfaa04b2d813a0c11b205Mark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews allow-new-zones was set to yes and named ACLs
93f429295a682f44940c8f4e2b05773c50da4e7dMark Andrews were used. [RT #22739]
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews auto-dnssec zone that has not been signed yet
494576ce20cfd98d74955698cf8f7b37dce2f740Mark Andrews will cause it to be signed with the specified NSEC3
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews parameters when keys are activated. The
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews NSEC3PARAM record will not appear in the zone until
a36db48f57a59d82af0cf8cfecbdb7620aa3cc47Mark Andrews it is signed, but the parameters will be stored.
531f6c355bde4b280d1dea749dd1bcdf6b2f8701Mark Andrews3127. [bug] 'rndc thaw' will now remove a zone's journal file
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews if the zone serial number has been changed and
3ea6d4dc33482a752553c59ed94bcecd23d254b0Mark Andrews ixfr-from-differences is not in use. [RT #24687]
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews3126. [security] Using DNAME record to generate replacements caused
6e1141e6e83b3907b8b187d97932f30fa82470efMark Andrews RPZ to exit with a assertion failure. [RT #24766]
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews3125. [security] Using wildcard CNAME records as a replacement with
e954ec198e535f8a7e17d72241233f825b0df6a6Mark Andrews RPZ caused named to exit with a assertion failure.
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews3124. [bug] Use an rdataset attribute flag to indicate
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews negative-cache records rather than using rrtype 0;
aceae69c7f3e76e8842de178851928619c65b61cMark Andrews this will prevent problems when that rrtype is
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews used in actual DNS packets. [RT #24777]
113598f67787f0ed0dcfe23b26d1e5d93256c0acMark Andrews3123. [security] Change #2912 exposed a latent flaw in
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews dns_rdataset_totext() that could cause named to
dba1bc96f6f4fbbb48ab7b041964d44242731b17Mark Andrews crash with an assertion failure. [RT #24777]
70e854766f5304f43e94212dc38ebaefe214148cMark Andrews3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews3121. [security] An authoritative name server sending a negative
7c8662961e2876e22e34c96d41dad0cd70e3ce4cMark Andrews response containing a very large RRset could
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews trigger an off-by-one error in the ncache code
beb92a43a7451981fad54c98c809d50c1b16c1e9Mark Andrews and crash named. [RT #24650]
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
85bba08193debe026883d2d6bebbb0f7a01d7ba7Mark Andrews that validated insecure without using DLV and had
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews DS records in the parent zone. [RT #24631]
4091f8dfb71b78b53acd1b25f74e26c384750c03Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
82ecc9cd96239649dfeb0a16e31c3b978d0d266aMark Andrews record could be created and never marked complete.
a10ae596379471b0dc76ebd8025d91bf2b90bafcMark Andrews3118. [bug] nsupdate could dump core on shutdown when using
a10ae596379471b0dc76ebd8025d91bf2b90bafcMark Andrews SIG(0) keys. [RT #24604]
09ba9eacebdffc689da9851ce3bd932aedd1deddMark Andrews3117. [cleanup] Remove doc and parser references to the
d5f13fecca944fc7229dac3215581cebec3ac314Mark Andrews never-implemented 'auto-dnssec create' option.
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
53e8e0e27a3db745548a7989639b91d16f841c1fMark Andrews of DNSSEC records in signed dynamic zones. Set to
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews 'no-resign' to disable automatic RRSIG regeneration
d0c827c9c6a21a0708d97314406ff34d79bed5d8Mark Andrews while retaining the ability to sign new or changed
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews data. [RT #24533]
6f691d4893bb29cd6658b75860d93797f091da0dMark Andrews3115. [bug] Named could fail to return requested data when
3d75a3aef3c26c1957f393e4626177484f53a9d4Mark Andrews following a CNAME that points into the same zone.
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
4e259c5a2321e994708fb1fe04cd4da30aa3b612Mark Andrews inactive and there is no replacement key. [RT #23136]
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews3113. [doc] Document the relationship between serial-query-rate
fcdef14f4a82138fe835a5c3a20d5667e6f4a26cMark Andrews and NOTIFY messages.
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews3112. [doc] Add missing descriptions of the update policy name
e94754428d472bdde2cba0efdd549bac2e87b98bMark Andrews types "ms-self", "ms-subdomain", "krb5-self" and
23f2338819fd1a38a828b417eb05be95207e76e2Mark Andrews "krb5-subdomain", which allow machines to update
a53259c4cc558f86dd008eccc60cc89b6734a03cMark Andrews their own records, to the BIND 9 ARM.
a8be540f55786eb9db43ae52bcc891529602c850Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
a8be540f55786eb9db43ae52bcc891529602c850Mark Andrews dnssec-validation, added test cases to the
a8be540f55786eb9db43ae52bcc891529602c850Mark Andrews checkconf system test. [RT #24398]
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
6c52944ef2281095d1c317a45ea013b8f3cfa135Mark Andrews when attempting to sign with no KSK. [RT #24369]
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews3109. [func] The also-notify option now uses the same syntax
77fad835c56b118faf77a69af618d0bca7a16aacMark Andrews as a zone's masters clause. This means it is
e021f388dfc2ac024a103def34818af73e7e869fMark Andrews now possible to specify a TSIG key to use when
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews sending notifies to a given server, or to include
dd95acdbce0e2a2775391709cdfca0a9eda7e8f7Mark Andrews an explicit named masters list in an also-notfiy
c5eebaf6f1311662f8120a8b560e2dbbfd5c92e8Mark Andrews statement. [RT #23508]
71e7ac828e9f4f2b124455b00c3d11560aa5d4c1Mark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
1e6d80a391137b26e7250e72f6b28eb92c2b9952Mark Andrews warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
892c9a8817a454fbac32b099eb55af453b19ce86Mark Andrews code (use -P instead). [RT #20852]
af4b677e0de9c4ce67a5187039681a58f73b86eaMark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
3aca8e5bf3740bbcc3bb13dde242d7cc369abb27Mark Andrews when using -x. [RT #20852]
4d86cda3d7eb31578c9088c51a26643d43799533Mark Andrews3106. [func] When logging client requests, include the name of
cbfce73e8e020c1d08c7be7b48a849d8333eb9bfMark Andrews the TSIG key if any. [RT #23619]
84a5b69f0029952e33c96695f0a7d26c2bb8f7ccMark Andrews3105. [bug] GOST support can be suppressed by "configure
e9e869569a92c4b1d5339d3bfb22232e5b401db1Mark Andrews --without-gost" [RT #24367]
73fb13fe97cf2f1d93d5e2ea56583fdb2f40b6f3Mark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews3103. [bug] Configuring 'dnssec-validation auto' in a view
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews instead of in the options statement could trigger
e3d982f4a8e8a974231042ff4303ed8e82dfbdf9Mark Andrews an assertion failure in named-checkconf. [RT #24382]
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews3102. [func] New 'dnssec-loadkeys-interval' option configures
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews how often, in minutes, to check the key repository
e743a2b3b729df76956e903ac6a3dc3d6eea6df6Mark Andrews for updates when using automatic key maintenance.
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews Default is every 60 minutes (formerly hard-coded
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews to 12 hours). [RT #23744]
a79348a6db5eb8a5ea69c3989727418ad5a8f224Mark Andrews3101. [bug] Zones using automatic key maintenance could fail
fed3d5c2fc3fa8e1547e8b5c28c01f1095e17e5fMark Andrews to check the key repository for updates. [RT #23744]
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews3100. [security] Certain response policy zone configurations could
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews trigger an INSIST when receiving a query of type
2651dcdf758ed1db3379d7004067fb46d308ed1cMark Andrews RRSIG. [RT #24280]
21094b43a2dc4e1f569a9ed894f5369470cd1a7fMark Andrews3099. [test] "dlz" system test now runs but gives R:SKIPPED if
b03a31d98f1cf42414d321c742c9fc04be75b32bMark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
81e6a5849d61c2e710d628cf9a7b7282eaa88c46Mark Andrews3098. [bug] DLZ zones were answering without setting the AA bit.
4181218570e915959dd203c18f8cf4a03dca5d68Mark Andrews3097. [test] Add a tool to test handling of malformed packets.
ad98a8699371c9c449982fbbd8ceda91ad745f2aMark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
c1807114ce574896694e3f449c73b098fe91730fMark Andrews dst_gssapi_acceptctx(). [RT #24004]
c1807114ce574896694e3f449c73b098fe91730fMark Andrews3095. [bug] Handle isolated reserved ports in the port range.
276f1d9a380affd06e5fd9a29c30d0ebd433ed36Mark Andrews3094. [doc] Expand dns64 documentation.
055597532db52233e80f617b8b015e8caadcb577Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews3092. [bug] Signatures for records at the zone apex could go
61a4d5e7d86f3abcd63aa9254900a0cee3444215Mark Andrews stale due to an incorrect timer setting. [RT #23769]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews3091. [bug] Fixed a bug in which zone keys that were published
055597532db52233e80f617b8b015e8caadcb577Mark Andrews and then subsequently activated could fail to trigger
055597532db52233e80f617b8b015e8caadcb577Mark Andrews automatic signing. [RT #22911]
055597532db52233e80f617b8b015e8caadcb577Mark Andrews3090. [func] Make --with-gssapi default [RT #23738]
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
6cdae8730d5a287c30987516c6f99962d4e8e6beMark Andrews standard input "dnssec-dsfromkey -f -". [RT# 20662]
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews and add setup.sh in order to resolve changing
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews named.conf issue. [RT #23687]
40e7c805a8f38ad9b20dd6c688496fc09fc971c2Mark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
9076b18608d8e5cfff8fac54ef82853371fdd0d6Mark Andrews type "external" could cause a crash. [RT #23735]
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews now force an update to the new key format even if no
073bd4c4bcc2f2597521578dc6ae0f49a065626cMark Andrews other change has been specified, using "-P now -A now"
af5273ceab514c55ddcd7ebaed5d598150b6b8faMark Andrews as default values. [RT #22474]
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
3c20ae76389dd7bd2fbbb5145f51fe7f72f97f14Mark Andrews of signatures which have not yet expired but
2d2e0fff8e168012bc34a40ee24476eddab901ecMark Andrews were generated by a key that no longer exists.
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews a dynamic zone to disk; "rndc sync -clean" also
314cac23654229f5df93af0c41231fd3c2187621Mark Andrews removes the journal file after syncing. Also,
c42ab597c433e2410473b5daef8a70f12263cfc1Mark Andrews "rndc freeze" no longer removes journal files.
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews3083. [bug] NOTIFY messages were not being sent when generating
2c329da87c5c886e7f4468c69a9e6323121068cbMark Andrews a NSEC3 chain incrementally. [RT #23702]
31affb2ca39c483670ba71042ce4c984ac257232Mark Andrews3082. [port] strtok_r is threads only. [RT #23747]
aeb33b58e1979b716d1eb0521df8bc3a0aa41a52Mark Andrews3081. [bug] Failure of DNAME substitution did not return
43fe2897fc80bbec2115310ca79d432a252f3ea4Mark Andrews YXDOMAIN. [RT #23591]
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
9e50b6806e428c817bc9537457db8f0a0aeee167Mark Andrews3079. [bug] Handle isc_event_allocate failures in t_tasks.
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews3078. [func] Added a new include file with function typedefs
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews for the DLZ "dlopen" driver. [RT #23629]
0553f5554f2ecfa137565b83378f566edc8fe6abMark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
50a3801fa7845d1d345af76a379434f54fd6a84bMark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
ca155b13211202a6195b5a0f085aff06075c4300Mark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews dnssec-keyfromlabel sets the default TTL of the
31a71adf14d106260127079f6ea26bea600163e9Mark Andrews key. When possible, automatic signing will use that
4b030f887e5e51c00dac499682d0b5b870ece45bMark Andrews TTL when the key is published. [RT #23304]
110fbe3a1315b38f1491546d82937a01c40f5fdbMark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
561863ed947f18c8bfcaa631ad83a6bee3b7200bMark Andrews timestamp when determining which keys are active.
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews3074. [bug] Make the adb cache read through for zone data and
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews glue learn for zone named is authoritative for.
12e8e73d76f78649cb61ba161eb51faf851ddb4aMark Andrews3073. [bug] managed-keys changes were not properly being recorded.
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3071. [bug] has_nsec could be used unintialised in
bff602d4acc7e3facc28b8931538b77d53681f15Mark Andrews update.c:next_active. [RT #20256]
51f99a878d7449a4280b2a8db4c84acb3735f259Mark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
86c3e4bb9663719cfa16e493a145c4ff0d6f745fMark Andrews3069. [cleanup] Silence warnings messages from clang static analysis.
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews3068. [bug] Named failed to build with a OpenSSL without engine
4ab6d6464f5490a30acf1e292c7f3f26dc99d6dbMark Andrews support. [RT #23473]
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
722ebc3a47ffd2ac8f0b1a231dbd0cfd485ea2ffMark Andrews select the master/slave zones. [RT #23580]
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews3066. [func] The DLZ "dlopen" driver is now built by default,
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews no longer requiring a configure option. To
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews disable it, use "configure --without-dlopen".
3f79a8b6f1b50f8e1bc2f274bcfe91d6af74f161Mark Andrews Driver also supported on win32. [RT #23467]
c93003b0a6c063c15495f66300a1822481728fcaMark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
a4743d3d26c4dde69b80fd69bca83e0c28063425Mark Andrews operations. [RT #23469]
ac86cff0d7ff2108cd7ace66697e2de104735496Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
2a71a21346ce6a098b7daf98358d5bdced8e6eb6Mark Andrews3062. [func] Made several changes to enhance human readability
8147940ae7a7280ba12dd35614b9c987b38363faMark Andrews of DNSSEC data in dig output and in generated
a90cf89180ae8d9dfd281288cdc75940e46bfdd0Mark Andrews - DNSKEY record comments are more verbose, no
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews longer used in multiline mode only
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews - multiline RRSIG records reformatted
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews - multiline output mode for NSEC3PARAM records
d6fe7ba94969ee51a3f4298a735fbc6e11691ad8Mark Andrews - "dig +norrcomments" suppresses DNSKEY comments
fa901545edc8bb62969121e14199d533a40d0b61Tatuya JINMEI 神明達哉 - "dig +split=X" breaks hex/base64 records into
9cc53f2a0819301c2de7ab93197eee11e8a365e7Mark Andrews fields of width X; "dig +nosplit" disables this.
68ae0f83c00d9e06693f5b138a0ced5a6ceccc5cMark Andrews3061. [func] New option "dnssec-signzone -D", only write out
326449ec24b069f5ef59c8e282ae22a50aa27049Mark Andrews generated DNSSEC records. [RT #22896]
3bb3c75ebcf3a798d33a5c439b997e1f37910501Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews specification of a separate expiration date
16a68807e13caea3183a41a5292f1b3f48b81a26Mark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
a1ed9109a60911df561628e49c5c29e3b0506801Mark Andrews3059. [test] Added a regression test for change #3023.
ed18f744963c431ff76489aa01ec6fc9fac137fbMark Andrews3058. [bug] Cause named to terminate at startup or rndc reconfig/
825fccf631aa71cfbb8bfcf4e2009ca21de28f36Mark Andrews reload to fail, if a log file specified in the conf
5639d60b40db2051eb7e737d86635c621ffbfa12Mark Andrews file isn't a plain file. [RT #22771]
d0deea590e6e175c77f9b5f972fea3fc7a63577aMark Andrews3057. [bug] "rndc secroots" would abort after the first error
689023771c563d8660e45d439a207e06e96de28fMark Andrews and so could miss some views. [RT #23488]
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews3056. [func] Added support for URI resource record. [RT #23386]
fb2c34419d268d36acb222e08e6f789b45a81306Mark Andrews3055. [placeholder]
30b41c205cec69f7bde2d9afb16557b6c1e7a531Mark Andrews3054. [bug] Added elliptic curve support check in
3a1d86e8f51c953c2407e112e15b47328b6ee4feMark Andrews GOST OpenSSL engine detection. [RT #23485]
09b24007634d53673fa4a1468416d4e9ee232b7aMark Andrews3053. [bug] Under a sustained high query load with a finite
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉 max-cache-size, it was possible for cache memory
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉 to be exhausted and not recovered. [RT #23371]
455bb19b5dbf5dce6e625349acf5018fc4823adbTatuya JINMEI 神明達哉3052. [test] Fixed last autosign test report. [RT #23256]
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews3051. [bug] NS records obsure DNAME records at the bottom of the
5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342dMark Andrews zone if both are present. [RT #23035]
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews3050. [bug] The autosign system test was timing dependent.
7f2a6b0ef762b4cef9b0b2b59e7f44e4d2d4d32dMark Andrews Wait for the initial autosigning to complete
e37dff26c6bb6e2ffbba7b089ca3599d5e3e04fbMark Andrews before running the rest of the test. [RT #23035]
b712879fcb6d584bb16b3f39ec1fb6ee176e4a03Mark Andrews3049. [bug] Save and restore the gid when creating creating
21d2ebd23d1ff59d0c081baeab1a97aae1baf4a4Mark Andrews named.pid at startup. [RT #23290]
f697150aefb5d64e5bed4111aa2596a268ee8848Mark Andrews3048. [bug] Fully separate view key mangement. [RT #23419]
9baab4b1a8a5a54c04e47742c7b48311d5575a87Mark Andrews3047. [bug] DNSKEY NODATA responses not cached fixed in
c5826852e6c789f59b301f8197e65a1dd4e09a44Mark Andrews validator.c. Tests added to dnssec system test.
c0d2891f6e08fcf5379dfb9a1bf8fbbb63f1952aMark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
c426fddf168a3cdfc1c4c162365d440c89148ae4Mark Andrews and RRSIG TTL. [RT #23332]
cb75f7ce19e11e3dfedee5a50a331bf53cd2c36bMark Andrews3045. [removed] Replaced by change #3050.
1a6204b6f26677cad76ea5644dc0624aac49b451Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
9f7d51ee3290e2a064d71016a6bd555b47134a7cMark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews version 0.12) for development of future unit tests.
d8c2b1787119de43dd6b7e3927ff193ed5df682fMark Andrews Use configure --with-atf to build ATF internally
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews or configure --with-atf=prefix to use an external
8bcfe7952124a7aab5ae9fbb9420417b5be12721Mark Andrews copy. [RT #23209]
351696ef9e44e31e200afc0b019f24af6b597471Rob Austein3042. [bug] dig +trace could fail attempting to use IPv6
fbdadf789f3057a5c90ebc026dbf2d174022bd28Rob Austein addresses on systems with only IPv4 connectivity.
e9f33cdca0565d049941117d30e4c37ab3c5e990Mark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
cf6b36171770dc14b6572003b4e8aeaa22536dd4Mark Andrews ttl changes. [RT #23330]
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
9105a6a730bfb8472c48230629c5a0aebb88c422Mark Andrews with a CNAME existed between the trust anchor and the
c5a84548b24ffac37d0154d8f2f4fea36a3aeb23Mark Andrews top of the zone. [RT #23338]
9aa7706900e2451fcd6e44ffe4a45b042ec34cf3Mark Andrews3039. [func] Redirect on NXDOMAIN support. [RT #23146]
c4f9e613e12f03795bee18cf2ca8e6a9d39d6468Mark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews3037. [doc] Update COPYRIGHT to contain all the individual
e30e7913c9f0978ae60b4e4572034a4b9ffb46deMark Andrews copyright notices that cover various parts.
65356eb978747c5e68d4c6b3909642cebb8479f8Mark Andrews3036. [bug] Check built-in zone arguments to see if the zone
e8346a529a2777d1867e0bbb3440279cbddbd808Mark Andrews is re-usable or not. [RT #21914]
7de69feda2f66658ce66a8700d64ffb88d47bb6aMark Andrews3035. [cleanup] Simplify by using strlcpy. [RT #22521]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
49210da3fb6a9268725b2a7db864ade531e5d403Mark Andrews3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
5b4a9ac6bfba91acd3ba976e75b14ee065d6f95eMark Andrews3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
b0196673ab41b4f17e1c45fba160f3ea2623a06fMark Andrews3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
40fe5e7ac29b695438528c190140fec27d8d1018Mark Andrews3029. [bug] isc_netaddr_format() handle a zero sized buffer.
d562cb04df022606af43c7bee3111e4d17cbe4b2Mark Andrews3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
1d8abe0521c8e084dfcdd821173c10e0b416aeb3Mark Andrews catch NULL pointer dereferences before they happen.
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews after calling grow_headerspace() and if not
18afcb70285f2204b1586c351dd4af0a01d33f75Mark Andrews re-call grow_headerspace() until we do. [RT #22521]
32c7aa3dd18d57979990574ddb008437b59c2428Rob Austein3025. [bug] Fixed a possible deadlock due to zone resigning.
358043e40fd0c1fe312e25c28a771aafc3bd7b79Mark Andrews3024. [func] RTT Banding removed due to minor security increase
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews but major impact on resolver latency. [RT #23310]
bb50eb10edbfa31f53699304d6838716d700b85bMark Andrews3023. [bug] Named could be left in an inconsistent state when
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews receiving multiple AXFR response messages that were
7389e8330d62a059b8923fb8ca6f933caeb559d9Mark Andrews not all TSIG-signed. [RT #23254]
a5e055b9d8bc42b0e29d88960ed2a5c531fa5acbRob Austein3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
a46445468bb39318ad2a4291ace371a8c4ff9ac6Mark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
e794f1ef072b4453c4af64717429729bcf3a6a69Mark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
5f059eef4360bc6c35a38241deb2561884dd9001Mark Andrews changing the DNSKEY RRset. [RT #23232]
e180037bc15a98cac0b91ffcf464e9c96918294bMark Andrews3019. [test] Test: check apex NSEC3 records after adding DNSKEY
eeac8cfcd3ad738b435ad82fcd5c6387da643f90Mark Andrews record via UPDATE. [RT #23229]
99ba7fc5ff50823248155f4f2954ece0271b4354Mark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
d1ef96c5fb81b1edbede4228480848b58e48799eMark Andrews if a zone may need to be re-signed. [RT #23120]
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
cc3aafe737334d444781f8a34ffaf459e075bb9aMark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews3014. [placeholder]
68fb0934fd5e2f8f95a2f43e26b1208f7cbc4307Mark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
c80b5ef256d9c289c403bc90e0fbee3699552808Mark Andrews3012. [bug] Remove DNSKEY TTL change pairs before generating
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews signing records for any remaining DNSKEY changes.
