CHANGES revision dc6cea0448ea7b10eb1ae7d38bfc18544a4dfb97
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews3464. [maint] Updates to PKCS#11 openssl patches, supporting
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3463. [doc] Clarify managed-keys syntax in ARM. [RT 32232]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3462. [doc] Clarify server selection behavior of dig when using
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews -4 or -6 options. [RT #32181]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3461. [bug] Negative responses could incorrectly have AD=1
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews set. [RT #32237]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3459. [func] Added -J option to named-checkzone/named-compilezone
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews to specify the path to the journal file. [RT #30958]
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews3458. [bug] Return FORMERR when presented with a overly long
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews domain named in a request. [RT #29682]
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
463fc8f9d61e07613486e64b4b7b3f924ea2b25cMark Andrews3456. [port] g++47: ATF failed to compile. [RT #32012]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews failed. [RT #31960]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3452. [bug] Accept duplicate singleton records. [RT #32329]
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews3451. [port] Increase per thread stack size from 64K to 1M.
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews3450. [bug] Stop logfileconfig system test spam system logs.
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews3449. [bug] gen.c: use the pre-processor to construct format
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews strings so that compiler can perform sanity checks;
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews check the snprintf results. [RT #17576]
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews3445. [bug] Warn about zone files with blank owner names
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews immediately after $ORIGIN directives. [RT #31848]
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews insecure responses. [RT #21409]
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
a207a2835e37de52e11d4c143c0425e749409c46Mark Andrews rejected when generating keys. [RT #31927]
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews3442. [port] Net::DNS 0.69 introduced a non backwards compatible
03760eeb542cc5e91193eec478cae022df4bcc58Mark Andrews change. [RT #32216]
838d608e6f37038f2fb43980a7a9d6b6a490db36Mark Andrews3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews3440. [bug] Reorder get_key_struct to not trigger a assertion when
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews cleaning up due to out of memory error. [RT #32131]
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews3439. [placeholder]
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews buffers with constant data. [RT #32064]
9bd478a5e6df956a79bbdb5c182d5b44763786ceMark Andrews3436. [bug] Check malloc/calloc return values. [RT #32088]
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews3435. [bug] Cross compilation support in configure was broken.
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews3434. [bug] Pass client info to the DLZ findzone() entry
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews point in addition to lookup(). This makes it
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews possible for a database to answer differently
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews whether it's authoritative for a name depending
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews on the address of the client. [RT #31775]
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews3433. [bug] dlz_findzone() did not correctly handle
bf7f253e306d0ced8ae24d7a0598773950da11f4Mark Andrews ISC_R_NOMORE. [RT #31172]
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews3432. [func] Multiple DLZ databases can now be configured.
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews DLZ databases are searched in the order configured,
0ffaee887ff5674b8c3bb0435ae838f641981706Mark Andrews unless set to "search no", in which case a
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews zone can be configured to be retrieved from a
5f89a1ee9e0fe64211d050db5d3e7a5ea282c282Mark Andrews particular DLZ database by using a "dlz <name>"
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews option in the zone statement. DLZ databases can
c86eed4bdecad9df12f992f9d743dfee3a6c5bdcMark Andrews support type "master" and "redirect" zones.
9d3ad53203f1ac49f9e876dbbcaca18656eb3e19Mark Andrews3431. [bug] ddns-confgen: Some valid key algorithms were
9d3ad53203f1ac49f9e876dbbcaca18656eb3e19Mark Andrews not accepted. [RT #31927]
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews 'T' between the date and time. [RT #32044]
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews3429. [bug] dns_zone_getserial2 could a return success without
8da0b50e8a8c74602eca97e261ce4ad457df5048Mark Andrews returning a valid serial. [RT #32007]
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews3427. [bug] dig +trace incorrectly displayed name server
6388dcf8e661687c30a5d52f149d193ce86748a8Mark Andrews addresses instead of names. [RT #31641]
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews3426. [bug] dnssec-checkds: Clearer output when records are not
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews found. [RT #31968]
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews in use after free. [RT #31908]
d92770e851ebbc1005b3bf121e3c9f13b67a3f42Mark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews3423. [bug] "rndc signing -nsec3param" didn't accept the full
59ab128c972622f5aeafe3229966dcba73b62243Mark Andrews range of possible values. Address portability issues.
90295f915c883d1aeeda856f518584d4219a704aMark Andrews3422. [bug] Added a clear error message for when the SOA does not
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews match the referral. [RT #31281]
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews3421. [bug] Named loops when re-signing if all keys are offline.
99776003811a413457a2c35a808ad860df877d24Mark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
99776003811a413457a2c35a808ad860df877d24Mark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews3418. [func] New XML schema (version 3.0) for the statistics channel
2ffb3eb384ae71ae9f8edbf5fa2219d965ff0552Mark Andrews adds query type statistics at the zone level, and
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews flattens the XML tree and uses compressed format to
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews optimize parsing. Includes new XSL that permits
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews charting via the Google Charts API on browsers that
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews support javascript in XSL. The old XML schema has been
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews deprecated. [RT #30023]
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews3417. [placeholder]
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
52fc1457e44c476a81ec9dee6a664958cb64b8e2Mark Andrews dispatches per interface. [RT #31743]
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews3415. [bug] named could die with a REQUIRE failure if a valdation
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews was canceled. [RT #31804]
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉3414. [bug] Address locking issues found by Coverity. [RT #31626]
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews3413. [func] Record the number of DNS64 AAAA RRsets that have been
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews synthesized. [RT #27636]
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉3412. [bug] Copy timeval structure from control message data.
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉 to UDP. [RT #31690]
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉3410. [bug] Addressed Coverity warnings. [RT #31626]
2945ac15af547df0268e449252902ead599e2451Mark Andrews3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
2945ac15af547df0268e449252902ead599e2451Mark Andrews from X.509 certificates, for use with DANE
285761cf91626976e211f69d9678c138b25f8629Tatuya JINMEI 神明達哉 (DNS-based Authentication of Named Entities).
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews3408. [bug] Some DNSSEC-related options (update-check-ksk,
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews are now legal in slave zones as long as
ca70688bf60b4f50c4e3ec7d40567341c9962fafMark Andrews inline-signing is in use. [RT #31078]
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews3407. [placeholder]
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews3406. [bug] mem.c: Fix compilation errors when building with
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
aec2d57d5b9f5ca97763a1b49b76f0bcb5852e1aMark Andrews Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews3405. [bug] Handle time going backwards in acache. [RT #31253]
ebbbd34776d668bb2d7cf100b58a6f647c431c03Mark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews RRSIG and NSEC records from nodes that used to be
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews in-zone but are now below a zone cut. [RT #31556]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3402. [test] The IPv6 interface numbers used for system
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews tests were incorrect on some platforms. [RT #25085]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews in the "srcid" file in the build tree and normally set
ba4aec8c1853a1deda8eb43ffeaac4d764c8d39eMark Andrews to the most recent git hash. [RT #31494]
550085fed1d0af54ba5b2f588898afec158195deMark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
550085fed1d0af54ba5b2f588898afec158195deMark Andrews clash. [RT #31515]
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews3398. [bug] SOA parameters were not being updated with inline
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews signed zones if the zone was modified while the
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉 server was offline. [RT #29272]
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
ab2ac96c4e71dc803e47c35592044e116f61aca5Tatuya JINMEI 神明達哉3396. [bug] OPT records were incorrectly removed from signed,
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews truncated responses. [RT #31439]
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews3394. [bug] Adjust 'successfully validated after lower casing
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews signer' log level and category. [RT #31414]
6b25d2f7f7a1125508f8d225a8fef94e1db83555Mark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
ab5d8edc1bd391a1b306db68114fac303484b30fMark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews3388. [bug] Fixed several Coverity warnings. [RT #30996]
2434ccfde7efa30b6fedf4630e5036eeb5d647d0Mark Andrews3387. [func] DS digest can be disabled at runtime with
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews disable-ds-digests. [RT #21581]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3386. [bug] Address locking violation when generating new NSEC /
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews NSEC3 chains. [RT #31224]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3385. [bug] named-checkconf didn't detect missing master lists
311e6d00c584f63665bed5dd9aea292402cad8deMark Andrews in also-notify clauses. [RT #30810]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3384. [bug] Improved logging of crypto errors. [RT #30963]
7f32428506d55083fe5ac9aa515294bdef7c6e27Mark Andrews3383. [security] A certain combination of records in the RBT could
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews cause named to hang while populating the additional
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews section of a response. [RT #31090]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
a6211a2f234767a015a6a30b85d5da087fa907f1Mark Andrews if set, regardless of the address family in use.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3381. [contrib] Update queryperf to support more RR types.
e72d4d8929fec51153e4fd0d1cf632cd59335495Mark Andrews3380. [bug] named could die if a non-existant master list was
0ae34c3f6222ece01e0f710c7c0311f5cf9d9c0fMark Andrews referenced in a also-notify. [RT #31004]
4eaf7590c82871637d1380be59000d8684db649cMark Andrews3379. [bug] isc_interval_zero and isc_time_epoch should be
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews "const (type)* const". [RT #31069]
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
bb6936058eb88eadff030462a347c10895c61a9aMark Andrews3377. [bug] Removed spurious newline from NSEC3 multiline
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews output. [RT #31044]
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews3376. [bug] Lack of EDNS support was being recorded without a
08d802a9c6ec4c92f18c6cab1250d55c3f649b38Mark Andrews successful response. [RT #30811]
7c5d5a7932b8ac27281eeff64506dff8220bb3eaMark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer3374. [bug] isc_parse_uint32 failed to return a range error on
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer systems with 64 bit longs. [RT #30232]
1a9c000f54e6204fb49d785fd0bbb7a8e590dc99Mark Andrews3373. [bug] win32: open raw files in binary mode. [RT #30944]
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer3372. [bug] Silence spurious "deleted from unreachable cache"
3cea35d9159b36eac43d32082a0b98f2cd82fc2eDanny Mayer messages. [RT #30501]
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews3371. [bug] AD=1 should behave like DO=1 when deciding whether to
53f1312c61fa8618852584bcdf9f35530282eb08Mark Andrews add NS RRsets to the additional section or not.
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews3370. [bug] Address use after free while shutting down. [RT #30241]
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews3369. [bug] nsupdate terminated unexpectedly in interactive mode
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews if built with readline support. [RT #29550]
7d011946d27152e6ee1e0f56e380abafddd9cfdbMark Andrews3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
1431917c7cddbac7442cb910e83cb058fea59fb5Mark Andrews were not C++ safe.
3733c24efa7eaa65455153702c3fb71c9233eafbMark Andrews3367. [bug] dns_dnsseckey_create() result was not being checked.
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews3366. [bug] Fixed Read-After-Write dependency violation for IA64
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews atomic operations. [RT #25181]
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews3365. [bug] Removed spurious newlines from log messages in
b972ff033b3efd52e747683face674dc4d2e431bMark Andrews3364. [security] Named could die on specially crafted record.
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews in static-stub zones; this had been overlooked.
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews3362. [bug] Setting some option values to 0 in named.conf
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews could trigger an assertion failure on startup.
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews3361. [bug] "rndc signing -nsec3param" didn't work correctly
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews when salt was set to '-' (no salt). [RT #30099]
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews3360. [bug] 'host -w' could die. [RT #18723]
e412f05a4e5ab7727f024c95e2a7515c07107b02Mark Andrews3359. [bug] An improperly-formed TSIG secret could cause a
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews memory leak. [RT #30607]
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews3358. [placeholder]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews approaching their expiry, so they don't remain
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews in caches after expiry. [RT #26429]
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews3355. [port] Use more portable awk in verify system test.
4d9f3f00d93fcb8743b1105e8cf82e862be220d1Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3353. [bug] Use a single task for task exclusive operations.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3352. [bug] Ensure that learned server attributes timeout of the
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews adb cache. [RT #29856]
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews memory debugging flags are set. [RT #30243]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3350. [bug] Memory read overrun in isc___mem_reallocate if
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews ISC_MEM_DEBUGCTX memory debugging flag is set.
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews3349. [bug] Change #3345 was incomplete. [RT #30233]
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews3348. [bug] Prevent RRSIG data from being cached if a negative
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews record matching the covering type exists at a higher
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews trust level. Such data already can't be retrieved from
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews the cache since change 3218 -- this prevents it
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews being inserted into the cache as well. [RT #26809]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews private key file would cause a change in the
3e7b37e01ba3efc873486140734fd24788092a30Mark Andrews permissions of the existing file. [RT #27724]
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews3346. [security] Bad-cache data could be used before it was
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews initialized, causing an assert. [RT #30025]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3345. [bug] Addressed race condition when removing the last item
1c0927d8a091effcf9b2dc5baa533927c113bd5cMark Andrews or inserting the first item in an ISC_QUEUE.
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews3344. [func] New "dnssec-checkds" command checks a zone to
446ff1959cc3e963778c8770204b72c9e7c7df5aMark Andrews determine which DS records should be published
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews in the parent zone, or which DLV records should be
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews published in a DLV zone, and queries the DNS to
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews ensure that it exists. (Note: This tool depends
33c538015323f4576679e427088372eea614feebMark Andrews on python; it will not be built or installed on
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews systems that do not have a python interpreter.)
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3343. [placeholder]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews resulting in excessive cpu usage in some cases.
de4976142190ae84ed3e4099f3e0fc07781748a3Mark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews to ensure correctness of signatures and of NSEC/NSEC3
5758e9adfb009286b2b719ff83eb284f1019c589Mark Andrews chains. [RT #23673]
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews3340. [func] Added new 'fast' zone file format, which is an image
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews of a zone database that can be loaded directly into
6a3c86ff436452d062912bd91ecd289541869d42Mark Andrews memory via mmap(), allowing much faster zone loading.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews (Note: Because of pointer sizes and other
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews considerations, this file format is platform-dependent;
e0fa16fe191d619d2cd05a039067414409329878Mark Andrews 'fast' zone files cannot always be transferred from one
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews server to another.) [RT #25419]
93da96c1cfd5f3c47169855867dd18db00c8a386Mark Andrews3339. [func] Allow the maximum supported rsa exponent size to be
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews specified: "max-rsa-exponent-size <value>;" [RT #29228]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3338. [bug] Address race condition in units tests: asyncload_zone
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews and asyncload_zt. [RT #26100]
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews3337. [bug] Change #3294 broke support for the multiple keys
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews in controls. [RT #29694]
cc4928ec7116a064223f60639ca1a80f25ba350fMark Andrews3336. [func] Maintain statistics for RRsets tagged as "stale".
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3335. [func] nslookup: return a nonzero exit code when unable
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews to get an answer. [RT #29492]
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews3334. [bug] Hold a zone table reference while performing a
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews asynchronous load of a zone. [RT #28326]
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews3333. [bug] Setting resolver-query-timeout too low can cause
9b7c023fe6dc88ba1e69ace1f7c3ade40c6475f9Mark Andrews named to not recover if it loses connectivity.
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews3331. [security] dns_rdataslab_fromrdataset could produce bad
c61ec97ae0b859914ee26e213fe792f86a157990Mark Andrews rdataslabs. [RT #29644]
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews3330. [func] Fix missing signatures on NOERROR results despite
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews RPZ rewriting. Also
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews - add optional "recursive-only yes|no" to the
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews response-policy statement
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews - add optional "max-policy-ttl" to the response-policy
0b1af13f680a865521105a77ee192024b5af33c4Mark Andrews statement to limit the false data that
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews "recursive-only no" can introduce into
945cb085b859dbfc6a883813dda03c83e06995d3Mark Andrews resolvers' caches
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews - add a RPZ performance test to bin/tests/system/rpz
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews when queryperf is available.
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews - the encoding of PASSTHRU action to "rpz-passthru".
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews (The old encoding is still accepted.)
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews generate RRSIG records with the signer-name in
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews lower case. We accept them with any case, but if
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews they fail to validate, we try again in lower case.
8f9664521724eefc39728c092d0bc6be527e1496Mark Andrews3328. [bug] Fixed inconsistent data checking in dst_parse.c.
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews to 'filter-aaaa-on-v4' but applies to IPv6
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews connections. (Use "configure --enable-filter-aaaa"
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews to enable this option.) [RT #27308]
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews3326. [func] Added task list statistics: task model, worker
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews threads, quantum, tasks running, tasks ready.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3325. [func] Report cache statistics: memory use, number of
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews nodes, number of hash buckets, hit and miss counts.
a1edcd1b8d430650d85ec0962cd32efde76a71fbMark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
5b1627d469d07c5bfe7f193e3ddd85d0dd6ad4b0Mark Andrews3323. [func] Report the number of buckets the resolver is using.
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews3322. [func] Monitor the number of active TCP and UDP dispatches.
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews3321. [func] Monitor the number of recursive fetches and the
8989de1059c6292fc43ce507df4991224af2d789Mark Andrews number of open sockets, and report these values in
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews the statistics channel. [RT #27054]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3320. [func] Added support for monitoring of recursing client
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews count. [RT #27009]
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews3319. [func] Added support for monitoring of ADB entry count and
b9efcf0a377381b29960137e54ecaf4db85a35c8Mark Andrews hash size. [RT #27057]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews bucket lock when finished with a fetch context.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
e70b069e3807d5f499dff31eb31c2b3e0e125457Mark Andrews3316. [tuning] Improved locking performance when recursing.
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews queries; this can improve performance on busy
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews multiprocessor systems by reducing lock contention.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3314. [bug] The masters list could be updated while refesh_callback
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews and stub_callback were using it. [RT #26732]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews zone.c:zone_gotwritehandle. [RT #29028]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3310. [test] Increase table size for mutex profiling. [RT #28809]
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews3309. [bug] resolver.c:fctx_finddone() was not thread safe.
93649589d470624e9e1c34403ad076b3a1a4c5c3Mark Andrews3308. [placeholder]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3303. [bug] named could die when reloading. [RT #28606]
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews keys if the zone name contained character that
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews required special mappings. [RT #28600]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
e823642ec0c167af8f7db01c96ba0279165a61f3Mark Andrews for non-recursive queries. [RT #28565]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews but was not compiled in. [RT #28338]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3299. [bug] Make SDB handle errors from database drivers better.
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews3298. [bug] Named could dereference a NULL pointer in
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3296. [bug] Named could die with a INSIST failure in
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews client.c:exit_check. [RT #28346]
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
a04a323f9a1ebd4766fc577e11bf3c22bdaf5516Mark Andrews portable. [RT # 26542]
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
dd0228908543562781a4c0d8773ae87d4c530633Mark Andrews error. [RT #28265]
b907c35b33a5a57e95ac021fb6a0086dbe369840Mark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews3292. [func] Log messages in the axfr stream at debug 10.
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
c08a03a43116c21cf12dea7cbcb5465588f7955cMark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
c311ed52d45334e182a093efad827fe4cbe7e686Mark Andrews by the DLZ dlopen driver. [RT #28056]
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
79a6a33184abff1999ba13b10922ccb34a2758a5Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews after 'rndc reconfig'. [RT #26786]
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews proveunsecure after calling startfinddlvsep.
2b1c71b134eb92f2e297a56f778838e42f41c880Mark Andrews3284. [bug] Address race conditions with the handling of
d6fbfd28ea82e425740de903ddc67f7d9e9f82e7Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
7791dd06ea69d0fb2494788ad4c24d568f40bcdfMark Andrews failed to load. [RT #27863]
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews of the old NS RRset when replacing it.
