CHANGES revision e69790ac0067c0034f57e070d513833550786a93
5d92fff82718cd018f0b61a10b9ad4d2b8064c95rpluem3774. [func] When using "request-nsid", log the NSID value in
bf52162f2d05c1fb1a107c7ef108de73f739b3edpquerna printable form as well as hex. [RT #20864]
8f066564bfc0fd6ddc6ca4b2f2410615554597d1jim3773. [func] "host", "nslookup" and "nsupdate" now have
3e2582713ed6883683272fbc628a27419d0ed543minfrin options to print the version number and exit.
3e2582713ed6883683272fbc628a27419d0ed543minfrin [RT #26057]
3e2582713ed6883683272fbc628a27419d0ed543minfrin3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
2c132b1e3610da2fb9e6b3594a313efa3ff29e22minfrin (Based in part on a contribution from Tim Tessier.)
2c132b1e3610da2fb9e6b3594a313efa3ff29e22minfrin [RT #20822]
a46801e6532423aa7bd184471eb49158d7c9ae62sf3771. [cleanup] Adjusted log level for "using built-in key"
a46801e6532423aa7bd184471eb49158d7c9ae62sf messages. [RT #24383]
808a26d70f28498b9d7252a70d9fb23def781901minfrin3770. [bug] "dig +trace" could fail with an assertion when it
808a26d70f28498b9d7252a70d9fb23def781901minfrin needed to fall back to TCP due to a truncated
ef12246b88300687bf1faaf56d115dd8d8d82761jorton response. [RT #24660]
6f9bf764bc79571d1da19dfbbd78527fca278a8eminfrin3769. [doc] Improved documentation of "rndc signing -list".
6f9bf764bc79571d1da19dfbbd78527fca278a8eminfrin [RT #30652]
7d59a9f282af9dce031b61062a0d941641101237rpluem3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
7d59a9f282af9dce031b61062a0d941641101237rpluem algorithm. [RT #34000]
e63e8b4b886d2144fed7946d0fbe8d27386be2dcjorton3767. [func] Log explicitly when using rndc.key to configure
e63e8b4b886d2144fed7946d0fbe8d27386be2dcjorton command channel. [RT #35316]
223c64b836fbc2bc8611da9604379dfe13f56abasf3766. [cleanup] Fixed problems with building outside the source
223c64b836fbc2bc8611da9604379dfe13f56abasf tree when using native PKCS#11. [RT #35459]
bf507cc1e6ad55303c3d436c6ca153f46c788be6sf3765. [bug] Fixed a bug in "rndc secroots" that could crash
bf507cc1e6ad55303c3d436c6ca153f46c788be6sf named when dumping an empty keynode. [RT #35469]
bf507cc1e6ad55303c3d436c6ca153f46c788be6sf3764. [bug] The dnssec-keygen/settime -S and -i options
93cf7fc650197b941ae31a7c7e51e901b129e954igalic (to set up a successor key and set the prepublication
93cf7fc650197b941ae31a7c7e51e901b129e954igalic interval) were missing from dnssec-keyfromlabel.
93cf7fc650197b941ae31a7c7e51e901b129e954igalic [RT #35394]
a1b1c78faf7969affb320f5c8eb270ffa21314c4rjung3763. [bug] delve: Cache DNSSEC records to avoid the need to
a1b1c78faf7969affb320f5c8eb270ffa21314c4rjung re-fetch them when restarting validation. [RT #35476]
a2558ec3af4391b7da7fe61e1e53383bbd0174b9jorton3762. [bug] Address build problems with --pkcs11-native +
a2558ec3af4391b7da7fe61e1e53383bbd0174b9jorton --with-openssl with ECDSA support. [RT #35467]
8d6b3720340d0bd7f8d25e2a8563527e97a48df8jorton3761. [bug] Address dangling reference bug in dns_keytable_add.
8d6b3720340d0bd7f8d25e2a8563527e97a48df8jorton [RT #35471]
8d6b3720340d0bd7f8d25e2a8563527e97a48df8jorton3760. [bug] Improve SIT with native PKCS#11 and on Windows.
48e4b65042d94992c50f1db6c0b0cdbd99ca77e8sf [RT #35433]
48e4b65042d94992c50f1db6c0b0cdbd99ca77e8sf3759. [port] Enable delve on Windows. [RT #35441]
48e4b65042d94992c50f1db6c0b0cdbd99ca77e8sf3758. [port] Enable export library APIs on windows. [RT #35382]
47ae8ca3c79d279b2e5424d6b8cf5e4e61ea968fjim3757. [port] Enable Python tools (dnssec-coverage,
47ae8ca3c79d279b2e5424d6b8cf5e4e61ea968fjim dnssec-checkds) to run on Windows. [RT #34355]
47ae8ca3c79d279b2e5424d6b8cf5e4e61ea968fjim3756. [bug] GSSAPI Kerberos realm checking was broken in
47ae8ca3c79d279b2e5424d6b8cf5e4e61ea968fjim check_config leading to spurious messages being
397df70abe0bdd78a84fb6c38c02641bcfeadceasf logged. [RT #35443]
397df70abe0bdd78a84fb6c38c02641bcfeadceasf --- 9.10.0b1 released ---
9b5fe1d4ec48643fb819bbce9dc80f93f444fb48sf3755. [func] Add stats counters for known EDNS options + others.
9b5fe1d4ec48643fb819bbce9dc80f93f444fb48sf [RT #35447]
dd9f60fdfeb73f829fe0b260b7975b4b22be0838sf3754. [cleanup] win32: Installer now places files in the
dd9f60fdfeb73f829fe0b260b7975b4b22be0838sf Program Files area rather than system services.
135e1d6a301398168e3b2e5125508828591e1673niq [RT #35361]
135e1d6a301398168e3b2e5125508828591e1673niq3753. [bug] allow-notify was ignoring keys. [RT #35425]
135e1d6a301398168e3b2e5125508828591e1673niq3752. [bug] Address potential REQUIRE failure if
135e1d6a301398168e3b2e5125508828591e1673niq DNS_STYLEFLAG_COMMENTDATA is set when printing out
135e1d6a301398168e3b2e5125508828591e1673niq a rdataset.
c7de70e936ac1e36c25676fe62e65dbacb947619minfrin3751. [tuning] The default setting for the -U option (setting
c7de70e936ac1e36c25676fe62e65dbacb947619minfrin the number of UDP listeners per interface) has
c7de70e936ac1e36c25676fe62e65dbacb947619minfrin been adjusted to improve performance. [RT #35417]
c7de70e936ac1e36c25676fe62e65dbacb947619minfrin3750. [experimental] Partially implement EDNS EXPIRE option as described
c7de70e936ac1e36c25676fe62e65dbacb947619minfrin in draft-andrews-dnsext-expire-00. Retrieval of
1b1621900bd89ddc496d721c865a726f635ebd7esf the remaining time until expiry for slave zones
1b1621900bd89ddc496d721c865a726f635ebd7esf is supported.
1b1621900bd89ddc496d721c865a726f635ebd7esf EXPIRE uses an experimental option code (65002),
1b1621900bd89ddc496d721c865a726f635ebd7esf which is subject to change. [RT #35416]
4203a35c28d7c60adb7e9ef3be87aad34951c79asf3749. [func] "dig +subnet" sends an EDNS client subnet option
4203a35c28d7c60adb7e9ef3be87aad34951c79asf containing the specified address/prefix when
c094add0a23fe1120fd33711ba2e2d084f5629a1sf querying. (Thanks to Wilmer van der Gaast.)
c094add0a23fe1120fd33711ba2e2d084f5629a1sf [RT #35415]
12b26f433fd7d6fc9f76413d7c2cabf4fa5cb300sf3748. [test] Use delve to test dns_client interfaces. [RT #35383]
12b26f433fd7d6fc9f76413d7c2cabf4fa5cb300sf3747. [bug] A race condition could lead to a core dump when
26f56d4a3c12077d605362e97490e34522fa4814covener destroying a resolver fetch object. [RT #35385]
26f56d4a3c12077d605362e97490e34522fa4814covener3746. [func] New "max-zone-ttl" option enforces maximum
2cef7e294acb5d8b8b5dcb21a55438da0b73f63figalic TTLs for zones. If loading a zone containing a
2cef7e294acb5d8b8b5dcb21a55438da0b73f63figalic higher TTL, the load fails. DDNS updates with
2cef7e294acb5d8b8b5dcb21a55438da0b73f63figalic higher TTLs are accepted but the TTL is truncated.
2d2de64c25c1519122a76150a7daf2c05f53fd9asf (Note: Currently supported for master zones only;
2d2de64c25c1519122a76150a7daf2c05f53fd9asf inline-signing slaves will be added.) [RT #38405]
2d2de64c25c1519122a76150a7daf2c05f53fd9asf3745. [func] "configure --with-tuning=large" adjusts various
27c5ebb7d411a214f5b6b55a881086ce086d3dd3covener compiled-in constants and default settings to
27c5ebb7d411a214f5b6b55a881086ce086d3dd3covener values suited to large servers with abundant
27c5ebb7d411a214f5b6b55a881086ce086d3dd3covener memory. [RT #29538]
7697b1b7376a532163c621e050b70c90dcb15d66covener3744. [experimental] SIT: send and process Source Identity Tokens
7697b1b7376a532163c621e050b70c90dcb15d66covener (similar to DNS Cookies by Donald Eastlake 3rd),
7697b1b7376a532163c621e050b70c90dcb15d66covener which are designed to help clients detect off-path
7697b1b7376a532163c621e050b70c90dcb15d66covener spoofed responses and for servers to identify
7697b1b7376a532163c621e050b70c90dcb15d66covener legitimate clients.
9e0536cd66a389bdaa758a825b8bbd8fea665a3eigalic SIT uses an experimental EDNS option code (65001),
9e0536cd66a389bdaa758a825b8bbd8fea665a3eigalic which will be changed to an IANA-assigned value
862bbb262644e8aefae1bf352552b01908ecae0eminfrin if the experiment is deemed a success.
862bbb262644e8aefae1bf352552b01908ecae0eminfrin SIT can be enabled via "configure --enable-sit" (or
dd3b88790af9d18429c732ca7bc83ec4ef43d3ffrpluem --enable-developer). It is enabled by default in
5bbabc874e3fcfbea08c199f7a79ee05b4817a70sf Servers can be configured to send smaller responses
5bbabc874e3fcfbea08c199f7a79ee05b4817a70sf to clients that have not identified themselves via
5bbabc874e3fcfbea08c199f7a79ee05b4817a70sf SIT. RRL processing has also been updated;
8f066564bfc0fd6ddc6ca4b2f2410615554597d1jim legitimate clients are not subject to rate
aec9747aa70c1dce98e536e8eef5a6a0ab0f1d6cjim limiting. [RT #35389]
7b7e8ba34e262064914ceedacd5f7d9201b6575ccovener3743. [bug] delegation-only flag wasn't working in forward zone
7b7e8ba34e262064914ceedacd5f7d9201b6575ccovener declarations despite being documented. This is
7b7e8ba34e262064914ceedacd5f7d9201b6575ccovener needed to support turning off forwarding and turning
220bc4233b21982d7c51842a1774db0ba6172ca4covener on delegation only at the same name. [RT #35392]
220bc4233b21982d7c51842a1774db0ba6172ca4covener3742. [port] linux: libcap support: declare curval at start of
220bc4233b21982d7c51842a1774db0ba6172ca4covener block. [RT #35387]
6f2fbf354b34981f398cf0313aa44702ea2a7066covener3741. [func] "delve" (domain entity lookup and validation engine):
6f2fbf354b34981f398cf0313aa44702ea2a7066covener A new tool with dig-like semantics for performing DNS
6f2fbf354b34981f398cf0313aa44702ea2a7066covener lookups, with internal DNSSEC validation, using the
9e7c7a8fa19c33d1e90f8f7ffab69beacbe72566covener same resolver and validator logic as named. This
9e7c7a8fa19c33d1e90f8f7ffab69beacbe72566covener allows easy validation of DNSSEC data in environments
9e7c7a8fa19c33d1e90f8f7ffab69beacbe72566covener with untrustworthy resolvers, and assists with
9e7c7a8fa19c33d1e90f8f7ffab69beacbe72566covener troubleshooting of DNSSEC problems. [RT #32406]
a961006b347d6527ccaeab9cf019a4e68d26bfb0covener3740. [contrib] Minor fixes to configure --with-dlz-bdb,
a961006b347d6527ccaeab9cf019a4e68d26bfb0covener --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
e3f43882b4f7ac7d1aa679be4b319cca04fd22eecovener3739. [func] Added per-zone stats counters to track TCP and
e3f43882b4f7ac7d1aa679be4b319cca04fd22eecovener UDP queries. [RT #35375]
8dea7832dea3789fe0b90c434c284bcaad96d40fcovener3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
999661242470e4dc0258982d5f183efc2d157ae7covener3737. [bug] 'rndc retransfer' could trigger a assertion failure
0bfcc4d046f6735af2f15981fb53e4c0680b4731covener with inline zones. [RT #35353]
b761a57b4e63006c287823270876ab40d3212160covener3736. [bug] nsupdate: When specifying a server by name,
b761a57b4e63006c287823270876ab40d3212160covener fall back to alternate addresses if the first
b761a57b4e63006c287823270876ab40d3212160covener address for that name is not reachable. [RT #25784]
5d92fff82718cd018f0b61a10b9ad4d2b8064c95rpluem3735. [cleanup] Merged the libiscpk11 library into libisc
5d92fff82718cd018f0b61a10b9ad4d2b8064c95rpluem to simplify dependencies. [RT #35205]
01195d035ccef88e72009e9607157d5eddcb6b7drjung3734. [bug] Improve building with libtool. [RT #35314]
aec9747aa70c1dce98e536e8eef5a6a0ab0f1d6cjim3733. [func] Improve interface scanning support. Interface
84fbf855118f318dd5e511d8e5b902cecc1177c0jim information will be automatically updated if the
84fbf855118f318dd5e511d8e5b902cecc1177c0jim OS supports routing sockets (MacOS, *BSD, Linux).
0ed19acadd3d3dd593759173d87d2243e97914e2sf Use "automatic-interface-scan no;" to disable.
0ed19acadd3d3dd593759173d87d2243e97914e2sf Add "rndc scan" to trigger a scan. [RT #23027]
041b426f9b15072b59a32f132e6d04173ab3df68covener3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
041b426f9b15072b59a32f132e6d04173ab3df68covener driver to dump core on 64-bit systems. [RT #35324]
cb838cc4d5fd559efd6c0579a0fcb8f6e5a7af22minfrin3731. [func] Added a "no-case-compress" ACL, which causes
cb838cc4d5fd559efd6c0579a0fcb8f6e5a7af22minfrin named to use case-insensitive compression
cb838cc4d5fd559efd6c0579a0fcb8f6e5a7af22minfrin (disabling change #3645) for specified
cb838cc4d5fd559efd6c0579a0fcb8f6e5a7af22minfrin clients. (This is useful when dealing
15ff8c621815e8337abc10638f2b2853ee6fd076minfrin with broken client implementations that
15ff8c621815e8337abc10638f2b2853ee6fd076minfrin use case-sensitive name comparisons,
15ff8c621815e8337abc10638f2b2853ee6fd076minfrin rejecting responses that fail to match the
21ccb6cd9272c9066a8f5bb3e7785f46115289desf capitalization of the query that was sent.)
21ccb6cd9272c9066a8f5bb3e7785f46115289desf [RT #35300]
b0ac1e83f8582a9b5a72bff798ffb31a419c8adesf3730. [cleanup] Added "never" as a synonym for "none" when
b0ac1e83f8582a9b5a72bff798ffb31a419c8adesf configuring key event dates in the dnssec tools.
b0ac1e83f8582a9b5a72bff798ffb31a419c8adesf [RT #35277]
b682e60dd82772dba52ba77138e494f15c00a551trawick3729. [bug] dnssec-keygen could set the publication date
b682e60dd82772dba52ba77138e494f15c00a551trawick incorrectly when only the activation date was
b682e60dd82772dba52ba77138e494f15c00a551trawick specified on the command line. [RT #35278]
b682e60dd82772dba52ba77138e494f15c00a551trawick3728. [doc] Expanded native-PKCS#11 documentation,
79c754eb51681c3389cd966753e902c429f78939trawick specifically pkcs11: URI labels. [RT #35287]
79c754eb51681c3389cd966753e902c429f78939trawick3727. [func] The isc_bitstring API is no longer used and
8651de219ec5f595af20afdc9da41ce72aaa50d5minfrin has been removed from libisc. [RT #35284]
8651de219ec5f595af20afdc9da41ce72aaa50d5minfrin3726. [cleanup] Clarified the error message when attempting
8651de219ec5f595af20afdc9da41ce72aaa50d5minfrin to configure more than 32 response-policy zones.