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews3011. [func] Change the default query timeout from 30 seconds
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews to 10. Allow setting this in named.conf using the new
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews 'resolver-query-timeout' option, which specifies a max
b8694095f0109e23d9aaa3e84f840829b014c417Mark Andrews time in seconds. 0 means 'default' and anything longer
23fdb6a5a3d3d0e427682b68eea9553d2d326ad4Mark Andrews than 30 will be silently set to 30. [RT #22852]
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews for refreshing managed-keys. [RT #22296]
e6c95fe56b0491b533f2ca5a3ed8e8e9f74f4fd2Mark Andrews3009. [bug] clients-per-query code didn't work as expected with
1c52f228e9e2d8784273b7af76794031e480e5e8Mark Andrews particular query patterns. [RT #22972]
ea0b0c283be744d8b5810927b9981a9afe2f900dMark Andrews --- 9.8.0b1 released ---
c315e5cfead876251ee4ff5600ee67303b2729a4Mark Andrews3008. [func] Response policy zones (RPZ) support. [RT #21726]
c956fbfbbd536407a2f0ef8f138c27729d31744dMark Andrews3007. [bug] Named failed to preserve the case of domain names in
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews rdata which is not compressible when writing master
e5477896ce19a38c3b45e93c144e075565b79e9cMark Andrews files. [RT #22863]
c52d94fa4b7eaf8b7be9dfda15f9fc2c01041d51Mark Andrews3006. [func] Allow dynamically generated TSIG keys to be preserved
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews across restarts of named. Initially this is for
f66cd386cf4d0cc65b28cbaeaf540353406393a8Mark Andrews TSIG keys generated using GSSAPI. [RT #22639]
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews3005. [port] Solaris: Work around the lack of
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews gsskrb5_register_acceptor_identity() by setting
7e2c0c16d6e03058650f536a5b43cb21598ec91fMark Andrews the KRB5_KTNAME environment variable to the
6ecbd11029fa201b5f273f4ef016617dc35206aeMark Andrews contents of tkey-gssapi-keytab. Also fixed
6ecbd11029fa201b5f273f4ef016617dc35206aeMark Andrews test errors on MacOSX. [RT #22853]
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews3004. [func] DNS64 reverse support. [RT #22769]
8d5b4ce1eb7914205c6433d6575f6d11cd7a9509Mark Andrews3003. [experimental] Added update-policy match type "external",
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews enabling named to defer the decision of whether to
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews allow a dynamic update to an external daemon.
c0707105f60934d59321c2fccbc254f9e31ff28aMark Andrews (Contributed by Andrew Tridgell.) [RT #22758]
50e45d74340656422b21a5513f2d7138dfe24b7aMark Andrews3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
be00eb0795d2def3452de0da2adde74e7eda6982Mark Andrews3001. [func] Added a default trust anchor for the root zone, which
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews can be switched on by setting "dnssec-validation auto;"
2cd8fa3ef9b168429dcf76603e7b95c58317dd28Mark Andrews in the named.conf options. [RT #21727]
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews3000. [bug] More TKEY/GSS fixes:
5ba04ba7a99371afcd4d988854ee71bffdb20df4Mark Andrews - nsupdate can now get the default realm from
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews the user's Kerberos principal
f6f0bf7d4bb135ba1a421520076a47a61b6870fcMark Andrews - corrected gsstest compilation flags
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews - improved documentation
4e681da26da4fff442b3ae24b0da2de1f240c43cMark Andrews - fixed some NULL dereferences
4499c6cd5e376c59e06cd0be61f3620a1336bc5fMark Andrews2999. [func] Add GOST support (RFC 5933). [RT #20639]
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
4a6f552617fe422ad90826e48c2a3446e3a2574bMark Andrews to the task api. [RT #22776]
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews2997. [func] named -V now reports the OpenSSL and libxml2 verions
392cd518b3aff35c0396f84884cd51680edd68a1Mark Andrews it was compiled against. [RT #22687]
74def1c9c1880480bb62eb881e8a7ce28f9f7a20Mark Andrews2996. [security] Temporarily disable SO_ACCEPTFILTER support.
da059d6dd4035c1f4736e7978065c4d51893b136Mark Andrews2995. [bug] The Kerberos realm was not being correctly extracted
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews from the signer's identity. [RT #22770]
78ef0ebab3a4039f8efc8afdb7ee4b936ffc34caMark Andrews2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 do not use threads on earlier versions. Also kill
d9147148dde80db2ce3390ded26333d106d3c10bTatuya JINMEI 神明達哉 the unproven-pthreads, mit-pthreads, and ptl2 support.
ec3f1d35170225c74d11c27bb184e250d150b209Tatuya JINMEI 神明達哉2993. [func] Dynamically grow adb hash tables. [RT #21186]
71839e2a424a904a60429a380ee7685464022e4bMark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
71839e2a424a904a60429a380ee7685464022e4bMark Andrews for looking at a secure delegation. [RT #22059]
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
578f588228f5e04ccf648b6ae596f396ad6a22c9Mark Andrews dynamic zones. [RT #22365]
e0199985cfe68e8556cf0060ad8f7effbcdc5628Mark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
38e8022ace865803bdd609c9763cd7d7ba2818dcMark Andrews interval validity when the interval is set to 0.
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews2989. [func] Added support for writable DLZ zones. (Contributed
8407fbc61d73caa766c0689558525d0a76296c86Mark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
08b40678f36df355db8e7b84fa4e74f726dd2b3eMark Andrews of external DLZ drivers that can be loaded as
b9625d9be5d89015b75cc7c25088a8d1a3bb7655Mark Andrews shared objects at runtime rather than linked with
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews named. Currently this is switched on via a
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews compile-time option, "configure --with-dlz-dlopen".
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 Note: the syntax for configuring DLZ zones
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews is likely to be refined in future releases.
cc32d38366fa680fc29f9fb17bd3ebe515835445Mark Andrews (Contributed by Andrew Tridgell of the Samba
267a22597fc1c5ffd81532ec1afad36b729f6cb4Tatuya JINMEI 神明達哉 project.) [RT #22629]
c5076a76f6562b5aa48e6a1c680c343b53846157Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews adding a "tkey-gssapi-keytab" option. If set,
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews updates will be allowed with any key matching
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews a principal in the specified keytab file.
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews "tkey-gssapi-credential" is no longer required
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews and is expected to be deprecated. (Contributed
86548554f6180bbe051c8cd8f03c93fc9b6a7825Mark Andrews by Andrew Tridgell of the Samba project.)
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews zone, but the nameserver names and/or their IP
ad3b537a241f40bbb3fdc4de252881c42645021bMark Andrews addresses are statically configured. [RT #21474]
b21b49a1d43dbc44d2b15674ce03a13562165566Mark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
ea38808b7dc1b2e760f18f2cc3ae07deaf15ba1aMark Andrews2984. [bug] Don't run MX checks when the target of the MX record
de6ceebf98bedee0b1e1e81d078befbd728b801cMark Andrews is ".". [RT #22645]
349f684cf175422918d10e91e7bee747c18ae840Mark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
ed6e3610e3e56aac554dc93cad461a0016e961f9Mark Andrews --- 9.8.0a1 released ---
1cf54d1966b3de8f6593e9e80eae9a80a1c011adMark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
c3c72c1033b9d085b1a1fe74a9e3efb6db724ce2Mark Andrews increment the reference count.
b4fe7caac90b28629d207b40a77862e2535f925cMark Andrews Note: dns_tsigkey_createfromkey() callers should now
a0a19510c03e6004fd11ec278745d499751cd081Mark Andrews always call dst_key_free() rather than setting it
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews to NULL on success. [RT #22672]
c2ec022f5784a2ff844f7d062c2022197dc4ad09Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
1ae75c1024eb0475c2be352b8707772e16332ad0Mark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews2979. [bug] named could deadlock during shutdown if two
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews "rndc stop" commands were issued at the same
ed76ec2056f92ae846b260ccfb4f93e3b3f6bdebMark Andrews time. [RT #22108]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
ea17e969771f19485dc7ab2f731d641128a9ee3bMark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
5eb0659963ec2aa5158425b39620ec1b30c83c7bMark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
7952b2b43e880b18e63613805f71fd3e8624bb44Mark Andrews key. [RT #22573]
6fac7ff1f9ec9c3873d3b55c5079fa79aba1f146Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
e1f638a7141a4c1364e4ca45025241c9e2fecf74Mark Andrews wrong lock which could lead to server deadlock.
fb827ed6df9a473770fb69a75a455b4ad0d14f52Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
4995dba770c1f5f421cf22a2e9e138586a153765Mark Andrews consistency check examining the existing version
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews of the zone rather than the new version resulting
b39213ce599dc433c6f99144c97ca3d562f40344Mark Andrews from the UPDATE. [RT #22413]
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
8862388bcb44f634cbfc3e69f11ff4cb76590a4bMark Andrews at the end of configure resulting in build failures
6ec0f98cf6e88aeba1615763fdec253bf391f22eMark Andrews where there is very old version of perl installed.
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews Move it to "make maintainer-clean". [RT #22230]
80cc19dc262cead5a8af41838ebfae5a6e587605Mark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews2971. [bug] Fixed a bug that caused journal files not to be
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews compacted on Windows systems as a result of
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews any matching RRSIG records. A subsequent lookup of
8d414d155953f89a4eff40f16878438a8c9228f3Mark Andrews of NO DATA cache entry could trigger a INSIST when the
7c82b7ae3f3006e20d00529a15372d6cba133c20Mark Andrews unexpected RRSIG was also returned with the NO DATA
7d4a465de03b26bf9f5ef131d03253b8f6afc169Mark Andrews cache entry.
6e3bc2e0f715e2f3ddbfc10811303f39cce37fc6Mark Andrews CVE-2010-3613, VU#706148. [RT #22288]
0b9af9eb37f624033652f6cc463262474ee13344Mark Andrews2969. [security] Fix acl type processing so that allow-query works
85315eb5361d92ba034cecc26c3526e121392386Mark Andrews in options and view statements. Also add a new
3b1fce680f1dbe9467cd3b0ab3138ea52d5a976fMark Andrews set of tests to verify proper functioning.
ead4d2d676b12a856769d3750861c6efbb95f709Mark Andrews CVE-2010-3615, VU#510208. [RT #22418]
0822cc50657c972c6a5ee29cba9506847c7ea7c2Mark Andrews2968. [security] Named could fail to prove a data set was insecure
bdb609f5874056f6f1cd212ebf8700132e683fe5Mark Andrews before marking it as insecure. One set of conditions
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews that can trigger this occurs naturally when rolling
c5cde9d5a70c921da901a23845e740ccc7a8c4e4Mark Andrews DNSKEY algorithms.
321df4df1972da49223fc8ee1180f94b88295568Mark Andrews CVE-2010-3614, VU#837744. [RT #22309]
7f5a3cea4e93ad683b13ebef8a6589afd97fb762Mark Andrews2967. [bug] 'host -D' now turns on debugging messages earlier.
9c3df90dd3767bcc14c4028fb3d81b26d056e821Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
50105afc551903541608b11851d73278b23579a3Mark Andrews space available in the buffer when adding a left
50105afc551903541608b11851d73278b23579a3Mark Andrews justified character with a non zero width,
1285fa26e632e3b386435b730b47b5ff1a03e553Mark Andrews (e.g. "%-1c"). [RT #22270]
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
5a680f4170ba77be1e31cf1fc40ab43856919078Mark Andrews RFC 4634. [RT #21702]
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews2964. [placeholder]
8c5d451ea2898586c00932efeb5123b41afc9650Mark Andrews2963. [security] The allow-query acl was being applied instead of the
9c8fb5f756d99a4ecba95df9a00757384f3b71b7Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
fa7ee558e0536a94bfdb154a7c7ba298535459c4Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
1d7cbe71b99ea0e883a4cf8af8a91bba04a3597eMark Andrews2961. [bug] Be still more selective about the non-authoritative
7436bb66c610c039ca3dec12aac5024037898910Mark Andrews answers we apply change 2748 to. [RT #22074]
c569a0e4d518bf30be1b2ba9cc3592fe470e9822Mark Andrews2960. [func] Check that named accepts non-authoritative answers.
50105afc551903541608b11851d73278b23579a3Mark Andrews2959. [func] Check that named starts with a missing masterfile.
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews2958. [bug] named failed to start with a missing master file.
d7282a5fe88699990943df5ee6a7a48ee7ee2f7bMark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
22fa4e3206c2048cabaf75a3ae21132fd5542848Mark Andrews respectively. [RT #21962]
3f08fb69eb3b5f6eaa3c57160dff0998e1569283Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
9ce4318edbab0b50f21df9ce28beb6fde71943ecMark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
91c79af4755df2d892511512e0fc886639518a92Mark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
bf74532c942054bccc3df5227009ce52063a9dafMark Andrews build_sqldbinstance failure. [RT #21623]
2558e3f25d4972a028c99141bd26d3f3087630d5Mark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews exact match" message when returning a wildcard
821644d49b73b49f2abc5463bc53a3132f612478Mark Andrews no data response. [RT #21744]
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
74cb99072c4b0ebd2ccafcfa284288fa760f7a1aMark Andrews to initialise winsock. [RT #21932]
902aebfb5ad7c735f74f700da288dc4519b83123Mark Andrews2951. [bug] named failed to generate a correct signed response
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews in a optout, delegation only zone with no secure
22cd704fca51434f7aba193fd94d3291cc94ba2bMark Andrews delegations. [RT #22007]
7554feaef6057f5ea2926076900ac7634b911456Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews falling back to TCP on UDP timeouts when
dbc4666b1b153775001613af160541da986429b2Mark Andrews ixfr-from-differences was set. [RT #21595]
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
aa20b1b625dc406e1d9c3ff95d2a4af432e119faMark Andrews it was called multiple times. [RT #21942]
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews2948. [port] MacOS: provide a mechanism to configure the test
c4b8c7555d4abcfa4706c0551b00d71554250936Mark Andrews interfaces at reboot. See bin/tests/system/README
4b28ee17ca96def8c7e7a8a45af55da81545f20aMark Andrews for details.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2947. [placeholder]
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews2946. [doc] Document the default values for the minimum and maximum
f7e94169a9814c8e7d2ac8ac62bf0ccafb5a2cb6Mark Andrews zone refresh and retry values in the ARM. [RT #21886]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
774c3a62d9adca187b44fe90919bb409a43a2f2aMark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews2943. [func] Add support to load new keys into managed zones
1f058fb7d18d43e26ab0c9e8ce2ff6615740186aMark Andrews without signing immediately with "rndc loadkeys".
6bd3b1fdb3915931ac158b2126fae35711bd0b26Mark Andrews Add support to link keys with "dnssec-keygen -S"
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews and "dnssec-settime -S". [RT #21351]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews2941. [bug] sdb and sdlz (dlz's zone database) failed to support
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews DNAME at the zone apex. [RT #21610]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews2940. [port] Remove connection aborted error message on
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews Windows. [RT #21549]
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews that fail to match the NSEC3PARAM record currently
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews in use. [RT# 21868]
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews2938. [bug] When generating signed responses, from a signed zone
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews that uses NSEC3, named would use a uninitialised
90c4900d5cf1a1b556ae4c1de6338b2e7475ee55Mark Andrews pointer if it needed to skip a NSEC3 record because
b857ba993de91a3863de92db6462afdbec47d993Mark Andrews it didn't match the selected NSEC3PARAM record for
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews zone. [RT# 21868]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews2937. [bug] Worked around an apparent race condition in over
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews memory conditions. Without this fix a DNS cache DB or
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews ADB could incorrectly stay in an over memory state,
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews effectively refusing further caching, which
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews subsequently made a BIND 9 caching server unworkable.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews This fix prevents this problem from happening by
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews polling the state of the memory context, rather than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews making a copy of the state, which appeared to cause
029a79c8807a5378a31f0f92e9c600bd46be17c9Mark Andrews a race. This is a "workaround" in that it doesn't
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews solve the possible race per se, but several experiments
6ec7bd9c691cf7b7a1d4f507e89f2b7cb22a12dcMark Andrews proved this change solves the symptom. Also, the
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews polling overhead hasn't been reported to be an issue.
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews This bug should only affect a caching server that
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews specifies a finite max-cache-size. It's also quite
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews likely that the bug happens only when enabling threads,
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews but it's not confirmed yet. [RT #21818]
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews2936. [func] Improved configuration syntax and multiple-view
c3f9bda20f0993bc7aa4c654e7e2082adfbaa47fMark Andrews support for addzone/delzone feature (see change
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews #2930). Removed "new-zone-file" option, replaced
f0e57c23e01731ed9e7f2dae585e6c643e590111Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews for each view is now created automatically, with
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews a filename generated from a hash of the view name.
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews It is no longer necessary to "include" the
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews new-zone-file in named.conf; this happens
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews automatically. Zones that were not added via
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews "rndc addzone" can no longer be removed with
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews "rndc delzone". [RT #19447]
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews scope. This could potentially result in a unknown,
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews potentially malformed, EDNS option being sent instead
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews of the desired NSID option. [RT #21781]
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
7052e191ce63fdf063a977695718ff426a27628eMark Andrews2931. [bug] Temporarily and partially disable change 2864
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews because it would cause infinite attempts of RRSIG
7052e191ce63fdf063a977695718ff426a27628eMark Andrews queries. This is an urgent care fix; we'll
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews revisit the issue and complete the fix later.
185fd227381269568e193147a98f292210a16f2cMark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commads
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews allow dynamic addition and deletion of zones.
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews To enable this feature, specify a "new-zone-file"
d5ad558234adfef1b847b534dd7b4c6302cc5ea3Mark Andrews option at the view or options level in named.conf.
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews Zone configuration information for the new zones
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews will be written into that file. To make the new
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews zones persist after a restart, "include" the file
f853c77478af94109291ea93f800444b949be558Mark Andrews into named.conf in the appropriate view. (Note:
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews This feature is not yet documented, and its syntax
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews is expected to change.) [RT #19447]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2929. [bug] Improved handling of GSS security contexts:
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews - added LRU expiration for generated TSIGs
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews - added the ability to use a non-default realm
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews - added new "realm" keyword in nsupdate
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews - limited lifetime of generated keys to 1 hour
93a90ddd6b588a381b6894974a2d48727f19d42bMark Andrews or the lifetime of the context (whichever is
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2928. [bug] Be more selective about the non-authoritative
30b89a5ad95b5775abf6cce8ecc84a061babf76dMark Andrews answer we apply change 2748 to. [RT #21594]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews2927. [placeholder]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews2926. [placeholder]
881702c9c0079cd48a45054fd90d043f3a8b7e11Mark Andrews2925. [bug] Named failed to accept uncachable negative responses
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews from insecure zones. [RT# 21555]
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews current managed keys combined with trusted keys.
1edbf336252ea6a94d58f3f1a135567e2956e8caMark Andrews2923. [bug] 'dig +trace' could drop core after "connection
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉 timeout". [RT #21514]
8cb1558ff82868e45e76aa64e2ff72986aeebce2Tatuya JINMEI 神明達哉2922. [contrib] Update zkt to version 1.0.
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉2921. [bug] The resolver could attempt to destroy a fetch context
582b6dc68b2defc1d8795df8f1da31bd1825c30bTatuya JINMEI 神明達哉 too soon. [RT #19878]
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 to IPv4 clients. New acl 'filter-aaaa' (default any).
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
e724512f2be8d3de5f2982ebba0b2cdaf8325702Mark Andrews2917. [func] Virtual time test framework. [RT #20801]
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews2916. [func] Add framework to use IPv6 in tests.
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews2915. [cleanup] Be smarter about which objects we attempt to compile
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews based on configure options. [RT #21444]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews2914. [bug] Make the "autosign" system test more portable.
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews2913. [func] Add pkcs#11 system tests. [RT #20784]
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews2912. [func] Windows clients don't like UPDATE responses that clear
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews the zone section. [RT #20986]
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was specified in named.conf. [RT #21416]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
600cbd1fcea3c9cc9706dc1ff8fc0d0034ebdeacTatuya JINMEI 神明達哉 a DNSKEY. [RT #21384]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2907. [bug] The export version of libdns had undefined references.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2905. [port] aix: set use_atomic=yes with native compiler.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2904. [bug] When using DLV, sub-zones of the zones in the DLV,
baee883e378402698eeb7326538a7d432c8350d1Mark Andrews could be incorrectly marked as insecure instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews secure leading to negative proofs failing. This was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a unintended outcome from change 2890. [RT# 21392]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2903. [bug] managed-keys-directory missing from namedconf.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2902. [func] Add regression test for change 2897. [RT #21040]
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2900. [bug] The placeholder negative caching element was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews properly constructed triggering a INSIST in
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews dns_ncache_towire(). [RT #21346]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2899. [port] win32: Support linking against OpenSSL 1.0.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2898. [bug] nslookup leaked memory when -domain=value was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified. [RT #21301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to insecure. [RT #21040]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2896. [bug] "rndc sign" failed to properly update the zone
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews when adding a DNSKEY for publication only. [RT #21045]
4607e7a9b8dfb1b41c70e51c2b603daaf22cf302Mark Andrews2895. [func] genrandom: add support for the generation of multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews files. [RT #20917]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2893. [bug] Improve managed keys support. New named.conf option
f58233ec6c8b5866083bbaf5083ac9ade6bebe3aMark Andrews managed-keys-directory. [RT #20924]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2892. [bug] Handle REVOKED keys better. [RT #20961]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2891. [maint] Update empty-zones list to match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2890. [bug] Handle the introduction of new trusted-keys and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DS, DLV RRsets better. [RT #21097]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2889. [bug] Elements of the grammar where not properly reported.