091b098b49a4f84f459abd46451955a18abd6d40Mark Andrews [RT #27792] [RT #27884]
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
7d3458a972a902740eb142044655aba6c6ffb9acMark Andrews despite succeeding over the loopback interface.
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews3280. [bug] Potential double free of a rdataset on out of memory
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews with DNS64. [RT #27762]
75e184e4b80c499859574257dd5781d62cfed0b3Mark Andrews3279. [bug] Hold a internal reference to the zone while performing
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews a asynchronous load. Address potential memory leak
7f20fd8ebb0cabc8f935381d958f8371990c9212Mark Andrews if the asynchronous is cancelled. [RT #27750]
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews3278. [bug] Make sure automatic key maintenance is started
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews when "auto-dnssec maintain" is turned on during
8695d7b357789bedff63e5b19c5ab25cd58fcd4bMark Andrews "rndc reconfig". [RT #26805]
f76c4ebaf586a693521f018fbc617c292c1555d7Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews safe_open failure. [RT #27696]
81e302788a444b81231a7cda721548a020ae5660Brian Wellington3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
81e302788a444b81231a7cda721548a020ae5660Brian Wellington option had been misspelled as '-clear'. (To avoid
81e302788a444b81231a7cda721548a020ae5660Brian Wellington future confusion, both options now work.) [RT #27173]
c00a1eb423623442aff428336bb55590f79013bbMark Andrews3274. [placeholder]
1e258716acade52396a8f260b5e19cbf6ca0290aMark Andrews3273. [bug] AAAA responses could be returned in the additional
d972fa317829804a692e46a34b6f27a33f861d9dMark Andrews section even when filter-aaaa-on-v4 was in use.
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington3272. [func] New "rndc zonestatus" command prints information
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington about the specified zone. [RT #21671]
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington3271. [port] darwin: mksymtbl is not always stable, loop several
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews times before giving up. mksymtbl was using non
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews --- 9.9.0rc2 released ---
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews when inline-signing was in use. [RT #27650]
603d1d1e20fbffc986b3aec93379bb4f6ac37afcMark Andrews3269. [port] darwin 11 and later now built threaded by default.
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews out the earliest expiry time. [RT #23311]
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews3267. [bug] Memory allocation failures could be mis-reported as
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews unexpected error. New ISC_R_UNSET result code.
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
608c703d1231e0b1f291637ca5361b773afcdbf1Mark Andrews DNSKEY RRset was not being properly computed.
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
feb8ae093115b36ac061e23d0227ea06f51950a3Mark Andrews inline-signing code. [RT #27557]
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews3264. [bug] Automatic regeneration of signatures in an
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews inline-signing zone could stall when the server
6b610836bc081fdadf7bc7a16ce27f422c6b5638Brian Wellington was restarted. [RT #27344]
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews inline-signing zone. [RT #27337]
2211bec6a0626b681fdf5a8e4406555ef76ddf70Mark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews for some query patterns. [RT #27170/27185]
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews --- 9.9.0rc1 released ---
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
b9c80c8bddbb88384d7baef297a873b5f8715e49Mark Andrews message when writing to stdout. [RT #27109]
faf23095be9a0b5e2696f2b1f1a260af16e9ebeaMark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
f38c274c217d0a5b791786877422306a0e477e10Mark Andrews in a pipe or socket. [RT #27109]
84ef147b1fa0aed15cade55478ed647d15f7b094Mark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews3255. [func] No longer require that a empty zones be explicitly
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews enabled or that a empty zone is disabled for
e53a5a116fc531f730df0adb091278ff8a941dffMark Andrews RFC 1918 empty zones to be configured. [RT #27139]
fc7fbdf6e66fb496442ec4f99f5a84669ea4c6d3Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
986be654feec852eb9da0d15599f18d0035e569bMark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
986be654feec852eb9da0d15599f18d0035e569bMark Andrews too long. [RT #26956]
3703473c4a2672af58b4f141e92067e969fd978eBrian Wellington3252. [bug] When master zones using inline-signing were
3703473c4a2672af58b4f141e92067e969fd978eBrian Wellington updated while the server was offline, the source
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews zone could fall out of sync with the signed
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews copy. They can now resynchronize. [RT #26676]
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews memory dns_sdlz_putrr() can allocate per record to
86e71d7e8626de37559265f0edac8451bef6d001Andreas Gustafsson prevent run away memory consumption on ISC_R_NOSPACE.
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews3250. [func] 'configure --enable-developer'; turn on various
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews configure options, normally off by default, that
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews we want developers to build and test with. [RT #27103]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews3249. [bug] Update log message when saving slave zones files for
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews analysis after load failures. [RT #27087]
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews3248. [bug] Configure options --enable-fixed-rrset and
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews --enable-exportlib were incompatible with each
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews other. [RT #27087]
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews3247. [bug] 'raw' format zones failed to preserve load order
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews breaking 'fixed' sort order. [RT #27087]
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews3246. [bug] Named failed to start with a empty also-notify list.
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews3245. [bug] Don't report a error unchanged serials unless there
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews were other changes when thawing a zone with
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews ixfr-fromdifferences. [RT #26845]
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
caa8797a00ccb1a02f1690dda5b4aeda9a1db5a7Mark Andrews Also simplified nsupdate syntax to make "update"
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews and "prereq" optional. [RT #24659]
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews being properly set.
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews3242. [func] Extended the header of raw-format master files to
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews include the serial number of the zone from which
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews they were generated, if different (as in the case
c73c1c33ec9569c8f9ffd205b48f044f9b03795bMark Andrews of inline-signing zones). This is to be used in
e95cc59f90d35f2d482b6f9c19ba96818275335cMark Andrews inline-signing zones, to track changes between the
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington unsigned and signed versions of the zone, which may
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington have different serial numbers.
0062c1ddfe0b2f0a4e206a5d460d8e7d58e29b80Brian Wellington (Note: raw zonefiles generated by this version of
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson BIND are no longer compatible with prior versions.
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson To generate a backward-compatible raw zonefile
48b0f5ff87f0a5a138129bcd855fd72908491321Andreas Gustafsson using dnssec-signzone or named-compilezone, specify
0b809e3e23f9f3d9697def5f447aa57d5aeef56bAndreas Gustafsson output format "raw=0" instead of simply "raw".)
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington3241. [bug] Address race conditions in the resolver code.
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington3240. [bug] DNSKEY state change events could be missed. [RT #26874]
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
2ca2e1a1ceec59a40f977f01ba8e8f4c0424c484Brian Wellington timestamp. [RT #26883]
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington3238. [bug] keyrdata was not being reinitialized in
84185d19c7a9ef1ac23cc6236c8773697d4efeb1Brian Wellington lib/dns/rbtdb.c:iszonesecure. [RT#26913]
683f10428e292811317df38fa324f242abbf7384Mark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews EDNS(0) fallback behavior. [RT #26416]
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews the generated diff and optionally writes it to a
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews journal. [RT #26386]
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington3232. [bug] Zero zone->curmaster before return in
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington dns_zone_setmasterswithkeys(). [RT #26732]
a5c077e40c784cf9e25c95a1ab94db2faab04ae9Brian Wellington3231. [bug] named could fail to send a incompressible zone.
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington3230. [bug] 'dig axfr' failed to properly handle a multi-message
2ca556300b09a94f0937b303386d29b95ef057ddBrian Wellington axfr with a serial of 0. [RT #26796]
97527fc03cdb061759e2c9529c670ac1c190ef84Brian Wellington3229. [bug] Fix local variable to struct var assignment
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews found by CLANG warning.
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews loading performance. [RT #26523]
b7064914ca566fdd67cf0fe7e82d586cbb596470Mark Andrews3227. [bug] Interim fix to make WKS's use of getprotobyname()
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington and getservbyname() self thread safe. [RT #26232]
3e67a87fc6be516ec12afa5aa31c2c04d5a6ae17Brian Wellington3226. [bug] Address minor resource leakages. [RT #26624]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews messages. [RT #26507]
e9472e9f18f1c4f1279be2b3147be13a2bb731d0Mark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
d83346263dc68358d73de2a8be60846c9c92950eAndreas Gustafsson3222. [cleanup] Replace dns_journal_{get,set}_bitws with
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews3221. [bug] Fixed a potential core dump on shutdown due to
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews referencing fetch context after it's been freed.
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson --- 9.9.0b2 released ---
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
b938d2af619822a8262c86223cad958511e716a9Andreas Gustafsson could fail to set the database version correctly,
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews causing an assertion failure. [RT #26180]
9ab461a6ffed2ae2fe0380c30b69052db7473405Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
77467267d97c781f3f3d050e229a874831e59c3dMark Andrews3218. [security] Cache lookup could return RRSIG data associated with
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews nonexistent records, leading to an assertion
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews failure. [RT #26590]
84d8c0166ddc63ad5ce64e7d354553de38b9aabdAndreas Gustafsson3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
6c06bc591a830023e5e7a41cc4b37978b98c0c51Mark Andrews3214. [func] Add 'named -U' option to set the number of UDP
58d943711575376b05b3b3b303922a8a9d7ce9c1Mark Andrews listener threads per interface. [RT #26485]
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
9cec4ca6cac428a46c6d64197c64831dcc02f506Andreas Gustafsson3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
23fb770906bf1fd98210f16ad660078274242963Mark Andrews list prior to adding a reference to it leading a
23fb770906bf1fd98210f16ad660078274242963Mark Andrews possible assertion failure. [RT #23219]
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington option prints in single-line-per-record format.
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews3210. [bug] Canceling the oldest query due to recursive-client
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews overload could trigger an assertion failure. [RT #26463]
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews3208. [bug] 'dig -y' handle unknown tsig algorithm better.
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson3206. [cleanup] Add ISC information to log at start time. [RT #25484]
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
fefbb64a751f23c9dcf8bb1e62c6ed40a6a04fb2Mark Andrews nameserver behavior. Enable "dig +adflag" and
0d6f70f1dbf77cf10e0bae8683c741f5924f6afeMark Andrews "dig +edns=0" by default. Enable "+dnssec" when
b938d2af619822a8262c86223cad958511e716a9Andreas Gustafsson running "dig +trace". [RT #23497]
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews3204. [bug] When a master server that has been marked as
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews unreachable sends a NOTIFY, mark it reachable
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews again. [RT #25960]
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews3203. [bug] Increase log level to 'info' for validation failures
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson from expired or not-yet-valid RRSIGs. [RT #21796]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3202. [bug] NOEDNS caching on timeout was too aggressive.
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3201. [func] 'rndc querylog' can now be given an on/off parameter
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson instead of only being used as a toggle. [RT #18351]
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson3200. [doc] Some rndc functions were undocumented or were
242bba8991b030b7764f0bdca3922d75c34ea51eAndreas Gustafsson missing from 'rndc -h' output. [RT #25555]
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews3199. [func] When logging client information, include the name
45fe575607b91147ed753d175a7255198f14f197Andreas Gustafsson being queried. [RT #25944]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews permissions. [RT #24866]
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews3197. [bug] Don't try to log the filename and line number when
ef29912666cc6160f7165558bef017ab3849c5e1Mark Andrews the config parser can't open a file. [RT #22263]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews doesn't exist. [RT #25783]
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews3195. [cleanup] Silence "file not found" warnings when loading
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson managed-keys zone. [RT #26340]
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson3194. [doc] Updated RFC references in the 'empty-zones-enable'
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington documentation. [RT #25203]
0b81e99ddfb01746e667797dedc291fc550d14d3Brian Wellington3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
3638017bd3cb8e30874f708a125d1541b680b25eBrian Wellington3192. [bug] A query structure could be used after being freed.
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington3191. [bug] Print NULL records using "unknown" format. [RT #26392]
8bb79fc9b9952172d10f56f31739730e38d4b013Brian Wellington3190. [bug] Underflow in error handling in isc_mutexblock_init.
b541c10d0442d9804d94567a97956cec3bd2912dBrian Wellington3189. [test] Added a summary report after system tests. [RT #25517]
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson3188. [bug] zone.c:zone_refreshkeys() could fail to detach
c01237c6bc5ec25063b4aae1799fe4de01a7455bAndreas Gustafsson references correctly when errors occurred, causing
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews a hang on shutdown. [RT #26372]
60213f2815a7e6584a2285546d05633fa7b6f5b4Mark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson --- 9.9.0b1 released ---
6c8abf481df85a67c3f32f5f107b554d3ff5a3edMark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
c52806164c335f89e1980af836470b6daffe4f82Andreas Gustafsson3185. [func] New 'rndc signing' option for auto-dnssec zones:
1e4bfff1855795853648f507422b96fc8fecbff1Mark Andrews - 'rndc signing -list' displays the current
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson state of signing operations
892476530f3971aff52f25103d488ece9b01f673Andreas Gustafsson - 'rndc signing -clear' clears the signing state
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson records for keys that have fully signed the zone
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson - 'rndc signing -nsec3param' sets the NSEC3
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews parameters for the zone
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson3184. [bug] named had excessive cpu usage when a redirect zone was
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson configured. [RT #26013]
9b2c0d29248ad5f86b47319239a06c783e1b5307Andreas Gustafsson3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
eb2c518a3871932e86268e7c6ddae2b2a00d72fdMark Andrews3182. [bug] Auth servers behind firewalls which block packets
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews greater than 512 bytes may cause other servers to
4072dfb9b865c82c24a72e734d54da51a20dfc1eMark Andrews perform poorly. Now, adb retains edns information
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson and caches noedns servers. [RT #23392/24964]
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson3181. [func] Inline-signing is now supported for master zones.
11fe3dcfe2a5fbefd0cfe445872dc4c595506204Andreas Gustafsson3180. [func] Local copies of slave zones are now saved in raw
d1abb8bb020aacd1ce0da65c2d5d8f7c96ebd52aMark Andrews format by default, to improve startup performance.
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson 'masterfile-format text;' can be used to override
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson the default, if desired. [RT #25867]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson3179. [port] kfreebsd: build issues. [RT #26273]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson3178. [bug] A race condition introduced by change #3163 could
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson cause an assertion failure on shutdown. [RT #26271]
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington3177. [func] 'rndc keydone', remove the indicator record that
b6b9d8b8434e4eaab74b69cd14fcacf448055ca5Brian Wellington named has finished signing the zone with the
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson corresponding key. [RT #26206]
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson3176. [doc] Corrected example code and added a README to the
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson sample external DLZ module in contrib/dlz/example.
6d6529b5e5ab7223fa2560ebe144bcb82517cef3Mark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews NSEC3 signed zone are validated. Stop sending a
af36ecc41ae6bd73553aacd006ae55474e193b07Andreas Gustafsson unnecessary NSEC3 record when generating such
0b07b9482c00060d1ddd551a5dcb8cecbe2c1f65Mark Andrews responses. [RT #26200]
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews3174. [bug] Always compute to revoked key tag from scratch.
2869504d83e84a91dbc822e8a243e837f5c0374dAndreas Gustafsson3173. [port] Correctly validate root DS responses. [RT #25726]
ce6caa07591b3723968c22f5aa13740f9609135aAndreas Gustafsson3172. [port] darwin 10.* and freebsd [89] are now built threaded by
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews3171. [bug] Exclusively lock the task when adding a zone using
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews 'rndc addzone'. [RT #25600]
58930ca9802e772afe9f5ccb30f236d201cf60e0Danny Mayer --- 9.9.0a3 released ---
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson3170. [func] RPZ update:
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson - fix precedence among competing rules
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson - improve ARM text including documenting rule precedence
e3e94dd137c5f9d3d5c5179863f674b27aa0cc02Andreas Gustafsson - try to rewrite CNAME chains until first hit
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson - new "rpz" logging channel
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson - RDATA for CNAME rules can include wildcards
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson - replace "NO-OP" named.conf policy override with
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson "PASSTHRU" and add "DISABLED" override ("NO-OP"
7c014c5bf41dc38802e8889c0a9110204eb1a552Andreas Gustafsson is still recognized)
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson3169. [func] Catch db/version mis-matches when calling dns_db_*().
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews a ANY query. [RT #26017]
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews3167. [bug] Negative answers from forwarders were not being
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews correctly tagged making them appear to not be cached.
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson3166. [bug] Upgrading a zone to support inline-signing failed.
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews3165. [bug] dnssec-signzone could generate new signatures when
9eec883bf871ee2235009e889440f986c98908b8Andreas Gustafsson resigning, even when valid signatures were already
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer present. [RT #26025]
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson3164. [func] Enable DLZ modules to retrieve client information,
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson so that responses can be changed depending on the
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson source address of the query. [RT #25768]
6b13908f7030e09fb4573f3c2f8d7a5edc70e0b5Mark Andrews3163. [bug] Use finer-grained locking in client.c to address
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews concurrency problems with large numbers of threads.
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson3162. [test] start.pl: modified to allow for "named.args" in
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson ns*/ subdirectory to override stock arguments to
46ba6046bcb3b534346de13a4ff5c1513e72936bAndreas Gustafsson named. Largely from RT#26044, but no separate ticket.
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3161. [bug] zone.c:del_sigs failed to always reset rdata leading
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson assertion failures. [RT #25880]
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3160. [bug] When printing out a NSEC3 record in multiline form
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington the newline was not being printed causing type codes
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington to be run together. [RT #25873]
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews3159. [bug] On some platforms, named could assert on startup
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews when running in a chrooted environment without
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson /proc. [RT #25863]
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson3158. [bug] Recursive servers would prefer a particular UDP
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson socket instead of using all available sockets.
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews the config file before pausing the server. [RT #21373]
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews3156. [placeholder]
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews --- 9.9.0a2 released ---
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews an assert. [RT #25452]
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews3153. [func] Extend request-ixfr to zone level and remove the
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews side effect of forcing an AXFR. [RT #25156]
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
e70b069e3807d5f499dff31eb31c2b3e0e125457Mark Andrews incorrect use of __builtin_expect. [RT #25183]
923de3bb9cf4d619de206544975986a22b18196fMark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
923de3bb9cf4d619de206544975986a22b18196fMark Andrews incorrectly. [RT #21050]
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews3150. [func] Improved startup and reconfiguration time by
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews enabling zones to load in multiple threads. [RT #25333]
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews3149. [placeholder]
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews3148. [bug] Processing of normal queries could be stalled when
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews forwarding a UPDATE message. [RT #24711]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews3147. [func] Initial inline signing support. [RT #23657]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews --- 9.9.0a1 released ---
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews there were any errors while running them. [RT #25527]
c8d9ff1fe871a0e9d5834240c5872a26166cc240Andreas Gustafsson3144. [bug] dns_dbiterator_seek() could trigger an assert when
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews used with a nonexistent database node. [RT #25358]
e9ca87459a20f5e6721b9bd0b28c95fc3d6b843cMark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews3142. [bug] NAPTR is class agnostic. [RT #25429]
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews associated with empty zones. [RT #25079]
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson3140. [func] New command "rndc flushtree <name>" clears the
5f4804c7e47e3cfe7237d27a354d268b0b7ea73bAndreas Gustafsson specified name from the server cache along with
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson all names under it. [RT #19970]
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
1418d7292da7ebaba1ba389d60192023c0170245Andreas Gustafsson for the hashing algorithms (md5, sha1 - sha512, and
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson their hmac counterparts). [RT #25067]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson3138. [bug] Address memory leaks and out-of-order operations when
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson shutting named down. [RT #25210]
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson3137. [func] Improve hardware scalability by allowing multiple
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson worker threads to process incoming UDP packets.
