CHANGES revision e71acb8fbb0201a1b240dfd2e87a2524655884de
c29d36bdf798b03e0c19e8032ad4ae475794f0f9Mark Andrews3308. [placeholder]
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer3305. [func] Add wire format lookup method to sdb. [RT #28563]
a89d1aea0cce6a28a3751cd508db67e38d307a5eDanny Mayer3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps. [RT #28571]
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3303. [bug] named could die when reloading. [RT #28606]
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3302. [bug] dns_dnssec_findmatchingkeys could fail to find
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington keys if the zone name contained character that
62c1fe7b450916acdaf4a3fe65a9b691d5d32f3fBrian Wellington required special mappings. [RT #28600]
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
712bf9b0cc4ed34f4bf33b437f8b0e45853b93ceMark Andrews for non-recursive queries. [RT #28565]
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson3300. [bug] Named could die if gssapi was enabled in named.conf
7e2f4ceafaae4eac1deddc87f906b29a922fff9dAndreas Gustafsson but was not compiled in. [RT #28338]
72499be79fbb68140bd31e0e4ded18a70a5b523bMark Andrews3299. [bug] Make SDB handle errors from database drivers better.
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews3298. [bug] Named could dereference a NULL pointer in
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews3296. [bug] Named could die with a INSIST failure in
6fb633bc3fddba07fc9460ffd245b7ee2d459285Mark Andrews client.c:exit_check. [RT #28346]
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
ca033e166ca9f9dc7bf010065a93af668a09fd44Mark Andrews portable. [RT # 26542]
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews error. [RT #28265]
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
7a104af70fb3071e7949c4e0e585af18ab362db5Mark Andrews3292. [func] Log messages in the axfr stream at debug 10.
2359261a252b339f3cef046cefa10ee1e1d4564dMark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
6bad645917a026dfa4662dd0a3a78b9efc3f4c36Mark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews by the DLZ dlopen driver. [RT #28056]
64e9b7eafb798c75e9a40948cf05d8847da59d9dAndreas Gustafsson3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews3286. [bug] Managed key maintenance timer could fail to start
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews after 'rndc reconfig'. [RT #26786]
d91d025deffd075db2507d44fab04b79920b3e91Mark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
985b4f1c8653c6dfaa46652c412838850c0ffb1cMark Andrews proveunsecure after calling startfinddlvsep.
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews3284. [bug] Address race conditions with the handling of
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
ca690f98020f75758bc26f4b5ef1ccf0472a27c3Mark Andrews failed to load. [RT #27863]
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews of the old NS RRset when replacing it.
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson [RT #27792] [RT #27884]
5f4804c7e47e3cfe7237d27a354d268b0b7ea73bAndreas Gustafsson3281. [bug] SOA refresh queries could be treated as cancelled
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson despite succeeding over the loopback interface.
1418d7292da7ebaba1ba389d60192023c0170245Andreas Gustafsson3280. [bug] Potential double free of a rdataset on out of memory
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson with DNS64. [RT #27762]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson3279. [bug] Hold a internal reference to the zone while performing
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson a asynchronous load. Address potential memory leak
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson if the asynchronous is cancelled. [RT #27750]
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson3278. [bug] Make sure automatic key maintenance is started
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson when "auto-dnssec maintain" is turned on during
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson "rndc reconfig". [RT #26805]
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
998358fa900393378c70ad598c2b2e67385089d4Mark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews safe_open failure. [RT #27696]
bc508906db43dda7eab0988348dd0ae3f3023a9bMark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson option had been misspelled as '-clear'. (To avoid
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson future confusion, both options now work.) [RT #27173]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson3274. [placeholder]
b352902413608d0eb310c4bb45412fa45734afbcAndreas Gustafsson3273. [bug] AAAA responses could be returned in the additional
72e8c079c4c6dc66d565cf89ebf6feb5fa2dea33Mark Andrews section even when filter-aaaa-on-v4 was in use.
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson3272. [func] New "rndc zonestatus" command prints information
c8ab83c08e5227b5146295a9ef4a96d61b066b67Andreas Gustafsson about the specified zone. [RT #21671]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson3271. [port] darwin: mksymtbl is not always stable, loop several
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson times before giving up. mksymtbl was using non
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson portable perl to covert 64 bit hex strings. [RT #27653]
be9932698bf35d0f34e65b5ffbb81bedddd76636Mark Andrews --- 9.9.0rc2 released ---
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson3270. [bug] "rndc reload" didn't reuse existing zones correctly
d352f188cb9e3820054b7451384a3d910619b4a1Andreas Gustafsson when inline-signing was in use. [RT #27650]
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson3269. [port] darwin 11 and later now built threaded by default.
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews out the earliest expiry time. [RT #23311]
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews3267. [bug] Memory allocation failures could be mis-reported as
479c6fc4584e062088ceee037690cdff85fc349bAndreas Gustafsson unexpected error. New ISC_R_UNSET result code.