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews2888. [bug] Only the first EDNS option was displayed. [RT #21273]
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews2887. [bug] Report the keytag times in UTC in the .key file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews local time is presented as a comment within the
cc6271e46c775592f39a1e8b4e2cb1ff457e2f89Mark Andrews comment. [RT #21223]
87c7b822b7bcdd8bec7ba1c01937286308b4847cMark Andrews2886. [bug] ctime() is not thread safe. [RT #21223]
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews2885. [bug] Improve -fno-strict-aliasing support probing in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure. [RT #21080]
a4b3e51a8f1c9742c0f7d9f7d70f1ad926985145Mark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews2883. [bug] 'dig +short' failed to handle really large datasets.
f488b1c311f2fc09ae8e45f7893185e608b17edeMark Andrews2882. [bug] Remove memory context from list of active contexts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before clearing 'magic'. [RT #21274]
4bb16c5856e5c6b05ac43c60f9f9376641bdcccfMark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is held when closing a version. [RT #21198]
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistent. [RT #21078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2878. [func] Incrementally write the master file after performing
471e0563c7965c556c759775882cd3448dae78eaMark Andrews a AXFR. [RT #21010]
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews2877. [bug] The validator failed to skip obviously mismatching
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RRSIGs. [RT #21138]
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from unsigned zones. [RT #21131]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2874. [bug] Cache lack of EDNS support only after the server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews successfully responds to the query using plain DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2873. [bug] Cancelling a dynamic update via the dns/client module
72ddc4cef9c6a6de53aae530dea1ddbb90631131Mark Andrews could trigger an assertion failure. [RT #21133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews require one of IPv4 or IPv6 rather than both.
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews2871. [bug] Type mismatch in mem_api.c between the definition and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the header file, causing build failure with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --enable-exportlib. [RT #21138]
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
edfcbabd60f8479b72d91bcc2d2082a36ace4003Mark Andrews any changes made by configure are integrated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use --with-make-clean=no to disable. [RT #20994]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
21f1794606dce19928cf455029e173321f166380Mark Andrews don't like it. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2865. [bug] memset to zero event.data. [RT #20986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
fc87397df60d3c5e5d9900ff5ac82da29fe1dbb7Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews updating DS records. [RT #20896]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inactivation time. [RT #21039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2859. [bug] When cancelling validation it was possible to leak
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #20800]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews2856. [bug] The size of a memory allocation was not always properly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews recorded. [RT #20927]
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews2855. [func] nsupdate will now preserve the entered case of domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews names in update requests it sends. [RT #20928]
163547c0c064251e97c74538c5ede3232b3f0ffaMark Andrews2854. [func] dig: allow the final soa record in a axfr response to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be suppressed, dig +onesoa. [RT #20929]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
07a849ba02aba7e8e869bc82c360fcc4b27eb009Mark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
806c235ecf533b98d068b3f8df9d7abbe1e30cf9Mark Andrews2851. [doc] nslookup.1, removed <informalexample> from the docbook
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source as it produced bad nroff. [RT #21007]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the heap would have corrupted entries. [RT #20951]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
8ca42f6318be756354b70260050132545aa680d3Mark Andrews README.rfc5011 into the ARM. [RT #20899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2846. [bug] EOF on unix domain sockets was not being handled
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly. [RT #20731]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
ea6fe0d54f36754c195b3b8dac47c81f7993677eMark Andrews been five (5) seconds.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
6bd8cee98332533a4fa705b82ca9ec1606738ba9Mark Andrews creating key files if there is a chance that the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key ID will collide with an existing one after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews either of the keys has been revoked. (To override
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews this in the case of dnssec-keyfromlabel, use the -y
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option. dnssec-keygen will simply create a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews different, non-colliding key, so an override is
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews not necessary.) [RT #20838]
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec" regression tests. [RT #20865]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews2839. [bug] A KSK revoked by named could not be deleted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2838. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2836. [bug] Keys that were scheduled to become active could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be delayed. [RT #20874]
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the private key file with the outdated tag
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "Unpublish" rather than "Inactive". This has been
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews fixed; however, any existing keys that had Inactive
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dates set will now need to have them reset, using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'dnssec-settime -I'. [RT #20868]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews digest length were used incorrectly, leading to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interoperability problems with other DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementations. This has been corrected.
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews (Note: If an oversize key is in use, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatibility is needed with an older release of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews BIND, the new tool "isc-hmac-fixup" can convert
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews the key secret to a form that will work with all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews versions.) [RT #20751]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to avoid redefinition in some OSs [RT 20831]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2831. [security] Do not attempt to validate or cache
463fc8f9d61e07613486e64b4b7b3f924ea2b25cMark Andrews out-of-bailiwick data returned with a secure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews answer; it must be re-fetched from its original
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews source and validated in that context. [RT #20819]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews passes. [RT #20813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2829. [bug] Fixed potential node inconsistency in rbtdb.c.
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without DNSSEC validation. [RT #20737]
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being released. [RT #20740]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was in the process of being created was not properly
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews recorded in the zone. [RT #20786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews2820. [func] Handle read access failure of OpenSSL configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file more user friendly (PKCS#11 engine patch).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews2818. [cleanup] rndc could return an incorrect error code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a zone was not found. [RT #20767]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews2816. [bug] previous_closest_nsec() could fail to return
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews data for NSEC3 nodes [RT #29730]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews2814. [func] Provide a definitive error message when a master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone is not loaded. [RT #20757]
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews2812. [bug] Make sure updates can't result in a zone with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews output. [RT #20733]
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews to insecure. [RT #20746]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews atomic.h is correctly installed by the architecture
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews specific subdirectories. [RT #20722]
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews keys. [RT #20720]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews --- 9.7.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when it had changed. [RT #20703]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2805. [bug] Fixed namespace problems encountered when building
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews external programs using non-exported BIND9 libraries
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews (i.e., built without --enable-exportlib). [RT #20679]
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or as a result of a scheduled key change. [RT #20700]
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and genrandom under windows. [RT #20670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2801. [func] Detect and report records that are different according
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to DNSSEC but are semantically equal according to plain
d92770e851ebbc1005b3bf121e3c9f13b67a3f42Mark Andrews DNS. Apply plain DNS comparisons rather than DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews comparisons when processing UPDATE requests.
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews dnssec-signzone now removes such semantically duplicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records prior to signing the RRset.
90295f915c883d1aeeda856f518584d4219a704aMark Andrews named-checkzone -r {ignore|warn|fail} (default warn)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews named.conf: check-dup-records {ignore|warn|fail};
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2800. [func] Reject zones which have NS records which refer to
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews CNAMEs, DNAMEs or don't have address record (class IN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only). Reject UPDATEs which would cause the zone
99776003811a413457a2c35a808ad860df877d24Mark Andrews to fail the above checks if committed. [RT #20678]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews2798. [bug] Addressed bugs in managed-keys initialization
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and rollover. [RT #20683]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2797. [bug] Don't decrement the dispatch manager's maxbuffers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews log messages. [RT #18889]
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉2793. [func] Add "autosign" and "metadata" tests to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews automatic tests. [RT #19946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options (if compiled in). [RT #20635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2791. [bug] The installation of isc-config.sh was broken.
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉2790. [bug] Handle DS queries to stub zones. [RT #20440]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2788. [bug] dnssec-signzone could sign with keys that were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not requested [RT #20625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2787. [bug] Spurious log message when zone keys were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamically reconfigured. [RT #20659]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2786. [bug] Additional could be promoted to answer. [RT #20663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2784. [bug] TC was not always being set when required glue was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dropped. [RT #20655]
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews buffer size of 512 or less. [RT #20654]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews activation date in all cases. [RT #20648]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews without deleting the unrevoked version. [RT #20638]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in dnssec-keyfromlabel. [RT #20643]
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉2774. [bug] Existing cache DB wasn't being reused after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reconfiguration. [RT #20629]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2773. [bug] In autosigned zones, the SOA could be signed
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews with the KSK. [RT #20628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2772. [security] When validating, track whether pending data was from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the additional section or not and only return it if
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews validates as secure. [RT #20438]
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews corrupted when importing from key files [RT #20624]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing FORMERR responses. [RT #20526]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2767. [bug] named could crash on startup if a zone was
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews configured with auto-dnssec and there was no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-directory. [RT #20615]
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socketmgr state if the socket is not pending on a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews read or write. [RT #20603]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2765. [bug] Skip masters for which the TSIG key cannot be found.
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2762. [bug] DLV validation failed with a local slave DLV zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2761. [cleanup] Enable internal symbol table for backtrace only for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews systems that are known to work. Currently, BSD
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews variants, Linux and Solaris are supported. [RT# 20202]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2759. [doc] Add information about .jbk/.jnw files to
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews the ARM. [RT #20303]
4c342614f80d867bba23e63795ec6ee79dd6395dMark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that could cause the UDP client handler to shut
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews down. [RT #19176]
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews2757. [bug] dig: assertion failure could occur in connect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timeout. [RT #20599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews2755. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was signed with NSEC3. [RT #20587]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2753. [bug] Removed an unnecessary warning that could appear when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews building an NSEC chain. [RT #20589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2752. [bug] Locking violation. [RT #20587]
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2750. [bug] dig: assertion failure could occur when a server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews didn't have an address. [RT #20579]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer for NSEC3 signed zones. [RT #20452]
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as referrals. [RT #18884]
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews time of RRSIGs correctly. [RT #20541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
1431917c7cddbac7442cb910e83cb058fea59fb5Mark Andrews2745. [bug] configure script didn't probe the return type of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews gai_strerror(3) correctly. [RT #20573]
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
012a2b979e011b13ba0d291c279dc65a167c039eMark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for a insecure delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0b2 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews suppressed (dnssec-keygen -q). Automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppress the progress messages when stdin is not
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews a tty. [RT #20474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2740. [placeholder]
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews anchors for a view. [RT #20211]
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews test. [RT #20453]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2737. [func] UPDATE requests can leak existence information.
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more than a normal amount of glue below a delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2735. [bug] dnssec-signzone could fail to read keys
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews that were specified on the command line with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews full paths, but weren't in the current
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews directory. [RT #20421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
86f6b92e35c7bdb5fc1fd1021af75b981863313eMark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if built with './configure --enable-filter-aaaa'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Filters out AAAA answers to clients connecting
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews via IPv4. (This is NOT recommended for general
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews use.) [RT #20339]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2731. [func] Additional work on change 2709. The key parser
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews will now ignore unrecognized fields when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews minor version number of the private key format
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has been increased. It will reject any key with
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews the major version number increased. [RT #20310]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews a la 'openssl genrsa' on standard error. Note
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when the first '.' is followed by a long stop
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews one has the choice between slow generation vs.
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TTL. [RT #20451]
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone now warn immediately if asked to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews write into a nonexistent directory. [RT #20278]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2727. [func] The 'key-directory' option can now specify a relative
020f7361a49c5b1cda91927cf8206c1283fc7496Mark Andrews path. [RT #20154]
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews2725. [doc] Added information about the file "managed-keys.bind"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the ARM. [RT #20235]
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were failing. [RT #20448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews isc_base64_totext(), didn't always mark regions of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory as fully consumed after conversion. [RT #20445]
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews2722. [bug] Ensure that the memory associated with the name of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a node in a rbt tree is not altered during the life
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews of the node. [RT #20431]
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generator. [RT #20369]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrect. [RT #20394]
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the last private type record was removed as a result
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of completing the signing the zone with a key.
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews --- 9.7.0b1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
e2cf63c5df79eb7c8b86b6278289883fa760cda5Mark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2713. [bug] powerpc: atomic operations missing asm("ics") /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews __isync() calls.
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be fully automated in zones configured for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamic DNS. 'auto-dnssec allow;' permits a zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be signed by creating keys for it in the
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews key-directory and using 'rndc sign <zone>'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews also keeps the zone's DNSSEC keys up to date
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews according to their timing metadata. [RT #19943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews build. [RT #20372]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews zone option cause a zone to be signed with only KSKs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the size of a DNSKEY answer. [RT #20340]
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews2709. [func] Added some data fields, currently unused, to the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews private key file format, to allow implementation
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews of explicit key rollover in a future release
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without impairing backward or forward compatibility.
c549b3a4d5fedba2ae960df667864e824acb1ef9Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews update are now fully supported and no longer require
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defines to enable. We now no longer overload the
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews apex. Secure to insecure changes are controlled by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by the named.conf option 'secure-to-insecure'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Warning: If you had previously enabled support by
8f9664521724eefc39728c092d0bc6be527e1496Mark Andrews adding defines at compile time to BIND 9.6 you should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ensure that all changes that are in progress have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews is not backwards compatible.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be specified in the label if there is a default
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews engine or the -E option has been used. Also, it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now uses default algorithms as dnssec-keygen does
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews trigger an assert. [RT #20368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2705. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2704. [bug] Serial of dynamic and stub zones could be inconsistent
5b1627d469d07c5bfe7f193e3ddd85d0dd6ad4b0Mark Andrews with their SOA serial. [RT #19387]
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for all binaries which can take benefit of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews crypto hardware. [RT #20230]
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
acc8b7ac3d16538bf223545bbf71899b9accaebbMark Andrews supported TSIG key algorithm. [RT #18046]
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2698. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
e396939d492e6afa8e31a8dc11d7317c9e62f15fMark Andrews S_IFREG are defined after including <isc/stat.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2696. [bug] named failed to successfully process some valid
3d822d111c00e70830dc163a5298196a1e7db29fMark Andrews acl constructs. [RT #20308]
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews callback functon for isc_socket_fdwatchcreate)
4c83dd7f22b19c75afdd311684f6ba0faa24e8d8Mark Andrews to include information about the direction (read
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or write) and add isc_socket_fdwatchpoke.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews chain when re-signing a previously-signed zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use -u to modify NSEC3 parameters or switch
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews between NSEC and NSEC3. [RT #20304]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to decide to fetch the destination address. [RT #20305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Also, added warnings when revoking a ZSK, as this is
88c2b83cc548a217cc92a2bf75ca1ef1d4237d4fMark Andrews not defined by protocol (but is legal). [RT #19943]
bd6ad47c3dbc52a54f240432878b6832bd6dd6e2Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews +adflag and +cdflag. [RT #19305]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews the NSEC3 parameters used to sign the zone change.
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews2682. [bug] "configure --enable-symtable=all" failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews build. [RT #20282]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews decoded. [RT #20269]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews format. [RT #20031]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews was set. [RT #20258]
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews2677. [func] Changes to key metadata behavior:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - Keys without "publish" or "active" dates set will
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no longer be used for smart signing. However,
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews those dates will be set to "now" by default when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a key is created; to generate a key but not use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it yet, use dnssec-keygen -G.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews sets the time when a key is no longer used for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing but is still published.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - The "unpublished" date (-U) is deprecated in
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews favour of "deleted" (-D).
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews2676. [bug] --with-export-installdir should have been
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --with-export-includedir. [RT #20252]
c08a03a43116c21cf12dea7cbcb5465588f7955cMark Andrews2675. [bug] dnssec-signzone could crash if the key directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews did not exist. [RT #20232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0a3 released ---
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews without openssl. [RT #20231]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2673. [bug] The managed-keys.bind zone file could fail to
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews load due to a spurious result from sync_keyzone()
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lookups. [RT #20218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2671. [bug] Add support for PKCS#11 providers not returning
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews the public exponent in RSA private keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (OpenCryptoki for instance) in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-keyfromlabel. [RT #19294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews information to be useful. [RT #20205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews - dnssec-keygen and dnssec-settime can now set key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews metadata fields 0 (to unset a value, use "none")
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-revoke sets the revocation date in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addition to the revoke bit
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews - dnssec-settime can now print individual metadata
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fields instead of always printing all of them,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and can print them in unix epoch time format for
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews use by scripts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2667. [func] Add support for logging stack backtrace on assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure (not available for all platforms). [RT #19780]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews (API change from 9.7.0a2). [RT #20196]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ARM documentation about RFC 5011 support. [RT #19874]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2664. [bug] create_keydata() and minimal_update() in zone.c
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews didn't properly check return values for some
c00a1eb423623442aff428336bb55590f79013bbMark Andrews functions. [RT #19956]
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews2663. [func] win32: allow named to run as a service using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington returned a misleading error code when lwresd was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews down. [RT #20028]
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews creating lwres context. [RT #20029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews applications. See README.libdns. [RT #19369]
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews name for DNSSEC keys. [RT #19938]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key file paths correctly. [RT #20078]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews log level to debug 1. [RT #20058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2656. [func] win32: add a "tools only" check box to the installer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which causes it to only install dig, host, nslookup,
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews nsupdate and relevant DLLs. [RT #19998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2655. [doc] Document that key-directory does not affect
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews bind.keys, rndc.key or session.key. [RT #20155]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2654. [bug] Improve error reporting on duplicated names for
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews deny-answer-xxx. [RT #20164]
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not found rather than out of memory. [RT #18033]
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews2652. [func] Provide more detail about what record is being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deleted. [RT #20061]
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 64-bit systems. [RT #20076]
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews2650. [bug] Assertion failure in dnssec-signzone when trying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to read keyset-* files. [RT #20075]
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2647. [bug] Remove unnecessary SOA updates when a new KSK is
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews added. [RT #19913]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which default to 64 bits. [RT #19927]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0a2 released ---
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named was unable to write the PID file and would
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail on startup. [RT #20001]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2642. [bug] nsupdate could dump core on solaris when reading
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improperly formatted key files. [RT #20015]
986be654feec852eb9da0d15599f18d0035e569bMark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews added a regression test to check it. [RT #20007]
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews2640. [security] A specially crafted update packet will cause named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to exit. [RT #20000]
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2638. [bug] Install arpaname. [RT #19957]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-* tools. Major changes:
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews - all dnssec-* tools now take a -K option to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specify a directory in which key files will be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - DNSSEC can now store metadata indicating when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews they are scheduled to be published, activated,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews revoked or removed; these values can be set by
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews dnssec-keygen or overwritten by the new
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-settime command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - dnssec-signzone -S (for "smart") option reads key
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews metadata and uses it to determine automatically
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews which keys to publish to the zone, use for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews signing, revoke, or remove from the zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2634. [port] win32: Add support for libxml2, enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statschannel. [RT #19773]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2632. [func] util/kit.sh: warn if documentation appears to be out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews date. [RT #19922]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #19926 ]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "update-policy local;" to switch on local DDNS in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone. (The "ddns-autoconf" option has been removed.)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews setresgid() if not present. [RT #19932]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at startup with reduced capabilities in operation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2627. [bug] Named aborted if the same key was included in
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington trusted-keys more than once. [RT #19918]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2626. [bug] Multiple trusted-keys could trigger an assertion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure. [RT #19914]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington2624. [func] 'named-checkconf -p' will print out the parsed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration. [RT #18871]
683f10428e292811317df38fa324f242abbf7384Mark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews2620. [bug] Delay thawing the zone until the reload of it has
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completed successfully. [RT #19750]
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maintenance. The new "managed-keys" statement can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be used in place of "trusted-keys" for zones which
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington support this protocol. (Note: this syntax is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington2618. [bug] The sdb and sdlz db_interator_seek() methods could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loop infinitely. [RT #19847]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2617. [bug] ifconfig.sh failed to emit an error message when
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington run from the wrong location. [RT #19375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a explicit nameserver was specified. [RT #19852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2615. [bug] "__attribute__((unused))" was in the wrong place
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews for ia64 gcc builds. [RT #19854]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2614. [port] win32: 'named -v' should automatically be executed
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews in the foreground. [RT #19844]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2613. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.7.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2612. [func] Add default values for the arguments to
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews dnssec-keygen. Without arguments, it will now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews generate a 1024-bit RSASHA1 zone-signing key,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or with the -f KSK option, a 2048-bit RSASHA1
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews key-signing key. [RT #19300]
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLV records instead of DS records. [RT #19300]
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews2610. [port] sunos: Change #2363 was not complete. [RT #19796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2609. [func] Simplify the configuration of dynamic zones:
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews - add ddns-confgen command to generate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configuration text for named.conf
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add zone option "ddns-autoconf yes;", which
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson causes named to generate a TSIG session key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and allow updates to the zone using that key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews - add '-l' (localhost) option to nsupdate, which
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews causes nsupdate to connect to a locally-running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named process using the session key generated
77467267d97c781f3f3d050e229a874831e59c3dMark Andrews2608. [func] Perform post signing verification checks in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signzone. These can be disabled with -P.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The post sign verification test ensures that for each
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews algorithm in use there is at least one non revoked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews self signed KSK key. That all revoked KSK keys are
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews self signed. That all records in the zone are signed
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews by the algorithm. [RT #19653]
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty nodes when processing a update request.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2606. [bug] "delegation-only" was not being accepted in
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson delegation-only type zones. [RT #19717]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2605. [bug] Accept DS responses from delegation only zones.
23fb770906bf1fd98210f16ad660078274242963Mark Andrews [RT # 19296]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2604. [func] Add support for DNS rebinding attack prevention through
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington new options, deny-answer-addresses and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deny-answer-aliases. Based on contributed code from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews JD Nurmi, Google. [RT #18192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews named-comilezone argv[0] names under windows.
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews2602. [port] win32: fix debugging command line build of libisccfg.