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson This can significantly increase query throughput
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson on some systems. [RT #22992]
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
2053e8c26cd69600132632fbee247601ce8c9e8cAndreas Gustafsson empty zones switched on by the 'empty-zones-enable'
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews option. [RT #24990]
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson3134. [bug] Improve the accuracy of dnssec-signzone's signing
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson statistics. [RT #16030]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson3133. [bug] Change #3114 was incomplete. [RT #24577]
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews3132. [placeholder]
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson3131. [tuning] Improve scalability by allocating one zone task
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson per 100 zones at startup time, rather than using a
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson fixed-size task table. [RT #24406]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson3130. [func] Support alternate methods for managing a dynamic
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson zone's serial number. Two methods are currently
1c398fd83c444d61904d23431d3994139919b68eAndreas Gustafsson defined using serial-update-method, "increment"
be9932698bf35d0f34e65b5ffbb81bedddd76636Mark Andrews (default) and "unixtime". [RT #23849]
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson3129. [bug] Named could crash on 'rndc reconfig' when
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson allow-new-zones was set to yes and named ACLs
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson were used. [RT #22739]
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson auto-dnssec zone that has not been signed yet
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews will cause it to be signed with the specified NSEC3
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews parameters when keys are activated. The
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews NSEC3PARAM record will not appear in the zone until
479c6fc4584e062088ceee037690cdff85fc349bAndreas Gustafsson it is signed, but the parameters will be stored.
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson3127. [bug] 'rndc thaw' will now remove a zone's journal file
1255d388f034dc556d235a002527101781dbeb29Mark Andrews if the zone serial number has been changed and
1255d388f034dc556d235a002527101781dbeb29Mark Andrews ixfr-from-differences is not in use. [RT #24687]
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews3126. [security] Using DNAME record to generate replacements caused
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews RPZ to exit with a assertion failure. [RT #24766]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews3125. [security] Using wildcard CNAME records as a replacement with
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews RPZ caused named to exit with a assertion failure.
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews3124. [bug] Use an rdataset attribute flag to indicate
53c07ca2164f8a083aa97591345bf4339a8573bdAndreas Gustafsson negative-cache records rather than using rrtype 0;
d1029cbcf03a0a2a6c05c1e17e692d844eb27094Andreas Gustafsson this will prevent problems when that rrtype is
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews used in actual DNS packets. [RT #24777]
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson3123. [security] Change #2912 exposed a latent flaw in
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson dns_rdataset_totext() that could cause named to
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson crash with an assertion failure. [RT #24777]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson3121. [security] An authoritative name server sending a negative
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson response containing a very large RRset could
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews trigger an off-by-one error in the ncache code
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews and crash named. [RT #24650]
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews that validated insecure without using DLV and had
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews DS records in the parent zone. [RT #24631]
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews record could be created and never marked complete.
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson3118. [bug] nsupdate could dump core on shutdown when using
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson SIG(0) keys. [RT #24604]
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews3117. [cleanup] Remove doc and parser references to the
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews never-implemented 'auto-dnssec create' option.
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson3116. [func] New 'dnssec-update-mode' option controls updates
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson of DNSSEC records in signed dynamic zones. Set to
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson 'no-resign' to disable automatic RRSIG regeneration
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson while retaining the ability to sign new or changed
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews data. [RT #24533]
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson3115. [bug] Named could fail to return requested data when
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson following a CNAME that points into the same zone.
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson3114. [bug] Retain expired RRSIGs in dynamic zones if key is
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews inactive and there is no replacement key. [RT #23136]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson3113. [doc] Document the relationship between serial-query-rate
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson and NOTIFY messages.
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson3112. [doc] Add missing descriptions of the update policy name
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson types "ms-self", "ms-subdomain", "krb5-self" and
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson "krb5-subdomain", which allow machines to update
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson their own records, to the BIND 9 ARM.
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson3111. [bug] Improved consistency checks for dnssec-enable and
248732d66fffb557e84264c2bb2fb43ac766163fAndreas Gustafsson dnssec-validation, added test cases to the
9bdb01e6c382e897572791b12190472955994d87Mark Andrews checkconf system test. [RT #24398]
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson3110. [bug] dnssec-signzone: Wrong error message could appear
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson when attempting to sign with no KSK. [RT #24369]
417872b98aec720d587a9ef0197e25e78a2b7ee9Mark Andrews3109. [func] The also-notify option now uses the same syntax
417872b98aec720d587a9ef0197e25e78a2b7ee9Mark Andrews as a zone's masters clause. This means it is
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson now possible to specify a TSIG key to use when
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson sending notifies to a given server, or to include
8ba4e82f5358815fd94f34fde408ffd047ba3430Andreas Gustafsson an explicit named masters list in an also-notfiy
8ba4e82f5358815fd94f34fde408ffd047ba3430Andreas Gustafsson statement. [RT #23508]
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews code (use -P instead). [RT #20852]
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson3107. [bug] dnssec-signzone: Report the correct number of ZSKs
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson when using -x. [RT #20852]
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson3106. [func] When logging client requests, include the name of
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson the TSIG key if any. [RT #23619]
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson3105. [bug] GOST support can be suppressed by "configure
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson --without-gost" [RT #24367]
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson3104. [bug] Better support for cross-compiling. [RT #24367]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson3103. [bug] Configuring 'dnssec-validation auto' in a view
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson instead of in the options statement could trigger
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson an assertion failure in named-checkconf. [RT #24382]
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson3102. [func] New 'dnssec-loadkeys-interval' option configures
9df7cf8ea31d8d26f9c1be55f2cdafdc68d63c53Andreas Gustafsson how often, in minutes, to check the key repository
cf638fc378d74dd4afa59fe11d04da7b0cddca88Andreas Gustafsson for updates when using automatic key maintenance.
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson Default is every 60 minutes (formerly hard-coded
4fa5d53e750b4e34e19b9648900d489315b185eaAndreas Gustafsson to 12 hours). [RT #23744]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson3101. [bug] Zones using automatic key maintenance could fail
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson to check the key repository for updates. [RT #23744]
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson3100. [security] Certain response policy zone configurations could
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson trigger an INSIST when receiving a query of type
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson RRSIG. [RT #24280]
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson3099. [test] "dlz" system test now runs but gives R:SKIPPED if
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson not compiled with --with-dlz-filesystem. [RT #24146]
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson3098. [bug] DLZ zones were answering without setting the AA bit.
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews3097. [test] Add a tool to test handling of malformed packets.
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson dst_gssapi_acceptctx(). [RT #24004]
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson3095. [bug] Handle isolated reserved ports in the port range.
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews3094. [doc] Expand dns64 documentation.
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
f08782f0923d11227983a352c26301cf703383cfMark Andrews3092. [bug] Signatures for records at the zone apex could go
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson stale due to an incorrect timer setting. [RT #23769]
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson3091. [bug] Fixed a bug in which zone keys that were published
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson and then subsequently activated could fail to trigger
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson automatic signing. [RT #22911]
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson3090. [func] Make --with-gssapi default [RT #23738]
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson3089. [func] dnssec-dsfromkey now supports reading keys from
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson standard input "dnssec-dsfromkey -f -". [RT# 20662]
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson and add setup.sh in order to resolve changing
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson named.conf issue. [RT #23687]
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson3087. [bug] DDNS updates using SIG(0) with update-policy match
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson type "external" could cause a crash. [RT #23735]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson3086. [bug] Running dnssec-settime -f on an old-style key will
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews now force an update to the new key format even if no
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson other change has been specified, using "-P now -A now"
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson as default values. [RT #22474]
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews of signatures which have not yet expired but
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews were generated by a key that no longer exists.
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson a dynamic zone to disk; "rndc sync -clean" also
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson removes the journal file after syncing. Also,
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson "rndc freeze" no longer removes journal files.
3e934267660cb13029bcdbddf318fe1cc27b6718Andreas Gustafsson3083. [bug] NOTIFY messages were not being sent when generating
3e934267660cb13029bcdbddf318fe1cc27b6718Andreas Gustafsson a NSEC3 chain incrementally. [RT #23702]
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson3082. [port] strtok_r is threads only. [RT #23747]
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson3081. [bug] Failure of DNAME substitution did not return
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson YXDOMAIN. [RT #23591]
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington3079. [bug] Handle isc_event_allocate failures in t_tasks.
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson3078. [func] Added a new include file with function typedefs
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson for the DLZ "dlopen" driver. [RT #23629]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson3077. [bug] zone.c:zone_refreshkeys() incorrectly called
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson dns_zone_attach(), use zone->irefs instead. [RT #23303]
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson dnssec-keyfromlabel sets the default TTL of the
595a14576ea14884c35b3726f054f2065365620bMark Andrews key. When possible, automatic signing will use that
595a14576ea14884c35b3726f054f2065365620bMark Andrews TTL when the key is published. [RT #23304]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson timestamp when determining which keys are active.
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3074. [bug] Make the adb cache read through for zone data and
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson glue learn for zone named is authoritative for.
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson3073. [bug] managed-keys changes were not properly being recorded.
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3071. [bug] has_nsec could be used uninitialized in
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson update.c:next_active. [RT #20256]
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson3070. [bug] dnssec-signzone potential NULL pointer dereference.
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson3069. [cleanup] Silence warnings messages from clang static analysis.
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3068. [bug] Named failed to build with a OpenSSL without engine
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington support. [RT #23473]
ea34bcc6376555296a08e4c9e2f9c2cbe58378a9Andreas Gustafsson3067. [bug] ixfr-from-differences {master|slave}; failed to
ea34bcc6376555296a08e4c9e2f9c2cbe58378a9Andreas Gustafsson select the master/slave zones. [RT #23580]
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer3066. [func] The DLZ "dlopen" driver is now built by default,
06f12c290c7904f0723094b5cbd11e2a1d49e95eAndreas Gustafsson no longer requiring a configure option. To
06f12c290c7904f0723094b5cbd11e2a1d49e95eAndreas Gustafsson disable it, use "configure --without-dlopen".
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer Driver also supported on win32. [RT #23467]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3065. [bug] RRSIG could have time stamps too far in the future.
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews operations. [RT #23469]
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews3062. [func] Made several changes to enhance human readability
5c831a1a1b14470037de6d8bc0501aea5dc6cacdAndreas Gustafsson of DNSSEC data in dig output and in generated
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews - DNSKEY record comments are more verbose, no
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews longer used in multiline mode only
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews - multiline RRSIG records reformatted
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews - multiline output mode for NSEC3PARAM records
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews - "dig +norrcomments" suppresses DNSKEY comments
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews - "dig +split=X" breaks hex/base64 records into
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson fields of width X; "dig +nosplit" disables this.
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson3061. [func] New option "dnssec-signzone -D", only write out
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson generated DNSSEC records. [RT #22896]
56d69016f4fae2eda4d39c92fe13595251aaadd3Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews specification of a separate expiration date
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson3059. [test] Added a regression test for change #3023.
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson3058. [bug] Cause named to terminate at startup or rndc reconfig/
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson reload to fail, if a log file specified in the conf
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson file isn't a plain file. [RT #22771]
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson3057. [bug] "rndc secroots" would abort after the first error
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson and so could miss some views. [RT #23488]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3056. [func] Added support for URI resource record. [RT #23386]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3055. [placeholder]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews3054. [bug] Added elliptic curve support check in
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews GOST OpenSSL engine detection. [RT #23485]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews3053. [bug] Under a sustained high query load with a finite
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson max-cache-size, it was possible for cache memory
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson to be exhausted and not recovered. [RT #23371]
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson3052. [test] Fixed last autosign test report. [RT #23256]
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson3051. [bug] NS records obscure DNAME records at the bottom of the
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson zone if both are present. [RT #23035]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3050. [bug] The autosign system test was timing dependent.
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson Wait for the initial autosigning to complete
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson before running the rest of the test. [RT #23035]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3049. [bug] Save and restore the gid when creating creating
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews named.pid at startup. [RT #23290]
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson3048. [bug] Fully separate view key management. [RT #23419]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson3047. [bug] DNSKEY NODATA responses not cached fixed in
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington validator.c. Tests added to dnssec system test.
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson3046. [bug] Use RRSIG original TTL to compute validated RRset
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews and RRSIG TTL. [RT #23332]
ed03e26c44347ec20aff6608de6082e3594d95fbMark Andrews3045. [removed] Replaced by change #3050.
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews version 0.12) for development of future unit tests.
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews Use configure --with-atf to build ATF internally
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews or configure --with-atf=prefix to use an external
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson copy. [RT #23209]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3042. [bug] dig +trace could fail attempting to use IPv6
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson addresses on systems with only IPv4 connectivity.
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3041. [bug] dnssec-signzone failed to generate new signatures on
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson ttl changes. [RT #23330]
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews3040. [bug] Named failed to validate insecure zones where a node
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews with a CNAME existed between the trust anchor and the
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews top of the zone. [RT #23338]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3039. [func] Redirect on NXDOMAIN support. [RT #23146]
773e64ec150c33269e748d96dd95726ed7e0d842Mark Andrews3038. [bug] Install <dns/rpz.h>. [RT #23342]
cb8fd52bbeaf40c9166a0144541c4ff2bafc2dd6Andreas Gustafsson3037. [doc] Update COPYRIGHT to contain all the individual
1eaad22e111709254c70953a4dc768b6d4d31646Mark Andrews copyright notices that cover various parts.
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3036. [bug] Check built-in zone arguments to see if the zone
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson is re-usable or not. [RT #21914]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3035. [cleanup] Simplify by using strlcpy. [RT #22521]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson3029. [bug] isc_netaddr_format() handle a zero sized buffer.
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
330b421487d7c3a5e699472fe889aa633772057fMark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews catch NULL pointer dereferences before they happen.
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson after calling grow_headerspace() and if not
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews re-call grow_headerspace() until we do. [RT #22521]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3025. [bug] Fixed a possible deadlock due to zone resigning.
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3024. [func] RTT Banding removed due to minor security increase
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews but major impact on resolver latency. [RT #23310]
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews3023. [bug] Named could be left in an inconsistent state when
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews receiving multiple AXFR response messages that were
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews not all TSIG-signed. [RT #23254]
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer3021. [bug] Change #3010 was incomplete. [RT #22296]
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson3020. [bug] auto-dnssec failed to correctly update the zone when
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson changing the DNSKEY RRset. [RT #23232]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3019. [test] Test: check apex NSEC3 records after adding DNSKEY
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews record via UPDATE. [RT #23229]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3018. [bug] Named failed to check for the "none;" acl when deciding
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson if a zone may need to be re-signed. [RT #23120]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3017. [doc] dnssec-keyfromlabel -I was not properly documented.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3016. [bug] rndc usage missing '-b'. [RT #22937]
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3014. [placeholder]
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews3013. [bug] The DNS64 ttl was not always being set as expected.
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson3012. [bug] Remove DNSKEY TTL change pairs before generating
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson signing records for any remaining DNSKEY changes.
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson3011. [func] Change the default query timeout from 30 seconds
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson to 10. Allow setting this in named.conf using the new
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson 'resolver-query-timeout' option, which specifies a max
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson time in seconds. 0 means 'default' and anything longer
44c141f9471a6bb1fac0cba7880ba768ede2f0c8Brian Wellington than 30 will be silently set to 30. [RT #22852]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson for refreshing managed-keys. [RT #22296]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson3009. [bug] clients-per-query code didn't work as expected with
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson particular query patterns. [RT #22972]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson --- 9.8.0b1 released ---
4d77dbcfa052c065a87d2d35b116f17b74bae573Andreas Gustafsson3008. [func] Response policy zones (RPZ) support. [RT #21726]
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews3007. [bug] Named failed to preserve the case of domain names in
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews rdata which is not compressible when writing master
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington files. [RT #22863]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson3006. [func] Allow dynamically generated TSIG keys to be preserved
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson across restarts of named. Initially this is for
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson TSIG keys generated using GSSAPI. [RT #22639]
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson3005. [port] Solaris: Work around the lack of
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington gsskrb5_register_acceptor_identity() by setting
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington the KRB5_KTNAME environment variable to the
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington contents of tkey-gssapi-keytab. Also fixed
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington test errors on MacOSX. [RT #22853]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3004. [func] DNS64 reverse support. [RT #22769]
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews3003. [experimental] Added update-policy match type "external",
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews enabling named to defer the decision of whether to
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews allow a dynamic update to an external daemon.
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington (Contributed by Andrew Tridgell.) [RT #22758]
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson3001. [func] Added a default trust anchor for the root zone, which
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson can be switched on by setting "dnssec-validation auto;"
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington in the named.conf options. [RT #21727]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington3000. [bug] More TKEY/GSS fixes:
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington - nsupdate can now get the default realm from
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews the user's Kerberos principal
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews - corrected gsstest compilation flags
0176adc7c58bb8bd60ec71eeae94dbfbbc4018a8Mark Andrews - improved documentation
0176adc7c58bb8bd60ec71eeae94dbfbbc4018a8Mark Andrews - fixed some NULL dereferences
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson2999. [func] Add GOST support (RFC 5933). [RT #20639]
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson to the task api. [RT #22776]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson2997. [func] named -V now reports the OpenSSL and libxml2 verions
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson it was compiled against. [RT #22687]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson2996. [security] Temporarily disable SO_ACCEPTFILTER support.
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson2995. [bug] The Kerberos realm was not being correctly extracted
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson from the signer's identity. [RT #22770]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson do not use threads on earlier versions. Also kill
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington the unproven-pthreads, mit-pthreads, and ptl2 support.
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington2993. [func] Dynamically grow adb hash tables. [RT #21186]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson for looking at a secure delegation. [RT #22059]
c6de6524d777c90ae8011af8b10f5cac044081e5Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington dynamic zones. [RT #22365]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson2990. [bug] 'dnssec-settime -S' no longer tests prepublication
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington interval validity when the interval is set to 0.
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington2989. [func] Added support for writable DLZ zones. (Contributed
e9596e1fb3dfa560216776acdbfac3cf5ef97157Mark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley of external DLZ drivers that can be loaded as
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley shared objects at runtime rather than linked with
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley named. Currently this is switched on via a
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley compile-time option, "configure --with-dlz-dlopen".
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington Note: the syntax for configuring DLZ zones
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson is likely to be refined in future releases.
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington (Contributed by Andrew Tridgell of the Samba
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson project.) [RT #22629]
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington2987. [func] Improve ease of configuring TKEY/GSS updates by
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson adding a "tkey-gssapi-keytab" option. If set,
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson updates will be allowed with any key matching
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson a principal in the specified keytab file.
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson "tkey-gssapi-credential" is no longer required
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson and is expected to be deprecated. (Contributed
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson by Andrew Tridgell of the Samba project.)
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington2986. [func] Add new zone type "static-stub". It's like a stub
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington zone, but the nameserver names and/or their IP
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson addresses are statically configured. [RT #21474]
debff476ad3512687a354499c25d2793e2009acdBrian Wellington2985. [bug] Add a regression test for change #2896. [RT #21324]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson2984. [bug] Don't run MX checks when the target of the MX record
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson is ".". [RT #22645]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson --- 9.8.0a1 released ---
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington2982. [bug] Reference count dst keys. dst_key_attach() can be used
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson increment the reference count.
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson Note: dns_tsigkey_createfromkey() callers should now
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson always call dst_key_free() rather than setting it
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson to NULL on success. [RT #22672]
57188b5ff2397c0517e55f622879e69ee547918dAndreas Gustafsson2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson2980. [bug] named didn't properly handle UPDATES that changed the
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson TTL of the NSEC3PARAM RRset. [RT #22363]
9a72459b6040b30d043c5fd9e283441b847e569aAndreas Gustafsson2979. [bug] named could deadlock during shutdown if two
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson "rndc stop" commands were issued at the same
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson time. [RT #22108]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson2978. [port] hpux: look for <devpoll.h> [RT #21919]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson2977. [bug] 'nsupdate -l' report if the session key is missing.