8fae12696bce44be9ce4c56888690cad8ac7b8f9sf [RT #35283]
8fae12696bce44be9ce4c56888690cad8ac7b8f9sf3725. [contrib] Updated zkt and nslint to newest versions,
8fae12696bce44be9ce4c56888690cad8ac7b8f9sf cleaned up and rearranged the contrib
8fae12696bce44be9ce4c56888690cad8ac7b8f9sf directory, and added a README.
d5612bd28e194390b2c74fcf712d564b0e002684sf --- 9.10.0a2 released ---
d5612bd28e194390b2c74fcf712d564b0e002684sf3724. [bug] win32: Fixed a bug that prevented dig and
4ea161d94782fa56f4b36d496f35ff8577c43065covener host from exiting properly after completing
4ea161d94782fa56f4b36d496f35ff8577c43065covener a UDP query. [RT #35288]
b588214d6e6fe09abe709e83e894921fbc7e25c8covener3723. [cleanup] Imported keys are now handled the same way
b588214d6e6fe09abe709e83e894921fbc7e25c8covener regardless of DNSSEC algorithm. [RT #35215]
c64fc4e9830bb1ffdc3491aef5ed3be5b90c466bcovener3722. [bug] Using geoip ACLs in a blackhole statement
c64fc4e9830bb1ffdc3491aef5ed3be5b90c466bcovener could cause a segfault. [RT #35272]
c64fc4e9830bb1ffdc3491aef5ed3be5b90c466bcovener3721. [doc] Improved documentation of the EDNS processing
ae5efbbf49a7ca6d233209a4d011550989e22556covener enhancements introduced in change #3593. [RT #35275]
ae5efbbf49a7ca6d233209a4d011550989e22556covener3720. [bug] Address compiler warnings. [RT #35261]
8c2bb916633b1eb3dccf91c776363bbc3a6145decovener3719. [bug] Address memory leak in in peer.c. [RT #35255]
8c2bb916633b1eb3dccf91c776363bbc3a6145decovener3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
503bec4c591d28ac6cec7182294cdef2ec6a9829covener3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
503bec4c591d28ac6cec7182294cdef2ec6a9829covener probing to see if it is possible to set dscp values
503bec4c591d28ac6cec7182294cdef2ec6a9829covener on a per packet basis. [RT #35252]
c00149c3cb27e0381362d07ccf2143574b4f600dsf3716. [bug] The dns_request code was setting dcsp values when not
c00149c3cb27e0381362d07ccf2143574b4f600dsf requested. [RT #35252]
766b0a4793197ccef3dfa202d1fee1e1f929ffa7sf3715. [bug] The region and city databases could fail to
766b0a4793197ccef3dfa202d1fee1e1f929ffa7sf initialize when using some versions of libGeoIP,
97b692bfc8673c8858f03498f81a993ac0c04c01sf causing assertion failures when named was
97b692bfc8673c8858f03498f81a993ac0c04c01sf configured to use them. [RT #35427]
5e6cf205d2b0c848e15c65dab9711805395a5108minfrin3714. [test] System tests that need to test for cryptography
5e6cf205d2b0c848e15c65dab9711805395a5108minfrin support before running can now use a common
5e6cf205d2b0c848e15c65dab9711805395a5108minfrin "testcrypto.sh" script to do so. [RT #35213]
df419be6d7d4b68823efa05722375552af49c2b6minfrin3713. [bug] Save memory by not storing "also-notify" addresses
df419be6d7d4b68823efa05722375552af49c2b6minfrin in zone objects that are configured not to send
df419be6d7d4b68823efa05722375552af49c2b6minfrin notify requests. [RT #35195]
c03e31374e50a227cb554a0f1d4a9056ce80d99asf3712. [placeholder]
c03e31374e50a227cb554a0f1d4a9056ce80d99asf3711. [placeholder]
40b22d3b20454959fe51fdc89907908d77701078minfrin3710. [bug] Address double dns_zone_detach when switching to
40b22d3b20454959fe51fdc89907908d77701078minfrin using automatic empty zones from regular zones.
b4a00883f358625923365ca1560c96edec172a52sf [RT #35177]
b4a00883f358625923365ca1560c96edec172a52sf3709. [port] Use built-in versions of strptime() and timegm()
b4a00883f358625923365ca1560c96edec172a52sf on all platforms to avoid portability issues.
0553e62d75ef12d9a6646bb874be1fbf9e4c1dfbsf [RT #35183]
0553e62d75ef12d9a6646bb874be1fbf9e4c1dfbsf3708. [bug] Address a portentry locking issue in dispatch.c.
87af9ffc3a42633fe12e11a0ff77bc099ecdca82sf [RT #35128]
f58bb3da705eb7ec926f4883597fc2eb1336a360minfrin3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
f58bb3da705eb7ec926f4883597fc2eb1336a360minfrin on a missing resolv.conf file and initializes the
f58bb3da705eb7ec926f4883597fc2eb1336a360minfrin structure as if it had been configured with:
be192cefa381d5bae6868034687471754cb43175sf nameserver ::1
be192cefa381d5bae6868034687471754cb43175sf nameserver 127.0.0.1
be192cefa381d5bae6868034687471754cb43175sf Note: Callers will need to be updated to treat
f4a0825e91eec135b5e41c697439e9a13014fa2cminfrin ISC_R_FILENOTFOUND as a qualified success or else
f4a0825e91eec135b5e41c697439e9a13014fa2cminfrin they will leak memory. The following code fragment
f4a0825e91eec135b5e41c697439e9a13014fa2cminfrin will work with both old and new versions without
f4a0825e91eec135b5e41c697439e9a13014fa2cminfrin changing the behaviour of the existing code.
5876f43a746f688a32b7201bced8591ddf19bd43minfrin resconf = NULL;
5876f43a746f688a32b7201bced8591ddf19bd43minfrin result = irs_resconf_load(mctx, "/etc/resolv.conf",
bbba414c5bbf770e505778265bbe7a4a0e4fbdaaniq if (result != ISC_SUCCESS) {
bbba414c5bbf770e505778265bbe7a4a0e4fbdaaniq if (resconf != NULL)
bbba414c5bbf770e505778265bbe7a4a0e4fbdaaniq irs_resconf_destroy(&resconf);
4aef34911af88f96c5b6d9b71a550a5a97bbc0b6minfrin [RT #35194]
4cefc38158672f5de8119886d9754cf0609a9371minfrin3706. [contrib] queryperf: Fixed a possible integer overflow when
4cefc38158672f5de8119886d9754cf0609a9371minfrin printing results. [RT #35182]
4cefc38158672f5de8119886d9754cf0609a9371minfrin3705. [func] "configure --enable-native-pkcs11" enables BIND
4cefc38158672f5de8119886d9754cf0609a9371minfrin to use the PKCS#11 API for all cryptographic
11d3c510dca5b5178ad4739ffc1567ef2155bda9minfrin functions, so that it can drive a hardware service
11d3c510dca5b5178ad4739ffc1567ef2155bda9minfrin module directly without the need to use a modified
11d3c510dca5b5178ad4739ffc1567ef2155bda9minfrin OpenSSL as intermediary (so long as the HSM's vendor
d974a1624c0bb4f1c2e8b36fcf8ba1f12284ed8dsf provides a complete-enough implementation of the
d974a1624c0bb4f1c2e8b36fcf8ba1f12284ed8dsf PKCS#11 interface). This has been tested successfully
d974a1624c0bb4f1c2e8b36fcf8ba1f12284ed8dsf with the Thales nShield HSM and with SoftHSMv2 from
1a8c329935111a5059363efe927d631371b78414minfrin the OpenDNSSEC project. [RT #29031]
fac37c9794a18c24d187f4e0f97a9476c4344118minfrin3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
fac37c9794a18c24d187f4e0f97a9476c4344118minfrin3703. [func] To improve recursive resolver performance, cache
fc58f0ff708564b67cd578c626b6500d1cd63a51sf records which are still being requested by clients
fc58f0ff708564b67cd578c626b6500d1cd63a51sf can now be automatically refreshed from the
fc58f0ff708564b67cd578c626b6500d1cd63a51sf authoritative server before they expire, reducing
fc58f0ff708564b67cd578c626b6500d1cd63a51sf or eliminating the time window in which no answer
fc58f0ff708564b67cd578c626b6500d1cd63a51sf is available in the cache. See the "prefetch" option
fc58f0ff708564b67cd578c626b6500d1cd63a51sf for more details. [RT #35041]
4e5fe1d203ddf3956a77be3c797c01fd4be8b211sf3702. [func] 'dnssec-coverage -l' option specifies a length
4e5fe1d203ddf3956a77be3c797c01fd4be8b211sf of time to check for coverage; events further into
dcb4802d9ea9fc4ba89671e8f8faa70c9535b202minfrin the future are ignored. 'dnssec-coverage -z'
dcb4802d9ea9fc4ba89671e8f8faa70c9535b202minfrin checks only ZSK events, and 'dnssec-coverage -k'
dcb4802d9ea9fc4ba89671e8f8faa70c9535b202minfrin checks only KSK events. (Thanks to Peter Palfrader.)
dcb4802d9ea9fc4ba89671e8f8faa70c9535b202minfrin [RT #35168]
ce4dc40a4e87991087488f70d96d3447d7557294sf3701. [func] named-checkconf can now obscure shared secrets
ce4dc40a4e87991087488f70d96d3447d7557294sf when printing by specifying '-x'. [RT #34465]
ce4dc40a4e87991087488f70d96d3447d7557294sf3700. [func] Allow access to subgroups of XML statistics via
9db0b0ee6ffade769db57b37a06b3f4849b5d367minfrin special URLs http://<server>:<port>/xml/v3/server,
9db0b0ee6ffade769db57b37a06b3f4849b5d367minfrin /zones, /net, /tasks, /mem, and /status. [RT #35115]
9db0b0ee6ffade769db57b37a06b3f4849b5d367minfrin3699. [bug] Improvements to statistics channel XSL stylesheet:
033d82412cc4af9d939b7e1645425b9e7f4ebf60minfrin the stylesheet can now be cached by the browser;
033d82412cc4af9d939b7e1645425b9e7f4ebf60minfrin section headers are omitted from the stats display
033d82412cc4af9d939b7e1645425b9e7f4ebf60minfrin when there is no data in those sections to be
033d82412cc4af9d939b7e1645425b9e7f4ebf60minfrin displayed; counters are now right-justified for
033d82412cc4af9d939b7e1645425b9e7f4ebf60minfrin easier readability. [RT #35117]
1b390add6886fb1c0acdea82be0ef0920f1158casf3698. [cleanup] Replaced all uses of memcpy() with memmove().
1b390add6886fb1c0acdea82be0ef0920f1158casf [RT #35120]
5fd471ec540a088d143a223096d35661bf87c15btrawick3697. [bug] Handle "." as a search list element when IDN support
5fd471ec540a088d143a223096d35661bf87c15btrawick is enabled. [RT #35133]
f2472b79d241967fa28f8284470b1c5cafee7b12wrowe3696. [bug] dig failed to handle AXFR style IXFR responses which
f2472b79d241967fa28f8284470b1c5cafee7b12wrowe span multiple messages. [RT #35137]
f2472b79d241967fa28f8284470b1c5cafee7b12wrowe3695. [bug] Address a possible race in dispatch.c. [RT #35107]
c9201c790435060b1322d86949183085ca5f6c0cwrowe3694. [bug] Warn when a key-directory is configured for a zone,
c9201c790435060b1322d86949183085ca5f6c0cwrowe but does not exist or is not a directory. [RT #35108]
c9201c790435060b1322d86949183085ca5f6c0cwrowe3693. [security] memcpy was incorrectly called with overlapping
c9201c790435060b1322d86949183085ca5f6c0cwrowe ranges resulting in malformed names being generated
c9201c790435060b1322d86949183085ca5f6c0cwrowe on some platforms. This could cause INSIST failures
38bd9dba7627c6b2f331cd0731c272ee6bd876b1wrowe when serving NSEC3 signed zones (CVE-2014-0591).
38bd9dba7627c6b2f331cd0731c272ee6bd876b1wrowe [RT #35120]
38bd9dba7627c6b2f331cd0731c272ee6bd876b1wrowe3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
c1ba97f41a4526d84fb7a1596afe3dd11e065a2cminfrin was no data at the node. [RT #35080]
c1ba97f41a4526d84fb7a1596afe3dd11e065a2cminfrin3691. [contrib] Address null pointer dereference in LDAP and
c1ba97f41a4526d84fb7a1596afe3dd11e065a2cminfrin MySQL DLZ modules.
97cc46935ec496b83fef9d6feb094d706c895b3bsf3690. [bug] Iterative responses could be missed when the source
4ed33a14c26d78bbe6bd0b9d5091cdb184e348basf port for an upstream query was the same as the
4ed33a14c26d78bbe6bd0b9d5091cdb184e348basf listener port (53). [RT #34925]
97cc46935ec496b83fef9d6feb094d706c895b3bsf3689. [bug] Fixed a bug causing an insecure delegation from one
72e3829dbd019a63b1091987fc6e7b1c028b089cminfrin static-stub zone to another to fail with a broken
72e3829dbd019a63b1091987fc6e7b1c028b089cminfrin trust chain. [RT #35081]
1081aff66582e2cac722fb3b6f09da4f524b5962minfrin3688. [bug] loadnode could return a freed node on out of memory.
1081aff66582e2cac722fb3b6f09da4f524b5962minfrin [RT #35106]
1081aff66582e2cac722fb3b6f09da4f524b5962minfrin3687. [bug] Address null pointer dereference in zone_xfrdone.
9f0c32ae318f33c93a47d83f4709242c18339bbcminfrin [RT #35042]
9f0c32ae318f33c93a47d83f4709242c18339bbcminfrin3686. [func] "dnssec-signzone -Q" drops signatures from keys
9f0c32ae318f33c93a47d83f4709242c18339bbcminfrin that are still published but no longer active.
9474e446514b06765775eb0c1ec6645e2c5e50f6minfrin [RT #34990]
9474e446514b06765775eb0c1ec6645e2c5e50f6minfrin3685. [bug] "rndc refresh" didn't work correctly with slave
9f0c32ae318f33c93a47d83f4709242c18339bbcminfrin zones using inline-signing. [RT #35105]
b7557ab9828d2017224a12968f82c3118b6a8c0aminfrin3684. [bug] The list of included files would grow on reload.
b7557ab9828d2017224a12968f82c3118b6a8c0aminfrin3683. [cleanup] Add a more detailed "not found" message to rndc
b7557ab9828d2017224a12968f82c3118b6a8c0aminfrin commands which specify a zone name. [RT #35059]
9474e446514b06765775eb0c1ec6645e2c5e50f6minfrin3682. [bug] Correct the behavior of rndc retransfer to allow
9474e446514b06765775eb0c1ec6645e2c5e50f6minfrin inline-signing slave zones to retain NSEC3 parameters
b7557ab9828d2017224a12968f82c3118b6a8c0aminfrin instead of reverting to NSEC. [RT #34745]
e302f38fd646764ce1a1e1c578d794aef514a9e5sf3681. [port] Update the Windows build system to support feature
e302f38fd646764ce1a1e1c578d794aef514a9e5sf selection and WIN64 builds. This is a work in
b32d756dae79045a9bc90e0d0b85582f6f28eaf3sf progress. [RT #34160]
9c233808c898095865fcc0a2dc1cf594d0d8faf3sf3680. [bug] Ensure buffer space is available in "rndc zonestatus".