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson2601. [doc] Mention file creation mode mask in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named manual page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2600. [doc] ARM: miscellaneous reformatting for different
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews page widths. [RT #19574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2599. [bug] Address rapid memory growth when validation fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2598. [func] Reserve the -F flag. [RT #19657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2597. [bug] Handle a validation failure with a insecure delegation
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson long, leading to inefficient memory usage or rejecting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews newer cache entries in the worst case. [RT #19563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2594. [func] Have rndc warn if using its default configuration
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews file when the key file also exists. [RT #19424]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews2591. [bug] named could die when processing a update in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed_orphaned_ds(). [RT #19507]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2590. [func] Report zone/class of "update with no effect".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2588. [bug] SO_REUSEADDR could be set unconditionally after failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of bind(2) call. This should be rare and mostly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews harmless, but may cause interference with other
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson processes that happen to use the same port. [RT #19642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2587. [func] Improve logging by reporting serial numbers for
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington when zone serial has gone backwards or unchanged.
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or SDB. [RT #19577]
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington2585. [bug] Uninitialized socket name could be referenced via a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics channel, triggering an assertion failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews XML rendering. [RT #19427]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2583. [port] netbsd: provide a control to not add the compile
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson date to the version string, -DNO_VERSION_DATE.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2582. [bug] Don't emit warning log message when we attempt to
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews remove non-existent journal. [RT #19516]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2580. [bug] UpdateRej statistics counter could be incremented twice
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for one rejection. [RT #19476]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2579. [bug] DNSSEC lookaside validation failed to handle unknown
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithms. [RT #19479]
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 65535 turns out to be reserved. [RT #19477]
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews2577. [doc] Clarified some statistics counters. [RT #19454]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2576. [bug] NSEC record were not being correctly signed when
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson a zone transitions from insecure to secure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Handle such incorrectly signed zones. [RT #19114]
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews2575. [func] New functions dns_name_fromstring() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_tostring(), to simplify conversion
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of a string to a dns_name structure and vice
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews versa. [RT #19451]
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson2574. [doc] Document nsupdate -g and -o. [RT #19351]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2573. [bug] Replacing a non-CNAME record with a CNAME record in a
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews single transaction in a signed zone failed. [RT #19397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2572. [func] Simplify DLV configuration, with a new option
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "dnssec-lookaside auto;" This is the equivalent
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson of "dnssec-lookaside . trust-anchor dlv.isc.org;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews plus setting a trusted-key for dlv.isc.org.
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson Note: The trusted key is hard-coded into named,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but is also stored in (and can be overridden
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rolls over it can be kept up to date by replacing
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington the bind.keys file with a key downloaded from
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson2571. [func] Add a new tool "arpaname" which translates IP addresses
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews2570. [func] Log the destination address the query was sent to.
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "make install" will put them in $sbindir. [RT #19301]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2568. [bug] Report when the write to indicate a otherwise
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson successful start fails. [RT #19360]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson write_public_key() could miss write errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-dsfromkey could miss write errors.
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews response arrives from a zone thought to be secure:
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer "insecurity proof failed" instead of "not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews insecure". [RT #19400]
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson2565. [func] Add support for HIP record. Includes new functions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and dns_rdata_hip_current(). [RT #19384]
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson2564. [bug] Only take EDNS fallback steps when processing timeouts.
a8fb98aff8a186bf80fa4e48cc3e99a42939dd0aMark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to exit. [RT #19359]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2562. [doc] ARM: miscellaneous improvements, reorganization,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and some new content.
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2559. [bug] dnssec-dsfromkey could compute bad DS records when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reading from a K* files. [RT #19357]
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson2558. [func] Set the ownership of missing directories created
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for pid-file if -u has been specified on the command
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews line. [RT #19328]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2557. [cleanup] PCI compliance:
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer * new libisc log module file
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * isc_dir_chroot() now also changes the working
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson directory to "/".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional INSISTs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * additional logging when files can't be removed.
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error checks in the correct order resulting in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong error code sometimes being returned. [RT #19249]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2555. [func] dig: when emitting a hex dump also display the
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer corresponding characters. [RT #19258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews fail. [RT #19297]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honoured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews out-of-range area of the source buffer. New public
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function isc_mem_reallocate() was introduced to address
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews this bug. [RT #19313]
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL (in place of internal routine) for hash
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
f9321a16fb8dce8999a43a6d4008c54845305401Mark Andrews for SRV RDATA too. [RT #19304]
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2542. [doc] Update the description of dig +adflag. [RT #19290]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews2541. [bug] Conditionally update dispatch manager statistics.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2539. [security] Update the interaction between recursion, allow-query,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache and allow-recursion. [RT #19198]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews especially with threads and smaller max-cache-size
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews values. [RT #19240]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2537. [func] Added more statistics counters including those on socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews I/O events and query RTT histograms. [RT #18802]
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified. [RT #19083]
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews2534. [func] Check NAPTR records regular expressions and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replacement strings to ensure they are syntactically
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews valid and consistant. [RT #18168]
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2532. [bug] dig: check the question section of the response to
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews see if it matches the asked question. [RT #18495]
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson2531. [bug] Change #2207 was incomplete. [RT #19098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2530. [bug] named failed to reject insecure to secure transitions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via UPDATE. [RT #19101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews version of autoconf. [RT #18657]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson2528. [cleanup] Silence spurious configure warning about
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --datarootdir [RT #19096]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2527. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2526. [func] New named option "attach-cache" that allows multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews views to share a single cache to save memory and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews improve lookup efficiency. Based on contributed code
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews from Barclay Osborn, Google. [RT #18905]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2525. [func] New logging category "query-errors" to provide detailed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews internal information about query failures, especially
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews about server failures. [RT #19027]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2523. [bug] Random type rdata freed by dns_nsec_typepresent().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson #2388 made the schema incompatible to the previous
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews version. [RT #19080]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson2519. [bug] dig/host with -4 or -6 didn't work if more than two
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver addresses of the excluded address family
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews preceded in resolv.conf. [RT #19081]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nameserver address of the excluded address type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2516. [bug] glue sort for responses was performed even when not
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews needed. [RT #19039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a nameserver of the excluded address family.
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews2513. [bug] Fix windows cli build. [RT #19062]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2512. [func] Print a summary of the cached records which make up
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews the negative response. [RT #18885]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2509. [bug] Specifying a fixed query source port was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2508. [placeholder]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson2507. [func] Log the recursion quota values when killing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews oldest query or refusing to recurse due to quota.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2506. [port] solaris: Check at configure time if
07eaf0b8d0c3c93d8139c413bf9cc8bba7db9432Mark Andrews hack_shutup_pthreadonceinit is needed. [RT #19037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews atomic operation support. [RT #19031]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2504. [bug] Address race condition in the socket code. [RT #18899]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2503. [port] linux: improve compatibility with Linux Standard
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Base. [RT #18793]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews document function in <isc/radix.h>. [RT #18534]
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews2501. [func] $GENERATE now supports all rdata types. Multi-field
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdata types need to be quoted. See the ARM for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews details. [RT #18368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function. [RT #18582]
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson --- 9.6.0rc1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2498. [bug] Removed a bogus function argument used with
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews warning or crash named with the debug 1 level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of logging. [RT #18917]
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson2495. [bug] Tighten RRSIG checks. [RT #18795]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews installed. [RT #18826]
9bdb01e6c382e897572791b12190472955994d87Mark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews up after itself. [RT #18767]
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson2492. [func] Rndc status now reports the number of cpus discovered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and the number of worker threads when running
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multi-threaded. [RT #18273]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2491. [func] Attempt to re-use a local port if we are already using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the port. [RT #18548]
61d5bfc06be978ea962b1c64309894ac80351771Mark Andrews2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is cleared when IPV6_V6ONLY is set. [RT #18785]
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson Define ISC_SOCKET_USE_POLLWATCH at build time to enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this workaround. [RT #18870]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson from keyset and .key files. [RT #18694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson2486. [func] The default locations for named.pid and lwresd.pid
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This allows the owner of the containing directory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to be set, for "named -u" support, and allows there
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson to be a permanent symbolic link in the path, for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "named -t" support. [RT #18306]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson2485. [bug] Change update's the handling of obscured RRSIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews records. Not all orphaned DS records were being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removed. [RT #18828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2484. [bug] It was possible to trigger a REQUIRE failure when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adding NSEC3 proofs to the response in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query_addwildcardproof(). [RT #18828]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to 2.6.*. [RT #18806]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0b1 released ---
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews collisions. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2480. [bug] named could fail to emit all the required NSEC3
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews records. [RT #18812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2478. [bug] 'addresses' could be used uninitialized in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure_forward(). [RT #18800]
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews2477. [bug] dig: the global option to print the command line is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews +cmd not print_cmd. Update the output to reflect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this. [RT #17008]
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson2476. [doc] ARM: improve documentation for max-journal-size and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson2475. [bug] LRU cache cleanup under overmem condition could purge
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews particular entries more aggressively. [RT #17628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2474. [bug] ACL structures could be allocated with insufficient
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson space, causing an array overrun. [RT #18765]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2473. [port] linux: raise the limit on open files to the possible
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews maximum value before spawning threads; 'files'
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson specified in named.conf doesn't seem to work with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews threads as expected. [RT #18784]
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson2472. [port] linux: check the number of available cpu's before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson2471. [bug] named-checkzone was not reporting missing mandatory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews glue when sibling checks were disabled. [RT #18768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2470. [bug] Elements of the isc_radix_node_t could be incorrectly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews overwritten. [RT# 18719]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2469. [port] solaris: Work around Solaris's select() limitations.
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews2468. [bug] Resolver could try unreachable servers multiple times.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2465. [bug] Adb's handling of lame addresses was different
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson for IPv4 and IPv6. [RT #18738]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2464. [port] linux: check that a capability is present before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trying to set it. [RT #18135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API and glibc hides parts of the IPv6 Advanced Socket
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson API as a result. This is stupid as it breaks how the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews two halves (Basic and Advanced) of the IPv6 Socket API
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were designed to be used but we have to live with it.
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews API. [RT #18388]
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson2462. [doc] Document -m (enable memory usage debugging)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option for dig. [RT #18757]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson2461. [port] sunos: Change #2363 was not complete. [RT #17513]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.6.0a1 released ---
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2458. [doc] ARM: update and correction for max-cache-size.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2457. [tuning] max-cache-size is reverted to 0, the previous
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson default. It should be safe because expired cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries are also purged. [RT #18684]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address, regardless of family. They now correctly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews distinguish IPv4 from IPv6. [RT #18559]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson2453. [bug] Remove NULL pointer dereference in dns_journal_print().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2452. [func] Improve bin/test/journalprint. [RT #18316]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2451. [port] solaris: handle runtime linking better. [RT #18356]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson2450. [doc] Fix lwresd docbook problem for manual page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2449. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2448. [func] Add NSEC3 support. [RT #15452]
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer2447. [cleanup] libbind has been split out as a separate product.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2446. [func] Add a new log message about build options on startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews A new command-line option '-V' for named is also
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews provided to show this information. [RT# 18645]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2445. [doc] ARM out-of-date on empty reverse zones (list includes
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews RFC1918 address, but these are not yet compiled in).
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (clear DF) for UDP responses and requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2443. [bug] win32: UDP connect() would not generate an event,
36e37042c6c9252cdf6eb99bd71ccb6e6c43ba6dBrian Wellington and so connected UDP sockets would never clean up.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Fix this by doing an immediate WSAConnect() rather
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews than an io completion port type for UDP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2442. [bug] A lock could be destroyed twice. [RT# 18626]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2441. [bug] isc_radix_insert() could copy radix tree nodes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incompletely. [RT #18573]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2440. [bug] named-checkconf used an incorrect test to determine
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if an ACL was set to none.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson2437. [bug] Sockets could be closed too early, leading to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews inconsistent states in the socket module. [RT #18298]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson2435. [bug] Fixed an ACL memory leak affecting win32.
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson2434. [bug] Fixed a minor error-reporting bug in
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson2433. [tuning] Set initial timeout to 800ms.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2432. [bug] More Windows socket handling improvements. Stop
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using I/O events and use IO Completion Ports
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews throughout. Rewrite the receive path logic to make
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it easier to support multiple simultaneous
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson requesters in the future. Add stricter consistency
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews checking as a compile-time option (define
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2431. [bug] Acl processing could leak memory. [RT #18323]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2430. [bug] win32: isc_interval_set() could round down to
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson zero if the input was less than NS_INTERVAL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nanoseconds. Round up instead. [RT #18549]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson2429. [doc] nsupdate should be in section 1 of the man pages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews tables. [RT #18409]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was set. [RT #18528]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong value if excessively large net masks are
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson supplied. [RT #18512]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2425. [bug] named didn't detect unavailable query source addresses
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews at load time. [RT #18536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2424. [port] configure now probes for a working epoll
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implementation. Allow the use of kqueue,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews epoll and /dev/poll to be selected at compile
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews time. [RT #18277]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2423. [security] Randomize server selection on queries, so as to
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews make forgery a little more difficult. Instead of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews always preferring the server with the lowest RTT,
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson pick a server with RTT within the same 128
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews millisecond band. [RT #18441]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson2422. [bug] Handle the special return value of a empty node as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if it was a NXRRSET in the validator. [RT #18447]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson2421. [func] Add new command line option '-S' for named to specify
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the max number of sockets. [RT #18493]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use caution: this option may not work for some
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews operating systems without rebuilding named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2420. [bug] Windows socket handling cleanup. Let the io
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews completion event send out canceled read/write
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews done events, which keeps us from writing to memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews we no longer have ownership of. Add debugging
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews socket_log() function. Rework TCP socket handling
06a960c681566a163af5b9a655cf36023075ddcbMark Andrews to not leak sockets.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews should not be used for isc_sockettype_fdwatch sockets.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2417. [bug] Connecting UDP sockets for outgoing queries could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpectedly fail with an 'address already in use'
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer error. [RT #18411]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2416. [func] Log file descriptors that cause exceeding the
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer internal maximum. [RT #18460]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2415. [bug] 'rndc dumpdb' could trigger various assertion failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in rbtdb.c. [RT #18455]
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews2414. [bug] A masterdump context held the database lock too long,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing various troubles such as dead lock and
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson recursive lock acquisition. [RT #18311, #18456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews2412. [bug] win32: address a resource leak. [RT #18374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
330b421487d7c3a5e699472fe889aa633772057fMark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at compilation time. [RT #18433]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: with changes #2469 and #2421 above, there is no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2410. [bug] Correctly delete m_versionInfo. [RT #18432]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2409. [bug] Only log that we disabled EDNS processing if we were
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews subsequently successful. [RT #18029]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2408. [bug] A duplicate TCP dispatch event could be sent, which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could then trigger an assertion failure in
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews resquery_response(). [RT #18275]
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2406. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2405. [cleanup] The default value for dnssec-validation was changed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "yes" in 9.5.0-P1 and all subsequent releases; this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was inadvertently omitted from CHANGES at the time.
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson2404. [port] hpux: files unlimited support.
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews2403. [bug] TSIG context leak. [RT #18341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2402. [port] Support Solaris 2.11 and over. [RT #18362]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2401. [bug] Expect to get E[MN]FILE errno internal_accept()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (from accept() or fcntl() system calls). [RT #18358]
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2399. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2398. [bug] Improve file descriptor management. New,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews temporary, named.conf option reserved-sockets,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews default 512. [RT #18344]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2397. [bug] gssapi_functions had too many elements. [RT #18355]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2396. [bug] Don't set SO_REUSEADDR for randomized ports.
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson2395. [port] Avoid warning and no effect from "files unlimited"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on Linux when running as root. [RT #18335]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2394. [bug] Default configuration options set the limit for
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson open files to 'unlimited' as described in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation. [RT #18331]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson2393. [bug] nested acls containing keys could trigger an
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews assertion in acl.c. [RT #18166]
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson2392. [bug] remove 'grep -q' from acl test script, some platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews don't support it. [RT #18253]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2391. [port] hpux: cover additional recvmsg() error codes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2390. [bug] dispatch.c could make a false warning on 'odd socket'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT #18301].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2389. [bug] Move the "working directory writable" check to after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the ns_os_changeuser() call. [RT #18326]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson2388. [bug] Avoid using tables for layout purposes in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews statistics XSL [RT #18159].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington [RT #18147] [RT #18258]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2386. [func] Add warning about too small 'open files' limit.
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington2385. [bug] A condition variable in socket.c could leak in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rare error handling [RT #17968].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2384. [security] Fully randomize UDP query ports to improve
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews forgery resilience. [RT #17949, #18098]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2383. [bug] named could double queries when they resulted in
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington SERVFAIL due to overkilling EDNS0 failure detection.
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington mysql. <prefix>/include/{,mysql/}mysql.h and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews proofs which, in turn, caused validation failures
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for insecure zones immediately below a secure zone
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson the server was authoritative for. [RT #18112]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2376. [bug] Change #2144 was not complete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2375. [placeholder]
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson2374. [bug] "blackhole" ACLs could cause named to segfault due
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to some uninitialized memory. [RT #18095]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews new zone was configured, causing an overconsumption
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of memory. [RT #18092]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2370. [bug] "rndc freeze" could trigger an assertion in named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when called on a nonexistent zone. [RT #18050]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2368. [port] Linux: use libcap for capability management if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews possible. [RT# 18026]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2367. [bug] Improve counting of dns_resstatscounter_retry
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2366. [bug] Adb shutdown race. [RT #18021]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spurious results. [RT #18000]
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington2364. [bug] named could trigger a assertion when serving a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews malformed signed zone. [RT #17828]
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson2362. [cleanup] Make "rrset-order fixed" a compile-time option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews settable by "./configure --enable-fixed-rrset".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Disabled by default. [RT #17977]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2361. [bug] "recursion" statistics counter could be counted
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multiple times for a single query. [RT #17990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2360. [bug] Fix a condition where we release a database version
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (which may acquire a lock) while holding the lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2359. [bug] Fix NSID bug. [RT #17942]
debff476ad3512687a354499c25d2793e2009acdBrian Wellington2358. [doc] Update host's default query description. [RT #17934]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson2357. [port] Don't use OpenSSL's engine support in versions before
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL 0.9.7f. [RT #17922]
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson2356. [bug] Built in mutex profiler was not scalable enough.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2355. [func] Extend the number statistics counters available.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2354. [bug] Failed to initialize some rdatasetheader_t elements.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2353. [func] Add support for Name Server ID (RFC 5001).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'dig +nsid' requests NSID from server.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson 'request-nsid yes;' causes recursive server to send
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NSID requests to upstream servers. Server responds
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to NSID requests with the string configured by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'server-id' option. [RT #17091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2352. [bug] Various GSS_API fixups. [RT #17729]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2350. [port] win32: IPv6 support. [RT #17797]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2349. [func] Provide incremental re-signing support for secure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dynamic zones. [RT #1091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence Documentation is in the new README.pkcs11 file.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New tool, dnssec-keyfromlabel, which takes the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews label of a key pair in a HSM and constructs a DNS
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews key pair for use by named and dnssec-signzone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2347. [bug] Delete now traverses the RB tree in the canonical
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence order. [RT #17451]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in increased detail. [RT #17580]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence2345. [bug] named-checkconf failed to detect when forwarders
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were set at both the options/view level and in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a root zone. [RT #17671]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson2344. [bug] Improve "logging{ file ...; };" documentation.
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington2343. [bug] (Seemingly) duplicate IPv6 entries could be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews created in ADB. [RT #17837]
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2341. [bug] libbind: add missing -I../include for off source
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson tree builds. [RT #17606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2340. [port] openbsd: interface configuration. [RT #17700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2338. [bug] check_ds() could be called with a non DS rdataset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson interfaces if there are not listen-on-v6 clauses in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2335. [port] sunos: libbind and *printf() support for long long.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence bug in fromstruct_txt(). [RT #17609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2333. [bug] Fix off by one error in isc_time_nowplusinterval().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2331. [bug] Failure to regenerate any signatures was not being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reported nor being past back to the UPDATE client.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2330. [bug] Remove potential race condition when handling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews over memory events. [RT #17572]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews WARNING: API CHANGE: over memory callback
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews function now needs to call isc_mem_waterack().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See <isc/mem.h> for details.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2329. [bug] Clearer help text for dig's '-x' and '-i' options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2327. [bug] It was possible to dereference a NULL pointer in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rbtdb.c. Implement dead node processing in zones as
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews we do for caches. [RT #17312]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2326. [bug] It was possible to trigger a INSIST in the acache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2325. [port] Linux: use capset() function if available. [RT #17557]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2323. [port] tru64: namespace clash. [RT #17547]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2322. [port] MacOS: work around the limitation of setrlimit()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for RLIMIT_NOFILE. [RT #17526]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2321. [placeholder]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2320. [func] Make statistics counters thread-safe for platforms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that support certain atomic operations. [RT #17466]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2319. [bug] Silence Coverity warnings in
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2318. [port] sunos fixes for libbind. [RT #17514]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2315. [bug] Used incorrect address family for mapped IPv4
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews addresses in acl.c. [RT #17519]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2314. [bug] Uninitialized memory use on error path in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews [RT #17447] [RT #17478]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2311. [bug] IPv6 addresses could match IPv4 ACL entries and
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews vice versa. [RT #17462]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2310. [bug] dig, host, nslookup: flush stdout before emitting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug/fatal messages. [RT #17501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2306. [bug] Remove potential race from lib/dns/resolver.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2305. [security] inet_network() buffer overflow. CVE-2008-0122.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2304. [bug] Check returns from all dns_rdata_tostruct() calls.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2301. [bug] Remove resource leak and fix error messages in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2300. [bug] Fixed failure to close open file in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2299. [bug] Remove unnecessary NULL check in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2298. [bug] isc_mutex_lock() failure not caught in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2297. [bug] isc_entropy_createfilesource() failure not caught in
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2296. [port] Allow docbook stylesheet location to be specified to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configure. [RT #17457]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2294. [func] Allow the experimental statistics channels to have
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multiple connections and ACL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: the stats-server and stats-server-v6 options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available in the previous beta releases are replaced
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence with the generic statistics-channels statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2293. [func] Add ACL regression test. [RT #17375]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2292. [bug] Log if the working directory is not writable.