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson3266. [bug] The maximum number of NSEC3 iterations for a
1255d388f034dc556d235a002527101781dbeb29Mark Andrews DNSKEY RRset was not being properly computed.
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews3265. [bug] Corrected a problem with lock ordering in the
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews inline-signing code. [RT #27557]
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews3264. [bug] Automatic regeneration of signatures in an
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews inline-signing zone could stall when the server
f04c15adc7e62deb2f53cc53f32d890936007903Andreas Gustafsson was restarted. [RT #27344]
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
53c07ca2164f8a083aa97591345bf4339a8573bdAndreas Gustafsson inline-signing zone. [RT #27337]
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson3261. [func] RRset ordering now defaults to random. [RT #27174]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson3260. [bug] "rrset-order cyclic" could appear not to rotate
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson for some query patterns. [RT #27170/27185]
4574714ad44ba97f53425fe8d21b7ecb00ac83b9Andreas Gustafsson --- 9.9.0rc1 released ---
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
8d8c145175370d2fd8dbdf425b5ac2a9dc19da96Mark Andrews message when writing to stdout. [RT #27109]
cf70df7d0e24401a358f0b9c1a616ad0e8c783a6Mark Andrews3258. [test] Add "forcing full sign with unreadable keys" test.
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
9234d92d4e274791eff42cc4ea5766ed7a281b17Mark Andrews in a pipe or socket. [RT #27109]
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson3255. [func] No longer require that a empty zones be explicitly
0cf9ce19cc05a60f85ec610106a983fe806ebb77Andreas Gustafsson enabled or that a empty zone is disabled for
42f61e5c46d4824918385e7279c1b71d8ada8e8dAndreas Gustafsson RFC 1918 empty zones to be configured. [RT #27139]
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson too long. [RT #26956]
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson3252. [bug] When master zones using inline-signing were
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews updated while the server was offline, the source
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson zone could fall out of sync with the signed
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson copy. They can now resynchronize. [RT #26676]
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews memory dns_sdlz_putrr() can allocate per record to
64ea5fd972c9946a3fe56cbc0bf897266d3f8747Andreas Gustafsson prevent run away memory consumption on ISC_R_NOSPACE.
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson3250. [func] 'configure --enable-developer'; turn on various
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson configure options, normally off by default, that
fa2fb620c7c0a907b220c257007d8fb6d38bb3a4Andreas Gustafsson we want developers to build and test with. [RT #27103]
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson3249. [bug] Update log message when saving slave zones files for
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson analysis after load failures. [RT #27087]
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson3248. [bug] Configure options --enable-fixed-rrset and
62a3dbe63e833f2eaf613393399ea4667d8de28dAndreas Gustafsson --enable-exportlib were incompatible with each
248732d66fffb557e84264c2bb2fb43ac766163fAndreas Gustafsson other. [RT #27087]
9bdb01e6c382e897572791b12190472955994d87Mark Andrews3247. [bug] 'raw' format zones failed to preserve load order
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson breaking 'fixed' sort order. [RT #27087]
e69b9ffb0f8b4d1117a682908c9143ebe3efcd6bAndreas Gustafsson3246. [bug] Named failed to start with a empty also-notify list.
5419c0c2d0b77682021084c69f2a5c5e2f9a5525Andreas Gustafsson3245. [bug] Don't report a error unchanged serials unless there
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson were other changes when thawing a zone with
8ba4e82f5358815fd94f34fde408ffd047ba3430Andreas Gustafsson ixfr-fromdifferences. [RT #26845]
61d5bfc06be978ea962b1c64309894ac80351771Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews Also simplified nsupdate syntax to make "update"
ada9b8ab20b81716c7ff1f4f3365929b2f7c8ff8Mark Andrews and "prereq" optional. [RT #24659]
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
3c9b2e62502460c34c2e0ceba1a5d138b3a13cc1Andreas Gustafsson being properly set.
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson3242. [func] Extended the header of raw-format master files to
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson include the serial number of the zone from which
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson they were generated, if different (as in the case
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson of inline-signing zones). This is to be used in
bb60abb44549428414cd55a022f2b8cc4488f7adAndreas Gustafsson inline-signing zones, to track changes between the
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson unsigned and signed versions of the zone, which may
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson have different serial numbers.
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson (Note: raw zonefiles generated by this version of
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson BIND are no longer compatble with prior versions.
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson To generate a backward-compatible raw zonefile
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson using dnssec-signzone or named-compilezone, specify
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson output format "raw=0" instead of simply "raw".)
cf638fc378d74dd4afa59fe11d04da7b0cddca88Andreas Gustafsson3241. [bug] Address race conditions in the resolver code.