9c233808c898095865fcc0a2dc1cf594d0d8faf3sf [RT #35084]
3b41ccdaa163f4e900bbf8a7aa6a366df033822dminfrin3679. [bug] dig could fail to clean up TCP sockets still
3b41ccdaa163f4e900bbf8a7aa6a366df033822dminfrin waiting on connect(). [RT #35074]
3b41ccdaa163f4e900bbf8a7aa6a366df033822dminfrin3678. [port] Update config.guess and config.sub. [RT #35060]
28587db43bc4bea96a36fbcffdd967e7b422bb97minfrin3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
28587db43bc4bea96a36fbcffdd967e7b422bb97minfrin times. [RT #35073]
5a2dcc476c33985b7681aa72256bcd7266057eddsf3676. [bug] "named-checkconf -z" now checks zones of type
5a2dcc476c33985b7681aa72256bcd7266057eddsf hint and redirect as well as master. [RT #35046]
e08076ca56e6cb68b30846b9e9339061058aae6dpoirier3675. [misc] Provide a place for third parties to add version
e08076ca56e6cb68b30846b9e9339061058aae6dpoirier information for their extensions in the version
e08076ca56e6cb68b30846b9e9339061058aae6dpoirier file by setting the EXTENSIONS variable.
e08076ca56e6cb68b30846b9e9339061058aae6dpoirier --- 9.10.0a1 released ---
e08076ca56e6cb68b30846b9e9339061058aae6dpoirier3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
f3a19422957c2e9eb827c8e38e5982f678591aa5minfrin3673. [func] New "in-view" zone option allows direct sharing
b7a2f855b5e31abc24dab2eef28e9e2f985ae25brpluem of zones between views. [RT #32968]
fa1c7ce09927decc1eecd1e9a35cc5331078a052covener3672. [func] Local address can now be specified when using
fa1c7ce09927decc1eecd1e9a35cc5331078a052covener dns_client API. [RT #34811]
84fbf855118f318dd5e511d8e5b902cecc1177c0jim3671. [bug] Don't allow dnssec-importkey overwrite a existing
ac45a43afbf38aa4a91c1402c6beef6ef8a2696dniq non-imported private key.
ac45a43afbf38aa4a91c1402c6beef6ef8a2696dniq3670. [bug] Address read after free in server side of
ac45a43afbf38aa4a91c1402c6beef6ef8a2696dniq lwres_getrrsetbyname. [RT #29075]
b2b9b7f0644773b50aee41956a841ac884086250niq3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
b2b9b7f0644773b50aee41956a841ac884086250niq3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
b2b9b7f0644773b50aee41956a841ac884086250niq [RT #34993]
b4f348c8e74ba8166410ddeffac03e4887696788niq3667. [test] dig: add support to keep the TCP socket open between
b4f348c8e74ba8166410ddeffac03e4887696788niq successive queries (+[no]keepopen). [RT #34918]
4fda5fb4cc40703a76e261bbf21ec1d6b51b7d3fjim3666. [func] Add a tool, named-rrchecker, for checking the syntax
fa0dc2a4f675a868378a52946e5b244d6bf41196sf of individual resource records. This tool is intended
fa0dc2a4f675a868378a52946e5b244d6bf41196sf to be called by provisioning systems so that the front
0807f6da6091b748ab47c21ba66252fe8da2a966sf end does not need to be upgraded to support new DNS
0807f6da6091b748ab47c21ba66252fe8da2a966sf record types. [RT #34778]
b92a868b537899a51efd8c200c396fa51c63839dtrawick3665. [bug] Failure to release lock on error in receive_secure_db.
b92a868b537899a51efd8c200c396fa51c63839dtrawick [RT #34944]
dc52cac281d8b311dc47d115ed979f923b667679rjung3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
dc52cac281d8b311dc47d115ed979f923b667679rjung locking and other bugs. [RT #34855]
2534e869d2ba209bd0c43717ea80992e6de0c51djim3663. [bug] Address bugs in dns_rdata_fromstruct and
2534e869d2ba209bd0c43717ea80992e6de0c51djim dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
f8033d657a57eab45af44368774d8beb3e4f7f35pquerna3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
f8033d657a57eab45af44368774d8beb3e4f7f35pquerna3661. [bug] Address lock order reversal deadlock with inline zones.
02fd88c85a9850109753b87612955ad372de1575sf [RT #34856]
02fd88c85a9850109753b87612955ad372de1575sf3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
da48ae521bcc2751f8eb8dfb02f7aab0f46943c6sf [RT #23825]
da48ae521bcc2751f8eb8dfb02f7aab0f46943c6sf3659. [port] solaris: don't add explict dependencies/rules for
1374472d83ce061a431b7f6eeb5e5135fb4cd922jim python programs as make won't use the implicit rules.
1374472d83ce061a431b7f6eeb5e5135fb4cd922jim [RT #34835]
1374472d83ce061a431b7f6eeb5e5135fb4cd922jim3658. [port] linux: Address platform specific compilation issue
ab7a123efe997d907274eb672ab2b36746bb3f57sf when libcap-devel is installed. [RT #34838]
ab7a123efe997d907274eb672ab2b36746bb3f57sf3657. [port] Some readline clones don't accept NULL pointers when
ab7a123efe997d907274eb672ab2b36746bb3f57sf calling add_history. [RT #34842]
a44d29a3794110c558c940bd903a1930d717a7d7sf3656. [security] Treat an all zero netmask as invalid when generating
a44d29a3794110c558c940bd903a1930d717a7d7sf the localnets acl. (The prior behavior could
a44d29a3794110c558c940bd903a1930d717a7d7sf allow unexpected matches when using some versions
70003ce816d7851e49ecb0cdc5137becd647ed18niq of Winsock: CVE-2013-6320.) [RT #34687]
ef766b4977fa0c796f1d1fa828c5868d5a6bde74rbowen3655. [cleanup] Simplify TCP message processing when requesting a
b5e45168970cefb8b2d0bea709ea69790f3eab96niq zone transfer. [RT #34825]
815067bc5eff8fc218019e18ee5ea868372917cdsf3654. [bug] Address race condition with manual notify requests.
9f2c7096ac1f41aca1328d304d54dbaef4ebb06drjung [RT #34806]
ff5e24709209b13601480827b0fecf32c428ff32rjung3653. [func] Create delegations for all "children" of empty zones
39d67f66729a7008c1e73d65a81e778ce819a227rjung except "forward first". [RT #34826]
da20b997bf4652f7597e0a7845db371aab2f7187rjung3652. [bug] Address bug with rpz-drop policy. [RT #34816]
133cbcba0df4ba0e72f7eaaaebabe119f145f261niq3651. [tuning] Adjust when a master server is deemed unreachable.
133cbcba0df4ba0e72f7eaaaebabe119f145f261niq [RT #27075]
c8dcde16853eef36b713d4633fac83b66e49aa5eniq3650. [tuning] Use separate rate limiting queues for refresh and
c8dcde16853eef36b713d4633fac83b66e49aa5eniq notify requests. [RT #30589]
1a7a4f8c6a312cb237e428c77da0792eb165dc7aniq3649. [cleanup] Include a comment in .nzf files, giving the name of
1a7a4f8c6a312cb237e428c77da0792eb165dc7aniq the associated view. [RT #34765]
1a7a4f8c6a312cb237e428c77da0792eb165dc7aniq3648. [test] Updated the ATF test framework to version 0.17.
927e277b4be750e06960b3d4f1c2b1ca146e0555niq [RT #25627]
927e277b4be750e06960b3d4f1c2b1ca146e0555niq3647. [bug] Address a race condition when shutting down a zone.
83de39879307034216ce0af15a47a88a55af11e3rjung [RT #34750]
83de39879307034216ce0af15a47a88a55af11e3rjung3646. [bug] Journal filename string could be set incorrectly,
7cfa48136e3b42a14cdff1a46b60f4e4d2ad5291niq causing garbage in log messages. [RT #34738]
7cfa48136e3b42a14cdff1a46b60f4e4d2ad5291niq3645. [protocol] Use case sensitive compression when responding to
7cfa48136e3b42a14cdff1a46b60f4e4d2ad5291niq queries. [RT #34737]
0a4924de8350e2bbfa16a27f42ff0bc61aa52d43rjung3644. [protocol] Check that EDNS subnet client options are well formed.
0a4924de8350e2bbfa16a27f42ff0bc61aa52d43rjung [RT #34718]
8e8568ec7d29f056a2a4942d1d50481e441c25d9covener3643. [doc] Clarify RRL "slip" documentation.
bec2a2e375fe46599b68399abfcf67b89b270b57wrowe3642. [func] Allow externally generated DNSKEY to be imported
bec2a2e375fe46599b68399abfcf67b89b270b57wrowe into the DNSKEY management framework. A new tool
bec2a2e375fe46599b68399abfcf67b89b270b57wrowe dnssec-importkey is used to do this. [RT #34698]
bec2a2e375fe46599b68399abfcf67b89b270b57wrowe3641. [bug] Handle changes to sig-validity-interval settings
bec2a2e375fe46599b68399abfcf67b89b270b57wrowe better. [RT #34625]
bec2a2e375fe46599b68399abfcf67b89b270b57wrowe3640. [bug] ndots was not being checked when searching. Only
46fdfef7dfc745effe179387e1dcb8245d3804batrawick continue searching on NXDOMAIN responses. Add the
46fdfef7dfc745effe179387e1dcb8245d3804batrawick ability to specify ndots to nslookup. [RT #34711]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
46fdfef7dfc745effe179387e1dcb8245d3804batrawick in a key zone. [RT #34238]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
46fdfef7dfc745effe179387e1dcb8245d3804batrawick encountered. [RT #34668]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3637. [bug] 'allow-query-on' was checking the source address
46fdfef7dfc745effe179387e1dcb8245d3804batrawick rather than the destination address. [RT #34590]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3636. [bug] Automatic empty zones now behave better with
f4845813cd6fa5749dfec8e3bc647b85c1df0980wrowe forward only "zones" beneath them. [RT #34583]
f4845813cd6fa5749dfec8e3bc647b85c1df0980wrowe3635. [bug] Signatures were not being removed from a zone with
f4845813cd6fa5749dfec8e3bc647b85c1df0980wrowe only KSK keys for a algorithm. [RT #34439]
f55c048e33a905f9f771b3aed309373bdf547944jorton3634. [func] Report build-id in rndc status. Report build-id
f55c048e33a905f9f771b3aed309373bdf547944jorton when building from a git repository. [RT #20422]
f55c048e33a905f9f771b3aed309373bdf547944jorton3633. [cleanup] Refactor OPT processing in named to make it easier
cddaaa6378c5082e8dff0d11dc21cf6c4928ecbcjorton to support new EDNS options. [RT #34414]
cddaaa6378c5082e8dff0d11dc21cf6c4928ecbcjorton3632. [bug] Signature from newly inactive keys were not being
cddaaa6378c5082e8dff0d11dc21cf6c4928ecbcjorton removed. [RT #32178]
9b2bd9e83cbb6f5debb2edba59a0c12089eb37c3minfrin3631. [bug] Remove spurious warning about missing signatures when
9b2bd9e83cbb6f5debb2edba59a0c12089eb37c3minfrin qtype is SIG. [RT #34600]
9b2bd9e83cbb6f5debb2edba59a0c12089eb37c3minfrin3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
a89e2c1651aab7734345fa3a6712a757708535ferjung3629. [func] Allow the printing of cryptographic fields in DNSSEC
a89e2c1651aab7734345fa3a6712a757708535ferjung records by dig to be suppressed (dig +nocrypto).
a89e2c1651aab7734345fa3a6712a757708535ferjung [RT #34534]
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung3628. [func] Report DNSKEY key id's when dumping the cache.
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung [RT #34533]
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung3626. [func] dig: NSID output now easier to read. [RT #21160]
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung3625. [bug] Don't send notify messages to machines outside of the
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung test setup.
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung3624. [bug] Look for 'json_object_new_int64' when looking for a
adc9a2e2b2e56a7416c90f949bd0c72ddd6f1793rjung the json library. [RT #34449]
23bc6974af15e69a9aa4b5b3fc06b800b53ca234sf3623. [placeholder]
23bc6974af15e69a9aa4b5b3fc06b800b53ca234sf3622. [tuning] Eliminate an unnecessary lock when incrementing
298eb744831be682f749ffe1c01c88d82adf215esf cache statistics. [RT #34339]
298eb744831be682f749ffe1c01c88d82adf215esf3621. [security] Incorrect bounds checking on private type 'keydata'
298eb744831be682f749ffe1c01c88d82adf215esf can lead to a remotely triggerable REQUIRE failure
298eb744831be682f749ffe1c01c88d82adf215esf (CVE-2013-4854). [RT #34238]
298eb744831be682f749ffe1c01c88d82adf215esf3620. [func] Added "rpz-client-ip" policy triggers, enabling
298eb744831be682f749ffe1c01c88d82adf215esf RPZ responses to be configured on the basis of
298eb744831be682f749ffe1c01c88d82adf215esf the client IP address; this can be used, for
b9aa9ca00496f67eb755d67764775ff23ac7eb03covener example, to blacklist misbehaving recursive
b9aa9ca00496f67eb755d67764775ff23ac7eb03covener or stub resolvers. [RT #33605]
f2386b627177c7a80d38fed6ec0aed3c086909c1covener3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
70d4e28f12f8cc2e130457c841095dc69c67cf31minfrin [RT #33776]
70d4e28f12f8cc2e130457c841095dc69c67cf31minfrin3618. [func] "rndc reload" now checks modification times of
70d4e28f12f8cc2e130457c841095dc69c67cf31minfrin include files as well as master files to determine
70d4e28f12f8cc2e130457c841095dc69c67cf31minfrin whether to skip reloading a zone. [RT #33936]
1a668f25bc6b4b111822caaba70bb9289d64ade5niq3617. [bug] Named was failing to answer queries during
1a668f25bc6b4b111822caaba70bb9289d64ade5niq "rndc reload" [RT #34098]
7a6c86627922e38fa227943b9f888f96109681e5covener3616. [bug] Change #3613 was incomplete. [RT #34177]
7a6c86627922e38fa227943b9f888f96109681e5covener3615. [cleanup] "configure" now finishes by printing a summary
17efe57eb8d88fa0d371f4ac4939dbbbe78fd09bcovener of optional BIND features and whether they are
17efe57eb8d88fa0d371f4ac4939dbbbe78fd09bcovener active or inactive. ("configure --enable-full-report"
17efe57eb8d88fa0d371f4ac4939dbbbe78fd09bcovener increases the verbosity of the summary.) [RT #31777]
17efe57eb8d88fa0d371f4ac4939dbbbe78fd09bcovener3614. [port] Check for <linux/types.h>. [RT #34162]
8068423ee2d80a7c42b2325a71c24ac9485327cecovener3613. [bug] named could crash when deleting inline-signing
8068423ee2d80a7c42b2325a71c24ac9485327cecovener zones with "rndc delzone". [RT #34066]
8068423ee2d80a7c42b2325a71c24ac9485327cecovener3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
7703bad94964cc64022e08e2d1ae2c5fbfe2d3c6covener3611. [bug] Improved resistance to a theoretical authentication
7703bad94964cc64022e08e2d1ae2c5fbfe2d3c6covener attack based on differential timing. [RT #33939]
689ee47a7329cf0d0ce4c5a98670b33fcf00d81btrawick3610. [cleanup] win32: Some executables had been omitted from the
689ee47a7329cf0d0ce4c5a98670b33fcf00d81btrawick installer. [RT #34116]
aa8df43397bb42245e1633f12e2300c9715f3a7btrawick3609. [bug] Corrected a possible deadlock in applications using
aa8df43397bb42245e1633f12e2300c9715f3a7btrawick the export version of the isc_app API. [RT #33967]
19ce7effbcc8a735f1a883f9266e086fde2adb63poirier3608. [port] win32: added todos.pl script to ensure all text files
19ce7effbcc8a735f1a883f9266e086fde2adb63poirier the win32 build depends on are converted to DOS
19ce7effbcc8a735f1a883f9266e086fde2adb63poirier newline format. [RT #22067]
8eac2273e3d5f2dc8464fada76fcfbf33a938a2fcovener3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
8eac2273e3d5f2dc8464fada76fcfbf33a938a2fcovener message. [RT #34045]
8eac2273e3d5f2dc8464fada76fcfbf33a938a2fcovener3606. [func] "rndc flushtree" now flushes matching
c6124d7fde07b58d51785d0f1cb509026eeaa138jim records in the address database and bad cache
c6124d7fde07b58d51785d0f1cb509026eeaa138jim as well as the DNS cache. (Previously only the
c6124d7fde07b58d51785d0f1cb509026eeaa138jim DNS cache was flushed.) [RT #33970]
680e7b4c70df00b695883c824947ca6ec15d69ecsf3605. [port] win32: Addressed several compatibility issues
680e7b4c70df00b695883c824947ca6ec15d69ecsf with newer versions of Visual Studio. [RT #33916]
3a49a6c98ef80c71830e66e7f8f46083001b494ctrawick3604. [bug] Fixed a compile-time error when building with
3a49a6c98ef80c71830e66e7f8f46083001b494ctrawick JSON but not XML. [RT #33959]
6fee4e2faa2e45fe2636d01e35d03c2cf0c9d431minfrin3603. [bug] Install <isc/stat.h>. [RT #33956]
6fee4e2faa2e45fe2636d01e35d03c2cf0c9d431minfrin3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
6fee4e2faa2e45fe2636d01e35d03c2cf0c9d431minfrin integrate with named and serve DNS data.