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure to set PR_SET_DUMPABLE. [RT #17312]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2290. [bug] Let AD in the query signal that the client wants AD
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set in the response. [RT #17301]
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews2289. [func] named-checkzone now reports the out-of-zone CNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found. [RT #17309]
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews2288. [port] win32: mark service as running when we have finished
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loading. [RT #17441]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2286. [func] Allow a TCP connection to be used as a weak
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson authentication method for reverse zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New update-policy methods tcp-self and 6to4-self.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2285. [func] Test framework for client memory context management.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2284. [bug] Memory leak in UPDATE prerequisite processing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2283. [bug] TSIG keys were not attaching to the memory
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence context. TSIG keys should use the rings
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory context rather than the clients memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews context. [RT #17377]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2280. [func] Allow the experimental http server to be reached
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews over IPv6 as well as IPv4. [RT #17332]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to protect applications from receiving spurious
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SIGPIPE signals when using the resolver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2278. [bug] win32: handle the case where Windows returns no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews search list or DNS suffix. [RT #17354]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2277. [bug] Empty zone names were not correctly being caught at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the post parse checks. [RT #17357]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2275. [func] Add support to dig to perform IXFR queries over UDP.
5455f30a7532738d750252c00e649890c694ee30Brian Wellington2274. [func] Log zone transfer statistics. [RT #17336]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2273. [bug] Adjust log level to WARNING when saving inconsistent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stub/slave master and journal files. [RT# 17279]
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2271. [bug] Fix a memory leak in http server code [RT #17100]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before it is tested. [RT #17290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson --- 9.5.0b1 released ---
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson2267. [bug] Radix tree node_num value could be set incorrectly,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causing positive ACL matches to look like negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ones. [RT #17311]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson2266. [bug] client.c:get_clientmctx() returned the same mctx
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews once the pool of mctx's was filled. [RT #17218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2265. [bug] Test that the memory context's basic_table is non NULL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews before freeing. [RT #17265]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2264. [bug] Server prefix length was being ignored. [RT #17308]
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson2263. [bug] "named-checkconf -z" failed to set default value
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for "check-integrity". [RT #17306]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2262. [bug] Error status from all but the last view could be
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson lost. [RT #17292]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson2260. [bug] Reported wrong clients-per-query when increasing the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews value. [RT #17236]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2259. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a7 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2257. [bug] win32: Use the full path to vcredist_x86.exe when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews calling it. [RT #17222]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2256. [bug] win32: Correctly register the installation location of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2254. [bug] timer.c:dispatch() failed to lock timer->lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when reading timer->idle allowing it to see
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson intermediate values as timer->idle was reset by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_timer_touch(). [RT #17243]
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson2253. [func] "max-cache-size" defaults to 32M.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "max-acache-size" defaults to 16M.
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington2252. [bug] Fixed errors in sortlist code [RT #17216]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2251. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory statistics file should be written or not.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Additionally named's -m option will cause the
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson statistics file to be written. [RT #17113]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2249. [bug] Only set Authentic Data bit if client requested
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC, per RFC 3655 [RT #17175]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2247. [doc] Sort doc/misc/options. [RT #17067]
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson2246. [bug] Make the startup of test servers (ans.pl) more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews robust. [RT #17147]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson2245. [bug] Validating lack of DS records at trust anchors wasn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews working. [RT #17151]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2244. [func] Allow the check of nameserver names against the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SOA MNAME field to be disabled by specifying
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'notify-to-soa yes;'. [RT #17073]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2243. [func] Configuration files without a newline at the end now
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parse without error. [RT #17120]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson library could require a source of random data.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a number of INSIST()s into plain fatal() errors
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson which report the triggering result code.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The 'key' command wasn't disabling GSS-TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2238. [bug] It was possible to trigger a REQUIRE when a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation was canceled. [RT #17106]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington2236. [bug] dnssec-signzone failed to preserve the case of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of wildcard owner names. [RT #17085]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2233. [func] Add support for O(1) ACL processing, based on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews radix tree code originally written by Kevin
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Brintnall. [RT #16288]
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson2232. [bug] dns_adb_findaddrinfo() could fail and return
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_R_SUCCESS. [RT #17137]
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2230. [bug] We could INSIST reading a corrupted journal.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2229. [bug] Null pointer dereference on query pool creation
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington failure. [RT #17133]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2228. [contrib] contrib: Change 2188 was incomplete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2227. [cleanup] Tidied up the FAQ. [RT #17121]
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington2226. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2225. [bug] More support for systems with no IPv4 addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2224. [bug] Defer journal compaction if a xfrin is in progress.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2223. [bug] Make a new journal when compacting. [RT #17119]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2222. [func] named-checkconf now checks server key references.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2221. [bug] Set the event result code to reflect the actual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews record turned to caller when a cache update is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rejected due to a more credible answer existing.
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington2220. [bug] win32: Address a race condition in final shutdown of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the Windows socket code. [RT #17028]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington2219. [bug] Apply zone consistency checks to additions, not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews removals, when updating. [RT #17049]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2217. [func] Adjust update log levels. [RT #17092]
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson2216. [cleanup] Fix a number of errors reported by Coverity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson2214. [bug] Deregister OpenSSL lock callback when cleaning
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews up. Reorder OpenSSL cleanup so that RAND_cleanup()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is called before the locks are destroyed. [RT #17098]
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington2213. [bug] SIG0 diagnostic failure messages were looking at the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews wrong status code. [RT #17101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2212. [func] 'host -m' now causes memory statistics and active
3bd8e7cf1c082cd1021e5a6cae1cf21911217858Brian Wellington memory to be printed at exit. [RT 17028]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2211. [func] Update "dynamic update temporarily disabled" message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2210. [bug] Deleting class specific records via UPDATE could
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson fail. [RT #17074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2209. [port] osx: linking against user supplied static OpenSSL
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson libraries failed as the system ones were still being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews found. [RT #17078]
b0390aab30438a13f533cccae9389945214b1421Brian Wellington2208. [port] win32: make sure both build methods produce the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews same output. [RT #17058]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2207. [port] Some implementations of getaddrinfo() fail to set
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington ai_canonname correctly. [RT #17061]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson --- 9.5.0a6 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2206. [security] "allow-query-cache" and "allow-recursion" now
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington cross inherit from each other.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-query-cache is not set in named.conf then
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-recursion is used if set, otherwise allow-query
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson is used if set, otherwise the default (localnets;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews localhost;) is used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-recursion is not set in named.conf then
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache is used if set, otherwise allow-query
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is used if set, otherwise the default (localnets;
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington localhost;) is used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2204. [bug] "rndc flushanme name unknown-view" caused named
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence to crash. [RT #16984]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2203. [security] Query id generation was cryptographically weak.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews [RT # 16915]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2202. [security] The default acls for allow-query-cache and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-recursion were not being applied. [RT #16960]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2201. [bug] The build failed in a separate object directory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2200. [bug] The search for cached NSEC records was stopping to
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington early leading to excessive DLV queries. [RT #16930]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2199. [bug] win32: don't call WSAStartup() while loading dlls.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley2198. [bug] win32: RegCloseKey() could be called when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RegOpenKeyEx() failed. [RT #16911]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2197. [bug] Add INSIST to catch negative responses which are
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley not setting the event result code appropriately.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2196. [port] win32: yield processor while waiting for once to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to complete. [RT #16958]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when generating DNSKEYs. [RT #16954]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2194. [bug] Close journal before calling 'done' in xfrin.c.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson --- 9.5.0a5 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2193. [port] win32: BINDInstall.exe is now linked statically.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Studio's redistributable dlls if building with
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington Visual Stdio 2005 or later.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2191. [func] named-checkzone now allows dumping to stdout (-).
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley named-checkconf now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkzone now has -h for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc now has -h for help.
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington Better handling of '-?' for usage summaries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2190. [func] Make fallback to plain DNS from EDNS due to timeouts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews more visible. New logging category "edns-disabled".
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2189. [bug] Handle socket() returning EINTR. [RT #15949]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2188. [contrib] queryperf: autoconf changes to make the search for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews libresolv or libbind more robust. [RT #16299]
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews2187. [bug] query_addds(), query_addwildcardproof() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query_addnxrrsetnsec() should take a version
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews argument. [RT #16368]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson independently of IPv6. [RT #16482]
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2185. [port] sunos: libbind: check for ssize_t, memmove() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memchr(). [RT #16463]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2184. [bug] bind9.xsl.h didn't build out of the source tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2183. [bug] dnssec-signzone didn't handle offline private keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews well. [RT #16832]
df0f58959ed82a2a43ca8d816ce9592541df9f2fMark Andrews2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews could return ISC_R_SUCCESS when they ran out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory. [RT #16365]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2180. [cleanup] Remove bit test from 'compress_test' as they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are no longer needed. [RT #16497]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2179. [func] 'rndc command zone' will now find 'zone' if it is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unique to all the views. [RT #16821]
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2178. [bug] 'rndc reload' of a slave or stub zone resulted in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a reference leak. [RT #16867]
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington2177. [bug] Array bounds overrun on read (rcodetext) at
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews debug level 10+. [RT #16798]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2176. [contrib] dbus update to handle race condition during
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington initialization (Bugzilla 235809). [RT #16842]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2175. [bug] win32: windows broadcast condition variable support
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson was broken. [RT #16592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2174. [bug] I/O errors should always be fatal when reading
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley master files. [RT #16825]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2173. [port] win32: When compiling with MSVS 2005 SP1 we also
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson --- 9.5.0a4 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2172. [bug] query_addsoa() was being called with a non zone db.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2171. [bug] Handle breaks in DNSSEC trust chains where the parent
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington servers are not DS aware (DS queries to the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews return a referral to the child).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2170. [func] Add acache processing to test suite. [RT #16711]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2169. [bug] host, nslookup: when reporting NXDOMAIN report the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews given name and not the last name searched for.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2168. [bug] nsupdate: in non-interactive mode treat syntax errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as fatal errors. [RT #16785]
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson2167. [bug] When re-using a automatic zone named failed to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attach it to the new view. [RT #16786]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a3 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2166. [bug] When running in batch mode, dig could misinterpret
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson a server address as a name to be looked up, causing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unexpected output. [RT #16743]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2165. [func] Allow the destination address of a query to determine
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson if we will answer the query or recurse.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-on, allow-recursion-on and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query-cache-on. [RT #16291]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2164. [bug] The code to determine how named-checkzone /
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington named-compilezone was called failed under windows.
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2163. [bug] If only one of query-source and query-source-v6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified a port the query pools code broke (change
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 2129). [RT #16768]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2162. [func] Allow "rrset-order fixed" to be disabled at compile
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson time. [RT #16665]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2161. [bug] Fix which log messages are emitted for 'rndc flush'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from getifaddrs(). [RT #16708]
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington --- 9.5.0a2 released ---
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington2159. [bug] Array bounds overrun in acache processing. [RT #16710]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2158. [bug] ns_client_isself() failed to initialize key
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leading to a REQUIRE failure. [RT #16688]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley2157. [func] dns_db_transfernode() created. [RT #16685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
8e68489885e744ab48907414b4199c36858c27ddMark Andrews resolver.c:validated() and resolver.c:cache_name().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Fix a memory leak in rbtdb.c:free_noqname().
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson Make lookup.c:lookup_find() robust against
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews event leaks. [RT #16685]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched in acls by omitting the scope. [RT #16599]
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2153. [bug] nsupdate could leak memory. [RT #16691]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2152. [cleanup] Use sizeof(buf) instead of fixed number in
7427490a67b9547242b57c255254f7e146127c48Bob Halley dighost.c:get_trusted_key(). [RT #16678]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2151. [bug] Missing newline in usage message for journalprint.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2150. [bug] 'rrset-order cyclic' uniformly distribute the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews starting point for the first response for a given
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson RRset. [RT #16655]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2149. [bug] isc_mem_checkdestroyed() failed to abort on
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews if there were still active memory contexts.
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson2148. [func] Add positive logging for rndc commands. [RT #14623]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2147. [bug] libbind: remove potential buffer overflow from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington SO_BSDCOMPAT" message. [RT #16641]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2145. [bug] Check DS/DLV digest lengths for known digests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2143. [bug] We failed to restart the IPv6 client when the
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington kernel failed to return the destination the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews packet was sent to. [RT #16613]
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson2142. [bug] Handle master files with a modification time that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matches the epoch. [RT# 16612]
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews equivalent of LDH checks). [RT #16609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2140. [bug] libbind: missing unlock on pthread_key_create()
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews failures. [RT #16654]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2139. [bug] dns_view_find() was being called with wrong type
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews in adb.c. [RT #16670]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2138. [bug] Lock order reversal in resolver.c. [RT #16653]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2137. [port] Mips little endian and/or mips 64 bit are now
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington supported for atomic operations. [RT#16648]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2136. [bug] nslookup/host looped if there was no search list
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson and the host didn't exist. [RT #16657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2134. [func] Additional statistics support. [RT #16666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2133. [port] powerpc: Support both IBM and MacOS Power PC
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson assembler syntaxes. [RT #16647]
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson2132. [bug] Missing unlock on out of memory in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_dispatchmgr_setudp().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington2130. [func] Log if CD or DO were set. [RT #16640]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2129. [func] Provide a pool of UDP sockets for queries to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews made over. See use-queryport-pool, queryport-pool-ports
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington and queryport-pool-updateinterval. [RT #16415]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson2126. [security] Serialize validation of type ANY responses. [RT #16555]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington was defined. [RT #16574]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2124. [security] It was possible to dereference a freed fetch
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington context. [RT #16584]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --- 9.5.0a1 released ---
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2123. [func] Use Doxygen to generate internal documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2122. [func] Experimental http server and statistics support
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington for named via xml.
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews second timeout. [RT #16553]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson2120. [doc] Fix markup on nsupdate man page. [RT #16556]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2119. [compat] libbind: allow res_init() to succeed enough to
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington return the default domain even if it was unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to allocate memory.
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington2118. [bug] Handle response with long chains of domain name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compression pointers which point to other compression
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews pointers. [RT #16427]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews which could lead to validation failures. named didn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews handle negative DS responses that were in the process
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews of being validated. Check CNAME bit before accepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NODATA proof. To be able to ignore a child NSEC there
d72269740049af28b091ba81d68a067c88f53547Mark Andrews must be SOA (and NS) set in the bitmap. [RT #16399]
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews2116. [bug] 'rndc reload' could cause the cache to continually
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be cleaned. [RT #16401]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews2115. [bug] 'rndc reconfig' could trigger a INSIST if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number of masters for a zone was reduced. [RT #16444]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2114. [bug] dig/host/nslookup: searches for names with multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews labels were failing. [RT #16447]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington2113. [bug] nsupdate: if a zone is specified it should be used
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for server discover. [RT# 16455]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2112. [security] Warn if weak RSA exponent is used. [RT #16460]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2111. [bug] Fix a number of errors reported by Coverity.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews priming queries. [RT #16491]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2108. [func] DHCID support. [RT #16456]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews2106. [func] 'rndc status' now reports named's version. [RT #16426]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2105. [func] GSS-TSIG support (RFC 3645).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2104. [port] Fix Solaris SMF error message.
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington2103. [port] Add /usr/sfw to list of locations for OpenSSL
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews under Solaris.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2102. [port] Silence Solaris 10 warnings.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2101. [bug] OpenSSL version checks were not quite right.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2100. [port] win32: copy libeay32.dll to Build\Debug.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Copy Debug\named-checkzone to Debug\named-compilezone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2099. [port] win32: more manifest issues.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2098. [bug] Race in rbtdb.c:no_references(), which occasionally
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington triggered an INSIST failure about the node lock
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reference. [RT #16411]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2097. [bug] named could reference a destroyed memory context
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after being reloaded / reconfigured. [RT #16428]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2096. [bug] libbind: handle applications that fail to detect
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson res_init() failures better.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews net_cidr_ntop_ipv6(). [RT #16388]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2094. [contrib] Update named-bootconf. [RT# 16404]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2093. [bug] named-checkzone -s was broken.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2092. [bug] win32: dig, host, nslookup. Use registry config
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if resolv.conf does not exist or no nameservers
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson listed. [RT #15877]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2091. [port] dighost.c: race condition on cleanup. [RT #16417]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2090. [port] win32: Visual C++ 2005 command line manifest support.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2089. [security] Raise the minimum safe OpenSSL versions to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington prior to these have known security flaws which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are (potentially) exploitable in named. [RT #16391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2088. [security] Change the default RSA exponent from 3 to 65537.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2086. [port] libbind: FreeBSD now has get*by*_r() functions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2085. [doc] win32: added index.html and README to zip. [RT #16201]
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer2084. [contrib] dbus update for 9.3.3rc2.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2083. [port] win32: Visual C++ 2005 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2082. [doc] Document 'cache-file' as a test only option.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2080. [port] libbind: res_init.c did not compile on older versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of Solaris. [RT #16363]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2079. [bug] The lame cache was not handling multiple types
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews correctly. [RT #16361]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2078. [bug] dnssec-checkzone output style "default" was badly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named. It is now called "relative". [RT #16326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews complete signed zone. [RT #16326]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2076. [bug] Several files were missing #include <config.h>
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson causing build failures on OSF. [RT #16341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2075. [bug] The spillat timer event hander could leak memory.
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_request_createraw2() and dns_request_createraw3()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to send multiple UDP requests. [RT #16349]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2073. [bug] Incorrect semantics check for update policy "wildcard".
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews2072. [bug] We were not generating valid HMAC SHA digests.
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews2071. [port] Test whether gcc accepts -fno-strict-aliasing.
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson2070. [bug] The remote address was not always displayed when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reporting dispatch failures. [RT #16315]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2069. [bug] Cross compiling was not working. [RT #16330]
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson2068. [cleanup] Lower incremental tuning message to debug 1.
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington2067. [bug] 'rndc' could close the socket too early triggering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a INSIST under Windows. [RT #16317]
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence2066. [security] Handle SIG queries gracefully. [RT #16300]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2065. [bug] libbind: probe for HPUX prototypes for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews endprotoent_r() and endservent_r(). [RT 16313]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2063. [bug] Change #1955 introduced a bug which caused the first
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc flush' call to not free memory. [RT #16244]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2062. [bug] 'dig +nssearch' was reusing a buffer before it had
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews been returned by the socket code. [RT #16307]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2061. [bug] Accept expired wildcard message reversed. [RT #16296]
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence2060. [bug] Enabling DLZ support could leave views partially
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews configured. [RT #16295]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2059. [bug] Search into cache rbtdb could trigger an INSIST
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence failure while cleaning up a stale rdataset.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2058. [bug] Adjust how we calculate rtt estimates in the presence
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of authoritative servers that drop EDNS and/or CD
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson requests. Also fallback to EDNS/512 and plain DNS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews faster for zones with less than 3 servers. [RT #16187]
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews2057. [bug] Make setting "ra" dependent on both allow-query-cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and allow-recursion. [RT #16290]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2056. [bug] dig: ixfr= was not being treated case insensitively
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at all times. [RT #15955]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2055. [bug] Missing goto after dropping multicast query.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2054. [port] freebsd: do not explicitly link against -lpthread.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2052. [bug] 'rndc' improve connect failed message to report
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the failing address. [RT #15978]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2051. [port] More strtol() fixes. [RT #16249]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2050. [bug] Parsing of NSAP records was not case insensitive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2049. [bug] Restore SOA before AXFR when falling back from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a attempted IXFR when transferring in a zone.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson Allow a initial SOA query before attempting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a AXFR to be requested. [RT #16156]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2048. [bug] It was possible to loop forever when using
f53848e17123569387b279578f0100dca5407da5Mark Andrews avoid-v4-udp-ports / avoid-v6-udp-ports when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the OS always returned the same local port.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2047. [bug] Failed to initialize the interface flags to zero.
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cleanup [RT #16247].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2045. [func] Use lock buckets for acache entries to limit memory
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews consumption. [RT #16183]
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington2044. [port] Add support for atomic operations for Itanium.