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
f2a16ec2e8970615d39f8fe339b215ad0a893b85Mark Andrews key. [RT #22573]
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews wrong lock which could lead to server deadlock.
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence2974. [bug] Some valid UPDATE requests could fail due to a
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence consistency check examining the existing version
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence of the zone rather than the new version resulting
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence from the UPDATE. [RT #22413]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence2973. [bug] bind.keys.h was being removed by the "make clean"
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence at the end of configure resulting in build failures
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence where there is very old version of perl installed.
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence Move it to "make maintainer-clean". [RT #22230]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson2972. [bug] win32: address windows socket errors. [RT #21906]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson2971. [bug] Fixed a bug that caused journal files not to be
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington compacted on Windows systems as a result of
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson non-POSIX-compliant rename() semantics. [RT #22434]
f5ebf2f0c9e9d2068ace1dbcc2ef2ed3ebdbfde5Andreas Gustafsson2970. [security] Adding a NO DATA negative cache entry failed to clear
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson any matching RRSIG records. A subsequent lookup of
34d5676aac483e00e16056a6834a27b52bed42f0Brian Wellington of NO DATA cache entry could trigger a INSIST when the
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson unexpected RRSIG was also returned with the NO DATA
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence CVE-2010-3613, VU#706148. [RT #22288]
112d9875bf33e2382f9a986d3e58fce08f1935fcOlafur Gudmundsson2969. [security] Fix acl type processing so that allow-query works
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence in options and view statements. Also add a new
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence set of tests to verify proper functioning.
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson CVE-2010-3615, VU#510208. [RT #22418]
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson2968. [security] Named could fail to prove a data set was insecure
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson before marking it as insecure. One set of conditions
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson that can trigger this occurs naturally when rolling
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson DNSKEY algorithms.
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson CVE-2010-3614, VU#837744. [RT #22309]
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson2967. [bug] 'host -D' now turns on debugging messages earlier.
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence2966. [bug] isc_print_vsnprintf() failed to check if there was
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence space available in the buffer when adding a left
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence justified character with a non zero width,
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence (e.g. "%-1c"). [RT #22270]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence2965. [func] Test HMAC functions using test data from RFC 2104 and
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence RFC 4634. [RT #21702]
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence2964. [placeholder]
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence2963. [security] The allow-query acl was being applied instead of the
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence allow-query-cache acl to cache lookups. [RT #22114]
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence2962. [port] win32: add more dependencies to BINDBuild.dsw.
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence2961. [bug] Be still more selective about the non-authoritative
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence answers we apply change 2748 to. [RT #22074]
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson2960. [func] Check that named accepts non-authoritative answers.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2959. [func] Check that named starts with a missing masterfile.
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson2958. [bug] named failed to start with a missing master file.
7fe2ead2b3e23f68c1d3c79da51ef5af4f678f7dAndreas Gustafsson2957. [bug] entropy_get() and entropy_getpseudo() failed to match
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson the API for RAND_bytes() and RAND_pseudo_bytes()
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson respectively. [RT #21962]
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson2955. [func] Provide more detail in the recursing log. [RT #22043]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington build_sqldbinstance failure. [RT #21623]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson2953. [bug] Silence spurious "expected covering NSEC3, got an
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews exact match" message when returning a wildcard
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews no data response. [RT #21744]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews to initialize winsock. [RT #21932]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2951. [bug] named failed to generate a correct signed response
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews in a optout, delegation only zone with no secure
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews delegations. [RT #22007]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2950. [bug] named failed to perform a SOA up to date check when
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews falling back to TCP on UDP timeouts when
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews ixfr-from-differences was set. [RT #21595]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews it was called multiple times. [RT #21942]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2948. [port] MacOS: provide a mechanism to configure the test
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews interfaces at reboot. See bin/tests/system/README
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews for details.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2947. [placeholder]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2946. [doc] Document the default values for the minimum and maximum
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews zone refresh and retry values in the ARM. [RT #21886]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2943. [func] Add support to load new keys into managed zones
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews without signing immediately with "rndc loadkeys".
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews Add support to link keys with "dnssec-keygen -S"
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews and "dnssec-settime -S". [RT #21351]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2941. [bug] sdb and sdlz (dlz's zone database) failed to support
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews DNAME at the zone apex. [RT #21610]
4585aeb2cc84c0e0602da5abf47c31f92ec3b6b2Mark Andrews2940. [port] Remove connection aborted error message on
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson Windows. [RT #21549]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson2939. [func] Check that named successfully skips NSEC3 records
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson that fail to match the NSEC3PARAM record currently
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson in use. [RT# 21868]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson2938. [bug] When generating signed responses, from a signed zone
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson that uses NSEC3, named would use a uninitialized
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson pointer if it needed to skip a NSEC3 record because
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson it didn't match the selected NSEC3PARAM record for
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson zone. [RT# 21868]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson2937. [bug] Worked around an apparent race condition in over
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson memory conditions. Without this fix a DNS cache DB or
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson ADB could incorrectly stay in an over memory state,
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson effectively refusing further caching, which
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson subsequently made a BIND 9 caching server unworkable.
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson This fix prevents this problem from happening by
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews polling the state of the memory context, rather than
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews making a copy of the state, which appeared to cause
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews a race. This is a "workaround" in that it doesn't
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington solve the possible race per se, but several experiments
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson proved this change solves the symptom. Also, the
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington polling overhead hasn't been reported to be an issue.
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington This bug should only affect a caching server that
99a8d30559834dc12bd80f4f164fa6375f73cb62Mark Andrews specifies a finite max-cache-size. It's also quite
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence likely that the bug happens only when enabling threads,
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence but it's not confirmed yet. [RT #21818]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence2936. [func] Improved configuration syntax and multiple-view
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence support for addzone/delzone feature (see change
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence #2930). Removed "new-zone-file" option, replaced
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence with "allow-new-zones (yes|no)". The new-zone-file
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence for each view is now created automatically, with
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence a filename generated from a hash of the view name.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence It is no longer necessary to "include" the
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence new-zone-file in named.conf; this happens
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence automatically. Zones that were not added via
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews "rndc addzone" can no longer be removed with
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews "rndc delzone". [RT #19447]
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews2935. [bug] nsupdate: improve 'file not found' error message.
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington2933. [bug] 'dig +nsid' used stack memory after it went out of
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews scope. This could potentially result in a unknown,
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews potentially malformed, EDNS option being sent instead
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews of the desired NSID option. [RT #21781]
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2931. [bug] Temporarily and partially disable change 2864
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence because it would cause infinite attempts of RRSIG
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson queries. This is an urgent care fix; we'll
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson revisit the issue and complete the fix later.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2930. [experimental] New "rndc addzone" and "rndc delzone" commands
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence allow dynamic addition and deletion of zones.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence To enable this feature, specify a "new-zone-file"
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence option at the view or options level in named.conf.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence Zone configuration information for the new zones
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence will be written into that file. To make the new
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence zones persist after a restart, "include" the file
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence into named.conf in the appropriate view. (Note:
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence This feature is not yet documented, and its syntax
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence is expected to change.) [RT #19447]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2929. [bug] Improved handling of GSS security contexts:
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence - added LRU expiration for generated TSIGs
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence - added the ability to use a non-default realm
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence - added new "realm" keyword in nsupdate
74cc9d733ca94d43310ff3df84d7a4644c0950f9Andreas Gustafsson - limited lifetime of generated keys to 1 hour
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence or the lifetime of the context (whichever is
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2928. [bug] Be more selective about the non-authoritative
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence answer we apply change 2748 to. [RT #21594]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2927. [placeholder]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2926. [placeholder]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2925. [bug] Named failed to accept uncachable negative responses
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence from insecure zones. [RT# 21555]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence2924. [func] 'rndc secroots' dump a combined summary of the
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence current managed keys combined with trusted keys.
5455f30a7532738d750252c00e649890c694ee30Brian Wellington2923. [bug] 'dig +trace' could drop core after "connection
5455f30a7532738d750252c00e649890c694ee30Brian Wellington timeout". [RT #21514]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2922. [contrib] Update zkt to version 1.0.
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington2921. [bug] The resolver could attempt to destroy a fetch context
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington too soon. [RT #19878]
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews to IPv4 clients. New acl 'filter-aaaa' (default any).
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson2917. [func] Virtual time test framework. [RT #20801]
0b135de5a52acec5bb42f96b4e79484d1629fd93Brian Wellington2916. [func] Add framework to use IPv6 in tests.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson2915. [cleanup] Be smarter about which objects we attempt to compile
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson based on configure options. [RT #21444]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson2914. [bug] Make the "autosign" system test more portable.
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson2913. [func] Add pkcs#11 system tests. [RT #20784]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson2912. [func] Windows clients don't like UPDATE responses that clear
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson the zone section. [RT #20986]
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson2911. [bug] dnssec-signzone didn't handle out of zone records well.
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson2910. [func] Sanity check Kerberos credentials. [RT #20986]
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson2909. [bug] named-checkconf -p could die if "update-policy local;"
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson was specified in named.conf. [RT #21416]
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson2908. [bug] It was possible for re-signing to stop after removing
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson a DNSKEY. [RT #21384]
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington2907. [bug] The export version of libdns had undefined references.
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
751aa24c98fea02215cad95a08411af547d70e41Bob Halley2905. [port] aix: set use_atomic=yes with native compiler.
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson2904. [bug] When using DLV, sub-zones of the zones in the DLV,
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson could be incorrectly marked as insecure instead of
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson secure leading to negative proofs failing. This was
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson a unintended outcome from change 2890. [RT# 21392]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson2903. [bug] managed-keys-directory missing from namedconf.c.
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews2902. [func] Add regression test for change 2897. [RT #21040]
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson2900. [bug] The placeholder negative caching element was not
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson properly constructed triggering a INSIST in
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson dns_ncache_towire(). [RT #21346]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2899. [port] win32: Support linking against OpenSSL 1.0.0.
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington2898. [bug] nslookup leaked memory when -domain=value was
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson specified. [RT #21301]
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington2897. [bug] NSEC3 chains could be left behind when transitioning
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson to insecure. [RT #21040]
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson2896. [bug] "rndc sign" failed to properly update the zone
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson when adding a DNSKEY for publication only. [RT #21045]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley2895. [func] genrandom: add support for the generation of multiple
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley files. [RT #20917]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson2893. [bug] Improve managed keys support. New named.conf option
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson managed-keys-directory. [RT #20924]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson2892. [bug] Handle REVOKED keys better. [RT #20961]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence2891. [maint] Update empty-zones list to match
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence2890. [bug] Handle the introduction of new trusted-keys and
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence DS, DLV RRsets better. [RT #21097]
1ac6cf2f7ae95e4c915cba7038e61930d7c4ba2aAndreas Gustafsson2889. [bug] Elements of the grammar where not properly reported.
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson2888. [bug] Only the first EDNS option was displayed. [RT #21273]
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson2887. [bug] Report the keytag times in UTC in the .key file,
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson local time is presented as a comment within the
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson comment. [RT #21223]
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson2886. [bug] ctime() is not thread safe. [RT #21223]
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson2885. [bug] Improve -fno-strict-aliasing support probing in
47afc27c28aef95d94e8d1296498ba57a5f00b25Brian Wellington configure. [RT #21080]
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington2884. [bug] Insufficient validation in dns_name_getlabelsequence().
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington2883. [bug] 'dig +short' failed to handle really large datasets.
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington2882. [bug] Remove memory context from list of active contexts
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington before clearing 'magic'. [RT #21274]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson2881. [bug] Reduce the amount of time the rbtdb write lock
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson is held when closing a version. [RT #21198]
4df51a8f53381d57b3dd75dd84615abd4cf9e969Andreas Gustafsson2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
0c9dd74fecd876563b7f0e4662243ff026b59622Andreas Gustafsson consistent. [RT #21078]
0c9dd74fecd876563b7f0e4662243ff026b59622Andreas Gustafsson2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson2878. [func] Incrementally write the master file after performing
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson a AXFR. [RT #21010]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2877. [bug] The validator failed to skip obviously mismatching
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington RRSIGs. [RT #21138]
55ddb88e53838693370c213930beda1652b8a583Brian Wellington2876. [bug] Named could return SERVFAIL for negative responses
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson from unsigned zones. [RT #21131]
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington2875. [bug] dns_time64_fromtext() could accept non digits.
3efd6904134ef6c4866a633eabeb55d1c86be7bbBrian Wellington2874. [bug] Cache lack of EDNS support only after the server
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson successfully responds to the query using plain DNS.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2873. [bug] Canceling a dynamic update via the dns/client module
70d08aea0a693c6ca62c2f7bb33bfddf9e427601Brian Wellington could trigger an assertion failure. [RT #21133]
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley2872. [bug] Modify dns/client.c:dns_client_createx() to only
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley require one of IPv4 or IPv6 rather than both.
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington2871. [bug] Type mismatch in mem_api.c between the definition and
672056d560d973cac1c0d02f087e059eef8f948fBrian Wellington the header file, causing build failure with
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson --enable-exportlib. [RT #21138]
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington2868. [cleanup] Run "make clean" at the end of configure to ensure
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington any changes made by configure are integrated.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson Use --with-make-clean=no to disable. [RT #20994]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson don't like it. [RT #20986]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington2866. [bug] Windows does not like the TSIG name being compressed.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2865. [bug] memset to zero event.data. [RT #20986]
c1ff0308f3f67bf148f96ca952db081eb5fd8383Brian Wellington2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson2862. [bug] nsupdate didn't default to the parent zone when
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson updating DS records. [RT #20896]
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson2861. [doc] dnssec-settime man pages didn't correctly document the
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson inactivation time. [RT #21039]
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington2860. [bug] named-checkconf's usage was out of date. [RT #21039]
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson2859. [bug] When canceling validation it was possible to leak
3bd8e7cf1c082cd1021e5a6cae1cf21911217858Brian Wellington memory. [RT #20800]
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson2858. [bug] RTT estimates were not being adjusted on ICMP errors.
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson2857. [bug] named-checkconf did not fail on a bad trusted key.
48565891e8f2f8c77b87908b4893f693a08e9ba9Brian Wellington2856. [bug] The size of a memory allocation was not always properly
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson recorded. [RT #20927]
b0390aab30438a13f533cccae9389945214b1421Brian Wellington2855. [func] nsupdate will now preserve the entered case of domain
b0390aab30438a13f533cccae9389945214b1421Brian Wellington names in update requests it sends. [RT #20928]
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson2854. [func] dig: allow the final soa record in a axfr response to
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington be suppressed, dig +onesoa. [RT #20929]
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
91e35ded544576b671606779143d7fbffaf451d2Andreas Gustafsson2851. [doc] nslookup.1, removed <informalexample> from the docbook
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington source as it produced bad nroff. [RT #21007]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2850. [bug] If isc_heap_insert() failed due to memory shortage
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson the heap would have corrupted entries. [RT #20951]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2849. [bug] Don't treat errors from the xml2 library as fatal.
04cb6056a6539539e0fc2ed695298f7fa7b1d632Brian Wellington2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington README.rfc5011 into the ARM. [RT #20899]
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2846. [bug] EOF on unix domain sockets was not being handled
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence correctly. [RT #20731]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2844. [doc] notify-delay default in ARM was wrong. It should have
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson been five (5) seconds.
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson creating key files if there is a chance that the new
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington key ID will collide with an existing one after
88a790c39176f72a8f98f134b83df92e09a8c56bAndreas Gustafsson either of the keys has been revoked. (To override
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington this in the case of dnssec-keyfromlabel, use the -y
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington option. dnssec-keygen will simply create a
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington different, non-colliding key, so an override is
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington not necessary.) [RT #20838]
9ac7076ebad044afb15e9e2687e3696868778538Mark Andrews2842. [func] Added "smartsign" and improved "autosign" and
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley "dnssec" regression tests. [RT #20865]
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley2841. [bug] Change 2836 was not complete. [RT #20883]
76b3ec5e0c3ae856bc1000270bf3df13580673ebBrian Wellington2840. [bug] Temporary fixed pkcs11-destroy usage check.
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley2839. [bug] A KSK revoked by named could not be deleted.
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington2838. [placeholder]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2837. [port] Prevent Linux spurious warnings about fwrite().
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2836. [bug] Keys that were scheduled to become active could
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson be delayed. [RT #20874]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2835. [bug] Key inactivity dates were inadvertently stored in
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson the private key file with the outdated tag
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson "Unpublish" rather than "Inactive". This has been
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson fixed; however, any existing keys that had Inactive
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson dates set will now need to have them reset, using
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson 'dnssec-settime -I'. [RT #20868]
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley2834. [bug] HMAC-SHA* keys that were longer than the algorithm
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley digest length were used incorrectly, leading to
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley interoperability problems with other DNS
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington implementations. This has been corrected.
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington (Note: If an oversize key is in use, and
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson compatibility is needed with an older release of
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson BIND, the new tool "isc-hmac-fixup" can convert
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson the key secret to a form that will work with all
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson versions.) [RT #20751]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson to avoid redefinition in some OSs [RT 20831]
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews2831. [security] Do not attempt to validate or cache
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews out-of-bailiwick data returned with a secure
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews answer; it must be re-fetched from its original
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews source and validated in that context. [RT #20819]
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2830. [bug] Changing the OPTOUT setting could take multiple
1c1156b6e71555e593ed4bbca2284055c9f6fa45Andreas Gustafsson passes. [RT #20813]
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson2829. [bug] Fixed potential node inconsistency in rbtdb.c.
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2828. [security] Cached CNAME or DNAME RR could be returned to clients
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington without DNSSEC validation. [RT #20737]
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
df0f58959ed82a2a43ca8d816ce9592541df9f2fMark Andrews being released. [RT #20740]
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley was in the process of being created was not properly
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson recorded in the zone. [RT #20786]
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley2824. [bug] "rndc sign" was not being run by the correct task.
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
4e605108c6533c2ec6311ee7a466582392656dddAndreas Gustafsson2822. [bug] rbtdb.c:loadnode() could return the wrong result.
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington2821. [doc] Add note that named-checkconf doesn't automatically
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2820. [func] Handle read access failure of OpenSSL configuration
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington file more user friendly (PKCS#11 engine patch).
7ae7d499f353549162ddcf6fed957ea21e4fa52bMark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2818. [cleanup] rndc could return an incorrect error code
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley when a zone was not found. [RT #20767]
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
40c1177517ca5312371da6cc697d813576cfe5a8Andreas Gustafsson2816. [bug] previous_closest_nsec() could fail to return
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson data for NSEC3 nodes [RT #29730]
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington2815. [bug] Exclusively lock the task when freezing a zone.
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington2814. [func] Provide a definitive error message when a master
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington zone is not loaded. [RT #20757]
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington2813. [bug] Better handling of unreadable DNSSEC key files.