4fa5d53e750b4e34e19b9648900d489315b185eaAndreas Gustafsson3240. [bug] DNSKEY state change events could be missed. [RT #26874]
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson timestamp. [RT #26883]
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson3238. [bug] keyrdata was not being reinitialized in
a7e1dcd84ada7e4e4c78f3f281e8a4d99adaf4d1Andreas Gustafsson lib/dns/rbtdb.c:iszonesecure. [RT#26913]
2975d0f819762614526c650b9c2077ef22f81328Andreas Gustafsson3237. [bug] dig -6 didn't work with +trace. [RT #26906]
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson EDNS(0) fallback behavior. [RT #26416]
0bd2ea544e95601e0f0b056acfa079c99d5f6b57Andreas Gustafsson3235. [func] dns_db_diffx, a extended dns_db_diff which returns
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews the generated diff and optionally writes it to a
79432444e84d2d104119fe6a3d5cbc04b1375bd4Andreas Gustafsson journal. [RT #26386]
2e24e82fc3551e3228bcacaa7c45cb61daa49195Mark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
3c17010ba5a6b8dd8a2bbc550813c7f051f45a08Andreas Gustafsson3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews3232. [bug] Zero zone->curmaster before return in
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
df7596a03eea7f1c2df89bd63d3bd4b73f274565Mark Andrews3231. [bug] named could fail to send a uncompressable zone.
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson3230. [bug] 'dig axfr' failed to properly handle a multi-message
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson axfr with a serial of 0. [RT #26796]
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson3229. [bug] Fix local variable to struct var assignment
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson found by CLANG warning.
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson3228. [tuning] Dynamically grow symbol table to improve zone
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson loading performance. [RT #26523]
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson3227. [bug] Interim fix to make WKS's use of getprotobyname()
edf97be2b54cbdc4f3f3a46776df3e912892e960Andreas Gustafsson and getservbyname() self thread safe. [RT #26232]
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson3226. [bug] Address minor resource leakages. [RT #26624]
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson messages. [RT #26507]
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
b09f4e054cbe67b93a5ff62d511ee25945038943Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
3d3445447225ab63f49fc24362963ea49ce94901Andreas Gustafsson3222. [cleanup] Replace dns_journal_{get,set}_bitws with
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews3221. [bug] Fixed a potential coredump on shutdown due to
3dff229f5dd223568476acec4df1f513acb00b1dAndreas Gustafsson referencing fetch context after it's been freed.
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson --- 9.9.0b2 released ---
792de65053d8a48d05746b35a21a9fa1792e71acAndreas Gustafsson3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson could fail to set the database version correctly,
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson causing an assertion failure. [RT #26180]
3e934267660cb13029bcdbddf318fe1cc27b6718Andreas Gustafsson3219. [bug] Disable NOEDNS caching following a timeout.
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson3218. [security] Cache lookup could return RRSIG data associated with
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson nonexistent records, leading to an assertion
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson failure. [RT #26590]
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson3214. [func] Add 'named -U' option to set the number of UDP
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson listener threads per interface. [RT #26485]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson list prior to adding a reference to it leading a
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson possible assertion failure. [RT #23219]
595a14576ea14884c35b3726f054f2065365620bMark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
595a14576ea14884c35b3726f054f2065365620bMark Andrews option prints in single-line-per-record format.
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson3210. [bug] Canceling the oldest query due to recursive-client
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson overload could trigger an assertion failure. [RT #26463]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson3208. [bug] 'dig -y' handle unknown tsig alorithm better.
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson nameserver behaviour. Enable "dig +adflag" and
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson "dig +edns=0" by default. Enable "+dnssec" when
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson running "dig +trace". [RT #23497]
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson3204. [bug] When a master server that has been marked as
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson unreachable sends a NOTIFY, mark it reachable
28cf7340b9c82fc62ca1a1782cb1bd7b0de11aebAndreas Gustafsson again. [RT #25960]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3203. [bug] Increase log level to 'info' for validation failures
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson from expired or not-yet-valid RRSIGs. [RT #21796]
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington3202. [bug] NOEDNS caching on timeout was too agressive.
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer instead of only being used as a toggle. [RT #18351]
06f12c290c7904f0723094b5cbd11e2a1d49e95eAndreas Gustafsson3200. [doc] Some rndc functions were undocumented or were
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer missing from 'rndc -h' output. [RT #25555]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3199. [func] When logging client information, include the name
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews being queried. [RT #25944]
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews permissions. [RT #24866]
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews3197. [bug] Don't try to log the filename and line number when
43efd9fa56b03e3e285fb58859efc9348c7f4a9fMark Andrews the config parser can't open a file. [RT #22263]
5c831a1a1b14470037de6d8bc0501aea5dc6cacdAndreas Gustafsson3196. [bug] nsupdate: return nonzero exit code when target zone
36e37042c6c9252cdf6eb99bd71ccb6e6c43ba6dBrian Wellington doesn't exist. [RT #25783]
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews3195. [cleanup] Silence "file not found" warnings when loading
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews managed-keys zone. [RT #26340]
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
d4196128b31d511c8513edacc70dea7e8d0c053aMark Andrews documentation. [RT #25203]
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
4a20a92f4f96cf2b2fd77898c6afec6c45e481b3Andreas Gustafsson3192. [bug] A query structure could be used after being freed.