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2043. [port] nsupdate/nslookup: Force the flushing of the prompt
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for interactive sessions. [RT#16148]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2042. [bug] named-checkconf was incorrectly rejecting the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews logging category "config". [RT #16117]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set of libraries to be linked. [RT #16129]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson2040. [bug] rbtdb no_references() could trigger an INSIST
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure with --enable-atomic. [RT #16022]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2039. [func] Check that all buffers passed to the socket code
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have been retrieved when the socket event is freed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2038. [bug] dig/nslookup/host was unlinking from wrong list
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence when handling errors. [RT #16122]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2037. [func] When unlinking the first or last element in a list
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews check that the list head points to the element to
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence be unlinked. [RT #15959]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2035. [func] Make falling back to TCP on UDP refresh failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews optional. Default "try-tcp-refresh yes;" for BIND 8
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews compatibility. [RT #16123]
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington2033. [bug] We weren't creating multiple client memory contexts
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on demand as expected. [RT #16095]
253f774e358dba38742a484426a4cadf4f248817Brian Wellington2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2031. [bug] Emit a error message when "rndc refresh" is called on
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington a non slave/stub zone. [RT # 16073]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2030. [bug] We were being overly conservative when disabling
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson openssl engine support. [RT #16030]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2029. [bug] host printed out the server multiple times when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified on the command line. [RT #15992]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2028. [port] linux: socket.c compatibility for old systems.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2027. [port] libbind: Solaris x86 support. [RT #16020]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2026. [bug] Rate limit the two recursive client exceeded messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2025. [func] Update "zone serial unchanged" message. [RT #16026]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington2024. [bug] named emitted spurious "zone serial unchanged"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages on reload. [RT #16027]
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer2023. [bug] "make install" should create ${localstatedir}/run and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ${sysconfdir} if they do not exist. [RT #16033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2022. [bug] If dnssec validation is disabled only assert CD if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CD was requested. [RT #16037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2021. [bug] dnssec-enable no; triggered a REQUIRE. [RT #16037]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2020. [bug] rdataset_setadditional() could leak memory. [RT #16034]
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington2019. [tuning] Reduce the amount of work performed per quantum
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when cleaning the cache. [RT #15986]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2018. [bug] Checking if the HMAC MD5 private file was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2017. [bug] allow-query default was not correct. [RT #15946]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2016. [bug] Return a partial answer if recursion is not
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington allowed but requested and we had the answer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to the original qname. [RT #15945]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson2015. [cleanup] use-additional-cache is now acache-enable for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consistency. Default acache-enable off in BIND 9.4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as it requires memory usage to be configured.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews It may be enabled by default in BIND 9.5 once we
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson have more experience with it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2014. [func] Statistics about acache now recorded and sent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to log. [RT #15976]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington responses more gracefully. [RT #15941]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2012. [func] Don't insert new acache entries if acache is full.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2011. [func] dnssec-signzone can now update the SOA record of
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson the signed zone, either as an increment or as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews system time(). [RT #15633]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2010. [placeholder] rt15958
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2009. [bug] libbind: Coverity fixes. [RT #15808]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2008. [func] It is now possible to enable/disable DNSSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation from rndc. This is useful for the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews mobile hosts where the current connection point
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews breaks DNSSEC (firewall/proxy). [RT #15592]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rndc validation newstate [view]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2007. [func] It is now possible to explicitly enable DNSSEC
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson validation. default dnssec-validation no; to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be changed to yes in 9.5.0. [RT #15674]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2006. [security] Allow-query-cache and allow-recursion now default
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson to the built in acls "localnets" and "localhost".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This is being done to make caching servers less
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews attractive as reflective amplifying targets for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews spoofed traffic. This still leave authoritative
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson servers exposed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews The best fix is for full BCP 38 deployment to
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews remove spoofed traffic.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2005. [bug] libbind: Retransmission timeouts should be
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley based on which attempt it is to the nameserver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and not the nameserver itself. [RT #13548]
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2004. [bug] dns_tsig_sign() could pass a NULL pointer to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_context_destroy() when cleaning up after a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews error. [RT #15835]
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews2003. [bug] libbind: The DNS name/address lookup functions could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews occasionally follow a random pointer due to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews structures not being completely zeroed. [RT #15806]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2002. [bug] libbind: tighten the constraints on when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews struct addrinfo._ai_pad exists. [RT #15783]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2001. [func] Check the KSK flag when updating a secure dynamic zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New zone option "update-check-ksk yes;". [RT #15817]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews2000. [bug] memmove()/strtol() fix was incomplete. [RT #15812]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1999. [func] Implement "rrset-order fixed". [RT #13662]
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington1998. [bug] Restrict handling of fifos as sockets to just SunOS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This allows named to connect to entropy gathering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews daemons that use fifos instead of sockets. [RT #15840]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1997. [bug] Named was failing to replace negative cache entries
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when a positive one for the type was learnt.
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson1996. [bug] nsupdate: if a zone has been specified it should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appear in the output of 'show'. [RT #15797]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley1995. [bug] 'host' was reporting multiple "is an alias" messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1994. [port] OpenSSL 0.9.8 support. [RT #15694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1993. [bug] Log messages, via syslog, were missing the space
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews after the timestamp if "print-time yes" was specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1992. [bug] Not all incoming zone transfer messages included the
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson view. [RT #15825]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson1991. [cleanup] The configuration data, once read, should be treated
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as read only. Expand the use of const to enforce this
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews at compile time. [RT #15813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1990. [bug] libbind: isc's override of broken gettimeofday()
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson implementations was not always effective.
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington1989. [bug] win32: don't check the service password when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews re-installing. [RT #15882]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1988. [bug] Remove a bus error from the SHA256/SHA512 support.
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence1986. [func] Report when a zone is removed. [RT #15849]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1985. [protocol] DLV has now been assigned a official type code of
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence 32769. [RT #15807]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note: care should be taken to ensure you upgrade
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews both named and dnssec-signzone at the same time for
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence zones with DLV records where named is the master
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server for the zone. Also any zones that contain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DLV records should be removed when upgrading a slave
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence zone. You do not however have to upgrade all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews servers for a zone with DLV records simultaneously.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson1984. [func] dig, nslookup and host now advertise a 4096 byte
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews EDNS UDP buffer size by default. [RT #15855]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1983. [func] Two new update policies. "selfsub" and "selfwild".
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson1982. [bug] DNSKEY was being accepted on the parent side of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a delegation. KEY is still accepted there for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RFC 3007 validated updates. [RT #15620]
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington1981. [bug] win32: condition.c:wait() could fail to reattain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the mutex lock.
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson1980. [func] dnssec-signzone: output the SOA record as the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews first record in the signed zone. [RT #15758]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1979. [port] linux: allow named to drop core after changing
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson user ids. [RT #15753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1978. [port] Handle systems which have a broken recvmsg().
ebfcb6cf66283096ebda1503b6cc042ce86b6bedBrian Wellington1977. [bug] Silence noisy log message. [RT #15704]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson1976. [bug] Handle systems with no IPv4 addresses. [RT #15695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1975. [bug] libbind: isc_gethexstring() could misparse multi-line
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington hex strings with comments. [RT #15814]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1974. [doc] List each of the zone types and associated zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews options separately in the ARM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer HMACSHA512 support. [RT #13606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1972. [contrib] DBUS dynamic forwarders integration from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Jason Vas Dias <jvdias@redhat.com>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1971. [port] linux: make detection of missing IF_NAMESIZE more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews robust. [RT #15443]
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson1970. [bug] nsupdate: adjust UDP timeout when falling back to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unsigned SOA query. [RT #15775]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1969. [bug] win32: the socket code was freeing the socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews structure too early. [RT #15776]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1966. [bug] Don't set CD when we have fallen back to plain DNS.
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews1965. [func] Suppress spurious "recursion requested but not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available" warning with 'dig +qr'. [RT #15780].
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1964. [func] Separate out MX and SRV to CNAME checks. [RT #15723]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1963. [port] Tru64 4.0E doesn't support send() and recv().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1962. [bug] Named failed to clear old update-policy when it
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews was removed. [RT #15491]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1961. [bug] Check the port and address of responses forwarded
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence to dispatch. [RT #15474]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1960. [bug] Update code should set NSEC ttls from SOA MINIMUM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1959. [func] Control the zeroing of the negative response TTL to
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews a soa query. Defaults "zero-no-soa-ttl yes;" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "zero-no-soa-ttl-cache no;". [RT #15460]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews1958. [bug] Named failed to update the zone's secure state
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews until the zone was reloaded. [RT #15412]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1957. [bug] Dig mishandled responses to class ANY queries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1956. [bug] Improve cross compile support, 'gen' is now built
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews by native compiler. See README for additional
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cross compile support information. [RT #15148]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews1955. [bug] Pre-allocate the cache cleaning iterator. [RT #14998]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1954. [func] Named now falls back to advertising EDNS with a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 512 byte receive buffer if the initial EDNS queries
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews fail. [RT #14852]
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington1953. [func] The maximum EDNS UDP response named will send can
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now be set in named.conf (max-udp-size). This is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews independent of the advertised receive buffer
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson (edns-udp-size). [RT #14852]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1952. [port] hpux: tell the linker to build a runtime link
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews path "-Wl,+b:". [RT #14816].
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington1951. [security] Drop queries from particular well known ports.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Don't return FORMERR to queries from particular
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews well known ports. [RT #15636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1950. [port] Solaris 2.5.1 and earlier cannot bind() then connect()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a TCP socket. This prevents the source address being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews set for TCP connections. [RT #15628]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1949. [func] Addition memory leakage checks. [RT #15544]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1948. [bug] If was possible to trigger a REQUIRE failure in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews xfrin.c:maybe_free() if named ran out of memory.
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews1947. [func] It is now possible to configure named to accept
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews expired RRSIGs. Default "dnssec-accept-expired no;".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Setting "dnssec-accept-expired yes;" leaves named
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington vulnerable to replay attacks. [RT #14685]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1946. [bug] resume_dslookup() could trigger a REQUIRE failure
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when using forwarders. [RT #15549]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is no longer recommended.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews To generate a RSAMD5 key you must explicitly request
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews RSAMD5. [RT #13780]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1944. [cleanup] isc_hash_create() does not need a read/write lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1943. [bug] Set the loadtime after rolling forward the journal.
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley1942. [bug] If the name of a DNSKEY match that of one in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews trusted-keys do not attempt to validate the DNSKEY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews using the parents DS RRset. [RT #15649]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley1941. [bug] ncache_adderesult() should set eresult even if no
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataset is passed to it. [RT #15642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1940. [bug] Fixed a number of error conditions reported by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1939. [bug] The resolver could dereference a null pointer after
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation if all the queries have timed out.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1938. [bug] The validator was not correctly handling unsecure
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer negative responses at or below a SEP. [RT #15528]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1937. [bug] sdlz doesn't handle RRSIG records. [RT #15564]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1936. [bug] The validator could leak memory. [RT #15544]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington1935. [bug] 'acache' was DO sensitive. [RT #15430]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1934. [func] Validate pending NS RRsets, in the authority section,
452d75b18f9d050086964fa39c326cf388517396Mark Andrews prior to returning them if it can be done without
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews requiring DNSKEYs to be fetched. [RT #15430]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1933. [bug] dump_rdataset_raw() had a incorrect INSIST. [RT #15534]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1932. [bug] hpux: LDFLAGS was getting corrupted. [RT #15530]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1931. [bug] Per-client mctx could require a huge amount of memory,
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews particularly for a busy caching server. [RT #15519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1930. [port] HPUX: ia64 support. [RT #15473]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1927. [bug] Access to soanode or nsnode in rbtdb violated the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lock order rule and could cause a dead lock.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1926. [bug] The Windows installer did not check for empty
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer passwords. BINDinstall was being installed in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the wrong place. [RT #15483]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1925. [port] All outer level AC_TRY_RUNs need cross compiling
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews defaults. [RT #15469]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1924. [port] libbind: hpux ia64 support. [RT #15473]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer1923. [bug] ns_client_detach() called too early. [RT #15499]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1922. [bug] check-tool.c:setup_logging() missing call to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_log_setcontext().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1921. [bug] Client memory contexts were not using internal
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson malloc. [RT# 15434]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1920. [bug] The cache rbtdb lock array was too small to
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson have the desired performance characteristics.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1919. [contrib] queryperf: a set of new features: collecting/printing
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington response delays, printing intermediate results, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adjusting query rate for the "target" qps.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1918. [bug] Memory leak when checking acls. [RT #15391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1917. [doc] funcsynopsisinfo wasn't being treated as verbatim
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews when generating man pages. [RT #15385]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1916. [func] Integrate contributed IDN code from JPNIC. [RT #15383]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1915. [bug] dig +ndots was broken. [RT #15215]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1914. [protocol] DS is required to accept mnemonic algorithms
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (RFC 4034). Still emit numeric algorithms for
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson compatibility with RFC 3658. [RT #15354]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1913. [func] Integrate contributed DLZ code into named. [RT #11382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1912. [port] aix: atomic locking for powerpc. [RT #15020]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1911. [bug] Update windows socket code. [RT #14965]
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews1910. [bug] dig's +sigchase code overhauled. [RT #14933]
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington1909. [bug] The DLV code has been re-worked to make no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query order sensitive. [RT #14933]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1908. [func] dig now warns if 'RA' is not set in the answer when
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer 'RD' was set in the query. host/nslookup skip servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that fail to set 'RA' when 'RD' is set unless a server
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is explicitly set. [RT #15005]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1906. [func] dig now has a '-q queryname' and '+showsearch' options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1905. [bug] Strings returned from cfg_obj_asstring() should be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews treated as read-only. The prototype for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cfg_obj_asstring() has been updated to reflect this.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
e412ae947df6de858883564b8676a9650df70d9aMark Andrews friends. Note: RFC 1918 zones are not yet covered by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this but are likely to be in a future release.
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews New options: empty-server, empty-contact,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews empty-zones-enable and disable-empty-zone.
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews1903. [func] ISC string copy API.
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson1902. [func] Attempt to make the amount of work performed in a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews iteration self tuning. The covers nodes clean from
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the cache per iteration, nodes written to disk when
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson rewriting a master file and nodes destroyed per
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews iteration when destroying a zone or a cache.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1901. [cleanup] Don't add DNSKEY records to the additional section.
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson1900. [bug] ixfr-from-differences failed to ensure that the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews serial number increased. [RT #15036]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson1899. [func] named-checkconf now validates update-policy entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1898. [bug] Extend ISC_SOCKADDR_FORMATSIZE and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ISC_NETADDR_FORMATSIZE to allow for scope details.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1897. [func] x86 and x86_64 now have separate atomic locking
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson implementations.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1896. [bug] Recursive clients soft quota support wasn't working
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as expected. [RT #15103]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson1895. [bug] A escaped character is, potentially, converted to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the output character set too early. [RT #14666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1894. [doc] Review ARM for BIND 9.4.
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson1893. [port] Use uintptr_t if available. [RT #14606]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1892. [func] Support for SPF rdata type. [RT #15033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1891. [port] freebsd: pthread_mutex_init can fail if it runs out
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews of memory. [RT #14995]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1890. [func] Raise the UDP receive buffer size to 32k if it is
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews less than 32k. [RT #14953]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews1889. [port] sunos: non blocking i/o support. [RT #14951]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1888. [func] Support for IPSECKEY rdata type. [RT #14967]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1887. [bug] The cache could delete expired records too fast for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews clients with a virtual time in the past. [RT #14991]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1886. [bug] fctx_create() could return success even though it
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson failed. [RT #14993]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1885. [func] dig: report the number of extra bytes still left in
051beeafa6547440da17985665b31952b85ede56Brian Wellington the packet after processing all the records.
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer1884. [cleanup] dighost.c: move external declarations into <dig/dig.h>.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1883. [bug] dnssec-signzone, dnssec-keygen: handle negative debug
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews levels. [RT #14962]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1882. [func] Limit the number of recursive clients that can be
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence waiting for a single query (<qname,qtype,qclass>) to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resolve. New options clients-per-query and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews max-clients-per-query.
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington1881. [func] Add a system test for named-checkconf. [RT #14931]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer1880. [func] The lame cache is now done on a <qname,qclass,qtype>
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews basis as some servers only appear to be lame for
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer certain query types. [RT #14916]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1879. [func] "USE INTERNAL MALLOC" is now runtime selectable.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1878. [func] Detect duplicates of UDP queries we are recursing on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and drop them. New stats category "duplicate".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1877. [bug] Fix unreasonably low quantum on call to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rbt_destroy2(). Remove unnecessary unhash_node()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews call. [RT #14919]
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews1876. [func] Additional memory debugging support to track size
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and mctx arguments. [RT #14814]
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews1875. [bug] process_dhtkey() was using the wrong memory context
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to free some memory. [RT #14890]
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson1874. [port] sunos: portability fixes. [RT #14814]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1873. [port] win32: isc__errno2result() now reports its caller.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1872. [port] win32: Handle ERROR_NETNAME_DELETED. [RT #13753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1871. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1870. [func] Added framework for handling multiple EDNS versions.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1869. [func] dig can now specify the EDNS version when making
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a query. [RT #14873]
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer1868. [func] edns-udp-size can now be overridden on a per
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server basis. [RT #14851]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1867. [bug] It was possible to trigger a INSIST in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dlv_validatezonekey(). [RT #14846]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1866. [bug] resolv.conf parse errors were being ignored by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bad addresses. [RT #14841]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1864. [bug] Don't try the alternative transfer source if you
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews got a answer / transfer with the main source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address. [RT #14802]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson1863. [bug] rrset-order "fixed" error messages not complete.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1862. [func] Add additional zone data constancy checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-checkzone has extended checking of NS, MX and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SRV record and the hosts they reference.
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson named has extended post zone load checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New zone options: check-mx and integrity-check.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1861. [bug] dig could trigger a INSIST on certain malformed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses. [RT #14801]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1860. [port] solaris 2.8: hack_shutup_pthreadmutexinit was
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews incorrectly set. [RT #14775]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews1859. [func] Add support for CH A record. [RT #14695]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff1858. [bug] The flush-zones-on-shutdown option wasn't being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews parsed. [RT #14686]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1857. [bug] named could trigger a INSIST() if reconfigured /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews reloaded too fast. [RT #14673]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1856. [doc] Switch Docbook toolchain from DSSSL to XSL.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1855. [bug] ixfr-from-differences was failing to detect changes
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of ttl due to dns_diff_subtract() was ignoring the ttl
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of records. [RT #14616]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1854. [bug] lwres also needs to know the print format for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews (long long). [RT #13754]
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson1853. [bug] Rework how DLV interacts with proveunsecure().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1852. [cleanup] Remove last vestiges of dnssec-signkey and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-makekeyset (removed from Makefile years ago).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1851. [doc] Doxygen comment markup. [RT #11398]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1850. [bug] Memory leak in lwres_getipnodebyaddr(). [RT #14591]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1849. [doc] All forms of the man pages (docbook, man, html) should
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff have consistent copyright dates.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1848. [bug] Improve SMF integration. [RT #13238]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1847. [bug] isc_ondestroy_init() is called too late in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_rbtdb_create()/dns_rbtdb64_create().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1846. [contrib] query-loc-0.3.0 from Stephane Bortzmeyer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews <bortzmeyer@nic.fr>.
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley1845. [bug] Improve error reporting to distinguish between
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews accept()/fcntl() and socket()/fcntl() errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1844. [bug] inet_pton() accepted more that 4 hexadecimal digits
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington for each 16 bit piece of the IPv6 address. The text
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews representation of a IPv6 address has been tightened
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1843. [cleanup] CINCLUDES takes precedence over CFLAGS. This helps
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when CFLAGS contains "-I /usr/local/include"
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson resulting in old header files being used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1842. [port] cmsg_len() could produce incorrect results on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews some platform. [RT #13744]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1841. [bug] "dig +nssearch" now makes a recursive query to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews find the list of nameservers to query. [RT #13694]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1840. [func] dnssec-signzone can now randomize signature end times
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson (dnssec-signzone -j jitter). [RT #13609]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1839. [bug] <isc/hash.h> was not being installed.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff1838. [cleanup] Don't allow Linux capabilities to be inherited.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1837. [bug] Compile time option ISC_FACILITY was not effective
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for 'named -u <user>'. [RT #13714]
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson1836. [cleanup] Silence compiler warnings in hash_test.c.
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson1835. [bug] Update dnssec-signzone's usage message. [RT #13657]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson1834. [bug] Bad memset in rdata_test.c. [RT #13658]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson1833. [bug] Race condition in isc_mutex_lock_profile(). [RT #13660]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1832. [bug] named fails to return BADKEY on unknown TSIG algorithm.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1831. [doc] Update named-checkzone documentation. [RT#13604]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1830. [bug] adb lame cache has sence of test reversed. [RT #13600]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1829. [bug] win32: "pid-file none;" broken. [RT #13563]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1828. [bug] isc_rwlock_init() failed to properly cleanup if it
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington encountered a error. [RT #13549]
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson1827. [bug] host: update usage message for '-a'. [RT #37116]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1826. [bug] Missing DESTROYLOCK() in isc_mem_createx() on out
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson of memory error. [RT #13537]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1825. [bug] Missing UNLOCK() on out of memory error from in
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington rbtdb.c:subtractrdataset(). [RT #13519]
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington1824. [bug] Memory leak on dns_zone_setdbtype() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1823. [bug] Wrong macro used to check for point to point interface.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1822. [bug] check-names test for RT was reversed. [RT #13382]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1821. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1820. [bug] Gracefully handle acl loops. [RT #13659]
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson1819. [bug] The validator needed to check both the algorithm and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews digest types of the DS to determine if it could be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used to introduce a secure zone. [RT #13593]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson1818. [bug] 'named-checkconf -z' triggered an INSIST. [RT #13599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1817. [func] Add support for additional zone file formats for
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington improving loading performance. The masterfile-format
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews option in named.conf can be used to specify a
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington non-default format. A separate command
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named-compilezone was provided to generate zone files
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson in the new format. Additionally, the -I and -O options
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for dnssec-signzone specify the input and output
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1815. [bug] nsupdate triggered a REQUIRE if the server was set
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington without also setting the zone and it encountered
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a CNAME and was using TSIG. [RT #13086]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson1814. [func] UNIX domain controls are now supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1813. [func] Restructured the data locking framework using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews architecture dependent atomic operations (when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews available), improving response performance on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews multi-processor machines significantly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews x86, x86_64, alpha, powerpc, and mips are currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1812. [port] win32: IN6_IS_ADDR_UNSPECIFIED macro is incorrect.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1811. [func] Preserve the case of domain names in rdata during
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone transfers. [RT #13547]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1810. [bug] configure, lib/bind/configure make different default
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews decisions about whether to do a threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1809. [bug] "make distclean" failed for libbind if the platform
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews is not supported.
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews1808. [bug] zone.c:notify_zone() contained a race condition,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone->db could change underneath it. [RT #13511]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1807. [bug] When forwarding (forward only) set the active domain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the forward zone name. [RT #13526]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1806. [bug] The resolver returned the wrong result when a CNAME /
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews DNAME was encountered when fetching glue from a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews secure namespace. [RT #13501]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews1805. [bug] Pending status was not being cleared when DLV was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews active. [RT #13501]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1804. [bug] Ensure that if we are queried for glue that it fits
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the additional section or TC is set to tell the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews client to retry using TCP. [RT #10114]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1803. [bug] dnssec-signzone sometimes failed to remove old
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson RRSIGs. [RT #13483]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1802. [bug] Handle connection resets better. [RT #11280]
6d3f954c572db02159deedd444373161fda47a88Brian Wellington1801. [func] Report differences between hints and real NS rrset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and associated address records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1800. [bug] Changes #1719 allowed a INSIST to be triggered.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1799. [bug] 'rndc flushname' failed to flush negative cache
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries. [RT #13438]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1798. [func] The server syntax has been extended to support a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews range of servers. [RT #11132]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1797. [func] named-checkconf now check acls to verify that they
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews only refer to existing acls. [RT #13101]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1796. [func] "rndc freeze/thaw" now freezes/thaws all zones.