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2812. [bug] Make sure updates can't result in a zone with
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington NSEC-only keys and NSEC3 records. [RT #20748]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
4b9f0fd0791cb9cb31087789a03fa3a28dd4b583Andreas Gustafsson output. [RT #20733]
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson2810. [doc] Clarified the process of transitioning an NSEC3 zone
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson to insecure. [RT #20746]
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
80aba3d49a872ca11d7cf8550c3a993162e7939fMark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
31039b15173fb3e375269991920e4843f664457eMark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson atomic.h is correctly installed by the architecture
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson specific subdirectories. [RT #20722]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2807. [bug] Fixed a possible ASSERT when reconfiguring zone
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson keys. [RT #20720]
019fefd77d7e77f3c841808ab604f8ce31679d2dBrian Wellington --- 9.7.0rc1 released ---
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington when it had changed. [RT #20703]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2805. [bug] Fixed namespace problems encountered when building
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington external programs using non-exported BIND9 libraries
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington (i.e., built without --enable-exportlib). [RT #20679]
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson or as a result of a scheduled key change. [RT #20700]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson and genrandom under windows. [RT #20670]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington2801. [func] Detect and report records that are different according
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington to DNSSEC but are semantically equal according to plain
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington DNS. Apply plain DNS comparisons rather than DNSSEC
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson comparisons when processing UPDATE requests.
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson dnssec-signzone now removes such semantically duplicate
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson records prior to signing the RRset.
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson named-checkzone -r {ignore|warn|fail} (default warn)
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley named-compilezone -r {ignore|warn|fail} (default warn)
8e68489885e744ab48907414b4199c36858c27ddMark Andrews named.conf: check-dup-records {ignore|warn|fail};
8e68489885e744ab48907414b4199c36858c27ddMark Andrews2800. [func] Reject zones which have NS records which refer to
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson CNAMEs, DNAMEs or don't have address record (class IN
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson only). Reject UPDATEs which would cause the zone
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson to fail the above checks if committed. [RT #20678]
ec4f7c6d0f0cfc72bcecdb22bf59890d590218d6Mark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
d8d95c7d2eae28c5adbde097e88efa115bae6f35Andreas Gustafsson "dnssec-secure-to-insecure", and "dnskey-ksk-only"
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2798. [bug] Addressed bugs in managed-keys initialization
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson and rollover. [RT #20683]
7427490a67b9547242b57c255254f7e146127c48Bob Halley2797. [bug] Don't decrement the dispatch manager's maxbuffers.
aac319b506beb2e9a77ef124ee95b18870194b05Mark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
fbe35d126f2c4df000f50662ed9d90ced13188c3Andreas Gustafsson dns_nsec3_delnsec3sx(). [RT #20681]
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson2795. [cleanup] Add text to differentiate "update with no effect"
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson log messages. [RT #18889]
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews2793. [func] Add "autosign" and "metadata" tests to the
b1b3495eba72ea2b7270c5cd62b0bb824de74e05Mark Andrews automatic tests. [RT #19946]
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson2792. [func] "filter-aaaa-on-v4" can now be set in view
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington options (if compiled in). [RT #20635]
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington2791. [bug] The installation of isc-config.sh was broken.
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington2790. [bug] Handle DS queries to stub zones. [RT #20440]
a1cad3b231800ca928751ff8889bdc6d312d1f88Andreas Gustafsson2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington2788. [bug] dnssec-signzone could sign with keys that were
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington not requested [RT #20625]
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington2787. [bug] Spurious log message when zone keys were
e4aeba32725a79e295c2ceed1919cba076530ba3Andreas Gustafsson dynamically reconfigured. [RT #20659]
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson2786. [bug] Additional could be promoted to answer. [RT #20663]
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson --- 9.7.0b3 released ---
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2785. [bug] Revoked keys could fail to self-sign [RT #20652]
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson2784. [bug] TC was not always being set when required glue was
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson dropped. [RT #20655]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
f1007e99b7db3f4e65663d348530f078adb48ccbMark Andrews buffer size of 512 or less. [RT #20654]
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews2782. [port] win32: use getaddrinfo() for hostname lookups.
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington2781. [bug] Inactive keys could be used for signing. [RT #20649]
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington2780. [bug] dnssec-keygen -A none didn't properly unset the
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson activation date in all cases. [RT #20648]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson2779. [bug] Dynamic key revocation could fail. [RT #20644]
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson2778. [bug] dnssec-signzone could fail when a key was revoked
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson without deleting the unrevoked version. [RT #20638]
ce1269825c9d9c4bca42ae9750a7a2fd93a45557Mark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson2776. [bug] Change #2762 was not correct. [RT #20647]
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington in dnssec-keyfromlabel. [RT #20643]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington2774. [bug] Existing cache DB wasn't being reused after
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington reconfiguration. [RT #20629]
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington2773. [bug] In autosigned zones, the SOA could be signed
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington with the KSK. [RT #20628]
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington2772. [security] When validating, track whether pending data was from
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington the additional section or not and only return it if
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington validates as secure. [RT #20438]
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson2771. [bug] dnssec-signzone: DNSKEY records could be
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson corrupted when importing from key files [RT #20624]
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington2770. [cleanup] Add log messages to resolver.c to indicate events
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington causing FORMERR responses. [RT #20526]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington2769. [cleanup] Change #2742 was incomplete. [RT #19589]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
bfd14616fa53e2572e7492a21467fad239deeae7Andreas Gustafsson2767. [bug] named could crash on startup if a zone was
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson configured with auto-dnssec and there was no
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews key-directory. [RT #20615]
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington2766. [bug] isc_socket_fdwatchpoke() should only update the
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington socketmgr state if the socket is not pending on a
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley read or write. [RT #20603]
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson2765. [bug] Skip masters for which the TSIG key cannot be found.
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson2762. [bug] DLV validation failed with a local slave DLV zone.
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson2761. [cleanup] Enable internal symbol table for backtrace only for
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews systems that are known to work. Currently, BSD
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson variants, Linux and Solaris are supported. [RT# 20202]
c50895694ef939f287aaa7505e0fcf634903bd34Mark Andrews2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson2759. [doc] Add information about .jbk/.jnw files to
d72269740049af28b091ba81d68a067c88f53547Mark Andrews the ARM. [RT #20303]
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews that could cause the UDP client handler to shut
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews down. [RT #19176]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews2757. [bug] dig: assertion failure could occur in connect
5e16689bd396d261779526345a1c5207e3308477Andreas Gustafsson timeout. [RT #20599]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington2755. [placeholder]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2754. [bug] Secure-to-insecure transitions failed when zone
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson was signed with NSEC3. [RT #20587]
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2753. [bug] Removed an unnecessary warning that could appear when
725fec8d79ff36402b0f90a7a05aafa7964e387fBrian Wellington building an NSEC chain. [RT #20589]
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington2752. [bug] Locking violation. [RT #20587]
19c7cce8555ccc0c95455a0c35dedd017d420d05Mark Andrews2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2750. [bug] dig: assertion failure could occur when a server
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson didn't have an address. [RT #20579]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2749. [bug] ixfr-from-differences generated a non-minimal ixfr
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews for NSEC3 signed zones. [RT #20452]
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington as referrals. [RT #18884]
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington2747. [bug] Journal roll forwards failed to set the re-signing
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington time of RRSIGs correctly. [RT #20541]
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington2746. [port] hpux: address signed/unsigned expansion mismatch of
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington2745. [bug] configure script didn't probe the return type of
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington gai_strerror(3) correctly. [RT #20573]
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington for a insecure delegation.
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington --- 9.7.0b2 released ---
3f8ad70264645ebd6a2a8bc7e923271eb5bf8416Brian Wellington2742. [cleanup] Clarify some DNSSEC-related log messages in
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington2741. [func] Allow the dnssec-keygen progress messages to be
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington suppressed (dnssec-keygen -q). Automatically
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson suppress the progress messages when stdin is not
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson a tty. [RT #20474]
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson2740. [placeholder]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2739. [cleanup] Clean up API for initializing and clearing trust
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson anchors for a view. [RT #20211]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson test. [RT #20453]
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2737. [func] UPDATE requests can leak existence information.
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson2736. [func] Improve the performance of NSEC signed zones with
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington more than a normal amount of glue below a delegation.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2735. [bug] dnssec-signzone could fail to read keys
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington that were specified on the command line with
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington full paths, but weren't in the current
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington directory. [RT #20421]
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington2734. [port] cygwin: arpaname did not compile. [RT #20473]
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington2732. [func] Add optional filter-aaaa-on-v4 option, available
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington if built with './configure --enable-filter-aaaa'.
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews Filters out AAAA answers to clients connecting
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews via IPv4. (This is NOT recommended for general
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews use.) [RT #20339]
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson2731. [func] Additional work on change 2709. The key parser
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer will now ignore unrecognized fields when the
61470ed14b20c55c0730461165faa582a3775eb8Mark Andrews minor version number of the private key format
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson has been increased. It will reject any key with
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer the major version number increased. [RT #20310]
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington a la 'openssl genrsa' on standard error. Note
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington when the first '.' is followed by a long stop
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington one has the choice between slow generation vs.
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington poor random quality, i.e., '-r /dev/urandom'.
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2729. [func] When constructing a CNAME from a DNAME use the DNAME
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley TTL. [RT #20451]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley dnssec-signzone now warn immediately if asked to
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley write into a nonexistent directory. [RT #20278]
065958bd3d26dbc25ff313cfcee07bb6a77ee47eBrian Wellington2727. [func] The 'key-directory' option can now specify a relative
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley path. [RT #20154]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence2726. [func] Added support for SHA-2 DNSSEC algorithms,
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson RSASHA256 and RSASHA512. [RT #20023]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson2725. [doc] Added information about the file "managed-keys.bind"
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson to the ARM. [RT #20235]
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence2724. [bug] Updates to a existing node in secure zone using NSEC
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence were failing. [RT #20448]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence isc_base64_totext(), didn't always mark regions of
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence memory as fully consumed after conversion. [RT #20445]
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews2722. [bug] Ensure that the memory associated with the name of
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson a node in a rbt tree is not altered during the life
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews of the node. [RT #20431]
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews2721. [port] Have dst__entropy_status() prime the random number
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews generator. [RT #20369]
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson2720. [bug] RFC 5011 trust anchor updates could trigger an
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson2719. [func] Skip trusted/managed keys for unsupported algorithms.
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson2718. [bug] The space calculations in opensslrsa_todns() were
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington incorrect. [RT #20394]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington2717. [bug] named failed to update the NSEC/NSEC3 record when
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence the last private type record was removed as a result
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence of completing the signing the zone with a key.
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence --- 9.7.0b1 released ---
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2715. [bug] Require OpenSSL support to be explicitly disabled.
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington2713. [bug] powerpc: atomic operations missing asm("ics") /
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence __isync() calls.
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence2712. [func] New 'auto-dnssec' zone option allows zone signing
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence to be fully automated in zones configured for
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence dynamic DNS. 'auto-dnssec allow;' permits a zone
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence to be signed by creating keys for it in the
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson key-directory and using 'rndc sign <zone>'.
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson 'auto-dnssec maintain;' allows that too, plus it
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington also keeps the zone's DNSSEC keys up to date
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson according to their timing metadata. [RT #19943]
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson2711. [port] win32: Add the bin/pkcs11 tools into the full
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson build. [RT #20372]
a06df85974344892431b14bec51c1beeee971eccAndreas Gustafsson2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
24c5978e0b32137305c2bef2c6e116ee7680a610Andreas Gustafsson zone option cause a zone to be signed with only KSKs
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson signing the DNSKEY RRset, not ZSKs. This reduces
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington the size of a DNSKEY answer. [RT #20340]
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington2709. [func] Added some data fields, currently unused, to the
9be0c3d823200bed1286cff6bddf2a8c639f5287Brian Wellington private key file format, to allow implementation
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence of explicit key rollover in a future release
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence without impairing backward or forward compatibility.
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson2708. [func] Insecure to secure and NSEC3 parameter changes via
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson update are now fully supported and no longer require
7d33e8996948523e0180bc7e28a93d534d878dccAndreas Gustafsson defines to enable. We now no longer overload the
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington NSEC3PARAM flag field, nor the NSEC OPT bit at the
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington apex. Secure to insecure changes are controlled by
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington by the named.conf option 'secure-to-insecure'.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson Warning: If you had previously enabled support by
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson adding defines at compile time to BIND 9.6 you should
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson ensure that all changes that are in progress have
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson completed prior to upgrading to BIND 9.7. BIND 9.7
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson is not backwards compatible.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2707. [func] dnssec-keyfromlabel no longer require engine name
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson to be specified in the label if there is a default
f53848e17123569387b279578f0100dca5407da5Mark Andrews engine or the -E option has been used. Also, it
f53848e17123569387b279578f0100dca5407da5Mark Andrews now uses default algorithms as dnssec-keygen does
f53848e17123569387b279578f0100dca5407da5Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington2706. [bug] Loading a zone with a very large NSEC3 salt could
64a84169d7eed05486b10be90afea58f4af146f9Brian Wellington trigger an assert. [RT #20368]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson2705. [placeholder]
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson2704. [bug] Serial of dynamic and stub zones could be inconsistent
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews with their SOA serial. [RT #19387]
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington2703. [func] Introduce an OpenSSL "engine" argument with -E
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington for all binaries which can take benefit of
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington crypto hardware. [RT #20230]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2701. [doc] Correction to ARM: hmac-md5 is no longer the only
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson supported TSIG key algorithm. [RT #18046]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2700. [doc] The match-mapped-addresses option is discouraged.
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2699. [bug] Missing lock in rbtdb.c. [RT #20037]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson2698. [placeholder]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson S_IFREG are defined after including <isc/stat.h>.
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence2696. [bug] named failed to successfully process some valid
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence acl constructs. [RT #20308]
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence2695. [func] DHCP/DDNS - update fdwatch code for use by
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence DHCP. Modify the api to isc_sockfdwatch_t (the
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence callback function for isc_socket_fdwatchcreate)
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence to include information about the direction (read
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence or write) and add isc_socket_fdwatchpoke.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington2693. [port] Add some noreturn attributes. [RT #20257]
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington2692. [port] win32: 32/64 bit cleanups. [RT #20335]
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
253f774e358dba38742a484426a4cadf4f248817Brian Wellington chain when re-signing a previously-signed zone.
253f774e358dba38742a484426a4cadf4f248817Brian Wellington Use -u to modify NSEC3 parameters or switch
253f774e358dba38742a484426a4cadf4f248817Brian Wellington between NSEC and NSEC3. [RT #20304]
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson2689. [bug] Correctly handle snprintf result. [RT #20306]
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson to decide to fetch the destination address. [RT #20305]
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington Also, added warnings when revoking a ZSK, as this is
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington not defined by protocol (but is legal). [RT #19943]
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer2686. [bug] dnssec-signzone should clean the old NSEC chain when
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer signing with NSEC3 and vice versa. [RT #20301]
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington2684. [cleanup] dig: formalize +ad and +cd as synonyms for
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington +adflag and +cdflag. [RT #19305]
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer the NSEC3 parameters used to sign the zone change.
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence2682. [bug] "configure --enable-symtable=all" failed to
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence build. [RT #20282]
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington decoded. [RT #20269]
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington2679. [func] dig -k can now accept TSIG keys in named.conf
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington format. [RT #20031]
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington2678. [func] Treat DS queries as if "minimal-response yes;"
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington was set. [RT #20258]
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington2677. [func] Changes to key metadata behavior:
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington - Keys without "publish" or "active" dates set will
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington no longer be used for smart signing. However,
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington those dates will be set to "now" by default when
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson a key is created; to generate a key but not use
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson it yet, use dnssec-keygen -G.
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson - New "inactive" date (dnssec-keygen/settime -I)
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson sets the time when a key is no longer used for
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington signing but is still published.
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington - The "unpublished" date (-U) is deprecated in
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington favor of "deleted" (-D).
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson2676. [bug] --with-export-installdir should have been
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington --with-export-includedir. [RT #20252]
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington2675. [bug] dnssec-signzone could crash if the key directory
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson did not exist. [RT #20232]
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson --- 9.7.0a3 released ---
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2674. [bug] "dnssec-lookaside auto;" crashed if named was built
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson without openssl. [RT #20231]
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews2673. [bug] The managed-keys.bind zone file could fail to
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson load due to a spurious result from sync_keyzone()
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2672. [bug] Don't enable searching in 'host' when doing reverse
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson lookups. [RT #20218]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2671. [bug] Add support for PKCS#11 providers not returning
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson the public exponent in RSA private keys
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews (OpenCryptoki for instance) in
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews dnssec-keyfromlabel. [RT #19294]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews information to be useful. [RT #20205]
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2669. [func] Update PKCS#11 support to support Keyper HSM.
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson Update PKCS#11 patch to be against openssl-0.9.8i.
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2668. [func] Several improvements to dnssec-* tools, including:
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson - dnssec-keygen and dnssec-settime can now set key
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson metadata fields 0 (to unset a value, use "none")
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson - dnssec-revoke sets the revocation date in
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson addition to the revoke bit
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews - dnssec-settime can now print individual metadata
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews fields instead of always printing all of them,
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews and can print them in unix epoch time format for
483958540f0034d543f0564beb7877326f15a45bMark Andrews use by scripts
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2667. [func] Add support for logging stack backtrace on assertion
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson failure (not available for all platforms). [RT #19780]
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2666. [func] Added an 'options' argument to dns_name_fromstring()
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews (API change from 9.7.0a2). [RT #20196]
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson ARM documentation about RFC 5011 support. [RT #19874]
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews2664. [bug] create_keydata() and minimal_update() in zone.c
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews didn't properly check return values for some
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews functions. [RT #19956]
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews2663. [func] win32: allow named to run as a service using
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson returned a misleading error code when lwresd was
42928d936e79dbda7ea00bbcab6e5d8034a95bf8Andreas Gustafsson down. [RT #20028]
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson creating lwres context. [RT #20029]
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson2660. [func] Add a new set of DNS libraries for non-BIND9
d7e77a9b59138e8a94d3dfa4e41e1852ad51ac25Andreas Gustafsson applications. See README.libdns. [RT #19369]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson2659. [doc] Clarify dnssec-keygen doc: key name must match zone
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson name for DNSSEC keys. [RT #19938]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2658. [bug] dnssec-settime and dnssec-revoke didn't process
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson key file paths correctly. [RT #20078]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2657. [cleanup] Lower "journal file <path> does not exist, creating it"
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley log level to debug 1. [RT #20058]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2656. [func] win32: add a "tools only" check box to the installer
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley which causes it to only install dig, host, nslookup,
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley nsupdate and relevant DLLs. [RT #19998]
5bbed85a33186db4e629e98f45ca702ac6b09127Brian Wellington2655. [doc] Document that key-directory does not affect
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson bind.keys, rndc.key or session.key. [RT #20155]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2654. [bug] Improve error reporting on duplicated names for
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson deny-answer-xxx. [RT #20164]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2653. [bug] Treat ENGINE_load_private_key() failures as key
86a4d80e0624a10b1824d25018246e1ea63f55d2Andreas Gustafsson not found rather than out of memory. [RT #18033]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2652. [func] Provide more detail about what record is being
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington deleted. [RT #20061]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson2651. [bug] Dates could print incorrectly in K*.key files on
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson 64-bit systems. [RT #20076]
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson2650. [bug] Assertion failure in dnssec-signzone when trying
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson to read keyset-* files. [RT #20075]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2649. [bug] Set the domain for forward only zones. [RT #19944]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2647. [bug] Remove unnecessary SOA updates when a new KSK is
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence added. [RT #19913]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence which default to 64 bits. [RT #19927]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence --- 9.7.0a2 released ---
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2644. [bug] Change #2628 caused a regression on some systems;
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington named was unable to write the PID file and would
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington fail on startup. [RT #20001]
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington2643. [bug] Stub zones interacted badly with NSEC3 support.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2642. [bug] nsupdate could dump core on solaris when reading
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson improperly formatted key files. [RT #20015]
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington2641. [bug] Fixed an error in parsing update-policy syntax,
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington added a regression test to check it. [RT #20007]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson2640. [security] A specially crafted update packet will cause named
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson to exit. [RT #20000]
733e928f714c848aa394c2d12b6239bc7780101bMark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2638. [bug] Install arpaname. [RT #19957]
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2636. [func] Simplify zone signing and key maintenance with the
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson dnssec-* tools. Major changes:
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson - all dnssec-* tools now take a -K option to
066faef1195d539f575816ccab87ff3e85b1b13eBrian Wellington specify a directory in which key files will be
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews - DNSSEC can now store metadata indicating when
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews they are scheduled to be published, activated,
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews revoked or removed; these values can be set by
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews dnssec-keygen or overwritten by the new
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer dnssec-settime command
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer - dnssec-signzone -S (for "smart") option reads key
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer metadata and uses it to determine automatically
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer which keys to publish to the zone, use for
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer signing, revoke, or remove from the zone
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson2634. [port] win32: Add support for libxml2, enable
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson statschannel. [RT #19773]
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson2633. [bug] Handle 15 bit rand() functions. [RT #19783]
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington2632. [func] util/kit.sh: warn if documentation appears to be out of
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington date. [RT #19922]
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews "update-policy local;" to switch on local DDNS in a
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews zone. (The "ddns-autoconf" option has been removed.)