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
0262406cea5802a717539247cbaa596ac808efa9Mark Andrews3190. [bug] Underflow in error handling in isc_mutexblock_init.
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson3189. [test] Added a summary report after system tests. [RT #25517]
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson3188. [bug] zone.c:zone_refreshkeys() could fail to detach
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson references correctly when errors occurred, causing
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson a hang on shutdown. [RT #26372]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3187. [port] win32: support for Visual Studio 2008. [RT #26356]
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson --- 9.9.0b1 released ---
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson3186. [bug] Version/db mis-match in rpz code. [RT #26180]
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews - 'rndc signing -list' displays the current
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews state of signing operations
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson - 'rndc signing -clear' clears the signing state
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson records for keys that have fully signed the zone
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson - 'rndc signing -nsec3param' sets the NSEC3
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson parameters for the zone
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson The 'rndc keydone' syntax is removed. [RT #23729]
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson3184. [bug] named had excessive cpu usage when a redirect zone was
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson configured. [RT #26013]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3182. [bug] Auth servers behind firewalls which block packets
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson greater than 512 bytes may cause other servers to
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews perform poorly. Now, adb retains edns information
a24d253a3f4e6f4036800744b348fba858d4959eMark Andrews and caches noedns servers. [RT #23392/24964]
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington3181. [func] Inline-signing is now supported for master zones.
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson3180. [func] Local copies of slave zones are now saved in raw
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson format by default, to improve startup performance.
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson 'masterfile-format text;' can be used to override
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews the default, if desired. [RT #25867]
ed03e26c44347ec20aff6608de6082e3594d95fbMark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews3178. [bug] A race condition introduced by change #3163 could
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews cause an assertion failure on shutdown. [RT #26271]
e8d86192fc424f49e43df9cee439ca5c793e6000Mark Andrews3177. [func] 'rndc keydone', remove the indicator record that
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews named has finished signing the zone with the
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews corresponding key. [RT #26206]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson3176. [doc] Corrected example code and added a README to the
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson sample external DLZ module in contrib/dlz/example.
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3175. [bug] Fix how DNSSEC positive wildcard responses from a
5af0708e7fd78976a33de70f9380785f4086a1f0Andreas Gustafsson NSEC3 signed zone are validated. Stop sending a
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson unnecessary NSEC3 record when generating such
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson responses. [RT #26200]
452b30ddb32dd9370b2e5ee10427dd3758ef98b4Mark Andrews3174. [bug] Always compute to revoked key tag from scratch.
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
6668eca26bf3123750afda48b69991bd29d83807Mark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
cb8fd52bbeaf40c9166a0144541c4ff2bafc2dd6Andreas Gustafsson3171. [bug] Exclusively lock the task when adding a zone using
1eaad22e111709254c70953a4dc768b6d4d31646Mark Andrews 'rndc addzone'. [RT #25600]
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson --- 9.9.0a3 released ---
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson3170. [func] RPZ update:
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson - fix precedence among competing rules
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson - improve ARM text including documenting rule precedence
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson - try to rewrite CNAME chains until first hit
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer - new "rpz" logging channel
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer - RDATA for CNAME rules can include wildcards
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer - replace "NO-OP" named.conf policy override with
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer "PASSTHRU" and add "DISABLED" override ("NO-OP"
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer is still recognized)
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer3169. [func] Catch db/version mis-matches when calling dns_db_*().
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson3168. [bug] Nxdomain redirection could trigger an assert with
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson a ANY query. [RT #26017]
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson3167. [bug] Negative answers from forwarders were not being
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson correctly tagged making them appear to not be cached.
539cad8f49b38540b7c20c64d1ef456cb2fa7914Andreas Gustafsson3166. [bug] Upgrading a zone to support inline-signing failed.
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3165. [bug] dnssec-signzone could generate new signatures when
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews resigning, even when valid signatures were already
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews present. [RT #26025]
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews3164. [func] Enable DLZ modules to retrieve client information,
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews so that responses can be changed depending on the
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson source address of the query. [RT #25768]
ea72586fc5c360539117119ee35e4c3a04b912bcAndreas Gustafsson3163. [bug] Use finer-grained locking in client.c to address
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson concurrency problems with large numbers of threads.
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews3162. [test] start.pl: modified to allow for "named.args" in
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews ns*/ subdirectory to override stock arguments to
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews named. Largely from RT#26044, but no separate ticket.