03aa31ad82759363ba1a55589e517b16308ef635minfrin (Contributed by John Eaglesham of Yahoo.)
03aa31ad82759363ba1a55589e517b16308ef635minfrin3601. [bug] Added to PKCS#11 openssl patches a value len
03aa31ad82759363ba1a55589e517b16308ef635minfrin attribute in DH derive key. [RT #33928]
9fe23388f983cb652b5d68e2bd92aa9f0568c574minfrin3600. [cleanup] dig: Fixed a typo in the warning output when receiving
9fe23388f983cb652b5d68e2bd92aa9f0568c574minfrin an oversized response. [RT #33910]
e9eabac76b50e8f00d0c391f6070d0f42db77aa2wrowe3599. [tuning] Check for pointer equivalence in name comparisons.
e9eabac76b50e8f00d0c391f6070d0f42db77aa2wrowe [RT #18125]
e9eabac76b50e8f00d0c391f6070d0f42db77aa2wrowe3598. [cleanup] Improved portability of map file code. [RT #33820]
433d36fd71af86369719893afe09877be4cb4f3asf3597. [bug] Ensure automatic-resigning heaps are reconstructed
433d36fd71af86369719893afe09877be4cb4f3asf when loading zones in map format. [RT #33381]
14e5a8cc15b1dcc26ad5420973304e53a9e5406bsf3596. [port] Updated win32 build documentation, added
14e5a8cc15b1dcc26ad5420973304e53a9e5406bsf dnssec-verify. [RT #22067]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3595. [port] win32: Fix build problems introduced by change #3550.
46fdfef7dfc745effe179387e1dcb8245d3804batrawick [RT #33807]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3594. [maint] Update config.guess and config.sub. [RT #33816]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3593. [func] Update EDNS processing to better track remote server
46fdfef7dfc745effe179387e1dcb8245d3804batrawick capabilities. [RT #30655]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3592. [doc] Moved documentation of rndc command options to the
46fdfef7dfc745effe179387e1dcb8245d3804batrawick rndc man page. [RT #33506]
573f949c582f06bd738a96196f40b646b6d540b8rpluem3591. [func] Use CRC-64 to detect map file corruption at load
573f949c582f06bd738a96196f40b646b6d540b8rpluem time. [RT #33746]
c44902d07eab7deb803a59e959f57cf3b7d56655poirier3590. [bug] When using RRL on recursive servers, defer
c44902d07eab7deb803a59e959f57cf3b7d56655poirier rate-limiting until after recursion is complete;
ae1981fc94adf2b231e2d0e15d2f895b2138c969covener also, use correct rcode for slipped NXDOMAIN
ae1981fc94adf2b231e2d0e15d2f895b2138c969covener responses. [RT #33604]
ae1981fc94adf2b231e2d0e15d2f895b2138c969covener3589. [func] Report serial numbers in when starting zone transfers.
ae1981fc94adf2b231e2d0e15d2f895b2138c969covener Report accepted NOTIFY requests including serial.
ae1981fc94adf2b231e2d0e15d2f895b2138c969covener [RT# 33037]
4ac05f9625e37cc421f4ea548422827b4de163d7niq3588. [bug] dig: addressed a memory leak in the sigchase code
4ac05f9625e37cc421f4ea548422827b4de163d7niq that could cause a shutdown crash. [RT #33733]
4ac05f9625e37cc421f4ea548422827b4de163d7niq3587. [func] 'named -g' now checks the logging configuration but
4ac05f9625e37cc421f4ea548422827b4de163d7niq does not use it. [RT #33473]
6999a76d8eb5ef6b4b295e51df0b2fb6064bd373covener3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
ead0b57bbeaec5acb14f931b5641962f429dabc9trawick3585. [func] "rndc delzone -clean" option removes zone files
ead0b57bbeaec5acb14f931b5641962f429dabc9trawick when deleting a zone. [RT #33570]
77d6f9d5c2a5cab805e9ace265628f3d791b937dniq3584. [security] Caching data from an incompletely signed zone could
77d6f9d5c2a5cab805e9ace265628f3d791b937dniq trigger an assertion failure in resolver.c
77d6f9d5c2a5cab805e9ace265628f3d791b937dniq (CVE-2013-3919). [RT #33690]
77d6f9d5c2a5cab805e9ace265628f3d791b937dniq3583. [bug] Address memory leak in GSS-API processing [RT #33574]
9f35dd32eedd781d218a85f0315ea5526a8adc84minfrin3582. [bug] Silence false positive warning regarding missing file
9f35dd32eedd781d218a85f0315ea5526a8adc84minfrin directive for inline slave zones. [RT #33662]
5dc4220fc22561537ce1421a03e11846a5b719ebminfrin3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
5dc4220fc22561537ce1421a03e11846a5b719ebminfrin3580. [bug] Addressed a possible race in acache.c [RT #33602]
5dc4220fc22561537ce1421a03e11846a5b719ebminfrin3579. [maint] Updates to PKCS#11 openssl patches, supporting
bd27541a0c96caa881f17a490e23cdd220d480c8poirier versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
bd27541a0c96caa881f17a490e23cdd220d480c8poirier3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
68c4447ba8e057cf38cbbec918e0549b817f20b4minfrin [RT #33571]
68c4447ba8e057cf38cbbec918e0549b817f20b4minfrin3577. [bug] Handle zero TTL values better. [RT #33411]
68c4447ba8e057cf38cbbec918e0549b817f20b4minfrin3576. [bug] Address a shutdown race when validating. [RT #33573]
e33d0698670fead33dbd7c907363053b9e2be454minfrin3575. [func] Changed the logging category for RRL events from
e33d0698670fead33dbd7c907363053b9e2be454minfrin 'queries' to 'query-errors'. [RT #33540]
e33d0698670fead33dbd7c907363053b9e2be454minfrin3574. [doc] The 'hostname' keyword was missing from server-id
cf8a8738330694e60bad421fcc8361d80b0e9124minfrin description in the named.conf man page. [RT #33476]
cf8a8738330694e60bad421fcc8361d80b0e9124minfrin3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
4ea8055e720d18f386b8026b546e5836ecccba4arjung zone names containing punctuation marks and other
a9d359cdeb1cee65cdb9fab5e19ffb4846172183trawick nonstandard characters. [RT #33419]
4ea8055e720d18f386b8026b546e5836ecccba4arjung3572. [func] Threads are now enabled by default on most
fd80868005a61e747bc45b39df83cae7abb3d151pgollucci operating systems. [RT #25483]
fd80868005a61e747bc45b39df83cae7abb3d151pgollucci3571. [bug] Address race condition in dns_client_startresolve().
60a8830541cd85d23a42ccb1639bc4744de9d526poirier [RT #33234]
60a8830541cd85d23a42ccb1639bc4744de9d526poirier3570. [bug] Check internal pointers are valid when loading map
60a8830541cd85d23a42ccb1639bc4744de9d526poirier files. [RT #33403]
5ae15cd9d22fb3bdfd2eb0b9761c4ef07fbf2f96minfrin3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
5ae15cd9d22fb3bdfd2eb0b9761c4ef07fbf2f96minfrin module, and added multithread support. [RT #33394]
69fc9805c344b2dd5fd49a4f75cbf55dedeac7d6minfrin3568. [cleanup] Add a product description line to the version file,
69fc9805c344b2dd5fd49a4f75cbf55dedeac7d6minfrin to be reported by named -v/-V. [RT #33366]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3567. [bug] Silence clang static analyzer warnings. [RT #33365]
46fdfef7dfc745effe179387e1dcb8245d3804batrawick3566. [func] Log when forwarding updates to master. [RT #33240]
ca0a943242b488c162aa89874498e0316f7b2f2eminfrin3565. [placeholder]
e1c6c1dac26c35ecebe158438bb0c56afbb9bfb0sf3564. [bug] Improved handling of corrupted map files. [RT #33380]
38451a13fb80b89e704792ebc0e6f9e5e5877d7dsf3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
38451a13fb80b89e704792ebc0e6f9e5e5877d7dsf3562. [func] Update map file header format to include a SHA-1 hash
38451a13fb80b89e704792ebc0e6f9e5e5877d7dsf of the database content, so that corrupted map files
38451a13fb80b89e704792ebc0e6f9e5e5877d7dsf can be rejected at load time. [RT #32459]
505e342aefa9fbccc857f1bc653a310e25511946sf3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
505e342aefa9fbccc857f1bc653a310e25511946sf or NOTIMP. Adjust usage message. [RT #33363]
26734c75baf170a492ef6a82f07b24ee1af7d0b1sf3560. [bug] isc-config.sh did not honor includedir and libdir
26734c75baf170a492ef6a82f07b24ee1af7d0b1sf when set via configure. [RT #33345]
dda254ba84bdff5e236917af1b31693ca4360eabcovener3559. [func] Check that both forms of Sender Policy Framework
dda254ba84bdff5e236917af1b31693ca4360eabcovener records exist or do not exist. [RT #33355]
dda254ba84bdff5e236917af1b31693ca4360eabcovener3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
bf52162f2d05c1fb1a107c7ef108de73f739b3edpquerna3557. [bug] Reloading redirect zones was broken. [RT #33292]
e1d33ac481c6683a069630c8f9aceec3a48babcetrawick3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
3becbd2611ffb2e8391a8eacce765b43dcb1c669wrowe3555. [bug] Address theoretical race conditions in acache.c
8e5e9b2d4c6cbcd21ca182fe1109d59284239515wrowe (change #3553 was incomplete). [RT #33252]
9c78f8d71737dfbbbf4da2f9acb397567a10e88bsf3554. [bug] RRL failed to correctly rate-limit upward
9c78f8d71737dfbbbf4da2f9acb397567a10e88bsf referrals and failed to count dropped error
9c78f8d71737dfbbbf4da2f9acb397567a10e88bsf responses in the statistics. [RT #33225]
9c78f8d71737dfbbbf4da2f9acb397567a10e88bsf3553. [bug] Address suspected double free in acache. [RT #33252]
4be9c459920a7c1cfe62d654327dae5c4bb6b284sf3552. [bug] Wrong getopt option string for 'nsupdate -r'.
4be9c459920a7c1cfe62d654327dae5c4bb6b284sf [RT #33280]
47ff2654d827dd3596ce2e4099d69cec0f1009b9takashi3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
b4ae72381175122ebfe42ff0d11db7a7f4162014takashi3550. [func] Unified the internal and export versions of the
b4ae72381175122ebfe42ff0d11db7a7f4162014takashi BIND libraries, allowing external clients to use
b4ae72381175122ebfe42ff0d11db7a7f4162014takashi the same libraries as BIND. [RT #33131]
5e1ae35c05125b8b6c6c648c60e576f5796ea061rpluem3549. [doc] Documentation for "request-nsid" was missing.
b115299831a7b4bbec58a88d708d8536e1ecd50csf [RT #33153]
5e1ae35c05125b8b6c6c648c60e576f5796ea061rpluem3548. [bug] The NSID request code in resolver.c was broken
b9a830d395feaa66ab621841a5cd86e1fa2d184brjung resulting in invalid EDNS options being sent.
b9a830d395feaa66ab621841a5cd86e1fa2d184brjung [RT #33153]
82e6711dc508d2822d9397f07136ba4ddd8764e1niq3547. [bug] Some malformed unknown rdata records were not properly
82e6711dc508d2822d9397f07136ba4ddd8764e1niq detected and rejected. [RT #33129]
82e6711dc508d2822d9397f07136ba4ddd8764e1niq3546. [func] Add EUI48 and EUI64 types. [RT #33082]
82e6711dc508d2822d9397f07136ba4ddd8764e1niq3545. [bug] RRL slip behavior was incorrect when set to 1.
f43104f173247435cb4ade2b89aa2ca8108aedb7niq [RT #33111]
f43104f173247435cb4ade2b89aa2ca8108aedb7niq3544. [contrib] check5011.pl: Script to report the status of
1fdcfb04a08e53ce28af657d854922efbbabecf4niq managed keys as recorded in managed-keys.bind.
1fdcfb04a08e53ce28af657d854922efbbabecf4niq Contributed by Tony Finch <dot@dotat.at>
1fdcfb04a08e53ce28af657d854922efbbabecf4niq3543. [bug] Update socket structure before attaching to socket
c26aa743a70c2148cdca1e6c637c605d9025b051niq manager after accept. [RT #33084]
c26aa743a70c2148cdca1e6c637c605d9025b051niq3542. [placeholder]
e076b09731977eafcef2bfc6f5323f3ab7e83b15niq3541. [bug] Parts of libdns were not properly initialized when
e076b09731977eafcef2bfc6f5323f3ab7e83b15niq built in libexport mode. [RT #33028]
3a183ee5b8f8129f6d3ec493be51abacda7c6ea7niq3540. [test] libt_api: t_info and t_assert were not thread safe.
3a183ee5b8f8129f6d3ec493be51abacda7c6ea7niq3539. [port] win32: timestamp format didn't match other platforms.