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews setresgid() if not present. [RT #19932]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews at startup with reduced capabilities in operation.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2627. [bug] Named aborted if the same key was included in
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence trusted-keys more than once. [RT #19918]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2626. [bug] Multiple trusted-keys could trigger an assertion
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence failure. [RT #19914]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson configuration. [RT #18871]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson2620. [bug] Delay thawing the zone until the reload of it has
72fa265baa3d138b43427bcb5c0838740f807045Mark Andrews completed successfully. [RT #19750]
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson2619. [func] Add support for RFC 5011, automatic trust anchor
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews maintenance. The new "managed-keys" statement can
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews be used in place of "trusted-keys" for zones which
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews support this protocol. (Note: this syntax is
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington2618. [bug] The sdb and sdlz db_interator_seek() methods could
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington loop infinitely. [RT #19847]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2617. [bug] ifconfig.sh failed to emit an error message when
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews run from the wrong location. [RT #19375]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2616. [bug] 'host' used the nameservers from resolv.conf even
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington when a explicit nameserver was specified. [RT #19852]
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington2615. [bug] "__attribute__((unused))" was in the wrong place
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson for ia64 gcc builds. [RT #19854]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2614. [port] win32: 'named -v' should automatically be executed
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson in the foreground. [RT #19844]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2613. [placeholder]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington --- 9.7.0a1 released ---
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington2612. [func] Add default values for the arguments to
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington dnssec-keygen. Without arguments, it will now
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews generate a 1024-bit RSASHA1 zone-signing key,
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews or with the -f KSK option, a 2048-bit RSASHA1
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews key-signing key. [RT #19300]
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson2611. [func] Add -l option to dnssec-dsfromkey to generate
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson DLV records instead of DS records. [RT #19300]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2610. [port] sunos: Change #2363 was not complete. [RT #19796]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2609. [func] Simplify the configuration of dynamic zones:
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence - add ddns-confgen command to generate
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence configuration text for named.conf
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence - add zone option "ddns-autoconf yes;", which
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence causes named to generate a TSIG session key
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley and allow updates to the zone using that key
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley - add '-l' (localhost) option to nsupdate, which
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington causes nsupdate to connect to a locally-running
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley named process using the session key generated
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2608. [func] Perform post signing verification checks in
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley dnssec-signzone. These can be disabled with -P.
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley The post sign verification test ensures that for each
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington algorithm in use there is at least one non revoked
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley self signed KSK key. That all revoked KSK keys are
86c270cbb24117976d6cd3098c3010e067915c24Andreas Gustafsson self signed. That all records in the zone are signed
86c270cbb24117976d6cd3098c3010e067915c24Andreas Gustafsson by the algorithm. [RT #19653]
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews empty nodes when processing a update request.
8217f91f8d2dd6e94a2bf893284506ea47cd294aAndreas Gustafsson2606. [bug] "delegation-only" was not being accepted in
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer delegation-only type zones. [RT #19717]
588b63e1a86fb707172830e14897da624ed380edMark Andrews2605. [bug] Accept DS responses from delegation only zones.
588b63e1a86fb707172830e14897da624ed380edMark Andrews [RT # 19296]
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington2604. [func] Add support for DNS rebinding attack prevention through
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington new options, deny-answer-addresses and
452d75b18f9d050086964fa39c326cf388517396Mark Andrews deny-answer-aliases. Based on contributed code from
452d75b18f9d050086964fa39c326cf388517396Mark Andrews JD Nurmi, Google. [RT #18192]
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington named-comilezone argv[0] names under windows.
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington2602. [port] win32: fix debugging command line build of libisccfg.
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews2601. [doc] Mention file creation mode mask in the
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews named manual page.
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington2600. [doc] ARM: miscellaneous reformatting for different
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington page widths. [RT #19574]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2599. [bug] Address rapid memory growth when validation fails.
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2598. [func] Reserve the -F flag. [RT #19657]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2597. [bug] Handle a validation failure with a insecure delegation
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer from a NSEC3 signed master/slave zone. [RT #19464]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson long, leading to inefficient memory usage or rejecting
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer newer cache entries in the worst case. [RT #19563]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2594. [func] Have rndc warn if using its default configuration
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer file when the key file also exists. [RT #19424]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2591. [bug] named could die when processing a update in
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson removed_orphaned_ds(). [RT #19507]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson2590. [func] Report zone/class of "update with no effect".
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews2588. [bug] SO_REUSEADDR could be set unconditionally after failure
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews of bind(2) call. This should be rare and mostly
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews harmless, but may cause interference with other
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews processes that happen to use the same port. [RT #19642]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews2587. [func] Improve logging by reporting serial numbers for
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews when zone serial has gone backwards or unchanged.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson or SDB. [RT #19577]
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson2585. [bug] Uninitialized socket name could be referenced via a
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson statistics channel, triggering an assertion failure in
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson XML rendering. [RT #19427]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2584. [bug] alpha: gcc optimization could break atomic operations.
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews2583. [port] netbsd: provide a control to not add the compile
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington date to the version string, -DNO_VERSION_DATE.
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington2582. [bug] Don't emit warning log message when we attempt to
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington remove non-existent journal. [RT #19516]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer Requires MySQL 5.0.19 or later. [RT #19084]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer2580. [bug] UpdateRej statistics counter could be incremented twice
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer for one rejection. [RT #19476]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer2579. [bug] DNSSEC lookaside validation failed to handle unknown
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson algorithms. [RT #19479]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson2578. [bug] Changed default sig-signing-type to 65534, because
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson 65535 turns out to be reserved. [RT #19477]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2577. [doc] Clarified some statistics counters. [RT #19454]
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews2576. [bug] NSEC record were not being correctly signed when
e412ae947df6de858883564b8676a9650df70d9aMark Andrews a zone transitions from insecure to secure.
e412ae947df6de858883564b8676a9650df70d9aMark Andrews Handle such incorrectly signed zones. [RT #19114]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2575. [func] New functions dns_name_fromstring() and
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews dns_name_tostring(), to simplify conversion
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews of a string to a dns_name structure and vice
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews versa. [RT #19451]
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson2574. [doc] Document nsupdate -g and -o. [RT #19351]
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson2573. [bug] Replacing a non-CNAME record with a CNAME record in a
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson single transaction in a signed zone failed. [RT #19397]
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson2572. [func] Simplify DLV configuration, with a new option
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson "dnssec-lookaside auto;" This is the equivalent
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson of "dnssec-lookaside . trust-anchor dlv.isc.org;"
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson plus setting a trusted-key for dlv.isc.org.
0e07026a21dfcaf57dc789e7ece20182dc36029cMark Andrews Note: The trusted key is hard-coded into named,
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson but is also stored in (and can be overridden
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson by) $sysconfdir/bind.keys. As the ISC DLV key
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson rolls over it can be kept up to date by replacing
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson the bind.keys file with a key downloaded from
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson https://www.isc.org/solutions/dlv. [RT #18685]
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2571. [func] Add a new tool "arpaname" which translates IP addresses
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson2570. [func] Log the destination address the query was sent to.
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson2569. [func] Move journalprint, nsec3hash, and genrandom
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson "make install" will put them in $sbindir. [RT #19301]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2568. [bug] Report when the write to indicate a otherwise
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson successful start fails. [RT #19360]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2567. [bug] dst__privstruct_writefile() could miss write errors.
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington write_public_key() could miss write errors.
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington dnssec-dsfromkey could miss write errors.
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews response arrives from a zone thought to be secure:
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews "insecurity proof failed" instead of "not
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews insecure". [RT #19400]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2565. [func] Add support for HIP record. Includes new functions
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews and dns_rdata_hip_current(). [RT #19384]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence2563. [bug] Dig could leak a socket causing it to wait forever
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson to exit. [RT #19359]
051beeafa6547440da17985665b31952b85ede56Brian Wellington2562. [doc] ARM: miscellaneous improvements, reorganization,
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson and some new content.
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson2559. [bug] dnssec-dsfromkey could compute bad DS records when
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson reading from a K* files. [RT #19357]
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence2558. [func] Set the ownership of missing directories created
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington for pid-file if -u has been specified on the command
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington line. [RT #19328]
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer2557. [cleanup] PCI compliance:
cc7420cb3b8eb2c48a00384784701bfee37cc96fAndreas Gustafsson * new libisc log module file
8357e90fba97010a86356a41c8a961d5d602d7d0Michael Sawyer * isc_dir_chroot() now also changes the working
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer directory to "/".
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson * additional INSISTs
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson * additional logging when files can't be removed.
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews error checks in the correct order resulting in the
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews wrong error code sometimes being returned. [RT #19249]
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson2555. [func] dig: when emitting a hex dump also display the
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson corresponding characters. [RT #19258]
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews fail. [RT #19297]
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honored.
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2551. [bug] Potential Reference leak on return. [RT #19341]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2548. [bug] Install iterated_hash.h. [RT #19335]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2547. [bug] openssl_link.c:mem_realloc() could reference an
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley out-of-range area of the source buffer. New public
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley function isc_mem_reallocate() was introduced to address
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson this bug. [RT #19313]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2546. [func] Add --enable-openssl-hash configure flag to use
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson OpenSSL (in place of internal routine) for hash
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer functions (MD5, SHA[12] and HMAC). [RT #18815]
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley for SRV RDATA too. [RT #19304]
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2542. [doc] Update the description of dig +adflag. [RT #19290]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2541. [bug] Conditionally update dispatch manager statistics.
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2539. [security] Update the interaction between recursion, allow-query,
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson allow-query-cache and allow-recursion. [RT #19198]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson2538. [bug] cache/ADB memory could grow over max-cache-size,
ba43c53451d5c38765f376eeede457178b36951aBob Halley especially with threads and smaller max-cache-size
ba43c53451d5c38765f376eeede457178b36951aBob Halley values. [RT #19240]
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews2537. [func] Added more statistics counters including those on socket
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews I/O events and query RTT histograms. [RT #18802]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews specified. [RT #19083]
668278867ba063995988507b6b28724ebb9f9391Mark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2534. [func] Check NAPTR records regular expressions and
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson replacement strings to ensure they are syntactically
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson valid and consistent. [RT #18168]
2053a53eeac7f069311d8ed67333503c7d3a2e2bAndreas Gustafsson2533. [doc] ARM: document @ (at-sign). [RT #17144]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2532. [bug] dig: check the question section of the response to
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson see if it matches the asked question. [RT #18495]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2531. [bug] Change #2207 was incomplete. [RT #19098]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2530. [bug] named failed to reject insecure to secure transitions
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson via UPDATE. [RT #19101]
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson2529. [cleanup] Upgrade libtool to silence complaints from recent
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson version of autoconf. [RT #18657]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2528. [cleanup] Silence spurious configure warning about
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson --datarootdir [RT #19096]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2527. [placeholder]
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson2526. [func] New named option "attach-cache" that allows multiple
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson views to share a single cache to save memory and
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff improve lookup efficiency. Based on contributed code
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff from Barclay Osborn, Google. [RT #18905]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2525. [func] New logging category "query-errors" to provide detailed
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff internal information about query failures, especially
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff about server failures. [RT #19027]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington2523. [bug] Random type rdata freed by dns_nsec_typepresent().
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2521. [bug] Improve epoll cross compilation support. [RT #19047]
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2520. [bug] Update xml statistics version number to 2.0 as change
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington #2388 made the schema incompatible to the previous
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington version. [RT #19080]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2519. [bug] dig/host with -4 or -6 didn't work if more than two
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson nameserver addresses of the excluded address family
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson preceded in resolv.conf. [RT #19081]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley2518. [func] Add support for the new CERT types from RFC 4398.
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson2517. [bug] dig +trace with -4 or -6 failed when it chose a
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff nameserver address of the excluded address type.
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff2516. [bug] glue sort for responses was performed even when not
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington needed. [RT #19039]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff a nameserver of the excluded address family.
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff2513. [bug] Fix windows cli build. [RT #19062]
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson2512. [func] Print a summary of the cached records which make up
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson the negative response. [RT #18885]
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2509. [bug] Specifying a fixed query source port was broken.
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington2508. [placeholder]
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson2507. [func] Log the recursion quota values when killing the
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson oldest query or refusing to recurse due to quota.
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2506. [port] solaris: Check at configure time if
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington hack_shutup_pthreadonceinit is needed. [RT #19037]
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson2505. [port] Treat amd64 similarly to x86_64 when determining
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson atomic operation support. [RT #19031]
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson2504. [bug] Address race condition in the socket code. [RT #18899]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington2503. [port] linux: improve compatibility with Linux Standard
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington Base. [RT #18793]
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington2502. [cleanup] isc_radix: Improve compliance with coding style,
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson document function in <isc/radix.h>. [RT #18534]
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson2501. [func] $GENERATE now supports all rdata types. Multi-field
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson rdata types need to be quoted. See the ARM for
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson details. [RT #18368]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
cdc2d4a065b6b1a00f0b07aae94bc7cb380d15bcAndreas Gustafsson function. [RT #18582]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson --- 9.6.0rc1 released ---
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2498. [bug] Removed a bogus function argument used with
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson ISC_SOCKET_USE_POLLWATCH: it could cause compiler
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson warning or crash named with the debug 1 level
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington of logging. [RT #18917]
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson2496. [bug] Add sanity length checks to NSID option. [RT #18813]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2495. [bug] Tighten RRSIG checks. [RT #18795]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington installed. [RT #18826]
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington2493. [bug] The linux capabilities code was not correctly cleaning
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington up after itself. [RT #18767]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2492. [func] Rndc status now reports the number of cpus discovered
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson and the number of worker threads when running
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson multi-threaded. [RT #18273]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2491. [func] Attempt to re-use a local port if we are already using
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson the port. [RT #18548]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson is cleared when IPV6_V6ONLY is set. [RT #18785]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2489. [port] solaris: Workaround Solaris's kernel bug about
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson this workaround. [RT #18870]
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson from keyset and .key files. [RT #18694]
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2487. [bug] Give TCP connections longer to complete. [RT #18675]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2486. [func] The default locations for named.pid and lwresd.pid
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews This allows the owner of the containing directory
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews to be set, for "named -u" support, and allows there
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews to be a permanent symbolic link in the path, for
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews "named -t" support. [RT #18306]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2485. [bug] Change update's the handling of obscured RRSIG
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews records. Not all orphaned DS records were being
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews removed. [RT #18828]
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson2484. [bug] It was possible to trigger a REQUIRE failure when
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson adding NSEC3 proofs to the response in
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson query_addwildcardproof(). [RT #18828]
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson2483. [port] win32: chroot() is not supported. [RT #18805]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson2482. [port] libxml2: support versions 2.7.* in addition
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson to 2.6.*. [RT #18806]
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson --- 9.6.0b1 released ---
6d3f954c572db02159deedd444373161fda47a88Brian Wellington2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington collisions. [RT #18812]
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington2480. [bug] named could fail to emit all the required NSEC3
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson records. [RT #18812]
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson2478. [bug] 'addresses' could be used uninitialized in
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson configure_forward(). [RT #18800]
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence2477. [bug] dig: the global option to print the command line is
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson +cmd not print_cmd. Update the output to reflect
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington this. [RT #17008]
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington2476. [doc] ARM: improve documentation for max-journal-size and
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson ixfr-from-differences. [RT #15909] [RT #18541]
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson2475. [bug] LRU cache cleanup under overmem condition could purge
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington particular entries more aggressively. [RT #17628]
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington2474. [bug] ACL structures could be allocated with insufficient
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington space, causing an array overrun. [RT #18765]
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington2473. [port] linux: raise the limit on open files to the possible
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson maximum value before spawning threads; 'files'
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson specified in named.conf doesn't seem to work with
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence threads as expected. [RT #18784]
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews2472. [port] linux: check the number of available cpu's before
b41de87910a4c57039a4f5968e272a9aec566959Brian Wellington calling chroot as it depends on "/proc". [RT #16923]
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson2471. [bug] named-checkzone was not reporting missing mandatory
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson glue when sibling checks were disabled. [RT #18768]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington2470. [bug] Elements of the isc_radix_node_t could be incorrectly
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington overwritten. [RT# 18719]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2469. [port] solaris: Work around Solaris's select() limitations.
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2468. [bug] Resolver could try unreachable servers multiple times.
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2465. [bug] Adb's handling of lame addresses was different
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson for IPv4 and IPv6. [RT #18738]
e0a9b524614889ca9b75f846cb6101fc448a60dcAndreas Gustafsson2464. [port] linux: check that a capability is present before
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews trying to set it. [RT #18135]
385a9cb48a70b329e507c39d043fa9a44c659913James Brister2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
385a9cb48a70b329e507c39d043fa9a44c659913James Brister API and glibc hides parts of the IPv6 Advanced Socket
385a9cb48a70b329e507c39d043fa9a44c659913James Brister API as a result. This is stupid as it breaks how the
385a9cb48a70b329e507c39d043fa9a44c659913James Brister two halves (Basic and Advanced) of the IPv6 Socket API
3cb0de1c667237085c6a805715c31ddc5fdc9c4dBrian Wellington were designed to be used but we have to live with it.
385a9cb48a70b329e507c39d043fa9a44c659913James Brister Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington API. [RT #18388]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2462. [doc] Document -m (enable memory usage debugging)
e5f5ec73a710d21067d4721a9e82f2399f2f6c25David Lawrence option for dig. [RT #18757]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2461. [port] sunos: Change #2363 was not complete. [RT #17513]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer --- 9.6.0a1 released ---
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2458. [doc] ARM: update and correction for max-cache-size.
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2457. [tuning] max-cache-size is reverted to 0, the previous
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence default. It should be safe because expired cache
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence entries are also purged. [RT #18684]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence address, regardless of family. They now correctly
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence distinguish IPv4 from IPv6. [RT #18559]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2455. [bug] Stop metadata being transferred via axfr/ixfr.