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington1795. [bug] "rndc dumpdb" was not fully documented. Minor
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews formating issues with "rndc dumpdb -all". [RT #13396]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1794. [func] Named and named-checkzone can now both check for
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington non-terminal wildcard records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1793. [func] Extend adjusting TTL warning messages. [RT #13378]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1792. [func] New zone option "notify-delay". Specify a minimum
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson delay between sets of NOTIFY messages.
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews1791. [bug] 'host -t a' still printed out AAAA and MX records.
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow parallel make to succeed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1789. [bug] Prerequisite test for tkey and dnssec could fail
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington with "configure --with-libtool".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1788. [bug] libbind9.la/libbind9.so needs to link against
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1787. [port] HPUX: both "cc" and "gcc" need -Wl,+vnocompatwarnings.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson1786. [port] AIX: libt_api needs to be taught to look for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews T_testlist in the main executable (--with-libtool).
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson1785. [bug] libbind9.la/libbind9.so needs to link against
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson1784. [cleanup] "libtool -allow-undefined" is the default.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Leave hooks in configure to allow it to be set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if needed in the future.
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews1783. [cleanup] We only need one copy of libtool.m4, ltmain.sh in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source tree.
385a9cb48a70b329e507c39d043fa9a44c659913James Brister1782. [port] OSX: --with-libtool + --enable-libbind broke on
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews __evOptMonoTime. [RT #13219]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister1781. [port] FreeBSD 5.3: set PTHREAD_SCOPE_SYSTEM. [RT #12810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1780. [bug] Update libtool to 1.5.10.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1779. [port] OSF 5.1: libtool didn't handle -pthread correctly.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer1778. [port] HUX 11.11: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer1777. [port] OSF 5.1: fix broken IN6ADDR_ANY_INIT and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IN6ADDR_LOOPBACK_INIT macros.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1776. [port] Solaris 2.9: fix broken IN6ADDR_ANY_INIT and
47ddde42728034854444cf17e278cebaea06f666Michael Graff IN6ADDR_LOOPBACK_INIT macros.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence1774. [port] Aix: Silence compiler warnings / build failures.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence1773. [bug] Fast retry on host / net unreachable. [RT #13153]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1772. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1771. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1770. [bug] named-checkconf failed to report missing a missing
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence file clause for rbt{64} master/hint zones. [RT#13009]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1769. [port] win32: change compiler flags /MTd ==> /MDd,
529a6b5224d751504027293a766a4c8b81241869Brian Wellington1768. [bug] nsecnoexistnodata() could be called with a non-NSEC
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rdataset. [RT #12907]
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington1767. [port] Builds on IPv6 platforms without IPv6 Advanced API
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews support for (struct in6_pktinfo) failed. [RT #13077]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington1766. [bug] Update the master file timestamp on successful refresh
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as well as the journal's timestamp. [RT# 13062]
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence1765. [bug] configure --with-openssl=auto failed. [RT #12937]
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson1764. [bug] dns_zone_replacedb failed to emit a error message
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if there was no SOA record in the replacement db.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1763. [func] Perform sanity checks on NS records which refer to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'in zone' names. [RT #13002]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1762. [bug] isc_interfaceiter_create() could return ISC_R_SUCCESS
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews even when it failed. [RT #12995]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1761. [bug] 'rndc dumpdb' didn't report unassociated entries.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1760. [bug] Host / net unreachable was not penalising rtt
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews estimates. [RT #12970]
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington1759. [bug] Named failed to startup if the OS supported IPv6
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews but had no IPv6 interfaces configured. [RT #12942]
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister1758. [func] Don't send notify messages to self. [RT #12933]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1757. [func] host now can turn on memory debugging flags with '-m'.
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer1756. [func] named-checkconf now checks the logging configuration.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1755. [func] allow-update is now settable at the options / view
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson level. [RT #6636]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1754. [bug] We weren't always attempting to query the parent
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server for the DS records at the zone cut.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1753. [bug] Don't serve a slave zone which has no NS records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1752. [port] Move isc_app_start() to after ns_os_daemonise()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as some fork() implementations unblock the signals
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson that are blocked by isc_app_start(). [RT #12810]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1751. [bug] --enable-getifaddrs failed under linux. [RT #12867]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1749. [bug] 'check-names response ignore;' failed to ignore.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1748. [func] dig now returns the byte count for axfr/ixfr.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence1747. [bug] BIND 8 compatibility: named/named-checkconf failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to parse "host-statistics-max" in named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1746. [func] Make public the function to read a key file,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dst_key_read_public(). [RT #12450]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1745. [bug] Dig/host/nslookup accept replies from link locals
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews regardless of scope if no scope was specified when
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson query was sent. [RT #12745]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1744. [bug] If tuple2msgname() failed to convert a tuple to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a name a REQUIRE could be triggered. [RT #12796]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1743. [bug] If isc_taskmgr_create() was not able to create the
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson requested number of worker threads then destruction
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews of the manager would trigger an INSIST() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1742. [bug] Deleting all records at a node then adding a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews previously existing record, in a single UPDATE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transaction, failed to leave / regenerate the
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington associated RRSIG records. [RT #12788]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1741. [bug] Deleting all records at a node in a secure zone
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington using a update-policy grant failed. [RT #12787]
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson1740. [bug] Replace rbt's hash algorithm as it performed badly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with certain zones. [RT #12729]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NOTE: a hash context now needs to be established
da527e4ff6a013364826637963e7ac372e024f33David Lawrence via isc_hash_create() if the application was not
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews already doing this.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1739. [bug] dns_rbt_deletetree() could incorrectly return
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson ISC_R_QUOTA. [RT #12695]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1738. [bug] Enable overrun checking by default. [RT #12695]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence1737. [bug] named failed if more than 16 masters were specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1736. [bug] dst_key_fromnamedfile() could fail to read a
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence public key. [RT #12687]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister1735. [bug] 'dig +sigtrace' could die with a REQUIRE failure.
adade77942b069127a7094df419b3ad39dafb385James Brister1734. [cleanup] 'rndc-confgen -a -t' remove extra '/' in path.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1733. [bug] Return non-zero exit status on initial load failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1732. [bug] 'rrset-order name "*"' wasn't being applied to ".".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1731. [port] darwin: relax version test in ifconfig.sh.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1730. [port] Determine the length type used by the socket API.
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson1729. [func] Improve check-names error messages.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1728. [doc] Update check-names documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1727. [bug] named-checkzone: check-names support didn't match
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews documentation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1726. [port] aix5: add support for aix5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1725. [port] linux: update error message on interaction of threads,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews capabilities and setuid support (named -u). [RT #12541]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1724. [bug] Look for DNSKEY records with "dig +sigtrace".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1722. [bug] Don't commit the journal on malformed ixfr streams.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1721. [bug] Error message from the journal processing were not
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence always identifying the relevant journal. [RT #12519]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1720. [bug] 'dig +chase' did not terminate on a RFC 2308 Type 1
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence negative response. [RT #12506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1719. [bug] named was not correctly caching a RFC 2308 Type 1
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence negative response. [RT #12506]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1718. [bug] nsupdate was not handling RFC 2308 Type 3 negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews responses when looking for the zone / master server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1717. [port] solaris: ifconfig.sh did not support Solaris 10.
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews "ifconfig.sh down" didn't work for Solaris 9.
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister1716. [doc] named.conf(5) was being installed in the wrong
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews location. [RT# 12441]
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington1715. [func] 'dig +trace' now randomly selects the next servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to try. Report if there is a bad delegation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1714. [bug] dig/host/nslookup were only trying the first
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington address when a nameserver was specified by name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1713. [port] linux: extend capset failure message to say:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews please ensure that the capset kernel module is
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington loaded. see insmod(8)
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1712. [bug] Missing FULLCHECK for "trusted-key" in dig.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1711. [func] 'rndc unfreeze' has been deprecated by 'rndc thaw'.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister1710. [func] 'rndc notify zone [class [view]]' resend the NOTIFY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages for the specified zone. [RT #9479]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1709. [port] solaris: add SMF support from Sun.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1708. [cleanup] Replaced dns_fullname_hash() with dns_name_fullhash()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for conformance to the name space convention. Binary
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence backward compatibility to the old function name is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews provided. [RT #12376]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1707. [contrib] sdb/ldap updated to version 1.0-beta.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1706. [bug] 'rndc stop' failed to cause zones to be flushed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews sometimes. [RT #12328]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1705. [func] Allow the journal's name to be changed via named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1704. [port] lwres needed a snprintf() implementation for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews platforms without snprintf(). Add missing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "#include <isc/print.h>". [RT #12321]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1703. [bug] named would loop sending NOTIFY messages when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to receive a response. [RT #12322]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1702. [bug] also-notify should not be applied to built in zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1701. [doc] A minimal named.conf man page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1700. [func] nslookup is no longer to be treated as deprecated.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Remove "deprecated" warning message. Add man page.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1699. [bug] dnssec-signzone can generate "not exact" errors
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when resigning. [RT #12281]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1698. [doc] Use reserved IPv6 documentation prefix.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1697. [bug] xxx-source{,-v6} was not effective when it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews specified one of listening addresses and a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews different port than the listening port. [RT #12257]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1696. [bug] dnssec-signzone failed to clean out nodes that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews consisted of only NSEC and RRSIG records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1695. [bug] DS records when forwarding require special handling.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1694. [bug] Report if the builtin views of "_default" / "_bind"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are defined in named.conf. [RT #12023]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1693. [bug] max-journal-size was not effective for master zones
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with ixfr-from-differences set. [RT# 12024]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1692. [bug] Don't set -I, -L and -R flags when libcrypto is in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1691. [bug] sdb's attachversion was not complete. [RT #11990]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1690. [bug] Delay detaching view from the client until UPDATE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews processing completes when shutting down. [RT #11714]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1689. [bug] DNS_NAME_TOREGION() and DNS_NAME_SPLIT() macros
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained gratuitous semicolons. [RT #11707]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson1688. [bug] LDFLAGS was not supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1687. [bug] Race condition in dispatch. [RT #10272]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson1686. [bug] Named sent a extraneous NOTIFY when it received a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews redundant UPDATE request. [RT #11943]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1685. [bug] Change #1679 loop tests weren't quite right.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1684. [func] ixfr-from-differences now takes master and slave in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews addition to yes and no at the options and view levels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1683. [bug] dig +sigchase could leak memory. [RT #11445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1682. [port] Update configure test for (long long) printf format.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1681. [bug] Only set SO_REUSEADDR when a port is specified in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews isc_socket_bind(). [RT #11742]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1680. [func] rndc: the source address can now be specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1679. [bug] When there was a single nameserver with multiple
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson addresses for a zone not all addresses were tried.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1678. [bug] RRSIG should use TYPEXXXXX for unknown types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1677. [bug] dig: +aaonly didn't work, +aaflag undocumented.
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson1676. [func] New option "allow-query-cache". This lets
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews allow-query be used to specify the default zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews access level rather than having to have every
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone override the global value. allow-query-cache
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer can be set at both the options and view levels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If allow-query-cache is not set allow-query applies.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1675. [bug] named would sometimes add extra NSEC records to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the authority section.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence1674. [port] linux: increase buffer size used to scan
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1673. [port] linux: issue a error messages if IPv6 interface
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews scans fails.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1672. [cleanup] Tests which only function in a threaded build
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews now return R:THREADONLY (rather than R:UNTESTED)
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson in a non-threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1671. [contrib] queryperf: add NAPTR to the list of known types.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1670. [func] Log UPDATE requests to slave zones without an acl as
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence "disabled" at debug level 3. [RT# 11657]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1669. [placeholder]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1667. [port] linux: not all versions have IF_NAMESIZE.
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson1666. [bug] The optional port on hostnames in dual-stack-servers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews was being ignored.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1665. [func] rndc now allows addresses to be set in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews server clauses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1664. [bug] nsupdate needed KEY for SIG(0), not DNSKEY.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1663. [func] Look for OpenSSL by default.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1662. [bug] Change #1658 failed to change one use of 'type'
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence to 'keytype'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1661. [bug] Restore dns_name_concatenate() call in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews adb.c:set_target(). [RT #11582]
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence1660. [bug] win32: connection_reset_fix() was being called
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews unconditionally. [RT #11595]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1659. [cleanup] Cleanup some messages that were referring to KEY vs
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY, NXT vs NSEC and SIG vs RRSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and DH. Tighten which options apply to KEY and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSKEY records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1657. [doc] ARM: document query log output.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1656. [doc] Update DNSSEC description in ARM to cover DS, NSEC
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson DNSKEY and RRSIG. [RT #11542]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1655. [bug] Logging multiple versions w/o a size was broken.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1654. [bug] isc_result_totext() contained array bounds read
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1653. [func] Add key type checking to dst_key_fromfilename(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DST_TYPE_KEY should be used to read TSIG, TKEY and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SIG(0) keys.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1652. [bug] TKEY still uses KEY.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1651. [bug] dig: process multiple dash options.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1650. [bug] dig, nslookup: flush standard out after each command.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1649. [bug] Silence "unexpected non-minimal diff" message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1648. [func] Update dnssec-lookaside named.conf syntax to support
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson multiple dnssec-lookaside namespaces (not yet
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews implemented).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1647. [bug] It was possible trigger a INSIST when chasing a DS
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson record that required walking back over a empty node.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1646. [bug] win32: logging file versions didn't work with
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer non-UNC filenames. [RT#11486]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews1645. [bug] named could trigger a REQUIRE failure if multiple
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews masters with keys are specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1644. [bug] Update the journal modification time after a
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews successful refresh query. [RT #11436]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1643. [bug] dns_db_closeversion() could leak memory / node
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews references. [RT #11163]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1642. [port] Support OpenSSL implementations which don't have
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister DSA support. [RT #11360]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister1641. [bug] Update the check-names description in ARM. [RT #11389]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1640. [bug] win32: isc_socket_cancel(ISC_SOCKCANCEL_ACCEPT) was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews incorrectly closing the socket. [RT #11291]
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews1639. [func] Initial dlv system test.
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews1638. [bug] "ixfr-from-differences" could generate a REQUIRE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failure if the journal open failed. [RT #11347]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1637. [bug] Node reference leak on error in addnoqname().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1636. [bug] The dump done callback could get ISC_R_SUCCESS even if
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister a error had occurred. The database version no longer
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched the version of the database that was dumped.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1635. [bug] Memory leak on error in query_addds().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1634. [bug] named didn't supply a useful error message when it
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson detected duplicate views. [RT #11208]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1633. [bug] named should return NOTIMP to update requests to a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews slaves without a allow-update-forwarding acl specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1632. [bug] nsupdate failed to send prerequisite only UPDATE
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews messages. [RT #11288]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson1631. [bug] dns_journal_compact() could sometimes corrupt the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews journal. [RT #11124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1630. [contrib] queryperf: add support for IPv6 transport.
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson1629. [func] dig now supports IPv6 scoped addresses with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews extended format in the local-server part. [RT #8753]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1628. [bug] Typo in Compaq Trucluster support. [RT# 11264]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister1627. [bug] win32: sockets were not being closed when the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews last external reference was removed. [RT# 11179]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1626. [bug] --enable-getifaddrs was broken. [RT#11259]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1625. [bug] named failed to load/transfer RFC2535 signed zones
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister which contained CNAMES. [RT# 11237]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1624. [bug] zonemgr_putio() call should be locked. [RT# 11163]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1623. [bug] A serial number of zero was being displayed in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "sending notifies" log message when also-notify was
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister used. [RT #11177]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1622. [func] probe the system to see if IPV6_(RECV)PKTINFO is
47c196192afa37b2dea728e52579779f190bf07fJames Brister available, and suppress wildcard binding if not.
adf82221858138f295bce732e86dcac34645692eJames Brister1621. [bug] match-destinations did not work for IPv6 TCP queries.
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington1620. [func] When loading a zone report if it is signed. [RT #11149]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1619. [bug] Missing ISC_LIST_UNLINK in end_reserved_dispatches().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1618. [bug] Fencepost errors in dns_name_ishostname() and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_name_ismailbox() could trigger a INSIST().
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister1617. [port] win32: VC++ 6.0 support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1616. [compat] Ensure that named's version is visible in the core
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister dump. [RT #11127]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister1615. [port] Define ISC_SOCKADDR_LEN_T based on _BSD_SOCKLEN_T_ if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews it is defined.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1614. [port] win32: silence resource limit messages. [RT# 11101]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews1613. [bug] Builds would fail on machines w/o a if_nametoindex().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Missing #ifdef ISC_PLATFORM_HAVEIFNAMETOINDEX/#endif.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1612. [bug] check-names at the option/view level could trigger
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an INSIST. [RT# 11116]
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence1611. [bug] solaris: IPv6 interface scanning failed to cope with
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews no active IPv6 interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1610. [bug] On dual stack machines "dig -b" failed to set the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews address type to be looked up with "@server".
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson1609. [func] dig now has support to chase DNSSEC signature chains.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Requires -DDIG_SIGCHASE=1 to be set in STD_CDEFINES.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC validation code in dig coded by Olivier Courtay
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister (olivier.courtay@irisa.fr) for the IDsA project
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1608. [func] dig and host now accept -4/-6 to select IP transport
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to use when making queries.
d5399cc351a549db957185993b320a3bffa40e41James Brister1607. [bug] dig, host and nslookup were still using random()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to generate query ids. [RT# 11013]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1606. [bug] DLV insecurity proof was failing.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1605. [func] New dns_db_find() option DNS_DBFIND_COVERINGNSEC.
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews1604. [bug] A xfrout_ctx_create() failure would result in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews xfrout_ctx_destroy() being called with a
69b691c9624f31e59b8d128ada902a82127c15a3James Brister partially initialized structure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1603. [bug] nsupdate: set interactive based on isatty().
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington1602. [bug] Logging to a file failed unless a size was specified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1601. [bug] Silence spurious warning 'both "recursion no;" and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "allow-recursion" active' warning from view "_bind".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1600. [bug] Duplicate zone pre-load checks were not case
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews insensitive.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1599. [bug] Fix memory leak on error path when checking named.conf.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1598. [func] Specify that certain parts of the namespace must
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be secure (dnssec-must-be-secure).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1597. [func] Allow notify-source and query-source to be specified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on a per server basis similar to transfer-source.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1596. [func] Accept 'notify-source' style syntax for query-source.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1595. [func] New notify type 'master-only'. Enable notify for
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence master zones only.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1594. [bug] 'rndc dumpdb' could prevent named from answering
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews queries while the dump was in progress. [RT #10565]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1593. [bug] rndc should return "unknown command" to unknown
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence commands. [RT# 10642]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1592. [bug] configure_view() could leak a dispatch. [RT# 10675]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1591. [bug] libbind: updated to BIND 8.4.5.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1590. [port] netbsd: update thread support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1589. [func] DNSSEC lookaside validation.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1588. [bug] win32: TCP sockets could become blocked. [RT #10115]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1587. [bug] dns_message_settsigkey() failed to clear existing key.
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington1586. [func] "check-names" is now implemented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1585. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1584. [bug] "make test" failed with a read only source tree.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1583. [bug] Records add via UPDATE failed to get the correct trust
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level. [RT #10452]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1582. [bug] rrset-order failed to work on RRsets with more
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews than 32 elements. [RT #10381]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1581. [func] Disable DNSSEC support by default. To enable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews DNSSEC specify "dnssec-enable yes;" in named.conf.
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson1580. [bug] Zone destruction on final detach takes a long time.
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington1579. [bug] Multiple task managers could not be created.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1578. [bug] Don't use CLASS E IPv4 addresses when resolving.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1577. [bug] Use isc_uint32_t in ultrasparc optimizer bug
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson workaround code. [RT #10331]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1576. [bug] Race condition in dns_dispatch_addresponse().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1575. [func] Log TSIG name on TSIG verify failure. [RT #4404]
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson1574. [bug] Don't attempt to open the controls socket(s) when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews running tests. [RT #9091]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1573. [port] linux: update to libtool 1.5.2 so that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "make install DESTDIR=/xx" works with
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington "configure --with-libtool". [RT #9941]
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington1572. [bug] nsupdate: sign the soa query to find the enclosing
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone if the server is specified. [RT #10148]
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence1571. [bug] rbt:hash_node() could fail leaving the hash table
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in an inconsistent state. [RT #10208]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1570. [bug] nsupdate failed to handle classes other than IN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews New keyword 'class' which sets the default class.
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence1569. [func] nsupdate new command 'answer' which displays the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews complete answer message to the last update.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1568. [bug] nsupdate now reports that the update failed in
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington interactive mode. [RT# 10236]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1566. [port] Support for the cmsg framework on Solaris and HP/UX.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews This also solved the problem that match-destinations
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv6 addresses did not work on these systems.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1565. [bug] CD flag should be copied to outgoing queries unless
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson the query is under a secure entry point in which case
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews CD should be set.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1564. [func] Attempt to provide a fallback entropy source to be
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews used if named is running chrooted and named is unable
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to open entropy source within the chroot area.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1563. [bug] Gracefully fail when unable to obtain neither an IPv4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews nor an IPv6 dispatch. [RT #10230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1562. [bug] isc_socket_create() and isc_socket_accept() could
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews leak memory under error conditions. [RT #10230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1561. [bug] It was possible to release the same name twice if
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff named ran out of memory. [RT #10197]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1560. [port] FreeBSD: work around FreeBSD 5.2 mapping EAI_NODATA
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and EAI_NONAME to the same value.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1559. [port] named should ignore SIGFSZ.
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews child zones for which we don't have a supported
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews algorithm. Such child zones are treated as unsigned.