22d3cfb8f14471efbc3bbc8faa2c59805ac2395fjim3538. [test] Running "make test" now requires loopback interfaces
64dbb5532fba398c5e81efeb21c7fd50c05819d7niq to be set up. [RT #32452]
d31d6c32262a8d1cbfc63d9f7adccae46002c8f7niq3537. [tuning] Slave zones, when updated, now send NOTIFY messages
d31d6c32262a8d1cbfc63d9f7adccae46002c8f7niq to peers before being dumped to disk rather than
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna after. [RT #27242]
11f2c481e1d57bedb3f758565307501e9a2730ddtrawick3536. [func] Add support for setting Differentiated Services Code
11f2c481e1d57bedb3f758565307501e9a2730ddtrawick Point (DSCP) values in named. Most configuration
11f2c481e1d57bedb3f758565307501e9a2730ddtrawick options which take a "port" option (e.g.,
11f2c481e1d57bedb3f758565307501e9a2730ddtrawick listen-on, forwarders, also-notify, masters,
11f2c481e1d57bedb3f758565307501e9a2730ddtrawick notify-source, etc) can now also take a "dscp"
11f2c481e1d57bedb3f758565307501e9a2730ddtrawick option specifying a code point for use with
4aa736735709d0434c02ae6cc65b0738eb9882cctakashi outgoing traffic, if supported by the underlying
4aa736735709d0434c02ae6cc65b0738eb9882cctakashi OS. [RT #27596]
99d46a23c6eac800f327b29f8009f7d7da986230trawick3535. [bug] Minor win32 cleanups. [RT #32962]
99d46a23c6eac800f327b29f8009f7d7da986230trawick3534. [bug] Extra text after an embedded NULL was ignored when
99d46a23c6eac800f327b29f8009f7d7da986230trawick parsing zone files. [RT #32699]
6c2782f8988f498ad9e5fc84256e202175c3edc9covener3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
6c2782f8988f498ad9e5fc84256e202175c3edc9covener3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
bf27540ecb929632fd82264742045c96006c382cniq3531. [bug] win32: A uninitialized value could be returned on out
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna of memory. [RT #32960]
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna3529. [func] Named now listens on both IPv4 and IPv6 interfaces
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna by default. Named previously only listened on IPv4
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna interfaces by default unless named was running in
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna IPv6 only mode. [RT #32945]
bcb567d8f48f5de8aa84e0b19e93357e0a4d970epquerna3528. [func] New "dnssec-coverage" command scans the timing
ea6ff3396df1d6d43ee0ecfa3e26ada981d8e9a3sctemme metadata for a set of DNSSEC keys and reports if a
8a0c75e992cc657a98317e78374b800d16963cfatrawick lapse in signing coverage has been scheduled
ba217dc41cebc0976010ee177f8fedac782d1f6fminfrin inadvertently. (Note: This tool depends on python;
ab1b172430f2d4e1b222b541bb8c1d431c1a7bc7sf it will not be built or installed on systems that
8315a125b56710a222167e4d65b96c3c891f4b25sf do not have a python interpreter.) [RT #28098]
ab1b172430f2d4e1b222b541bb8c1d431c1a7bc7sf3527. [compat] Add a URI to allow applications to explicitly
3f985866b9b5b49fb57735b5eb135591163f30dfsf request a particular XML schema from the statistics
3f985866b9b5b49fb57735b5eb135591163f30dfsf channel, returning 404 if not supported. [RT #32481]
7f51e5c395d431b8c20226f77de28efe13272bfasf3526. [cleanup] Set up dependencies for unit tests correctly during
7f51e5c395d431b8c20226f77de28efe13272bfasf build. [RT #32803]
17d64c884a44f5ca72f6901afd3e50991bfc1c63sf3525. [func] Support for additional signing algorithms in rndc:
17d64c884a44f5ca72f6901afd3e50991bfc1c63sf hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
17d64c884a44f5ca72f6901afd3e50991bfc1c63sf The -A option to rndc-confgen can be used to
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf select the algorithm for the generated key.
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf (The default is still hmac-md5; this may
a6e4caaa97e433cc2ef78d957bc32756d9c49f79sf change in a future release.) [RT #20363]
68686064650b23222461014a11558593de194bbctrawick3524. [func] Added an alternate statistics channel in JSON format,
304903af1cf77cbdfa07e8a6482f35f3d9d7b0f3sf when the server is built with the json-c library:
304903af1cf77cbdfa07e8a6482f35f3d9d7b0f3sf http://[address]:[port]/json. [RT #32630]
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sf3523. [contrib] Ported filesystem and ldap DLZ drivers to
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sf dynamically-loadable modules, and added the
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sf "wildcard" module based on a contribution from
a96ba81cada826f2a9ab1e24218a77bfadfc31d8sf Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
4f133508c93204c06e1acba9774ff184e5812606niq3522. [bug] DLZ lookups could fail to return SERVFAIL when
4f133508c93204c06e1acba9774ff184e5812606niq they ought to. [RT #32685]
87587593f1a53030e840acc0dec6cc881022ea40covener3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
87587593f1a53030e840acc0dec6cc881022ea40covener3520. [bug] 'mctx' was not being referenced counted in some places
87587593f1a53030e840acc0dec6cc881022ea40covener where it should have been. [RT #32794]
52071e4b9f49c3a1c2c767c7ea80ec92cf9032c9covener3519. [func] Full replay protection via four-way handshake is
52071e4b9f49c3a1c2c767c7ea80ec92cf9032c9covener now mandatory for rndc clients. Very old versions
89b8bbc89404e7071e573c4f0a17f528996e855djorton of rndc will no longer work. [RT #32798]
89b8bbc89404e7071e573c4f0a17f528996e855djorton3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
e1d4c4e8366f46dc5dc1e6e24b4c7ac448dfa061sf so that all dns_rrl_rtype_t enum values fit regardless
e1d4c4e8366f46dc5dc1e6e24b4c7ac448dfa061sf of whether it is teated as signed or unsigned by
6bc4f334a04802bab835893d0c42af8bfb9c3c41sf the compiler. [RT #32792]
53593dbd8fece82cb66a23f0b7024d8d713d66f1sf3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
79e3f2f950745953fff4a6a8dfe1f7cce31ce287sf3516. [placeholder]
ab2b977442827214b1d884decf3e3f1579fd45e1rpluem3515. [port] '%T' is not portable in strftime(). [RT #32763]
ab2b977442827214b1d884decf3e3f1579fd45e1rpluem3514. [bug] The ranges for valid key sizes in ddns-confgen and
195edf54eccd8c5a436c7dd17f5f604e7074d5d1sf rndc-confgen were too constrained. Keys up to 512
195edf54eccd8c5a436c7dd17f5f604e7074d5d1sf bits are now allowed for most algorithms, and up
195edf54eccd8c5a436c7dd17f5f604e7074d5d1sf to 1024 bits for hmac-sha384 and hmac-sha512.
3709b26f3370ae89c5324a3c03fab56a93b09ecdsf [RT #32753]
3709b26f3370ae89c5324a3c03fab56a93b09ecdsf3513. [func] "dig -u" prints times in microseconds rather than
03577bc320125eaa2b27ee7af78b894ee6dfe121takashi milliseconds. [RT #32704]
03577bc320125eaa2b27ee7af78b894ee6dfe121takashi3512. [func] "rndc validation check" reports the current status
f5119c5d7cfe8c6d53cb29d43f8746684068ed82minfrin of DNSSEC validation. [RT #21397]
f5119c5d7cfe8c6d53cb29d43f8746684068ed82minfrin3511. [doc] Improve documentation of redirect zones. [RT #32756]
f74d35a61a835e15412b99b8aebe4958fe4e94a5takashi3510. [func] "rndc status" and XML statistics channel now report
94713632faf403489b3f8b4e0ed65e1011ac4991takashi server start and reconfiguration times. [RT #21048]
20216b769716c4346cce373f2028d7dbebf03886poirier3509. [cleanup] Added a product line to version file to allow for
20216b769716c4346cce373f2028d7dbebf03886poirier easy naming of different products (BIND
20216b769716c4346cce373f2028d7dbebf03886poirier vs BIND ESV, for example). [RT #32755]
7317a32e0c621c9a28f6f10e83e6c5dc63e3f3bdsf3508. [contrib] queryperf was incorrectly rejecting the -T option.
7317a32e0c621c9a28f6f10e83e6c5dc63e3f3bdsf [RT #32338]
ecc6e723b804fb4b8f858910eff3f88242ec56fasf3507. [bug] Statistics channel XSL had a glitch when attempting
ecc6e723b804fb4b8f858910eff3f88242ec56fasf to chart query data before any queries had been
ecc6e723b804fb4b8f858910eff3f88242ec56fasf received. [RT #32620]
ecc6e723b804fb4b8f858910eff3f88242ec56fasf3506. [func] When setting "max-cache-size" and "max-acache-size",
727d68c6009030f56a350b4603384ce4fb844341minfrin the keyword "unlimited" is no longer defined as equal
727d68c6009030f56a350b4603384ce4fb844341minfrin to 4 gigabytes (except on 32-bit platforms); it
727d68c6009030f56a350b4603384ce4fb844341minfrin means literally unlimited. [RT #32358]
ed6dfb7d7057dc4f42348f12d7bff9fe98fc73cfminfrin3505. [bug] When setting "max-cache-size" and "max-acache-size",
ed6dfb7d7057dc4f42348f12d7bff9fe98fc73cfminfrin larger values than 4 gigabytes could not be set
4dee28b6fc8fff5efde4e7821aeb6defed3fb84dsf explicitly, though larger sizes were available
4dee28b6fc8fff5efde4e7821aeb6defed3fb84dsf when setting cache size to 0. This has been
4dee28b6fc8fff5efde4e7821aeb6defed3fb84dsf corrected; the full range is now available.
23247a8f748077bc788a5fbaf91d5fad34d0b7d1sf [RT #32358]
23247a8f748077bc788a5fbaf91d5fad34d0b7d1sf3504. [func] Add support for ACLs based on geographic location,
23247a8f748077bc788a5fbaf91d5fad34d0b7d1sf using MaxMind GeoIP databases. Based on code
58015652ffe00f004c6404a0631474f23dadc7dasf contributed by Ken Brownfield <kb@slide.com>.
58015652ffe00f004c6404a0631474f23dadc7dasf [RT #30681]
2af38cc44e48753913565b38a7a9f325f898a293minfrin3503. [doc] Clarify size_spec syntax. [RT #32449]
745417156908df54538ca284b382ce8d27b30066minfrin3502. [func] zone-statistics: "no" is now a synonym for "none",
2af38cc44e48753913565b38a7a9f325f898a293minfrin instead of "terse". [RT #29165]
fc2f0972572614b50523bc5ddb3f866ca4acd2f0sf3501. [func] zone-statistics now takes three options: full,
fc2f0972572614b50523bc5ddb3f866ca4acd2f0sf terse, and none. "yes" and "no" are retained as
251430bcaff1fa6a77953bfe56475eb6cc7abc78sf synonyms for full and terse, respectively. [RT #29165]
251430bcaff1fa6a77953bfe56475eb6cc7abc78sf3500. [security] Support NAPTR regular expression validation on
7b467aa53854c95318a1c709709c1619a4f47118minfrin all platforms without using libregex, which
7b467aa53854c95318a1c709709c1619a4f47118minfrin can be vulnerable to memory exhaustion attack
7b467aa53854c95318a1c709709c1619a4f47118minfrin (CVE-2013-2266). [RT #32688]
7ba7402d405dc9e3c1083e34049ed933472ca910poirier3499. [doc] Corrected ARM documentation of built-in zones.
7ba7402d405dc9e3c1083e34049ed933472ca910poirier [RT #32694]
7ba7402d405dc9e3c1083e34049ed933472ca910poirier3498. [bug] zone statistics for zones which matched a potential
7ba7402d405dc9e3c1083e34049ed933472ca910poirier empty zone could have their zone-statistics setting
4286d2e267e788d856092bf2ccf461e7ca99570frpluem overridden.
4286d2e267e788d856092bf2ccf461e7ca99570frpluem3497. [func] When deleting a slave/stub zone using 'rndc delzone'
4286d2e267e788d856092bf2ccf461e7ca99570frpluem report the files that were being used so they can
43563ad04e4bae7b42f7a34a87b7c60dc69c0c3fpoirier be cleaned up if desired. [RT #27899]
5357892a1e367372dc2d4a315156e3e44dc5d56dpoirier3496. [placeholder]
b42af5f6edf4fe4b820288c37920a7a6fd65f1f1poirier3495. [func] Support multiple response-policy zones (up to 32),
b42af5f6edf4fe4b820288c37920a7a6fd65f1f1poirier while improving RPZ performance. "response-policy"
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin syntax now includes a "min-ns-dots" clause, with
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin default 1, to exclude top-level domains from
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin NSIP and NSDNAME checking. --enable-rpz-nsip and
49cea03e96dc4707bce15d6318eb013cb8668d96minfrin --enable-rpz-nsdname are now the default. [RT #32251]
63eaa8ed62d63de0a44346b8af48e08e562db01eminfrin3494. [func] DNS RRL: Blunt the impact of DNS reflection and
63eaa8ed62d63de0a44346b8af48e08e562db01eminfrin amplification attacks by rate-limiting substantially-
847b3922f7dcde6830f4aad49d29c84b4569c260minfrin identical responses. [RT #28130]
1af2b28846e2647963db788b081676884fb7df8crpluem3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
1af2b28846e2647963db788b081676884fb7df8crpluem contributed by Mark Goldfinch. [RT #32549]
845258fbf5102b8b09fe9b7f4cb4ea4c089344c3poirier3492. [bug] Fixed a regression in zone loading performance
845258fbf5102b8b09fe9b7f4cb4ea4c089344c3poirier due to lock contention. [RT #30399]
5d36cddfe00d5c6ad18845fcc04e6f7662050fafminfrin3491. [bug] Slave zones using inline-signing must specify a
5d36cddfe00d5c6ad18845fcc04e6f7662050fafminfrin file name. [RT #31946]
20aa41f86a5b451529d26d9b901eea69989e5c0aminfrin3490. [bug] When logging RDATA during update, truncate if it's
20aa41f86a5b451529d26d9b901eea69989e5c0aminfrin too long. [RT #32365]
8c92aeeb75b1b393f61a3e01c495484737a0ff8cminfrin3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
8c92aeeb75b1b393f61a3e01c495484737a0ff8cminfrin dns_dlzcreate() failed to properly initialize
1018201f5223624476334c6e23aead02db7c4040minfrin dlzdb.link. When cloning a rdataset do not copy
1018201f5223624476334c6e23aead02db7c4040minfrin the link contents. [RT #32651]
e5db2522dbe503cbf5399094b6239c88c246a8c5poirier3488. [bug] Use after free error with DH generated keys. [RT #32649]
e5db2522dbe503cbf5399094b6239c88c246a8c5poirier3487. [bug] Change 3444 was not complete. There was a additional
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin place where the NOQNAME proof needed to be saved.
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin [RT #32629]
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin3486. [bug] named could crash when using TKEY-negotiated keys
ad7e5e9fb8f63a5155bb392114162997505ff772minfrin that had been deleted and then recreated. [RT #32506]
59cb8d601b8c44476e59310f68b9c373d8fc62a6minfrin3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
59cb8d601b8c44476e59310f68b9c373d8fc62a6minfrin3484. [bug] Some statistics were incorrectly rendered in XML.
59cb8d601b8c44476e59310f68b9c373d8fc62a6minfrin [RT #32587]
ec8b1faa56744b338f6d6421144b56c2bb3faae6poirier3483. [placeholder]
10abdcbd7b30d957d15c61ea8100ba97a627ac95minfrin3482. [func] dig +nssearch now prints name servers that don't
87e0bf269cc3386ee8e6ab561ff00770151f4f53niq have address records (missing AAAA or A, or the name
87e0bf269cc3386ee8e6ab561ff00770151f4f53niq doesn't exist). [RT #29348]
3c67b7956d44501360506a9f13a5011be73b30ecminfrin3481. [cleanup] Removed use of const const in atf.