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
529a6b5224d751504027293a766a4c8b81241869Brian Wellington2453. [bug] Remove NULL pointer dereference in dns_journal_print().
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson2452. [func] Improve bin/test/journalprint. [RT #18316]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington2451. [port] solaris: handle runtime linking better. [RT #18356]
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington2450. [doc] Fix lwresd docbook problem for manual page.
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2449. [placeholder]
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2448. [func] Add NSEC3 support. [RT #15452]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2447. [cleanup] libbind has been split out as a separate product.
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson2446. [func] Add a new log message about build options on startup.
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson A new command-line option '-V' for named is also
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson provided to show this information. [RT# 18645]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2445. [doc] ARM out-of-date on empty reverse zones (list includes
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington RFC1918 address, but these are not yet compiled in).
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson (clear DF) for UDP responses and requests.
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2443. [bug] win32: UDP connect() would not generate an event,
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington and so connected UDP sockets would never clean up.
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson Fix this by doing an immediate WSAConnect() rather
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson than an io completion port type for UDP.
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister2442. [bug] A lock could be destroyed twice. [RT# 18626]
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer2441. [bug] isc_radix_insert() could copy radix tree nodes
48cddfee7c4d90b1901d03ccc0e67e08908a8f2fMark Andrews incompletely. [RT #18573]
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2440. [bug] named-checkconf used an incorrect test to determine
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer if an ACL was set to none.
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson2438. [bug] Timeouts could be logged incorrectly under win32.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2437. [bug] Sockets could be closed too early, leading to
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson inconsistent states in the socket module. [RT #18298]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2435. [bug] Fixed an ACL memory leak affecting win32.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2434. [bug] Fixed a minor error-reporting bug in
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2433. [tuning] Set initial timeout to 800ms.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2432. [bug] More Windows socket handling improvements. Stop
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence using I/O events and use IO Completion Ports
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence throughout. Rewrite the receive path logic to make
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence it easier to support multiple simultaneous
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence requesters in the future. Add stricter consistency
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence checking as a compile-time option (define
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2431. [bug] Acl processing could leak memory. [RT #18323]
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2430. [bug] win32: isc_interval_set() could round down to
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson zero if the input was less than NS_INTERVAL
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson nanoseconds. Round up instead. [RT #18549]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2429. [doc] nsupdate should be in section 1 of the man pages.
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson2428. [bug] dns_iptable_merge() mishandled merges of negative
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson tables. [RT #18409]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson was set. [RT #18528]
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2426. [bug] libbind: inet_net_pton() can sometimes return the
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington wrong value if excessively large net masks are
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington supplied. [RT #18512]
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington2425. [bug] named didn't detect unavailable query source addresses
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington at load time. [RT #18536]
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson2424. [port] configure now probes for a working epoll
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson implementation. Allow the use of kqueue,
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson epoll and /dev/poll to be selected at compile
da527e4ff6a013364826637963e7ac372e024f33David Lawrence time. [RT #18277]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2423. [security] Randomize server selection on queries, so as to
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews make forgery a little more difficult. Instead of
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson always preferring the server with the lowest RTT,
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson pick a server with RTT within the same 128
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson millisecond band. [RT #18441]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2422. [bug] Handle the special return value of a empty node as
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence if it was a NXRRSET in the validator. [RT #18447]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2421. [func] Add new command line option '-S' for named to specify
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence the max number of sockets. [RT #18493]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence Use caution: this option may not work for some
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister operating systems without rebuilding named.
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister2420. [bug] Windows socket handling cleanup. Let the io
adade77942b069127a7094df419b3ad39dafb385James Brister completion event send out canceled read/write
adade77942b069127a7094df419b3ad39dafb385James Brister done events, which keeps us from writing to memory
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence we no longer have ownership of. Add debugging
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence socket_log() function. Rework TCP socket handling
adade77942b069127a7094df419b3ad39dafb385James Brister to not leak sockets.
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson should not be used for isc_sockettype_fdwatch sockets.
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2417. [bug] Connecting UDP sockets for outgoing queries could
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson unexpectedly fail with an 'address already in use'
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson error. [RT #18411]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2416. [func] Log file descriptors that cause exceeding the
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson internal maximum. [RT #18460]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2415. [bug] 'rndc dumpdb' could trigger various assertion failures
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence in rbtdb.c. [RT #18455]
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson2414. [bug] A masterdump context held the database lock too long,
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson causing various troubles such as dead lock and
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson recursive lock acquisition. [RT #18311, #18456]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson2412. [bug] win32: address a resource leak. [RT #18374]
5096958739769958dd7a6b69356bf41260033873David Lawrence2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
5096958739769958dd7a6b69356bf41260033873David Lawrence for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
5096958739769958dd7a6b69356bf41260033873David Lawrence at compilation time. [RT #18433]
5096958739769958dd7a6b69356bf41260033873David Lawrence Note: with changes #2469 and #2421 above, there is no
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence2410. [bug] Correctly delete m_versionInfo. [RT #18432]
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence2409. [bug] Only log that we disabled EDNS processing if we were
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence subsequently successful. [RT #18029]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2408. [bug] A duplicate TCP dispatch event could be sent, which
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence could then trigger an assertion failure in
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews resquery_response(). [RT #18275]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2406. [placeholder]
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2405. [cleanup] The default value for dnssec-validation was changed to
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister "yes" in 9.5.0-P1 and all subsequent releases; this
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington was inadvertently omitted from CHANGES at the time.
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington2404. [port] hpux: files unlimited support.
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2403. [bug] TSIG context leak. [RT #18341]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2402. [port] Support Solaris 2.11 and over. [RT #18362]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2401. [bug] Expect to get E[MN]FILE errno internal_accept()
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington (from accept() or fcntl() system calls). [RT #18358]
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2399. [placeholder]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2398. [bug] Improve file descriptor management. New,
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister temporary, named.conf option reserved-sockets,
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister default 512. [RT #18344]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2397. [bug] gssapi_functions had too many elements. [RT #18355]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2396. [bug] Don't set SO_REUSEADDR for randomized ports.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2395. [port] Avoid warning and no effect from "files unlimited"
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson on Linux when running as root. [RT #18335]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2394. [bug] Default configuration options set the limit for
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson open files to 'unlimited' as described in the
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson documentation. [RT #18331]
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews2393. [bug] nested acls containing keys could trigger an
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson assertion in acl.c. [RT #18166]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2392. [bug] remove 'grep -q' from acl test script, some platforms
96ab25294b028270eb1be867613df8a6c999b332David Lawrence don't support it. [RT #18253]
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2391. [port] hpux: cover additional recvmsg() error codes.
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2390. [bug] dispatch.c could make a false warning on 'odd socket'.
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2389. [bug] Move the "working directory writable" check to after
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence the ns_os_changeuser() call. [RT #18326]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2388. [bug] Avoid using tables for layout purposes in
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson statistics XSL [RT #18159].
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2387. [bug] Silence compiler warnings in lib/isc/radix.c.
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson [RT #18147] [RT #18258]
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington2386. [func] Add warning about too small 'open files' limit.
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2385. [bug] A condition variable in socket.c could leak in
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson rare error handling [RT #17968].
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2384. [security] Fully randomize UDP query ports to improve
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson forgery resilience. [RT #17949, #18098]
b6747cf19dea764e5acaa164f23b70d54348d64cMark Andrews2383. [bug] named could double queries when they resulted in
6a8832f784bd53aa6afbda22f6187cea6490e1e1Andreas Gustafsson SERVFAIL due to overkilling EDNS0 failure detection.
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2381. [port] dlz/mysql: support multiple install layouts for
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence mysql. <prefix>/include/{,mysql/}mysql.h and
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence <prefix>/lib/{,mysql/}. [RT #18152]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson proofs which, in turn, caused validation failures
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence for insecure zones immediately below a secure zone
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson the server was authoritative for. [RT #18112]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson TLDs and supported RRs with TTLs [RT #17972]
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson2376. [bug] Change #2144 was not complete.
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2375. [placeholder]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2374. [bug] "blackhole" ACLs could cause named to segfault due
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson to some uninitialized memory. [RT #18095]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2373. [bug] Default values of zone ACLs were re-parsed each time a
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson new zone was configured, causing an overconsumption
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson of memory. [RT #18092]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2370. [bug] "rndc freeze" could trigger an assertion in named
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews when called on a nonexistent zone. [RT #18050]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2369. [bug] libbind: Array bounds overrun on read in bitncmp().
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2368. [port] Linux: use libcap for capability management if
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson possible. [RT# 18026]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson2367. [bug] Improve counting of dns_resstatscounter_retry
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson2366. [bug] Adb shutdown race. [RT #18021]
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer2365. [bug] Fix a bug that caused dns_acl_isany() to return
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence spurious results. [RT #18000]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2364. [bug] named could trigger a assertion when serving a
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence malformed signed zone. [RT #17828]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2362. [cleanup] Make "rrset-order fixed" a compile-time option.
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence settable by "./configure --enable-fixed-rrset".
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence Disabled by default. [RT #17977]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2361. [bug] "recursion" statistics counter could be counted
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson multiple times for a single query. [RT #17990]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2360. [bug] Fix a condition where we release a database version
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson (which may acquire a lock) while holding the lock.
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence2359. [bug] Fix NSID bug. [RT #17942]
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence2358. [doc] Update host's default query description. [RT #17934]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2357. [port] Don't use OpenSSL's engine support in versions before
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson OpenSSL 0.9.7f. [RT #17922]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2356. [bug] Built in mutex profiler was not scalable enough.
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2355. [func] Extend the number statistics counters available.
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister2354. [bug] Failed to initialize some rdatasetheader_t elements.
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2353. [func] Add support for Name Server ID (RFC 5001).
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington 'dig +nsid' requests NSID from server.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'request-nsid yes;' causes recursive server to send
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence NSID requests to upstream servers. Server responds
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to NSID requests with the string configured by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'server-id' option. [RT #17091]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2352. [bug] Various GSS_API fixups. [RT #17729]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence2350. [port] win32: IPv6 support. [RT #17797]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2349. [func] Provide incremental re-signing support for secure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dynamic zones. [RT #1091]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence Documentation is in the new README.pkcs11 file.
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews New tool, dnssec-keyfromlabel, which takes the
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews label of a key pair in a HSM and constructs a DNS
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence key pair for use by named and dnssec-signzone.
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson2347. [bug] Delete now traverses the RB tree in the canonical
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson order. [RT #17451]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2346. [func] Memory statistics now cover all active memory contexts
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson in increased detail. [RT #17580]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2345. [bug] named-checkconf failed to detect when forwarders
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson were set at both the options/view level and in
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson a root zone. [RT #17671]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2344. [bug] Improve "logging{ file ...; };" documentation.
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2343. [bug] (Seemingly) duplicate IPv6 entries could be
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington created in ADB. [RT #17837]
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews2341. [bug] libbind: add missing -I../include for off source
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson tree builds. [RT #17606]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2340. [port] openbsd: interface configuration. [RT #17700]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2339. [port] tru64: support for libbind. [RT #17589]
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson2338. [bug] check_ds() could be called with a non DS rdataset.
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
8ae26e9f87560f9d2e495328d573c25af81c49beMark Andrews interfaces if there are not listen-on-v6 clauses in
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2335. [port] sunos: libbind and *printf() support for long long.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews bug in fromstruct_txt(). [RT #17609]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2333. [bug] Fix off by one error in isc_time_nowplusinterval().
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2332. [contrib] query-loc-0.4.0. [RT #17602]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2331. [bug] Failure to regenerate any signatures was not being
7789eb1345bef03773a2530dce7f2709cc50aa2aAndreas Gustafsson reported nor being past back to the UPDATE client.
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews2330. [bug] Remove potential race condition when handling
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington over memory events. [RT #17572]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington WARNING: API CHANGE: over memory callback
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington function now needs to call isc_mem_waterack().
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister See <isc/mem.h> for details.
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2329. [bug] Clearer help text for dig's '-x' and '-i' options.
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson2327. [bug] It was possible to dereference a NULL pointer in
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson rbtdb.c. Implement dead node processing in zones as
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson we do for caches. [RT #17312]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2326. [bug] It was possible to trigger a INSIST in the acache
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2325. [port] Linux: use capset() function if available. [RT #17557]
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson2323. [port] tru64: namespace clash. [RT #17547]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2322. [port] MacOS: work around the limitation of setrlimit()
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister for RLIMIT_NOFILE. [RT #17526]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2321. [placeholder]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2320. [func] Make statistics counters thread-safe for platforms
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister that support certain atomic operations. [RT #17466]
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson2319. [bug] Silence Coverity warnings in
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2318. [port] sunos fixes for libbind. [RT #17514]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
47c196192afa37b2dea728e52579779f190bf07fJames Brister2315. [bug] Used incorrect address family for mapped IPv4
47c196192afa37b2dea728e52579779f190bf07fJames Brister addresses in acl.c. [RT #17519]
47c196192afa37b2dea728e52579779f190bf07fJames Brister2314. [bug] Uninitialized memory use on error path in
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2313. [cleanup] Silence Coverity warnings. Handle private stacks.
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington [RT #17447] [RT #17478]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington2311. [bug] IPv6 addresses could match IPv4 ACL entries and
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister vice versa. [RT #17462]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2310. [bug] dig, host, nslookup: flush stdout before emitting
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister debug/fatal messages. [RT #17501]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence2306. [bug] Remove potential race from lib/dns/resolver.c.
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2305. [security] inet_network() buffer overflow. CVE-2008-0122.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2304. [bug] Check returns from all dns_rdata_tostruct() calls.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2301. [bug] Remove resource leak and fix error messages in
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson bin/tests/system/lwresd/lwtest.c. [RT #17474]
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2300. [bug] Fixed failure to close open file in
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister2299. [bug] Remove unnecessary NULL check in
d5399cc351a549db957185993b320a3bffa40e41James Brister2298. [bug] isc_mutex_lock() failure not caught in
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister2297. [bug] isc_entropy_createfilesource() failure not caught in
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews2296. [port] Allow docbook stylesheet location to be specified to
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews configure. [RT #17457]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2294. [func] Allow the experimental statistics channels to have
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington multiple connections and ACL.
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington Note: the stats-server and stats-server-v6 options
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence available in the previous beta releases are replaced
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence with the generic statistics-channels statement.
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2293. [func] Add ACL regression test. [RT #17375]
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister2292. [bug] Log if the working directory is not writable.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failure to set PR_SET_DUMPABLE. [RT #17312]
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence2290. [bug] Let AD in the query signal that the client wants AD
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence set in the response. [RT #17301]
a3c0a79b61edfd6a021c080d4b368c9c962fcad6Andreas Gustafsson2289. [func] named-checkzone now reports the out-of-zone CNAME
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence found. [RT #17309]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2288. [port] win32: mark service as running when we have finished
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence loading. [RT #17441]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2286. [func] Allow a TCP connection to be used as a weak
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence authentication method for reverse zones.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence New update-policy methods tcp-self and 6to4-self.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2285. [func] Test framework for client memory context management.
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2284. [bug] Memory leak in UPDATE prerequisite processing.
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2283. [bug] TSIG keys were not attaching to the memory
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson context. TSIG keys should use the rings
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson memory context rather than the clients memory
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson context. [RT #17377]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2281. [bug] Attempts to use undefined acls were not being logged.
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2280. [func] Allow the experimental http server to be reached
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington over IPv6 as well as IPv4. [RT #17332]
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson to protect applications from receiving spurious
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson SIGPIPE signals when using the resolver.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2278. [bug] win32: handle the case where Windows returns no
b092aef75539b462d24b460b67ac49edb79aaff8Andreas Gustafsson search list or DNS suffix. [RT #17354]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2277. [bug] Empty zone names were not correctly being caught at
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson in the post parse checks. [RT #17357]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
fef059dcec0f7f83b09b9ce30b91b21a51d9c481Andreas Gustafsson2275. [func] Add support to dig to perform IXFR queries over UDP.
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington2274. [func] Log zone transfer statistics. [RT #17336]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2273. [bug] Adjust log level to WARNING when saving inconsistent
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington stub/slave master and journal files. [RT# 17279]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2271. [bug] Fix a memory leak in http server code [RT #17100]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2270. [bug] dns_db_closeversion() version->writer could be reset
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson before it is tested. [RT #17290]
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington --- 9.5.0b1 released ---
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington2267. [bug] Radix tree node_num value could be set incorrectly,
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington causing positive ACL matches to look like negative
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ones. [RT #17311]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2266. [bug] client.c:get_clientmctx() returned the same mctx
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence once the pool of mctx's was filled. [RT #17218]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2265. [bug] Test that the memory context's basic_table is non NULL
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence before freeing. [RT #17265]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2264. [bug] Server prefix length was being ignored. [RT #17308]
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence2263. [bug] "named-checkconf -z" failed to set default value
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for "check-integrity". [RT #17306]
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington2262. [bug] Error status from all but the last view could be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence lost. [RT #17292]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2260. [bug] Reported wrong clients-per-query when increasing the
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson value. [RT #17236]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2259. [placeholder]
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson --- 9.5.0a7 released ---
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2257. [bug] win32: Use the full path to vcredist_x86.exe when
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson calling it. [RT #17222]
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2256. [bug] win32: Correctly register the installation location of
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2254. [bug] timer.c:dispatch() failed to lock timer->lock
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff when reading timer->idle allowing it to see
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff intermediate values as timer->idle was reset by
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson isc_timer_touch(). [RT #17243]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2253. [func] "max-cache-size" defaults to 32M.
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson "max-acache-size" defaults to 16M.
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2252. [bug] Fixed errors in sortlist code [RT #17216]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2251. [placeholder]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2250. [func] New flag 'memstatistics' to state whether the
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson memory statistics file should be written or not.
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson Additionally named's -m option will cause the
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson statistics file to be written. [RT #17113]
c50936eb40263b65ebf6afe4e6556e2dc67c10e4Brian Wellington2249. [bug] Only set Authentic Data bit if client requested
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence DNSSEC, per RFC 3655 [RT #17175]
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2247. [doc] Sort doc/misc/options. [RT #17067]
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence2246. [bug] Make the startup of test servers (ans.pl) more
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence robust. [RT #17147]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2245. [bug] Validating lack of DS records at trust anchors wasn't
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson working. [RT #17151]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2244. [func] Allow the check of nameserver names against the
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson SOA MNAME field to be disabled by specifying
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson 'notify-to-soa yes;'. [RT #17073]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2243. [func] Configuration files without a newline at the end now
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson parse without error. [RT #17120]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson library could require a source of random data.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a number of INSIST()s into plain fatal() errors
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence which report the triggering result code.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence The 'key' command wasn't disabling GSS-TSIG.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence2238. [bug] It was possible to trigger a REQUIRE when a
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson validation was canceled. [RT #17106]
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews2236. [bug] dnssec-signzone failed to preserve the case of
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews of wildcard owner names. [RT #17085]
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2233. [func] Add support for O(1) ACL processing, based on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence radix tree code originally written by Kevin
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence Brintnall. [RT #16288]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2232. [bug] dns_adb_findaddrinfo() could fail and return
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ISC_R_SUCCESS. [RT #17137]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington2230. [bug] We could INSIST reading a corrupted journal.