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer3161. [bug] zone.c:del_sigs failed to always reset rdata leading
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer assertion failures. [RT #25880]
305b0eda33b16493355db1f1c86313a6f5fbfc3bDanny Mayer3160. [bug] When printing out a NSEC3 record in multiline form
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson the newline was not being printed causing type codes
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson to be run together. [RT #25873]
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews3159. [bug] On some platforms, named could assert on startup
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson when running in a chrooted environment without
de9833be77ef92c17b35c02d138a0ad8df34dd91Mark Andrews /proc. [RT #25863]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3158. [bug] Recursive servers would prefer a particular UDP
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson socket instead of using all available sockets.
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson the config file before pausing the server. [RT #21373]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3156. [placeholder]
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson --- 9.9.0a2 released ---
c0b6c1a5ab50722793cb99b0d8a1e9e910c146a5Andreas Gustafsson3155. [bug] Fixed a build failure when using contrib DLZ
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
907ec2c618d08d8322b04729779b24bd778d49e7Mark Andrews an assert. [RT #25452]
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson3153. [func] Extend request-ixfr to zone level and remove the
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson side effect of forcing an AXFR. [RT #25156]
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson3152. [cleanup] Some versions of gcc and clang failed due to
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson incorrect use of __builtin_expect. [RT #25183]
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson3151. [bug] Queries for type RRSIG or SIG could be handled
44c141f9471a6bb1fac0cba7880ba768ede2f0c8Brian Wellington incorrectly. [RT #21050]
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson3150. [func] Improved startup and reconfiguration time by
e1a153c3f095e217eea29958950fea36e54862ceAndreas Gustafsson enabling zones to load in multiple threads. [RT #25333]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson3149. [placeholder]
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson3148. [bug] Processing of normal queries could be stalled when
ab3eaa20e9a7e56208408563c79b4f8ac01d5e84Andreas Gustafsson forwarding a UPDATE message. [RT #24711]
4d77dbcfa052c065a87d2d35b116f17b74bae573Andreas Gustafsson3147. [func] Initial inline signing support. [RT #23657]
c38b92000c0f1a95daaad5468777e165b8047de9Mark Andrews --- 9.9.0a1 released ---
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson3145. [test] Capture output of ATF unit tests in "./atf.out" if
22f0b13f28a7df3b348b18848d0ccd745ea88c3cAndreas Gustafsson there were any errors while running them. [RT #25527]
ee3ab6063dd13b5947d3fbe88b9ce8f38d65df9dBrian Wellington3144. [bug] dns_dbiterator_seek() could trigger an assert when
9261ca5fc8a564968f34e108eb862157471ca50eAndreas Gustafsson used with a nonexistent database node. [RT #25358]
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington3143. [bug] Silence clang compiler warnings. [RT #25174]
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington3142. [bug] NAPTR is class agnostic. [RT #25429]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3141. [bug] Silence spurious "zone serial (0) unchanged" messages
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington associated with empty zones. [RT #25079]
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews3140. [func] New command "rndc flushtree <name>" clears the
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews specified name from the server cache along with
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington all names under it. [RT #19970]
1cb6e8cbe41afade950837319e04da4ccf8649e0Brian Wellington3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
2033e305852d4b76772885ea73ebfb6776c1f820Mark Andrews for the hashing algorithms (md5, sha1 - sha512, and
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson their hmac counterparts). [RT #25067]
6443201354efa09f16ada26dab99e9b7f8271521Andreas Gustafsson3138. [bug] Address memory leaks and out-of-order operations when
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington shutting named down. [RT #25210]
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington3137. [func] Improve hardware scalability by allowing multiple
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington worker threads to process incoming UDP packets.
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews This can significantly increase query throughput
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews on some systems. [RT #22992]
0176adc7c58bb8bd60ec71eeae94dbfbbc4018a8Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson empty zones switched on by the 'empty-zones-enable'
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson option. [RT #24990]
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3134. [bug] Improve the accuracy of dnssec-signzone's signing
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson statistics. [RT #16030]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3133. [bug] Change #3114 was incomplete. [RT #24577]
0d5e7cd0afaee07302f8364aa454f09b4c63ea79Andreas Gustafsson3132. [placeholder]
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson3131. [tuning] Improve scalability by allocating one zone task
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson per 100 zones at startup time, rather than using a
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson fixed-size task table. [RT #24406]
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington3130. [func] Support alternate methods for managing a dynamic
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson zone's serial number. Two methods are currently
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington defined using serial-update-method, "increment"
22815444822da17fab82d4ab115da6e055ea1754Brian Wellington (default) and "unixtime". [RT #23849]
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson3129. [bug] Named could crash on 'rndc reconfig' when
35db8a8eda6a889675138eb125d366c8851f68a5Andreas Gustafsson allow-new-zones was set to yes and named ACLs
c6de6524d777c90ae8011af8b10f5cac044081e5Mark Andrews were used. [RT #22739]
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington3128. [func] Inserting an NSEC3PARAM via dynamic update in an
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson auto-dnssec zone that has not been signed yet
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington will cause it to be signed with the specified NSEC3
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington parameters when keys are activated. The
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington NSEC3PARAM record will not appear in the zone until
bd6504aa9aa16a912412fbe010046aaf4bf23621Brian Wellington it is signed, but the parameters will be stored.