3c67b7956d44501360506a9f13a5011be73b30ecminfrin3480. [bug] Silence logging noise when setting up zone
3c67b7956d44501360506a9f13a5011be73b30ecminfrin statistics. [RT #32525]
97d20d37d21b8d427a920e211858172f0a82427epoirier3479. [bug] Address potential memory leaks in gssapi support
97d20d37d21b8d427a920e211858172f0a82427epoirier code. [RT #32405]
8e04e8ec7d682bff5e6dccdd70c082971a88cb8bniq3478. [port] Fix a build failure in strict C99 environments
8e04e8ec7d682bff5e6dccdd70c082971a88cb8bniq [RT #32475]
53c999a82fcca729dabc8a512b3fb996d61fd814niq3477. [func] Expand logging when adding records via DDNS update
53c999a82fcca729dabc8a512b3fb996d61fd814niq [RT #32365]
25d0f8adcab13255494a3572edff1a25f6fbeea3rpluem3476. [bug] "rndc zonestatus" could report a spurious "not
25d0f8adcab13255494a3572edff1a25f6fbeea3rpluem found" error on inline-signing zones. [RT #29226]
25d0f8adcab13255494a3572edff1a25f6fbeea3rpluem3475. [cleanup] Changed name of 'map' zone file format (previously
dd9ae259e1578c4388739c880ede97c55cec543frpluem 'fast'). [RT #32458]
dd9ae259e1578c4388739c880ede97c55cec543frpluem3474. [bug] nsupdate could assert when the local and remote
0938450cadc9a083d112a86bc7dd7ae34f791364trawick address families didn't match. [RT #22897]
0938450cadc9a083d112a86bc7dd7ae34f791364trawick3473. [bug] dnssec-signzone/verify could incorrectly report
8bed7ee6d97933b958e97e222f37154d83e384e5jorton an error condition due to an empty node above an
8bed7ee6d97933b958e97e222f37154d83e384e5jorton opt-out delegation lacking an NSEC3. [RT #32072]
8bed7ee6d97933b958e97e222f37154d83e384e5jorton3472. [bug] The active-connections counter in the socket
8bed7ee6d97933b958e97e222f37154d83e384e5jorton statistics could underflow. [RT #31747]
c7d46b58052fe666c74a47bd26b6cb1e351492adrpluem3471. [bug] The number of UDP dispatches now defaults to
4e08c8c1a91e2887b41d8cacd3aa532355d0237drpluem the number of CPUs even if -n has been set to
7a25b029b69f169bd22718165dff3b271114f92eniq a higher value. [RT #30964]
43d051c8401a1f3b4f7853cd897d3565ab814ea7poirier3470. [bug] Slave zones could fail to dump when successfully
43d051c8401a1f3b4f7853cd897d3565ab814ea7poirier refreshing after an initial failure. [RT #31276]
2f34374f6e04b9094a1d13a5ed823f331ba841a3rpluem3469. [bug] Handle DLZ lookup failures more gracefully. Improve
2f34374f6e04b9094a1d13a5ed823f331ba841a3rpluem backward compatibility between versions of DLZ dlopen
7a25b029b69f169bd22718165dff3b271114f92eniq API. [RT #32275]
7a25b029b69f169bd22718165dff3b271114f92eniq3468. [security] RPZ rules to generate A records (but not AAAA records)
2f34374f6e04b9094a1d13a5ed823f331ba841a3rpluem could trigger an assertion failure when used in
3e6a46d2fecf446daf0e280a49fa5565f5f635eajorton conjunction with DNS64 (CVE-2012-5689). [RT #32141]
3e6a46d2fecf446daf0e280a49fa5565f5f635eajorton3467. [bug] Added checks in dnssec-keygen and dnssec-settime
137e484e5f984ceff1102e1212dda8ac0413231aniq to check for delete date < inactive date. [RT #31719]
0df8f79d2324b131c36955d7e474a735a762f9eeniq3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
0df8f79d2324b131c36955d7e474a735a762f9eeniq in DLZ example driver. [RT #32275]
30e3e760b737f13ce800fa02c5930ade7659ba66niq3465. [bug] Handle isolated reserved ports. [RT #31778]
80370e62044bea458bcd0545c59cb864ed117b04niq3464. [maint] Updates to PKCS#11 openssl patches, supporting
e991c6fc032c59eb6cb751d9d382e933a53a2866niq versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
e991c6fc032c59eb6cb751d9d382e933a53a2866niq3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
9a00e2d46c44c111d6952e553a2f1a61b7594eb3rpluem3462. [doc] Clarify server selection behavior of dig when using
9a00e2d46c44c111d6952e553a2f1a61b7594eb3rpluem -4 or -6 options. [RT #32181]
9a00e2d46c44c111d6952e553a2f1a61b7594eb3rpluem3461. [bug] Negative responses could incorrectly have AD=1
33d9be77cc6f5fc8734e9c1f526b82d359955152rpluem set. [RT #32237]
172e83c0f024fe6396dd1f3ca3492fd83c304db5jim3460. [bug] Only link against readline where needed. [RT #29810]
45932a847f237b4d8f0667b138bd3f8a15fb53ffniq3459. [func] Added -J option to named-checkzone/named-compilezone
45932a847f237b4d8f0667b138bd3f8a15fb53ffniq to specify the path to the journal file. [RT #30958]
186e9d990f453d16826ab87a87df7b87e6e05921rpluem3458. [bug] Return FORMERR when presented with a overly long
186e9d990f453d16826ab87a87df7b87e6e05921rpluem domain named in a request. [RT #29682]
186e9d990f453d16826ab87a87df7b87e6e05921rpluem3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
6861702c2d883e5c0744d5f7528d2060671ad24dtakashi3456. [port] g++47: ATF failed to compile. [RT #32012]
6861702c2d883e5c0744d5f7528d2060671ad24dtakashi3455. [contrib] queryperf: fix getopt option list. [RT #32338]
f1f779c42f76118102fdecbe8777b47a1fc693a7rjung3454. [port] sparc64: improve atomic support. [RT #25182]
f1f779c42f76118102fdecbe8777b47a1fc693a7rjung3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
292cb7b720095e7bb434d79ae53b02d332aeb99acovener failed. [RT #31960]
292cb7b720095e7bb434d79ae53b02d332aeb99acovener3452. [bug] Accept duplicate singleton records. [RT #32329]
137e484e5f984ceff1102e1212dda8ac0413231aniq3451. [port] Increase per thread stack size from 64K to 1M.
137e484e5f984ceff1102e1212dda8ac0413231aniq [RT #32230]
137e484e5f984ceff1102e1212dda8ac0413231aniq3450. [bug] Stop logfileconfig system test spam system logs.
137e484e5f984ceff1102e1212dda8ac0413231aniq [RT #32315]
4e08c8c1a91e2887b41d8cacd3aa532355d0237drpluem3449. [bug] gen.c: use the pre-processor to construct format
d0cd62f11bcd8fa9bf758c5125f55cea5d9038dfrpluem strings so that compiler can perform sanity checks;
d0cd62f11bcd8fa9bf758c5125f55cea5d9038dfrpluem check the snprintf results. [RT #17576]
51d55be8bbc6652c13bc80d920f4331f7152dceerjung3448. [bug] The allow-query-on ACL was not processed correctly.
51d55be8bbc6652c13bc80d920f4331f7152dceerjung [RT #29486]
0af58edfee6112cc3399e0e693340e525b96ab1ctrawick3447. [port] Add support for libxml2-2.9.x [RT #32231]
0af58edfee6112cc3399e0e693340e525b96ab1ctrawick3446. [port] win32: Add source ID (see change #3400) to build.
0af58edfee6112cc3399e0e693340e525b96ab1ctrawick [RT #31683]
27c7a7cad9e83eeebad0a4d5a321144394adc3f9trawick3445. [bug] Warn about zone files with blank owner names
27c7a7cad9e83eeebad0a4d5a321144394adc3f9trawick immediately after $ORIGIN directives. [RT #31848]
8f2700898323915da289644dc1f3ee11a5e5b4earpluem3444. [bug] The NOQNAME proof was not being returned from cached
8f2700898323915da289644dc1f3ee11a5e5b4earpluem insecure responses. [RT #21409]
e7983ce746b0df56a1b74b42da6d82f5ecb99349covener3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
e7983ce746b0df56a1b74b42da6d82f5ecb99349covener rejected when generating keys. [RT #31927]
e7983ce746b0df56a1b74b42da6d82f5ecb99349covener3442. [port] Net::DNS 0.69 introduced a non backwards compatible
77e28c16c8109d76c3b45717fa66ee74415db042rjung change. [RT #32216]
bbcfb8ab8e22f90fdf346e9993bd58ba2203b182trawick3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
d1745d6933c22c807cf2388332426defd1b19f03covener3440. [bug] Reorder get_key_struct to not trigger a assertion when
d1745d6933c22c807cf2388332426defd1b19f03covener cleaning up due to out of memory error. [RT #32131]
b20f76a400e77d3631f3507ff22d68ae6bd25323trawick3439. [placeholder]
222834d5a33b915037094af014905f3683cae78btrawick3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
2db5d76ac4c75aadecf38e20569bccbfd2360ba7rpluem3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
2db5d76ac4c75aadecf38e20569bccbfd2360ba7rpluem buffers with constant data. [RT #32064]
7f4ac5a4cd99a9cae866b5908e358bd932736307chrisd3436. [bug] Check malloc/calloc return values. [RT #32088]
1c03114a0f0315ed19a05f654021da9f66005897rjung3435. [bug] Cross compilation support in configure was broken.
89691c9bd17f5f53fa0aa8d3fe2e1faee5a5d984rpluem [RT #32078]
89691c9bd17f5f53fa0aa8d3fe2e1faee5a5d984rpluem3434. [bug] Pass client info to the DLZ findzone() entry
89691c9bd17f5f53fa0aa8d3fe2e1faee5a5d984rpluem point in addition to lookup(). This makes it
3e9c0665b06e44cf776528c6954ed3ca34a77c7fsctemme possible for a database to answer differently
51a475d92e7d68ee6d7b57aa7fd6e73b2712ce31sctemme whether it's authoritative for a name depending
3e9c0665b06e44cf776528c6954ed3ca34a77c7fsctemme on the address of the client. [RT #31775]
873c287c391b0bbc4719b68bb84946515811e1batrawick3433. [bug] dlz_findzone() did not correctly handle
6707208ba4e9a5841ca1ab830830fd286ea5b7c5trawick ISC_R_NOMORE. [RT #31172]
873c287c391b0bbc4719b68bb84946515811e1batrawick3432. [func] Multiple DLZ databases can now be configured.
832853bb93c1831daf24e4727c5ca0e1b1786e83lars DLZ databases are searched in the order configured,
832853bb93c1831daf24e4727c5ca0e1b1786e83lars unless set to "search no", in which case a
832853bb93c1831daf24e4727c5ca0e1b1786e83lars zone can be configured to be retrieved from a
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding particular DLZ database by using a "dlz <name>"
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding option in the zone statement. DLZ databases can
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding support type "master" and "redirect" zones.
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding [RT #27597]
1782dcd420de504978945e6b812523eeae6d56a2lars3431. [bug] ddns-confgen: Some valid key algorithms were
d2696ac6757b3d8bdaa27634a141ac8c8a045e08fielding not accepted. [RT #31927]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3430. [bug] win32: isc_time_formatISO8601 was missing the
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem 'T' between the date and time. [RT #32044]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3429. [bug] dns_zone_getserial2 could a return success without
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem returning a valid serial. [RT #32007]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3428. [cleanup] dig: Add timezone to date output. [RT #2269]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3427. [bug] dig +trace incorrectly displayed name server
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem addresses instead of names. [RT #31641]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3426. [bug] dnssec-checkds: Clearer output when records are not
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem found. [RT #31968]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3425. [bug] "acacheentry" reference counting was broken resulting
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem in use after free. [RT #31908]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3424. [func] dnssec-dsfromkey now emits the hash without spaces.
9e152751ed380f87c5ecae4fb0221c956e5fbd24rjung [RT #31951]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3423. [bug] "rndc signing -nsec3param" didn't accept the full
abb99af8aa7da2cb4c324133a4e10bd7a50f875erpluem range of possible values. Address portability issues.
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem [RT #31938]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3422. [bug] Added a clear error message for when the SOA does not
382d14411b582d97075a836190d74c778977505fcovener match the referral. [RT #31281]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3421. [bug] Named loops when re-signing if all keys are offline.
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem [RT #31916]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3420. [bug] Address VPATH compilation issues. [RT #31879]
0e9dae659943679108357054e9aa7657cdc52dc4minfrin3419. [bug] Memory leak on validation cancel. [RT #31869]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3418. [func] New XML schema (version 3.0) for the statistics channel
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem adds query type statistics at the zone level, and
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem flattens the XML tree and uses compressed format to
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem optimize parsing. Includes new XSL that permits
d03aa31ada476d8eb97feaec2b1099809e7f3d57niq charting via the Google Charts API on browsers that
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem support javascript in XSL. The old XML schema has been
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem deprecated. [RT #30023]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3417. [placeholder]
df46ff21c57d00f6addccaaf9b1484f2b56b8577pquerna3416. [bug] Named could die on shutdown if running with 128 UDP
df46ff21c57d00f6addccaaf9b1484f2b56b8577pquerna dispatches per interface. [RT #31743]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3415. [bug] named could die with a REQUIRE failure if a validation
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem was canceled. [RT #31804]
a5cce34e21a5b472f3806b4526043887bcb7e9eajim3414. [bug] Address locking issues found by Coverity. [RT #31626]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3413. [func] Record the number of DNS64 AAAA RRsets that have been
8c3667cd1d0db08647793137c0d1aa7f6526bebfniq synthesized. [RT #27636]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3412. [bug] Copy timeval structure from control message data.
8c3667cd1d0db08647793137c0d1aa7f6526bebfniq [RT #31548]
6824182b3b8e045db97a228d3127bdfcbdfeb0bcniq3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
6824182b3b8e045db97a228d3127bdfcbdfeb0bcniq to UDP. [RT #31690]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3410. [bug] Addressed Coverity warnings. [RT #31626]
0c26d213d85bc40fc05963c63bf670b42b352d25niq3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem from X.509 certificates, for use with DANE
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem (DNS-based Authentication of Named Entities).
92357fb76d3ad043e29ba2ba2041a7bdb8d13390niq [RT #30513]
9f07b6dc343a4e3eba5f4c47050a77441723ce89nd3408. [bug] Some DNSSEC-related options (update-check-ksk,
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem are now legal in slave zones as long as
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem inline-signing is in use. [RT #31078]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3407. [placeholder]
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem3406. [bug] mem.c: Fix compilation errors when building with
abc69b39766c0de3eaf99e9016ea3f35e23c116drpluem ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
1464434c2c104e0ba224644c42552330f5158537covener Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem3405. [bug] Handle time going backwards in acache. [RT #31253]
7f4ac5a4cd99a9cae866b5908e358bd932736307chrisd3404. [bug] dnssec-signzone: When re-signing a zone, remove
92357fb76d3ad043e29ba2ba2041a7bdb8d13390niq RRSIG and NSEC records from nodes that used to be
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem in-zone but are now below a zone cut. [RT #31556]
509111f5f58a9effd4c832f6a0cbd6ad9d549188jorton3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin3402. [test] The IPv6 interface numbers used for system
235b900b78cf6849f8344e377a91ded37d9cc9depquerna tests were incorrect on some platforms. [RT #25085]
235b900b78cf6849f8344e377a91ded37d9cc9depquerna3401. [bug] Addressed Coverity warnings. [RT #31484]
66b8ec445dced7a2036bcd3b87b6fc3f08a1ab24jorton3400. [cleanup] "named -V" can now report a source ID string, defined
66b8ec445dced7a2036bcd3b87b6fc3f08a1ab24jorton in the "srcid" file in the build tree and normally set
66b8ec445dced7a2036bcd3b87b6fc3f08a1ab24jorton to the most recent git hash. [RT #31494]
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin3399. [port] netbsd: rename 'bool' parameter to avoid namespace
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin clash. [RT #31515]
0e2a2eae9b72ac099aa25d7419e55af13b004be9minfrin3398. [bug] SOA parameters were not being updated with inline
8d574b3ac4185e4f71c8b9aae76e7122a78201c4rpluem signed zones if the zone was modified while the
6f33babce8f8bc723f0b2c755aef049cd509504fpquerna server was offline. [RT #29272]
0a12339f39799193ac6866fce812a1deb8f4a1abpquerna3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
0a12339f39799193ac6866fce812a1deb8f4a1abpquerna3396. [bug] OPT records were incorrectly removed from signed,
3fb118bc4e1a634f71c1fa509819ceac36c79dcbpquerna truncated responses. [RT #31439]
3fb118bc4e1a634f71c1fa509819ceac36c79dcbpquerna3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
fb59af4ce3fcdd314b848359faeddf1e51bb24c5jim [RT #31336]
fb59af4ce3fcdd314b848359faeddf1e51bb24c5jim3394. [bug] Adjust 'successfully validated after lower casing
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna signer' log level and category. [RT #31414]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna3393. [bug] 'host -C' could core dump if REFUSED was received.
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna [RT #31381]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna3392. [func] Keep statistics on REFUSED responses. [RT #31412]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna [RT #31262]
a91a59d0b0ceed7cd5621fe8757eda5ff6a043a8pquerna3390. [bug] Silence clang compiler warnings. [RT #30417]
3ec1e3a35106ec4c8bcf8fae6a20cb623aed0b62pquerna3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
3ec1e3a35106ec4c8bcf8fae6a20cb623aed0b62pquerna3388. [bug] Fixed several Coverity warnings.
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna Note: This change includes a fix for a bug that
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna was subsequently determined to be an exploitable
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna security vulnerability, CVE-2012-5688: named could
847db8b2f0188cd9c840acbe4fea77a32748b2edpquerna die on specific queries with dns64 enabled.