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington2229. [bug] Null pointer dereference on query pool creation
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failure. [RT #17133]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2228. [contrib] contrib: Change 2188 was incomplete.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2227. [cleanup] Tidied up the FAQ. [RT #17121]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2226. [placeholder]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2225. [bug] More support for systems with no IPv4 addresses.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2224. [bug] Defer journal compaction if a xfrin is in progress.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2223. [bug] Make a new journal when compacting. [RT #17119]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2222. [func] named-checkconf now checks server key references.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2221. [bug] Set the event result code to reflect the actual
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister record turned to caller when a cache update is
c0b06c8275c5ea3cde8cc67f3a6f9cab1bd55d65James Brister rejected due to a more credible answer existing.
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson2220. [bug] win32: Address a race condition in final shutdown of
527ea00c176abc167a6daf978e06f52c7e70aa06Andreas Gustafsson the Windows socket code. [RT #17028]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson2219. [bug] Apply zone consistency checks to additions, not
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson removals, when updating. [RT #17049]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson2217. [func] Adjust update log levels. [RT #17092]
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson2216. [cleanup] Fix a number of errors reported by Coverity.
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson2214. [bug] Deregister OpenSSL lock callback when cleaning
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews up. Reorder OpenSSL cleanup so that RAND_cleanup()
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews is called before the locks are destroyed. [RT #17098]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2213. [bug] SIG0 diagnostic failure messages were looking at the
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews wrong status code. [RT #17101]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2212. [func] 'host -m' now causes memory statistics and active
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews memory to be printed at exit. [RT 17028]
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews2211. [func] Update "dynamic update temporarily disabled" message.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2210. [bug] Deleting class specific records via UPDATE could
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson fail. [RT #17074]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2209. [port] osx: linking against user supplied static OpenSSL
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews libraries failed as the system ones were still being
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews found. [RT #17078]
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2208. [port] win32: make sure both build methods produce the
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews same output. [RT #17058]
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson2207. [port] Some implementations of getaddrinfo() fail to set
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ai_canonname correctly. [RT #17061]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson --- 9.5.0a6 released ---
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence2206. [security] "allow-query-cache" and "allow-recursion" now
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence cross inherit from each other.
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson If allow-query-cache is not set in named.conf then
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence allow-recursion is used if set, otherwise allow-query
f2fdfe7c42f3b10f3653f851ce5a0a90ee5ac1f9David Lawrence is used if set, otherwise the default (localnets;
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson localhost;) is used.
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence If allow-recursion is not set in named.conf then
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister allow-query-cache is used if set, otherwise allow-query
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister is used if set, otherwise the default (localnets;
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews localhost;) is used.
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2204. [bug] "rndc flushanme name unknown-view" caused named
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister to crash. [RT #16984]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2203. [security] Query id generation was cryptographically weak.
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2202. [security] The default acls for allow-query-cache and
e411a986b94276c28e6a971f9c3b61d45c635456James Brister allow-recursion were not being applied. [RT #16960]
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews2201. [bug] The build failed in a separate object directory.
76a33ffee5be9a1001c27c103e6d98983443cbfdAndreas Gustafsson2200. [bug] The search for cached NSEC records was stopping to
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson early leading to excessive DLV queries. [RT #16930]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2199. [bug] win32: don't call WSAStartup() while loading dlls.
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence2198. [bug] win32: RegCloseKey() could be called when
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence RegOpenKeyEx() failed. [RT #16911]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2197. [bug] Add INSIST to catch negative responses which are
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson not setting the event result code appropriately.
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson2196. [port] win32: yield processor while waiting for once to
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson to complete. [RT #16958]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2195. [func] dnssec-keygen now defaults to nametype "ZONE"
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister when generating DNSKEYs. [RT #16954]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2194. [bug] Close journal before calling 'done' in xfrin.c.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister --- 9.5.0a5 released ---
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2193. [port] win32: BINDInstall.exe is now linked statically.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2192. [port] win32: use vcredist_x86.exe to install Visual
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Studio's redistributable dlls if building with
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence Visual Stdio 2005 or later.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2191. [func] named-checkzone now allows dumping to stdout (-).
36357e4304862fb47e9fae03c704cb6720310c45James Brister named-checkconf now has -h for help.
36357e4304862fb47e9fae03c704cb6720310c45James Brister named-checkzone now has -h for help.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence rndc now has -h for help.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Better handling of '-?' for usage summaries.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2190. [func] Make fallback to plain DNS from EDNS due to timeouts
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence more visible. New logging category "edns-disabled".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2189. [bug] Handle socket() returning EINTR. [RT #15949]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2188. [contrib] queryperf: autoconf changes to make the search for
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence libresolv or libbind more robust. [RT #16299]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2187. [bug] query_addds(), query_addwildcardproof() and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence query_addnxrrsetnsec() should take a version
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence argument. [RT #16368]
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson2186. [port] cygwin: libbind: check for struct sockaddr_storage
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence independently of IPv6. [RT #16482]
b99d080717fdd741961d736581270d37bad8bec0David Lawrence2185. [port] sunos: libbind: check for ssize_t, memmove() and
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson memchr(). [RT #16463]
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson2184. [bug] bind9.xsl.h didn't build out of the source tree.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2183. [bug] dnssec-signzone didn't handle offline private keys
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence well. [RT #16832]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence could return ISC_R_SUCCESS when they ran out of
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence memory. [RT #16365]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2180. [cleanup] Remove bit test from 'compress_test' as they
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence are no longer needed. [RT #16497]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2179. [func] 'rndc command zone' will now find 'zone' if it is
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence unique to all the views. [RT #16821]
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence2178. [bug] 'rndc reload' of a slave or stub zone resulted in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a reference leak. [RT #16867]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2177. [bug] Array bounds overrun on read (rcodetext) at
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence debug level 10+. [RT #16798]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2176. [contrib] dbus update to handle race condition during
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence initialization (Bugzilla 235809). [RT #16842]
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence2175. [bug] win32: windows broadcast condition variable support
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was broken. [RT #16592]
eefea43215016bce437ab4a7441b2851fd182960David Lawrence2174. [bug] I/O errors should always be fatal when reading
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence master files. [RT #16825]
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence2173. [port] win32: When compiling with MSVS 2005 SP1 we also
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence --- 9.5.0a4 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2172. [bug] query_addsoa() was being called with a non zone db.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2171. [bug] Handle breaks in DNSSEC trust chains where the parent
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence servers are not DS aware (DS queries to the parent
dc91d010dbd848ab3a11815e5a3d109662a38b0cDavid Lawrence return a referral to the child).
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2170. [func] Add acache processing to test suite. [RT #16711]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2169. [bug] host, nslookup: when reporting NXDOMAIN report the
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley given name and not the last name searched for.
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence2168. [bug] nsupdate: in non-interactive mode treat syntax errors
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence as fatal errors. [RT #16785]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2167. [bug] When re-using a automatic zone named failed to
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence attach it to the new view. [RT #16786]
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington --- 9.5.0a3 released ---
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington2166. [bug] When running in batch mode, dig could misinterpret
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a server address as a name to be looked up, causing
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence unexpected output. [RT #16743]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2165. [func] Allow the destination address of a query to determine
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence if we will answer the query or recurse.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence allow-query-on, allow-recursion-on and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence allow-query-cache-on. [RT #16291]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2164. [bug] The code to determine how named-checkzone /
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence named-compilezone was called failed under windows.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2163. [bug] If only one of query-source and query-source-v6
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence specified a port the query pools code broke (change
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews 2129). [RT #16768]
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews2162. [func] Allow "rrset-order fixed" to be disabled at compile
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff time. [RT #16665]
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2161. [bug] Fix which log messages are emitted for 'rndc flush'.
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence from getifaddrs(). [RT #16708]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence --- 9.5.0a2 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2159. [bug] Array bounds overrun in acache processing. [RT #16710]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2158. [bug] ns_client_isself() failed to initialize key
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence leading to a REQUIRE failure. [RT #16688]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2157. [func] dns_db_transfernode() created. [RT #16685]
2cc1d2536d5834fbe20281068b8bd34dd1ee5337David Lawrence2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer resolver.c:validated() and resolver.c:cache_name().
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer Fix a memory leak in rbtdb.c:free_noqname().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Make lookup.c:lookup_find() robust against
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence event leaks. [RT #16685]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence matched in acls by omitting the scope. [RT #16599]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2153. [bug] nsupdate could leak memory. [RT #16691]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2152. [cleanup] Use sizeof(buf) instead of fixed number in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dighost.c:get_trusted_key(). [RT #16678]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2151. [bug] Missing newline in usage message for journalprint.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2150. [bug] 'rrset-order cyclic' uniformly distribute the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence starting point for the first response for a given
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence RRset. [RT #16655]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2149. [bug] isc_mem_checkdestroyed() failed to abort on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence if there were still active memory contexts.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2148. [func] Add positive logging for rndc commands. [RT #14623]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2147. [bug] libbind: remove potential buffer overflow from
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence SO_BSDCOMPAT" message. [RT #16641]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2145. [bug] Check DS/DLV digest lengths for known digests.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2143. [bug] We failed to restart the IPv6 client when the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence kernel failed to return the destination the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence packet was sent to. [RT #16613]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2142. [bug] Handle master files with a modification time that
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence matches the epoch. [RT# 16612]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence equivalent of LDH checks). [RT #16609]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2140. [bug] libbind: missing unlock on pthread_key_create()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failures. [RT #16654]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2139. [bug] dns_view_find() was being called with wrong type
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in adb.c. [RT #16670]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2138. [bug] Lock order reversal in resolver.c. [RT #16653]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2137. [port] Mips little endian and/or mips 64 bit are now
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence supported for atomic operations. [RT#16648]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2136. [bug] nslookup/host looped if there was no search list
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and the host didn't exist. [RT #16657]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2134. [func] Additional statistics support. [RT #16666]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2133. [port] powerpc: Support both IBM and MacOS Power PC
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence assembler syntaxes. [RT #16647]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2132. [bug] Missing unlock on out of memory in
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson dns_dispatchmgr_setudp().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence2130. [func] Log if CD or DO were set. [RT #16640]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2129. [func] Provide a pool of UDP sockets for queries to be
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence made over. See use-queryport-pool, queryport-pool-ports
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence and queryport-pool-updateinterval. [RT #16415]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2126. [security] Serialize validation of type ANY responses. [RT #16555]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence was defined. [RT #16574]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2124. [security] It was possible to dereference a freed fetch
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence context. [RT #16584]
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson --- 9.5.0a1 released ---
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson2123. [func] Use Doxygen to generate internal documentation.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2122. [func] Experimental http server and statistics support
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for named via xml.
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence second timeout. [RT #16553]
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence2120. [doc] Fix markup on nsupdate man page. [RT #16556]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2119. [compat] libbind: allow res_init() to succeed enough to
5b27fa26dd1288f61de9ace6f4ec56be63858048David Lawrence return the default domain even if it was unable
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to allocate memory.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2118. [bug] Handle response with long chains of domain name
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley compression pointers which point to other compression
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley pointers. [RT #16427]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley which could lead to validation failures. named didn't
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley handle negative DS responses that were in the process
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley of being validated. Check CNAME bit before accepting
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley NODATA proof. To be able to ignore a child NSEC there
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley must be SOA (and NS) set in the bitmap. [RT #16399]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2116. [bug] 'rndc reload' could cause the cache to continually
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence be cleaned. [RT #16401]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2115. [bug] 'rndc reconfig' could trigger a INSIST if the
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence number of masters for a zone was reduced. [RT #16444]
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence2114. [bug] dig/host/nslookup: searches for names with multiple
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence labels were failing. [RT #16447]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2113. [bug] nsupdate: if a zone is specified it should be used
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for server discover. [RT# 16455]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2112. [security] Warn if weak RSA exponent is used. [RT #16460]
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence2111. [bug] Fix a number of errors reported by Coverity.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence priming queries. [RT #16491]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
77f372eed39827f5efef476602de7c0505f99b91David Lawrence2108. [func] DHCID support. [RT #16456]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2106. [func] 'rndc status' now reports named's version. [RT #16426]
8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence2105. [func] GSS-TSIG support (RFC 3645).
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2104. [port] Fix Solaris SMF error message.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2103. [port] Add /usr/sfw to list of locations for OpenSSL
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence under Solaris.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2102. [port] Silence Solaris 10 warnings.
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence2101. [bug] OpenSSL version checks were not quite right.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2100. [port] win32: copy libeay32.dll to Build\Debug.
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson Copy Debug\named-checkzone to Debug\named-compilezone.
e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington2099. [port] win32: more manifest issues.
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff2098. [bug] Race in rbtdb.c:no_references(), which occasionally
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff triggered an INSIST failure about the node lock
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff reference. [RT #16411]
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington2097. [bug] named could reference a destroyed memory context
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington after being reloaded / reconfigured. [RT #16428]
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson2096. [bug] libbind: handle applications that fail to detect
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson res_init() failures better.
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
d111a46c88adda33a93839f4934e127b6147d87dBob Halley net_cidr_ntop_ipv6(). [RT #16388]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2094. [contrib] Update named-bootconf. [RT# 16404]
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence2093. [bug] named-checkzone -s was broken.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2092. [bug] win32: dig, host, nslookup. Use registry config
2d0c5f1eada2015324cb89c11c7c5c11cccb493fAndreas Gustafsson if resolv.conf does not exist or no nameservers
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff listed. [RT #15877]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff2091. [port] dighost.c: race condition on cleanup. [RT #16417]
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff2090. [port] win32: Visual C++ 2005 command line manifest support.
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley2089. [security] Raise the minimum safe OpenSSL versions to
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley prior to these have known security flaws which
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence are (potentially) exploitable in named. [RT #16391]
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2088. [security] Change the default RSA exponent from 3 to 65537.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2086. [port] libbind: FreeBSD now has get*by*_r() functions.
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2085. [doc] win32: added index.html and README to zip. [RT #16201]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2084. [contrib] dbus update for 9.3.3rc2.
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2083. [port] win32: Visual C++ 2005 support.
4716e94840921878b26e493576f84afe4fe08752Mark Andrews2082. [doc] Document 'cache-file' as a test only option.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2080. [port] libbind: res_init.c did not compile on older versions
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of Solaris. [RT #16363]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley2079. [bug] The lame cache was not handling multiple types
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley correctly. [RT #16361]
3886e748a4086b813e3453232a742903762fedadBob Halley2078. [bug] dnssec-checkzone output style "default" was badly
3886e748a4086b813e3453232a742903762fedadBob Halley named. It is now called "relative". [RT #16326]
3886e748a4086b813e3453232a742903762fedadBob Halley2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
3886e748a4086b813e3453232a742903762fedadBob Halley complete signed zone. [RT #16326]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2076. [bug] Several files were missing #include <config.h>
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley causing build failures on OSF. [RT #16341]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2075. [bug] The spillat timer event hander could leak memory.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington dns_request_createraw2() and dns_request_createraw3()
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington failed to send multiple UDP requests. [RT #16349]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2073. [bug] Incorrect semantics check for update policy "wildcard".
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson2072. [bug] We were not generating valid HMAC SHA digests.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2071. [port] Test whether gcc accepts -fno-strict-aliasing.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2070. [bug] The remote address was not always displayed when
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson reporting dispatch failures. [RT #16315]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson2069. [bug] Cross compiling was not working. [RT #16330]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson2068. [cleanup] Lower incremental tuning message to debug 1.
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington2067. [bug] 'rndc' could close the socket too early triggering
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence a INSIST under Windows. [RT #16317]
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson2066. [security] Handle SIG queries gracefully. [RT #16300]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2065. [bug] libbind: probe for HPUX prototypes for
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff endprotoent_r() and endservent_r(). [RT 16313]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence2063. [bug] Change #1955 introduced a bug which caused the first
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'rndc flush' call to not free memory. [RT #16244]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2062. [bug] 'dig +nssearch' was reusing a buffer before it had
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence been returned by the socket code. [RT #16307]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2061. [bug] Accept expired wildcard message reversed. [RT #16296]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2060. [bug] Enabling DLZ support could leave views partially
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence configured. [RT #16295]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2059. [bug] Search into cache rbtdb could trigger an INSIST
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister failure while cleaning up a stale rdataset.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2058. [bug] Adjust how we calculate rtt estimates in the presence
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister of authoritative servers that drop EDNS and/or CD
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister requests. Also fallback to EDNS/512 and plain DNS
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister faster for zones with less than 3 servers. [RT #16187]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2057. [bug] Make setting "ra" dependent on both allow-query-cache
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister and allow-recursion. [RT #16290]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2056. [bug] dig: ixfr= was not being treated case insensitively
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister at all times. [RT #15955]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2055. [bug] Missing goto after dropping multicast query.
7b2db4b8d13e3d8bc81419ffcc8b39de8193ef63David Lawrence2054. [port] freebsd: do not explicitly link against -lpthread.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2052. [bug] 'rndc' improve connect failed message to report
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson the failing address. [RT #15978]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2051. [port] More strtol() fixes. [RT #16249]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2050. [bug] Parsing of NSAP records was not case insensitive.
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington2049. [bug] Restore SOA before AXFR when falling back from
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington a attempted IXFR when transferring in a zone.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Allow a initial SOA query before attempting
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a AXFR to be requested. [RT #16156]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2048. [bug] It was possible to loop forever when using
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence avoid-v4-udp-ports / avoid-v6-udp-ports when
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence the OS always returned the same local port.
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2047. [bug] Failed to initialize the interface flags to zero.
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley cleanup [RT #16247].
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2045. [func] Use lock buckets for acache entries to limit memory
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence consumption. [RT #16183]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2044. [port] Add support for atomic operations for Itanium.
be768c2e952c34438025999125f984995a2c675fBob Halley2043. [port] nsupdate/nslookup: Force the flushing of the prompt
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for interactive sessions. [RT#16148]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2042. [bug] named-checkconf was incorrectly rejecting the
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley logging category "config". [RT #16117]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
be768c2e952c34438025999125f984995a2c675fBob Halley set of libraries to be linked. [RT #16129]
be768c2e952c34438025999125f984995a2c675fBob Halley2040. [bug] rbtdb no_references() could trigger an INSIST
f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister failure with --enable-atomic. [RT #16022]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2039. [func] Check that all buffers passed to the socket code
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley have been retrieved when the socket event is freed.
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence2038. [bug] dig/nslookup/host was unlinking from wrong list
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley when handling errors. [RT #16122]
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley2037. [func] When unlinking the first or last element in a list
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence check that the list head points to the element to
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister be unlinked. [RT #15959]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2036. [bug] 'rndc recursing' could cause trigger a REQUIRE.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2035. [func] Make falling back to TCP on UDP refresh failure
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister optional. Default "try-tcp-refresh yes;" for BIND 8
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence compatibility. [RT #16123]
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2034. [bug] gcc: set -fno-strict-aliasing. [RT #16124]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2033. [bug] We weren't creating multiple client memory contexts
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister on demand as expected. [RT #16095]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2032. [bug] Remove a INSIST in query_addadditional2(). [RT #16074]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2031. [bug] Emit a error message when "rndc refresh" is called on
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley a non slave/stub zone. [RT # 16073]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2030. [bug] We were being overly conservative when disabling
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley openssl engine support. [RT #16030]
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington2029. [bug] host printed out the server multiple times when
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington specified on the command line. [RT #15992]
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington2028. [port] linux: socket.c compatibility for old systems.
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2027. [port] libbind: Solaris x86 support. [RT #16020]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2026. [bug] Rate limit the two recursive client exceeded messages.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2025. [func] Update "zone serial unchanged" message. [RT #16026]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2024. [bug] named emitted spurious "zone serial unchanged"
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence messages on reload. [RT #16027]
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which