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson3127. [bug] 'rndc thaw' will now remove a zone's journal file
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley if the zone serial number has been changed and
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley ixfr-from-differences is not in use. [RT #24687]
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley3126. [security] Using DNAME record to generate replacements caused
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington RPZ to exit with a assertion failure. [RT #24766]
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington3125. [security] Using wildcard CNAME records as a replacement with
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson RPZ caused named to exit with a assertion failure.
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3124. [bug] Use an rdataset attribute flag to indicate
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson negative-cache records rather than using rrtype 0;
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson this will prevent problems when that rrtype is
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson used in actual DNS packets. [RT #24777]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3123. [security] Change #2912 exposed a latent flaw in
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington dns_rdataset_totext() that could cause named to
82c65f4f62819340ef8198932d3eab8a308a4874Andreas Gustafsson crash with an assertion failure. [RT #24777]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington3121. [security] An authoritative name server sending a negative
debff476ad3512687a354499c25d2793e2009acdBrian Wellington response containing a very large RRset could
debff476ad3512687a354499c25d2793e2009acdBrian Wellington trigger an off-by-one error in the ncache code
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson and crash named. [RT #24650]
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson3120. [bug] Named could fail to validate zones listed in a DLV
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson that validated insecure without using DLV and had
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson DS records in the parent zone. [RT #24631]
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson3119. [bug] When rolling to a new DNSSEC key, a private-type
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington record could be created and never marked complete.
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson3118. [bug] nsupdate could dump core on shutdown when using
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson SIG(0) keys. [RT #24604]
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson3117. [cleanup] Remove doc and parser references to the
57188b5ff2397c0517e55f622879e69ee547918dAndreas Gustafsson never-implemented 'auto-dnssec create' option.
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson3116. [func] New 'dnssec-update-mode' option controls updates
9a72459b6040b30d043c5fd9e283441b847e569aAndreas Gustafsson of DNSSEC records in signed dynamic zones. Set to
9a72459b6040b30d043c5fd9e283441b847e569aAndreas Gustafsson 'no-resign' to disable automatic RRSIG regeneration
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson while retaining the ability to sign new or changed
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson data. [RT #24533]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson3115. [bug] Named could fail to return requested data when
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson following a CNAME that points into the same zone.
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews inactive and there is no replacement key. [RT #23136]
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson3113. [doc] Document the relationship between serial-query-rate
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence and NOTIFY messages.
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence3112. [doc] Add missing descriptions of the update policy name
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence types "ms-self", "ms-subdomain", "krb5-self" and
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence "krb5-subdomain", which allow machines to update
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence their own records, to the BIND 9 ARM.
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence3111. [bug] Improved consistency checks for dnssec-enable and
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence dnssec-validation, added test cases to the
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence checkconf system test. [RT #24398]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence3110. [bug] dnssec-signzone: Wrong error message could appear
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson when attempting to sign with no KSK. [RT #24369]
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson3109. [func] The also-notify option now uses the same syntax
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington as a zone's masters clause. This means it is
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson now possible to specify a TSIG key to use when
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington sending notifies to a given server, or to include
f5ebf2f0c9e9d2068ace1dbcc2ef2ed3ebdbfde5Andreas Gustafsson an explicit named masters list in an also-notfiy
8bcf7a157900c3a05168aaec708b8c664b96d797Andreas Gustafsson statement. [RT #23508]
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson3108. [cleanup] dnssec-signzone: Clarified some error and
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson code (use -P instead). [RT #20852]
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
112d9875bf33e2382f9a986d3e58fce08f1935fcOlafur Gudmundsson when using -x. [RT #20852]
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence3106. [func] When logging client requests, include the name of
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence the TSIG key if any. [RT #23619]
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson3105. [bug] GOST support can be suppressed by "configure
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson --without-gost" [RT #24367]
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson3104. [bug] Better support for cross-compiling. [RT #24367]
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson3103. [bug] Configuring 'dnssec-validation auto' in a view
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson instead of in the options statement could trigger
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson an assertion failure in named-checkconf. [RT #24382]
4f4e44c98f315bfadc6dded1b86b465222a83967David Lawrence3102. [func] New 'dnssec-loadkeys-interval' option configures
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence how often, in minutes, to check the key repository
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence for updates when using automatic key maintenance.
464c2e4bb960d15bd60d53c3ef3ae7414b129037David Lawrence Default is every 60 minutes (formerly hard-coded
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence to 12 hours). [RT #23744]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence3101. [bug] Zones using automatic key maintenance could fail
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence to check the key repository for updates. [RT #23744]
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence3100. [security] Certain response policy zone configurations could
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence trigger an INSIST when receiving a query of type
04260c5c48d234734863f0222e207b6564cd41a8David Lawrence RRSIG. [RT #24280]
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence3099. [test] "dlz" system test now runs but gives R:SKIPPED if
f479c9ff5576b3d138c7e52cfc2319b185b7ebcfDavid Lawrence not compiled with --with-dlz-filesystem. [RT #24146]
6c35e4dd17e6562a6b4d106cbf1d824b9f529356David Lawrence3098. [bug] DLZ zones were answering without setting the AA bit.