97f7daaffd9b6c1031302d7e551d5279fa0d0d72pquerna [RT #30996]
99c8705f69fae71940ad9b091bd2f588a7b9f484minfrin3387. [func] DS digest can be disabled at runtime with
99c8705f69fae71940ad9b091bd2f588a7b9f484minfrin disable-ds-digests. [RT #21581]
99c8705f69fae71940ad9b091bd2f588a7b9f484minfrin3386. [bug] Address locking violation when generating new NSEC /
9376e7dc573bb2721491c79b92f9c06fdfacebe6minfrin NSEC3 chains. [RT #31224]
9376e7dc573bb2721491c79b92f9c06fdfacebe6minfrin3385. [bug] named-checkconf didn't detect missing master lists
9376e7dc573bb2721491c79b92f9c06fdfacebe6minfrin in also-notify clauses. [RT #30810]
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin3384. [bug] Improved logging of crypto errors. [RT #30963]
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin3383. [security] A certain combination of records in the RBT could
edaefb8bf78debc86ef7de441c7983d8b05517e1minfrin cause named to hang while populating the additional
b5cbd7bc65a5c0eda246b0cd32e7d9ed124d66c4niq section of a response. [RT #31090]
b5cbd7bc65a5c0eda246b0cd32e7d9ed124d66c4niq3382. [bug] SOA query from slave used use-v6-udp-ports range,
b5cbd7bc65a5c0eda246b0cd32e7d9ed124d66c4niq if set, regardless of the address family in use.
2ac474e42b9281e247e7082e30c50c5bef1f2cc3rjung [RT #24173]
6ad55f63504cf5fe5205ed9495664519afeadcd9chrisd3381. [contrib] Update queryperf to support more RR types.
6ad55f63504cf5fe5205ed9495664519afeadcd9chrisd [RT #30762]
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd3380. [bug] named could die if a nonexistent master list was
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd referenced in a also-notify. [RT #31004]
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd3379. [bug] isc_interval_zero and isc_time_epoch should be
809ec9d7cc8bc12d7dc6fafba24f3acad3e49d81chrisd "const (type)* const". [RT #31069]
f436f5cf34615c3c7d49dd229560ba658033f9eachrisd3378. [bug] Handle missing 'managed-keys-directory' better.
f436f5cf34615c3c7d49dd229560ba658033f9eachrisd [RT #30625]
ce6098001014d149e90e56ab0e89c1b4aab30136chrisd3377. [bug] Removed spurious newline from NSEC3 multiline
ce6098001014d149e90e56ab0e89c1b4aab30136chrisd output. [RT #31044]
7245e9b991db85d9d9a587fe5f4051f642ebdc3cchrisd3376. [bug] Lack of EDNS support was being recorded without a
7245e9b991db85d9d9a587fe5f4051f642ebdc3cchrisd successful response. [RT #30811]
38b062650152074931a68e933461762c5e233cfcniq3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
38b062650152074931a68e933461762c5e233cfcniq3374. [bug] isc_parse_uint32 failed to return a range error on
d1c1b82647a997922859ec76b82e62a956078dbccovener systems with 64 bit longs. [RT #30232]
63de18ba5e922ffaab500317d7d1d0ad6b27b7e2covener3373. [bug] win32: open raw files in binary mode. [RT #30944]
91ef999a69527d2a64983681c92aaef9270697b4rpluem3372. [bug] Silence spurious "deleted from unreachable cache"
91ef999a69527d2a64983681c92aaef9270697b4rpluem messages. [RT #30501]
e82c197ca8872669af89367746826fe6b9955bb3niq3371. [bug] AD=1 should behave like DO=1 when deciding whether to
e82c197ca8872669af89367746826fe6b9955bb3niq add NS RRsets to the additional section or not.
baef4b5261d84ad9bacb2f4e745b33f35534c25aniq [RT #30479]
baef4b5261d84ad9bacb2f4e745b33f35534c25aniq3370. [bug] Address use after free while shutting down. [RT #30241]
742ec45ed2ac00ab03080e898332352220cc1f13niq3369. [bug] nsupdate terminated unexpectedly in interactive mode
9a06b6b4e83c29429c3a23d34acc41920af2024drjung if built with readline support. [RT #29550]
742ec45ed2ac00ab03080e898332352220cc1f13niq3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
f82568a780e35e8786958c49a1259434e2088b9cniq were not C++ safe.
f82568a780e35e8786958c49a1259434e2088b9cniq3367. [bug] dns_dnsseckey_create() result was not being checked.
56b7c92bac48127bda06d80bf94952258f7e0bd3minfrin [RT #30685]
56b7c92bac48127bda06d80bf94952258f7e0bd3minfrin3366. [bug] Fixed Read-After-Write dependency violation for IA64
41abbbf0cbaef202fe1ba2dd671ea48990d6e012minfrin atomic operations. [RT #25181]
41abbbf0cbaef202fe1ba2dd671ea48990d6e012minfrin3365. [bug] Removed spurious newlines from log messages in
6aa239b3d12f531ad9e305b1a81ad5fd671a3493minfrin3364. [security] Named could die on specially crafted record.
6aa239b3d12f531ad9e305b1a81ad5fd671a3493minfrin [RT #30416]
d05e6175473332a8433e4ac85edda0d5a33c94b5minfrin3363. [bug] Need to allow "forward" and "fowarders" options
d05e6175473332a8433e4ac85edda0d5a33c94b5minfrin in static-stub zones; this had been overlooked.
d05e6175473332a8433e4ac85edda0d5a33c94b5minfrin [RT #30482]
13d29a334cfa69f2995b70a48aeacacc1ac7125frpluem3362. [bug] Setting some option values to 0 in named.conf
13d29a334cfa69f2995b70a48aeacacc1ac7125frpluem could trigger an assertion failure on startup.
6951fc02abfd7642e45333902c14855836717fadrpluem [RT #27730]
db455cbc662c98dbbf53175393c50086ff63370cchrisd3361. [bug] "rndc signing -nsec3param" didn't work correctly
db455cbc662c98dbbf53175393c50086ff63370cchrisd when salt was set to '-' (no salt). [RT #30099]
db455cbc662c98dbbf53175393c50086ff63370cchrisd3360. [bug] 'host -w' could die. [RT #18723]
7cb45b833e465d46f6b61de983cc68112587d04bchrisd3359. [bug] An improperly-formed TSIG secret could cause a
2e242dca7111f99d54dd144b7b8418d88d560032chrisd memory leak. [RT #30607]
b6b1df87b7ce62620d48526a7ab630897cdaad90chrisd3358. [placeholder]
b6b1df87b7ce62620d48526a7ab630897cdaad90chrisd3357. [port] Add support for libxml2-2.8.x [RT #30440]
4cf58054a85830c67dc23890ee613f62e1f7bdc8minfrin3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
4cf58054a85830c67dc23890ee613f62e1f7bdc8minfrin approaching their expiry, so they don't remain
4cf58054a85830c67dc23890ee613f62e1f7bdc8minfrin in caches after expiry. [RT #26429]
4cf58054a85830c67dc23890ee613f62e1f7bdc8minfrin3355. [port] Use more portable awk in verify system test.
caaa32f2d2e3b28063c745c2632d3979da7f8326minfrin3354. [func] Improve OpenSSL error logging. [RT #29932]
caaa32f2d2e3b28063c745c2632d3979da7f8326minfrin3353. [bug] Use a single task for task exclusive operations.
caaa32f2d2e3b28063c745c2632d3979da7f8326minfrin [RT #29872]
caaa32f2d2e3b28063c745c2632d3979da7f8326minfrin3352. [bug] Ensure that learned server attributes timeout of the
e02cb8f5090d904c054633ff33dfd1111e16e404minfrin adb cache. [RT #29856]
e02cb8f5090d904c054633ff33dfd1111e16e404minfrin3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
66a8e1cc29cc4612cd938bc8fcabc0ef569e5769rpluem caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
e02cb8f5090d904c054633ff33dfd1111e16e404minfrin memory debugging flags are set. [RT #30243]
2ac474e42b9281e247e7082e30c50c5bef1f2cc3rjung3350. [bug] Memory read overrun in isc___mem_reallocate if
213e520edc00641400771fc8f90b37a967a2d9ebdirkx ISC_MEM_DEBUGCTX memory debugging flag is set.
213e520edc00641400771fc8f90b37a967a2d9ebdirkx [RT #30240]
a449830d5caa5b9900fe64cc383658b3641f9810dirkx3349. [bug] Change #3345 was incomplete. [RT #30233]
a449830d5caa5b9900fe64cc383658b3641f9810dirkx3348. [bug] Prevent RRSIG data from being cached if a negative
a449830d5caa5b9900fe64cc383658b3641f9810dirkx record matching the covering type exists at a higher
a449830d5caa5b9900fe64cc383658b3641f9810dirkx trust level. Such data already can't be retrieved from
a449830d5caa5b9900fe64cc383658b3641f9810dirkx the cache since change 3218 -- this prevents it
a449830d5caa5b9900fe64cc383658b3641f9810dirkx being inserted into the cache as well. [RT #26809]
82632a19f2f9c346fee2b28a65920ba9737b3973minfrin3347. [bug] dnssec-settime: Issue a warning when writing a new
82632a19f2f9c346fee2b28a65920ba9737b3973minfrin private key file would cause a change in the
82632a19f2f9c346fee2b28a65920ba9737b3973minfrin permissions of the existing file. [RT #27724]
82632a19f2f9c346fee2b28a65920ba9737b3973minfrin3346. [security] Bad-cache data could be used before it was
0481ff0599c9e3c0c7ad5c1930939dcdac908582chrisd initialized, causing an assert. [RT #30025]
0481ff0599c9e3c0c7ad5c1930939dcdac908582chrisd3345. [bug] Addressed race condition when removing the last item
835d676191444a46d695171e8760d55a66c60fecminfrin or inserting the first item in an ISC_QUEUE.
835d676191444a46d695171e8760d55a66c60fecminfrin [RT #29539]
835d676191444a46d695171e8760d55a66c60fecminfrin3344. [func] New "dnssec-checkds" command checks a zone to
723f9f463f1922eaef3d24d00cb289e10daa73ffminfrin determine which DS records should be published
723f9f463f1922eaef3d24d00cb289e10daa73ffminfrin in the parent zone, or which DLV records should be
723f9f463f1922eaef3d24d00cb289e10daa73ffminfrin published in a DLV zone, and queries the DNS to
723f9f463f1922eaef3d24d00cb289e10daa73ffminfrin ensure that it exists. (Note: This tool depends
c2213b3a46a2666e2e7606ceec509cc4978f187fminfrin on python; it will not be built or installed on
c2213b3a46a2666e2e7606ceec509cc4978f187fminfrin systems that do not have a python interpreter.)
c2213b3a46a2666e2e7606ceec509cc4978f187fminfrin [RT #28099]
d4562e99f620170ce0bedddc16887b900b34913bminfrin3343. [placeholder]
d4562e99f620170ce0bedddc16887b900b34913bminfrin3342. [bug] Change #3314 broke saving of stub zones to disk
fd279fe992f7171dc3f6d4d40d6db5bb74f2d96eminfrin resulting in excessive cpu usage in some cases.
fd279fe992f7171dc3f6d4d40d6db5bb74f2d96eminfrin [RT #29952]
fd279fe992f7171dc3f6d4d40d6db5bb74f2d96eminfrin3341. [func] New "dnssec-verify" command checks a signed zone
fed63d1b62cc7e56aad77b70ee5b5cc7f5c6aademinfrin to ensure correctness of signatures and of NSEC/NSEC3
fed63d1b62cc7e56aad77b70ee5b5cc7f5c6aademinfrin chains. [RT #23673]
fed63d1b62cc7e56aad77b70ee5b5cc7f5c6aademinfrin3340. [func] Added new 'map' zone file format, which is an image
fed63d1b62cc7e56aad77b70ee5b5cc7f5c6aademinfrin of a zone database that can be loaded directly into
abe0d0e38b9705f21a13ac8748bce1e3ed35e488minfrin memory via mmap(), allowing much faster zone loading.
abe0d0e38b9705f21a13ac8748bce1e3ed35e488minfrin (Note: Because of pointer sizes and other
abe0d0e38b9705f21a13ac8748bce1e3ed35e488minfrin considerations, this file format is platform-dependent;
abe0d0e38b9705f21a13ac8748bce1e3ed35e488minfrin 'map' zone files cannot always be transferred from one
abe0d0e38b9705f21a13ac8748bce1e3ed35e488minfrin server to another.) [RT #25419]
fb8ee8b7a3a2503b95bf47685f9083e0b9834e6fminfrin3339. [func] Allow the maximum supported rsa exponent size to be
fb8ee8b7a3a2503b95bf47685f9083e0b9834e6fminfrin specified: "max-rsa-exponent-size <value>;" [RT #29228]
a72211e92bab814bfa28ee086ca9b2a1a6095c92chrisd3338. [bug] Address race condition in units tests: asyncload_zone
a72211e92bab814bfa28ee086ca9b2a1a6095c92chrisd and asyncload_zt. [RT #26100]
a72211e92bab814bfa28ee086ca9b2a1a6095c92chrisd3337. [bug] Change #3294 broke support for the multiple keys
a72211e92bab814bfa28ee086ca9b2a1a6095c92chrisd in controls. [RT #29694]
a72211e92bab814bfa28ee086ca9b2a1a6095c92chrisd3336. [func] Maintain statistics for RRsets tagged as "stale".
a72211e92bab814bfa28ee086ca9b2a1a6095c92chrisd [RT #29514]
9582ad6e149d28b118d4e8571101ecb6f85e0191niq3335. [func] nslookup: return a nonzero exit code when unable
9582ad6e149d28b118d4e8571101ecb6f85e0191niq to get an answer. [RT #29492]
78a20a6e7ad3a0229900ee54c7d11a65f647b663niq3334. [bug] Hold a zone table reference while performing a
d56bacbfefa5aa883ce5162a115747372fc38d13chrisd asynchronous load of a zone. [RT #28326]
d56bacbfefa5aa883ce5162a115747372fc38d13chrisd3333. [bug] Setting resolver-query-timeout too low can cause
d56bacbfefa5aa883ce5162a115747372fc38d13chrisd named to not recover if it loses connectivity.
d56bacbfefa5aa883ce5162a115747372fc38d13chrisd [RT #29623]
d64dd2fd4516c2b1b664c5e59c0628d9aff26984covener3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
ed0d39878e79220baaa50c15b79b1fdf877cb919niq3331. [security] dns_rdataslab_fromrdataset could produce bad
1e911973bcb9df6701a4c16c037771ecf25ade13niq rdataslabs. [RT #29644]
1e911973bcb9df6701a4c16c037771ecf25ade13niq3330. [func] Fix missing signatures on NOERROR results despite
1e911973bcb9df6701a4c16c037771ecf25ade13niq RPZ rewriting. Also
1e911973bcb9df6701a4c16c037771ecf25ade13niq - add optional "recursive-only yes|no" to the
1e911973bcb9df6701a4c16c037771ecf25ade13niq response-policy statement
a45125b6474e878ba177025a0584b71cee9c8f32trawick - add optional "max-policy-ttl" to the response-policy
e47d58d5d983426584c8d16416c50f5c58070746dirkx statement to limit the false data that
e47d58d5d983426584c8d16416c50f5c58070746dirkx "recursive-only no" can introduce into
e47d58d5d983426584c8d16416c50f5c58070746dirkx resolvers' caches
33aad3911b15cb5d523075f7df829274fe298a13dirkx - add a RPZ performance test to bin/tests/system/rpz
33aad3911b15cb5d523075f7df829274fe298a13dirkx when queryperf is available.
76f68128bb8fcea0f772d522c05dc7ec872040c2dirkx - the encoding of PASSTHRU action to "rpz-passthru".
33aad3911b15cb5d523075f7df829274fe298a13dirkx (The old encoding is still accepted.)