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson1557. [func] Implement missing DNSSEC tests for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * NOQNAME proof with wildcard answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews * NOWILDARD proof with NXDOMAIN.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Cache and return NOQNAME with wildcard answers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1556. [bug] nsupdate now treats all names as fully qualified.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1555. [func] 'rrset-order cyclic' no longer has a random starting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews point per query. [RT #7572]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1554. [bug] dig, host, nslookup failed when no nameservers
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews were specified in /etc/resolv.conf. [RT #8232]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1553. [bug] The windows socket code could stop accepting
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews connections. [RT#10115]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1552. [bug] Accept NOTIFY requests from mapped masters if
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews matched-mapped is set. [RT #10049]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1551. [port] Open "/dev/null" before calling chroot().
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson1550. [port] Call tzset(), if available, before calling chroot().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1549. [func] named-checkzone can now write out the zone contents
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a easily parsable format (-D and -o).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1548. [bug] When parsing APL records it was possible to silently
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence accept out of range ADDRESSFAMILY values. [RT# 9979]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1547. [bug] Named wasted memory recording duplicate lame zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews entries. [RT #9341]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1546. [bug] We were rejecting valid secure CNAME to negative
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1545. [bug] It was possible to leak memory if named was unable to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews bind to the specified transfer source and TSIG was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being used. [RT #10120]
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson1544. [bug] Named would logged a single entry to a file despite it
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews being over the specified size limit.
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews1543. [bug] Logging using "versions unlimited" did not work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1542. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1541. [func] NSEC now uses new bitmap format.
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence1540. [bug] "rndc reload <dynamiczone>" was silently accepted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1539. [bug] Open UDP sockets for notify-source and transfer-source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews that use reserved ports at startup. [RT #9475]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1538. [placeholder] rt9997
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1537. [func] New option "querylog". If set specify whether query
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence logging is to be enabled or disabled at startup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1536. [bug] Windows socket code failed to log a error description
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington when returning ISC_R_UNEXPECTED. [RT #9998]
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington1535. [placeholder]
34b394b43e2207e8f8f3703f0402422121455638David Lawrence1534. [bug] Race condition when priming cache. [RT# 9940]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1533. [func] Warn if both "recursion no;" and "allow-recursion"
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews are active. [RT# 4389]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1532. [port] netbsd: the configure test for <sys/sysctl.h>
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1531. [port] AIX more libtool fixes.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1530. [bug] It was possible to trigger a INSIST() failure if a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews slave master file was removed at just the correct
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister moment. [RT #9462]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1529. [bug] "notify explicit;" failed to log that NOTIFY messages
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence were being sent for the zone. [RT# 9442]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister1528. [cleanup] Simplify some dns_name_ functions based on the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews deprecation of bitstring labels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1527. [cleanup] Reduce the number of gettimeofday() calls without
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister losing necessary timer granularity.
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson1526. [func] Implemented "additional section caching (or acache)",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews an internal cache framework for additional section
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content to improve response performance. Several
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson configuration options were provided to control the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1525. [bug] dns_cache_create() could trigger a REQUIRE
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson failure in isc_mem_put() during error cleanup.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1524. [port] AIX needs to be able to resolve all symbols when
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson creating shared libraries (--with-libtool).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1523. [bug] Fix race condition in rbtdb. [RT# 9189]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1522. [bug] dns_db_findnode() relax the requirements on 'name'.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1521. [bug] dns_view_createresolver() failed to check the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews result from isc_mem_create(). [RT# 9294]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1520. [protocol] Add SSHFP (SSH Finger Print) type.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews length of the new bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1518. [bug] dns_nsec_buildrdata(), and hence dns_nsec_build(),
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews contained a off-by-one error when working out the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews number of octets in the bitmap.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1517. [port] Support for IPv6 interface scanning on HP/UX and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews TrueUNIX 5.1.
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson1515. [func] Allow transfer source to be set in a server statement.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1514. [bug] named: isc_hash_destroy() was being called too early.
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson1513. [doc] Add "US" to root-delegation-only exclude list.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1512. [bug] Extend the delegation-only logging to return query
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson type, class and responding nameserver.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1511. [bug] delegation-only was generating false positives
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews on negative answers from sub-zones.
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson1510. [func] New view option "root-delegation-only". Apply
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews delegation-only check to all TLDs and root.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Note there are some TLDs that are NOT delegation
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence only (e.g. DE, LV, US and MUSEUM) these can be excluded
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from the checks by using exclude.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews root-delegation-only exclude {
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews "DE"; "LV"; "US"; "MUSEUM";
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister1509. [bug] Hint zones should accept delegation-only. Forward
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone should not accept delegation-only.
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister1508. [bug] Don't apply delegation-only checks to answers from
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister1507. [bug] Handle BIND 8 style returns to NS queries to parents
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when making delegation-only checks.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1506. [bug] Wrong return type for dns_view_isdelegationonly().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1505. [bug] Uninitialized rdataset in sdb. [RT #8750]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1504. [func] New zone type "delegation-only".
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1503. [port] win32: install libeay32.dll outside of system32.
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews1502. [bug] nsupdate: adjust timeouts for UPDATE requests over TCP.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1501. [func] Allow TCP queue length to be specified via
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews named.conf, tcp-listen-queue.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1500. [bug] host failed to lookup MX records. Also look up
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews AAAA records.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1499. [bug] isc_random need to be seeded better if arc4random()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not used.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1498. [port] bsdos: 5.x support.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1497. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1496. [port] test for pthread_attr_setstacksize().
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister1495. [cleanup] Replace hash functions with universal hash.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1494. [security] Turn on RSA BLINDING as a precaution.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1493. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1492. [cleanup] Preserve rwlock quota context when upgrading /
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews downgrading. [RT #5599]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1491. [bug] dns_master_dump*() would produce extraneous $ORIGIN
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews lines. [RT #6206]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1490. [bug] Accept reading state as well as working state in
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews ns_client_next(). [RT #6813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1489. [compat] Treat 'allow-update' on slave zones as a warning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1488. [bug] Don't override trust levels for glue addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1487. [bug] A REQUIRE() failure could be triggered if a zone was
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence queued for transfer and the zone was then removed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1486. [bug] isc_print_snprintf() '%%' consumed one too many format
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence characters. [RT# 8230]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1485. [bug] gen failed to handle high type values. [RT #6225]
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson1484. [bug] The number of records reported after a AXFR was wrong.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1483. [bug] dig axfr failed if the message id in the answer failed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to match that in the request. Only the id in the first
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson message is required to match. [RT #8138]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1482. [bug] named could fail to start if the kernel supports
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence IPv6 but no interfaces are configured. Similarly
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews for IPv4. [RT #6229]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1481. [bug] Refresh and stub queries failed to use masters keys
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews if specified. [RT #7391]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1480. [bug] Provide replay protection for rndc commands. Full
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews replay protection requires both rndc and named to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews be updated. Partial replay protection (limited
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence exposure after restart) is provided if just named
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1479. [bug] cfg_create_tuple() failed to handle out of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews memory cleanup. parse_list() would leak memory
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence on syntax errors.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1478. [port] ifconfig.sh didn't account for other virtual
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews interfaces. It now takes a optional argument
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence to specify the first interface number. [RT #3907]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1477. [bug] memory leak using stub zones and TSIG.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1476. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1475. [port] Probe for old sprintf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1474. [port] Provide strtoul() and memmove() for platforms
eefea43215016bce437ab4a7441b2851fd182960David Lawrence without them.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1473. [bug] create_map() and create_string() failed to handle out
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence of memory cleanup. [RT #6813]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1472. [contrib] idnkit-1.0 from JPNIC, replaces mdnkit.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1471. [bug] libbind: updated to BIND 8.4.0.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1470. [bug] Incorrect length passed to snprintf. [RT #5966]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1469. [func] Log end of outgoing zone transfer at same level
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews as the start of transfer is logged. [RT #4441]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1468. [func] Internal zones are no longer counted for
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'rndc status'. [RT #4706]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1467. [func] $GENERATES now supports optional class and ttl.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1466. [bug] lwresd configuration errors resulted in memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews and lock leaks. [RT #5228]
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence1465. [bug] isc_base64_decodestring() and isc_base64_tobuffer()
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failed to check that trailing bits were zero allowing
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence some invalid base64 strings to be accepted. [RT #5397]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1464. [bug] Preserve "out of zone" data for outgoing zone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews transfers. [RT #5192]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1463. [bug] dns_rdata_from{wire,struct}() failed to catch bad
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews NXT bit maps. [RT #5577]
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence1462. [bug] parse_sizeval() failed to check the token type.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1461. [bug] Remove deadlock from rbtdb code. [RT #5599]
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence1460. [bug] inet_pton() failed to reject certain malformed
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews IPv6 literals.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1459. [placeholder]
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence1458. [cleanup] sprintf() -> snprintf().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1457. [port] Provide strlcat() and strlcpy() for platforms without
95b484c9580d06eb2f9735a22e9841389c2859baMark Andrews1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff1455. [bug] <netaddr> missing from server grammar in
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence1454. [port] Use getifaddrs() if available for interface scanning.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews --disable-getifaddrs to override. Glibc currently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has a getifaddrs() that does not support IPv6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews Use --enable-getifaddrs=glibc to force the use of
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews this version under linux machines.
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence1453. [doc] ARM: $GENERATE example wasn't accurate. [RT #5298]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1452. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1451. [bug] rndc-confgen didn't exit with a error code for all
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failures. [RT #5209]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1450. [bug] Fetching expired glue failed under certain
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews circumstances. [RT #5124]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1449. [bug] query_addbestns() didn't handle running out of memory
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1448. [bug] Handle empty wildcards labels.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1447. [bug] We were casting (unsigned int) to and from (void *).
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence rdataset->private4 is now rdataset->privateuint4
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to reflect a type change.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1446. [func] Implemented undocumented alternate transfer sources
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from BIND 8. See use-alt-transfer-source,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews alt-transfer-source and alt-transfer-source-v6.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews SECURITY: use-alt-transfer-source is ENABLED unless
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews you are using views. This may cause a security risk
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulting in accidental disclosure of wrong zone
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence content if the master supplying different source
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews content based on IP address. If you are not certain
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ISC recommends setting use-alt-transfer-source no;
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1445. [bug] DNS_ADBFIND_STARTATROOT broke stub zones. This has
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence been replaced with DNS_ADBFIND_STARTATZONE which
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews causes the search to start using the closest zone.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1444. [func] dns_view_findzonecut2() allows you to specify if the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews cache should be searched for zone cuts.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1443. [func] Masters lists can now be specified and referenced
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in zone masters clauses and other masters lists.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1442. [func] New functions for manipulating port lists:
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_create(), dns_portlist_add(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_remove(), dns_portlist_match(),
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_portlist_attach() and dns_portlist_detach().
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1441. [func] It is now possible to tell dig to bind to a specific
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source port.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1440. [func] It is now possible to tell named to avoid using
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews certain source ports (avoid-v4-udp-ports,
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews avoid-v6-udp-ports).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1439. [bug] Named could return NOERROR with certain NOTIFY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews failures. Return NOTAUTH if the NOTIFY zone is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews not being served.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1438. [func] Log TSIG (if any) when logging NOTIFY requests.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1437. [bug] Leave space for stdio to work in. [RT #5033]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1436. [func] dns_zonemgr_resumexfrs() can be used to restart
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews stalled transfers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1435. [bug] zmgr_resume_xfrs() was being called read locked
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews rather than write locked. zmgr_resume_xfrs()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was not being called if the zone was being
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1434. [bug] "rndc reconfig" failed to initiate the initial
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews zone transfer of new slave zones.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1433. [bug] named could trigger a REQUIRE failure if it could
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence not get a file descriptor when attempting to write
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews a master file. [RT #4347]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1432. [func] The advertised EDNS UDP buffer size can now be set
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews via named.conf (edns-udp-size).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1431. [bug] isc_print_snprintf() "%s" with precision could walk off
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews end of argument. [RT #5191]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1430. [port] linux: IPv6 interface scanning support.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1429. [bug] Prevent the cache getting locked to old servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1428. [placeholder]
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence1427. [bug] Race condition in adb with threaded build.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1426. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1425. [port] linux/libbind: define __USE_MISC when testing *_r()
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence function prototypes in netdb.h. [RT #4921]
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson1424. [bug] EDNS version not being correctly printed.
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence1423. [contrib] queryperf: added A6 and SRV.
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence1422. [func] Log name/type/class when denying a query. [RT #4663]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1421. [func] Differentiate updates that don't succeed due to
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence prerequisites (unsuccessful) vs other reasons
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson1420. [port] solaris: work around gcc optimizer bug.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1419. [port] openbsd: use /dev/arandom. [RT #4950]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1418. [bug] 'rndc reconfig' did not cause new slaves to load.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1417. [func] ID.SERVER/CHAOS is now a built in zone.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews See "server-id" for how to configure.
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence1416. [bug] Empty node should return NOERROR NODATA, not NXDOMAIN.
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from SOA MINIMUM.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley1414. [func] Support for KSK flag.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1413. [func] Explicitly request the (re-)generation of DS records
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews from keysets (dnssec-signzone -g).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1412. [func] You can now specify servers to be tried if a nameserver
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews has IPv6 address and you only support IPv4 or the
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley reverse. See dual-stack-servers.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1411. [bug] empty nodes should stop wildcard matches. [RT #4802]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1410. [func] Handle records that live in the parent zone, e.g. DS.
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence1409. [bug] DS should have attribute DNS_RDATATYPEATTR_DNSSEC.
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence1408. [bug] "make distclean" was not complete. [RT #4700]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1407. [bug] lfsr incorrectly implements the shift register.
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence1406. [bug] dispatch initializes one of the LFSR's with a incorrect
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews polynomial. [RT #4617]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1405. [func] Use arc4random() if available.
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence1404. [bug] libbind: ns_name_ntol() could overwrite a zero length
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dnssec-signkey now report their version in the
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence usage message.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1402. [cleanup] A6 has been moved to experimental and is no longer
77f372eed39827f5efef476602de7c0505f99b91David Lawrence fully supported.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1401. [bug] adb wasn't clearing state when the timer expired.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1400. [bug] Block the addition of wildcard NS records by IXFR
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews or UPDATE. [RT #3502]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1399. [bug] Use serial number arithmetic when testing SIG
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews timestamps. [RT #4268]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1398. [doc] ARM: notify-also should have been also-notify.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1396. [func] dnssec-signzone: adjust the default signing time by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 1 hour to allow for clock skew.
d111a46c88adda33a93839f4934e127b6147d87dBob Halley1395. [port] OpenSSL 0.9.7 defines CRYPTO_LOCK_ENGINE but doesn't
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews have a working implementation. [RT #4079]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1394. [func] It is now possible to check if a particular element is
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in a acl. Remove duplicate entries from the localnets
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff1393. [port] Bind to individual IPv6 interfaces if IPV6_IPV6ONLY
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews is not available in the kernel to prevent accidently
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews listening on IPv4 interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1392. [bug] named-checkzone: update usage.
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson1391. [func] Add support for IPv6 scoped addresses in named.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1390. [func] host now supports ixfr.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1389. [bug] named could fail to rotate long log files. [RT #3666]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews defining HAVE_IFLIST_SYSCTL. [RT #3770]
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews1387. [bug] named could crash due to an access to invalid memory
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews space (which caused an assertion failure) in
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson incremental cleaning. [RT #3588]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff1386. [bug] named-checkzone -z stopped on errors in a zone.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1385. [bug] Setting serial-query-rate to 10 would trigger a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews REQUIRE failure.
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley1384. [bug] host was incompatible with BIND 8 in its exit code and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in the output with the -l option. [RT #3536]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1383. [func] Track the serial number in a IXFR response and log if
53c892082e4dd70a12bb5badd81a9e939d7e6efdBrian Wellington a mismatch occurs. This is a more specific error than
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "not exact". [RT #3445]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1382. [bug] make install failed with --enable-libbind. [RT #3656]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington1381. [bug] named failed to correctly process answers that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews contained DNAME records where the resulting CNAME
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews resulted in a negative answer.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1380. [func] 'rndc recursing' dump recursing queries to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews 'recursing-file = "named.recursing";'.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1379. [func] 'rndc status' now reports tcp and recursion quota
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1378. [func] Improved positive feedback for 'rndc {reload|refresh}.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1377. [func] dns_zone_load{new}() now reports if the zone was
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews loaded, queued for loading to up to date.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1376. [func] New function dns_zone_logc() to log to specified
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1375. [func] 'rndc dumpdb' now dumps the adb cache along with the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1374. [func] dns_adb_dump() now logs the lame zones associated
3886e748a4086b813e3453232a742903762fedadBob Halley with each server.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1373. [bug] Recovery from expired glue failed under certain
3886e748a4086b813e3453232a742903762fedadBob Halley circumstances.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1372. [bug] named crashes with an assertion failure on exit when
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley sharing the same port for listening and querying, and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews changing listening addresses several times. [RT# 3509]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1371. [bug] notify-source-v6, transfer-source-v6 and
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews query-source-v6 with explicit addresses and using the
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington same ports as named was listening on could interfere
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews with named's ability to answer queries sent to those
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1370. [bug] dig '+[no]recurse' was incorrectly documented.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1369. [bug] Adding an NS record as the lexicographically last
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley record in a secure zone didn't work.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1368. [func] remove support for bitstring labels.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley1367. [func] Use response times to select forwarders.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1366. [contrib] queryperf usage was incomplete. Add '-h' for help.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1365. [func] "localhost" and "localnets" acls now include IPv6
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson addresses / prefixes.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1364. [func] Log file name when unable to open memory statistics
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson and dump database files. [RT# 3437]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1363. [func] Listen-on-v6 now supports specific addresses.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1362. [bug] remove IFF_RUNNING test when scanning interfaces.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1361. [func] log the reason for rejecting a server when resolving
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff1360. [bug] --enable-libbind would fail when not built in the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews source tree for certain OS's.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1359. [security] Support patches OpenSSL libraries.
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson1358. [bug] It was possible to trigger a INSIST when debugging
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews large dynamic updates. [RT #3390]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1357. [bug] nsupdate was extremely wasteful of memory.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1356. [tuning] Reduce the number of events / quantum for zone tasks.
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister1354. [doc] lwres man pages had illegal nroff.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1353. [contrib] sdb/ldap to version 0.9.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1352. [bug] dig, host, nslookup when falling back to TCP use the
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister current search entry (if any). [RT #3374]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1351. [bug] lwres_getipnodebyname() returned the wrong name
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews when given a IPv4 literal, af=AF_INET6 and AI_MAPPED
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1350. [bug] dns_name_fromtext() failed to handle too many labels
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1349. [security] Minimum OpenSSL version now 0.9.6e (was 0.9.5a).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1348. [port] win32: Rewrote code to use I/O Completion Ports
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews in socket.c and eliminating a host of socket
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews errors. Performance is enhanced.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1347. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1346. [placeholder]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1345. [port] Use a explicit -Wformat with gcc. Not all versions
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews include it in -Wall.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson1344. [func] Log if the serial number on the master has gone
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews If you have multiple machines specified in the masters
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington clause you may want to set 'multi-master yes;' to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews suppress this warning.
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley1343. [func] Log successful notifies received (info). Adjust log
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews level for failed notifies to notice.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1342. [func] Log remote address with TCP dispatch failures.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1341. [func] Allow a rate limiter to be stalled.
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington1340. [bug] Delay and spread out the startup refresh load.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley lookups. Bit string lookups are no longer attempted.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1338. [placeholder]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1337. [placeholder]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister1336. [func] Nibble lookups under IP6.ARPA are now supported by
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews dns_byaddr_create(). dns_byaddr_createptrname() is
be768c2e952c34438025999125f984995a2c675fBob Halley deprecated, use dns_byaddr_createptrname2() instead.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1335. [bug] When performing a nonexistence proof, the validator
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley should discard parent NXTs from higher in the DNS.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1334. [bug] When signing/verifying rdatasets, duplicate rdatas
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley need to be suppressed.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1333. [contrib] queryperf now reports a summary of returned
be768c2e952c34438025999125f984995a2c675fBob Halley rcodes (-c), rcodes are printed in mnemonic form (-v).
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1332. [func] Report the current serial with periodic commits when
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley rolling forward the journal.
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley1331. [func] Generate DNSSEC wildcard proofs.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1330. [bug] When processing events (non-threaded) only allow
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews the task one chance to use to use its quantum.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1329. [func] named-checkzone will now check if nameservers that
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews appear to be IP addresses. Available modes "fail",
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews "warn" (default) and "ignore" the results of the
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1328. [bug] The validator could incorrectly verify an invalid
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson negative proof.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1327. [bug] The validator would incorrectly mark data as insecure
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister when seeing a bogus signature before a correct
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1326. [bug] DNAME/CNAME signatures were not being cached when
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews validation was not being performed. [RT #3284]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley1325. [bug] If the tcpquota was exhausted it was possible to
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews to trigger a INSIST() failure.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1324. [port] darwin: ifconfig.sh now supports darwin.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1322. [bug] dnssec-signzone usage message was misleading.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1321. [bug] If the last RRset in a zone is glue, dnssec-signzone
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington would incorrectly duplicate its output and sign it.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1320. [doc] query-source-v6 was missing from options section.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1319. [func] libbind: log attempts to exploit #1318.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1318. [bug] libbind: Remote buffer overrun.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1317. [port] libbind: TrueUNIX 5.1 does not like __align as a
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews element name.
b39bfc630dc222fb73c21a00bcba47c4f9e38f20Mark Andrews1316. [bug] libbind: gethostans() could get out of sync parsing
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the response if there was a very long CNAME chain.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1315. [bug] Options should apply to the internal _bind view.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence1314. [port] Handle ECONNRESET from sendmsg() [unix].
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which