504f7802d4c9b43db4820f496c4d00e078effa18David Lawrence3097. [test] Add a tool to test handling of malformed packets.
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson3096. [bug] Set KRB5_KTNAME before calling log_cred() in
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington dst_gssapi_acceptctx(). [RT #24004]
3b6bcedffe1d326fd9f6aa3bfb1537af0975fab8Brian Wellington3095. [bug] Handle isolated reserved ports in the port range.
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson3094. [doc] Expand dns64 documentation.
7fe2ead2b3e23f68c1d3c79da51ef5af4f678f7dAndreas Gustafsson3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson3092. [bug] Signatures for records at the zone apex could go
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson stale due to an incorrect timer setting. [RT #23769]
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson3091. [bug] Fixed a bug in which zone keys that were published
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson and then subsequently activated could fail to trigger
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington automatic signing. [RT #22911]
6c6a6c9f5e2b3c6fd72263eac155e4feddb77316Brian Wellington3090. [func] Make --with-gssapi default [RT #23738]
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson3089. [func] dnssec-dsfromkey now supports reading keys from
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews standard input "dnssec-dsfromkey -f -". [RT# 20662]
4585aeb2cc84c0e0602da5abf47c31f92ec3b6b2Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson and add setup.sh in order to resolve changing
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson named.conf issue. [RT #23687]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson3087. [bug] DDNS updates using SIG(0) with update-policy match
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson type "external" could cause a crash. [RT #23735]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson3086. [bug] Running dnssec-settime -f on an old-style key will
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson now force an update to the new key format even if no
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson other change has been specified, using "-P now -A now"
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson as default values. [RT #22474]
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson3085. [func] New '-R' option in dnssec-signzone forces removal
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson of signatures which have not yet expired but
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson were generated by a key that no longer exists.
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3084. [func] A new command "rndc sync" dumps pending changes in
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson a dynamic zone to disk; "rndc sync -clean" also
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews removes the journal file after syncing. Also,
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews "rndc freeze" no longer removes journal files.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3083. [bug] NOTIFY messages were not being sent when generating
02e81689e3eff98a8d70c98a7cc45c150472316aBrian Wellington a NSEC3 chain incrementally. [RT #23702]
99a8d30559834dc12bd80f4f164fa6375f73cb62Mark Andrews3082. [port] strtok_r is threads only. [RT #23747]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3081. [bug] Failure of DNAME substitution did not return
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence YXDOMAIN. [RT #23591]
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3079. [bug] Handle isc_event_allocate failures in t_tasks.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence3078. [func] Added a new include file with function typedefs
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence for the DLZ "dlopen" driver. [RT #23629]
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews3077. [bug] zone.c:zone_refreshkeys() incorrectly called
aec9f4d0723b0cffcfa9152533fb8f616ec7313bAndreas Gustafsson dns_zone_attach(), use zone->irefs instead. [RT #23303]
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
afb0a628efd8ecf40f66f6b8d0711bca62be2a9aMark Andrews dnssec-keyfromlabel sets the default TTL of the
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington key. When possible, automatic signing will use that
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson TTL when the key is published. [RT #23304]
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
b5a86fe434c7d58d28af3b5c70c1743979f13aaeMark Andrews timestamp when determining which keys are active.
fb13bc029f62193a07d92384a910a0317fc7e0b0Brian Wellington3074. [bug] Make the adb cache read through for zone data and
3042b3e2711d00b7fd9ffbf51443ad761d30427fMark Andrews glue learn for zone named is authoritative for.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3073. [bug] managed-keys changes were not properly being recorded.
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3071. [bug] has_nsec could be used unintialised in
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence update.c:next_active. [RT #20256]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3070. [bug] dnssec-signzone potential NULL pointer dereference.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3069. [cleanup] Silence warnings messages from clang static analysis.
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3068. [bug] Named failed to build with a OpenSSL without engine
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence support. [RT #23473]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3067. [bug] ixfr-from-differences {master|slave}; failed to
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence select the master/slave zones. [RT #23580]
74cc9d733ca94d43310ff3df84d7a4644c0950f9Andreas Gustafsson3066. [func] The DLZ "dlopen" driver is now built by default,
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence no longer requiring a configure option. To
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence disable it, use "configure --without-dlopen".