433dcb1fbaae82d36634f5120bff71a04296904ddirkx [RT #26172]
433dcb1fbaae82d36634f5120bff71a04296904ddirkx3329. [bug] Handle RRSIG signer-name case consistently: We
433dcb1fbaae82d36634f5120bff71a04296904ddirkx generate RRSIG records with the signer-name in
433dcb1fbaae82d36634f5120bff71a04296904ddirkx lower case. We accept them with any case, but if
d7fcc79b0bee660d71b0cccfe9bbc2765ee6420erederpj they fail to validate, we try again in lower case.
d7fcc79b0bee660d71b0cccfe9bbc2765ee6420erederpj [RT #27451]
d7fcc79b0bee660d71b0cccfe9bbc2765ee6420erederpj3328. [bug] Fixed inconsistent data checking in dst_parse.c.
d7fcc79b0bee660d71b0cccfe9bbc2765ee6420erederpj [RT #29401]
65cb7f00eca6689c8a89dc809359991ade1285bcwrowe3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
65cb7f00eca6689c8a89dc809359991ade1285bcwrowe to 'filter-aaaa-on-v4' but applies to IPv6
65cb7f00eca6689c8a89dc809359991ade1285bcwrowe connections. (Use "configure --enable-filter-aaaa"
65cb7f00eca6689c8a89dc809359991ade1285bcwrowe to enable this option.) [RT #27308]
39c7699ec0799d394d3f67145d4a12ed82f587b8jorton3326. [func] Added task list statistics: task model, worker
39c7699ec0799d394d3f67145d4a12ed82f587b8jorton threads, quantum, tasks running, tasks ready.
39c7699ec0799d394d3f67145d4a12ed82f587b8jorton [RT #27678]
c6d33447e28403a90ad817dba4df75fae785be28pquerna3325. [func] Report cache statistics: memory use, number of
439ccf2a084e1da566548931c585cbcc3a9e7f4cminfrin nodes, number of hash buckets, hit and miss counts.
439ccf2a084e1da566548931c585cbcc3a9e7f4cminfrin [RT #27056]
439ccf2a084e1da566548931c585cbcc3a9e7f4cminfrin3324. [test] Add better tests for ADB stats [RT #27057]
439ccf2a084e1da566548931c585cbcc3a9e7f4cminfrin3323. [func] Report the number of buckets the resolver is using.
4ede070ca63bd4c48045e35a7192582769770290jorton [RT #27020]
795c9499a77c25695bcb9710ed67bbe51492e181rpluem3322. [func] Monitor the number of active TCP and UDP dispatches.
795c9499a77c25695bcb9710ed67bbe51492e181rpluem [RT #27055]
a72ba68ecbbc61e4b513e50d6000245c33f753dcwrowe3321. [func] Monitor the number of recursive fetches and the
a72ba68ecbbc61e4b513e50d6000245c33f753dcwrowe number of open sockets, and report these values in
7a079e0cd696baca90ac43e325f64582e2945c68wrowe the statistics channel. [RT #27054]
62c53a0dab4c85bfc6a5ab9abfb1b269d9f7458dniq3320. [func] Added support for monitoring of recursing client
62c53a0dab4c85bfc6a5ab9abfb1b269d9f7458dniq count. [RT #27009]
ecc1538af1c08282fc2773d2eb3f1a54251862f9minfrin3319. [func] Added support for monitoring of ADB entry count and
ecc1538af1c08282fc2773d2eb3f1a54251862f9minfrin hash size. [RT #27057]
ecc1538af1c08282fc2773d2eb3f1a54251862f9minfrin3318. [tuning] Reduce the amount of work performed while holding a
9a06b6b4e83c29429c3a23d34acc41920af2024drjung bucket lock when finished with a fetch context.
3f5585f7f4a7d74f2f94ec729ea8c1879d419e35rederpj [RT #29239]
3f5585f7f4a7d74f2f94ec729ea8c1879d419e35rederpj3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
e4b96ba15dc8b2b27d251d53e29b86da32cd5066pquerna3316. [tuning] Improved locking performance when recursing.
e4b96ba15dc8b2b27d251d53e29b86da32cd5066pquerna [RT #28836]
108ebbb87b2a46f4416ec507824471a483c39fe1sctemme3315. [tuning] Use multiple dispatch objects for sending upstream
108ebbb87b2a46f4416ec507824471a483c39fe1sctemme queries; this can improve performance on busy
108ebbb87b2a46f4416ec507824471a483c39fe1sctemme multiprocessor systems by reducing lock contention.
7abe34dd5a20fc8fde09dca9116b88e6ddfd55ddjorton [RT #28605]
7abe34dd5a20fc8fde09dca9116b88e6ddfd55ddjorton3314. [bug] The masters list could be updated while stub_callback
10d486b9267800c5e376c22f6c0d45dc2ae86f67chrisd or refresh_callback were using it. [RT #26732]
10d486b9267800c5e376c22f6c0d45dc2ae86f67chrisd3313. [protocol] Add TLSA record type. [RT #28989]
3e155218733389e7b1ea3a9ffd0aea533fd929cechrisd3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
3e155218733389e7b1ea3a9ffd0aea533fd929cechrisd [RT #27631]
3e155218733389e7b1ea3a9ffd0aea533fd929cechrisd3311. [bug] Abort the zone dump if zone->db is NULL in
ab43b4a17b2ac31ccb1cf280be8c42a8a314cecbjorton zone.c:zone_gotwritehandle. [RT #29028]
ab43b4a17b2ac31ccb1cf280be8c42a8a314cecbjorton3310. [test] Increase table size for mutex profiling. [RT #28809]
f3a5934ca0fb0f0f813bd9d9d06af8937e3f401fjim3309. [bug] resolver.c:fctx_finddone() was not thread safe.
67139e2d50d1e11558d87f7042f61cb04bb0d1d2jim [RT #27995]
67139e2d50d1e11558d87f7042f61cb04bb0d1d2jim3308. [placeholder]
a4ab95921be8ce5de50913cd6505d41b672eb375minfrin3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
a4ab95921be8ce5de50913cd6505d41b672eb375minfrin [RT #28956]
e605dd6afa940f799c873ffeaa5e25fa4ea9a2c8minfrin3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
e605dd6afa940f799c873ffeaa5e25fa4ea9a2c8minfrin3305. [func] Add wire format lookup method to sdb. [RT #28563]
e605dd6afa940f799c873ffeaa5e25fa4ea9a2c8minfrin3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
50c06405bc48121db2913925549407fd3e79bcedmturk [RT #28571]
dec02391360e503cd3437d16bed765dc653b9de5minfrin3303. [bug] named could die when reloading. [RT #28606]
dec02391360e503cd3437d16bed765dc653b9de5minfrin3302. [bug] dns_dnssec_findmatchingkeys could fail to find
dec02391360e503cd3437d16bed765dc653b9de5minfrin keys if the zone name contained character that
dec02391360e503cd3437d16bed765dc653b9de5minfrin required special mappings. [RT #28600]
1b27a3a26f18191db7ecb4d536cb121ba9520a8eniq3301. [contrib] Update queryperf to build on darwin. Add -R flag
686ce4eade942e515b1725d0c9751da36b759a6ctrawick for non-recursive queries. [RT #28565]
686ce4eade942e515b1725d0c9751da36b759a6ctrawick3300. [bug] Named could die if gssapi was enabled in named.conf
1ce78cf71b5baaf2c1ab48e818cb1f2397df5010trawick but was not compiled in. [RT #28338]
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisd3299. [bug] Make SDB handle errors from database drivers better.
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisd [RT #28534]
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisd3298. [bug] Named could dereference a NULL pointer in
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisd zmgr_start_xfrin_ifquota if the zone was being removed.
4bd465052c4a0c8d41e573ee7a90c312d980355fchrisd [RT #28419]
534611d341a1a48b93c7a1fd5e333dbd261527d3rpluem3297. [bug] Named could die on a malformed master file. [RT #28467]
534611d341a1a48b93c7a1fd5e333dbd261527d3rpluem3296. [bug] Named could die with a INSIST failure in
79d4b708d021714647aab8b138ae671ed24765cewrowe client.c:exit_check. [RT #28346]
79d4b708d021714647aab8b138ae671ed24765cewrowe3295. [bug] Adjust isc_time_secondsastimet range check to be more
79d4b708d021714647aab8b138ae671ed24765cewrowe portable. [RT # 26542]
88d0e50f16b21d4d0af0a48da7ad28fb5991834crpluem3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
88d0e50f16b21d4d0af0a48da7ad28fb5991834crpluem error. [RT #28265]
88d0e50f16b21d4d0af0a48da7ad28fb5991834crpluem3293. [func] nsupdate: list supported type. [RT #28261]
48fa058fe468025347930610ac2473094fa0f4e4chrisd3292. [func] Log messages in the axfr stream at debug 10.
48fa058fe468025347930610ac2473094fa0f4e4chrisd [RT #28040]
3ec4328f079d8867cc323155e59678ad9437914frooneg3291. [port] Fixed a build error on systems without ENOTSUP.
3ec4328f079d8867cc323155e59678ad9437914frooneg [RT #28200]
de0d0b50c96fae59c28e09fed61b0d15cfa4147bchrisd3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
de0d0b50c96fae59c28e09fed61b0d15cfa4147bchrisd3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
de0d0b50c96fae59c28e09fed61b0d15cfa4147bchrisd3288. [bug] dlz_destroy() function wasn't correctly registered
de0d0b50c96fae59c28e09fed61b0d15cfa4147bchrisd by the DLZ dlopen driver. [RT #28056]
db78659055df54243bca678c35bd2ce7e31a9237rooneg3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
db78659055df54243bca678c35bd2ce7e31a9237rooneg3286. [bug] Managed key maintenance timer could fail to start
95817edd05387a5276f51fcd5db79fc21b89b55brooneg after 'rndc reconfig'. [RT #26786]
95817edd05387a5276f51fcd5db79fc21b89b55brooneg3285. [bug] val-frdataset was incorrectly disassociated in
63689d77e084e36b8194fb6df5adfc0344965e01trawick proveunsecure after calling startfinddlvsep.
63689d77e084e36b8194fb6df5adfc0344965e01trawick [RT #27928]
63689d77e084e36b8194fb6df5adfc0344965e01trawick3284. [bug] Address race conditions with the handling of
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes3283. [bug] Raw zones with with more than 512 records in a RRset
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes failed to load. [RT #27863]
8b67b9d3ce40755d1b58971198a02b2749d8e13dbnicholes3282. [bug] Restrict the TTL of NS RRset to no more than that
8b67b9d3ce40755d1b58971198a02b2749d8e13dbnicholes of the old NS RRset when replacing it.
8b67b9d3ce40755d1b58971198a02b2749d8e13dbnicholes [RT #27792] [RT #27884]
a1a615ca49b162d71d88089210395c9a9cfeb539rpluem3281. [bug] SOA refresh queries could be treated as cancelled
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes despite succeeding over the loopback interface.
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes3280. [bug] Potential double free of a rdataset on out of memory
a1a615ca49b162d71d88089210395c9a9cfeb539rpluem with DNS64. [RT #27762]
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes3279. [bug] Hold a internal reference to the zone while performing
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes a asynchronous load. Address potential memory leak
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes if the asynchronous is cancelled. [RT #27750]
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes3278. [bug] Make sure automatic key maintenance is started
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes when "auto-dnssec maintain" is turned on during
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes "rndc reconfig". [RT #26805]
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes3276. [bug] win32: ns_os_openfile failed to return NULL on
69c36bbae91de0e99a682aaae9d6fa61fceb2771bnicholes safe_open failure. [RT #27696]
1b0dce86d7fc8a5aa4c89b05255be26e508c615crpluem3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
1b0dce86d7fc8a5aa4c89b05255be26e508c615crpluem option had been misspelled as '-clear'. (To avoid
1b0dce86d7fc8a5aa4c89b05255be26e508c615crpluem future confusion, both options now work.) [RT #27173]
edc5389f50ce4153e6192740f3c7a188c8cf8d67niq3274. [placeholder]
6c05afd314b4ddd545d63b4ff5de822cc30eec79trawick3273. [bug] AAAA responses could be returned in the additional
6c05afd314b4ddd545d63b4ff5de822cc30eec79trawick section even when filter-aaaa-on-v4 was in use.
6c05afd314b4ddd545d63b4ff5de822cc30eec79trawick [RT #27292]
13cd67e9c1dacbd6b9f040bda337c725cedd98f3brianp3272. [func] New "rndc zonestatus" command prints information
a623efbff95aab78da9e030524b0fa69b054f6d0brianp about the specified zone. [RT #21671]
a623efbff95aab78da9e030524b0fa69b054f6d0brianp3271. [port] darwin: mksymtbl is not always stable, loop several
a623efbff95aab78da9e030524b0fa69b054f6d0brianp times before giving up. mksymtbl was using non
a623efbff95aab78da9e030524b0fa69b054f6d0brianp portable perl to covert 64 bit hex strings. [RT #27653]
0b4b04d8621478ba59f0a6ba2950ddc02ab92b58colm --- 9.9.0rc2 released ---
0b4b04d8621478ba59f0a6ba2950ddc02ab92b58colm3270. [bug] "rndc reload" didn't reuse existing zones correctly
2f1bb5376c5c4022383bb729679ca751dd75a2eabrianp when inline-signing was in use. [RT #27650]
ad862ab5716726a2d72a292ba1dfb29566c86153brianp3269. [port] darwin 11 and later now built threaded by default.
ad862ab5716726a2d72a292ba1dfb29566c86153brianp3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
17d53ea32c4968e47733f1c2c063ae07d280efd6jerenkrantz out the earliest expiry time. [RT #23311]
17d53ea32c4968e47733f1c2c063ae07d280efd6jerenkrantz3267. [bug] Memory allocation failures could be mis-reported as
2d5532b13110a8d85653da92e97795b09cc25cc2trawick unexpected error. New ISC_R_UNSET result code.
b38565306421ff53e9f7499bc728d6df5cec294dpquerna [RT #27336]
b38565306421ff53e9f7499bc728d6df5cec294dpquerna3266. [bug] The maximum number of NSEC3 iterations for a
b38565306421ff53e9f7499bc728d6df5cec294dpquerna DNSKEY RRset was not being properly computed.
89cc93f847a5510482d72d21fc38e9edb8e04057rjung [RT #26543]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3265. [bug] Corrected a problem with lock ordering in the
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim inline-signing code. [RT #27557]
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim3264. [bug] Automatic regeneration of signatures in an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zone could stall when the server
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim was restarted. [RT #27344]
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim3263. [bug] "rndc sync" did not affect the unsigned side of an
cfa64348224b66dd1c9979b809406c4d15b1c137fielding inline-signing zone. [RT #27337]
cfa64348224b66dd1c9979b809406c4d15b1c137fielding3262. [bug] Signed responses were handled incorrectly by RPZ.
74499a117b3b2cd9666715a14f90c0e5d1a4ee8ajim [RT #27316]
95c95cf3925a14eb3a210dde011e33818541ac0fpctony3261. [func] RRset ordering now defaults to random. [RT #27174]
lib/dns/rbtdb.c:iszonesecure. [RT#26913]
3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
3201. [func] 'rndc querylog' can now be given an on/off parameter
dnssec.h. [RT #26415]
3188. [bug] zone.c:zone_refreshkeys() could fail to detach
3186. [bug] Version/db mis-match in rpz code. [RT #26180]
sample external DLZ module in contrib/dlz/example.
- replace "NO-OP" named.conf policy override with
3169. [func] Catch db/version mis-matches when calling dns_db_*().
3163. [bug] Use finer-grained locking in client.c to address
3161. [bug] zone.c:del_sigs failed to always reset rdata leading
drivers (e.g., mysql, postgresql, etc). [RT #25710]
3145. [test] Capture output of ATF unit tests in "./atf.out" if
3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
and add setup.sh in order to resolve changing
named.conf issue. [RT #23687]
3077. [bug] zone.c:zone_refreshkeys() incorrectly called
update.c:next_active. [RT #20256]
select the master/slave zones. [RT #23580]
- "dig +split=X" breaks hex/base64 records into
named.pid at startup. [RT #23290]
validator.c. Tests added to dnssec system test.
3038. [bug] Install <dns/rpz.h>. [RT #23342]
3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which