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence Driver also supported on win32. [RT #23467]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3065. [bug] RRSIG could have time stamps too far in the future.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3064. [bug] powerpc: add sync instructions to the end of atomic
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence operations. [RT #23469]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence3062. [func] Made several changes to enhance human readability
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence of DNSSEC data in dig output and in generated
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence - DNSKEY record comments are more verbose, no
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence longer used in multiline mode only
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence - multiline RRSIG records reformatted
5455f30a7532738d750252c00e649890c694ee30Brian Wellington - multiline output mode for NSEC3PARAM records
5455f30a7532738d750252c00e649890c694ee30Brian Wellington - "dig +norrcomments" suppresses DNSKEY comments
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington - "dig +split=X" breaks hex/base64 records into
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson fields of width X; "dig +nosplit" disables this.
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington3061. [func] New option "dnssec-signzone -D", only write out
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington generated DNSSEC records. [RT #22896]
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
89d03d4715120fd0c968775bf0724b5a2a647539Mark Andrews specification of a separate expiration date
2ae4dd0dbd50b3159476537c60ccdc8b64364356Mark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
761a21dfab558235030ccfc3d61979146e2cf4b5Mark Andrews3059. [test] Added a regression test for change #3023.
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson3058. [bug] Cause named to terminate at startup or rndc reconfig/
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson reload to fail, if a log file specified in the conf
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson file isn't a plain file. [RT #22771]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson3057. [bug] "rndc secroots" would abort after the first error
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson and so could miss some views. [RT #23488]
5ce23ccf3f324dc90ab9b4426b1da6284b0e2abfAndreas Gustafsson3056. [func] Added support for URI resource record. [RT #23386]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson3055. [placeholder]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson3054. [bug] Added elliptic curve support check in
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson GOST OpenSSL engine detection. [RT #23485]
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson3053. [bug] Under a sustained high query load with a finite
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson max-cache-size, it was possible for cache memory
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson to be exhausted and not recovered. [RT #23371]
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson3052. [test] Fixed last autosign test report. [RT #23256]
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson3051. [bug] NS records obsure DNAME records at the bottom of the
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson zone if both are present. [RT #23035]
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson3050. [bug] The autosign system test was timing dependent.
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson Wait for the initial autosigning to complete
6060b0ac76667afae3c9132ab6e3568a7a693f5dAndreas Gustafsson before running the rest of the test. [RT #23035]
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington3049. [bug] Save and restore the gid when creating creating
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington named.pid at startup. [RT #23290]
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley3048. [bug] Fully separate view key mangement. [RT #23419]
af1a99a13d73126760b755d63ff7ef8c28ca9070Bob Halley3047. [bug] DNSKEY NODATA responses not cached fixed in
751aa24c98fea02215cad95a08411af547d70e41Bob Halley validator.c. Tests added to dnssec system test.
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson3046. [bug] Use RRSIG original TTL to compute validated RRset
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson and RRSIG TTL. [RT #23332]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson3045. [removed] Replaced by change #3050.
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson3044. [bug] Hold the socket manager lock while freeing the socket.
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
f08f3c6caeb8460cb679a8687f61da61fff69fb0Mark Andrews version 0.12) for development of future unit tests.
69d44b2f5ac8e35bdb0b80aeb304f5cb62197892Mark Andrews Use configure --with-atf to build ATF internally
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson or configure --with-atf=prefix to use an external
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson copy. [RT #23209]
8fbd23c0aaacdde1348b6457c5db14c433096fd2Andreas Gustafsson3042. [bug] dig +trace could fail attempting to use IPv6
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington addresses on systems with only IPv4 connectivity.
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington3041. [bug] dnssec-signzone failed to generate new signatures on
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson ttl changes. [RT #23330]
76477bd0e0a8f150f06f45c347d286b782cfa679Brian Wellington3040. [bug] Named failed to validate insecure zones where a node
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson with a CNAME existed between the trust anchor and the
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson top of the zone. [RT #23338]
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson3039. [func] Redirect on NXDOMAIN support. [RT #23146]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley3038. [bug] Install <dns/rpz.h>. [RT #23342]
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley3037. [doc] Update COPYRIGHT to contain all the individual
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley copyright notices that cover various parts.
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson3036. [bug] Check built-in zone arguments to see if the zone
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson is re-usable or not. [RT #21914]
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson3035. [cleanup] Simplify by using strlcpy. [RT #22521]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
6f115bdb61672871bd822bdcd09cb1a3aad38aa0David Lawrence3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
5e194abb5b548524e5c0fd2bb4627ec698b75e2bAndreas Gustafsson3029. [bug] isc_netaddr_format() handle a zero sized buffer.
09ae77ca30eb17ee32d3f7720ca796a72259cde6Andreas Gustafsson3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
cedd0ab1e812ec7cf05d57c3e602db41b79f0a2aAndreas Gustafsson3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
8c3989000a19f88415d094eb5984f7cf6ba2340cBrian Wellington catch NULL pointer dereferences before they happen.
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington3026. [bug] lib/isc/httpd.c: check that we have enough space
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson after calling grow_headerspace() and if not
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington re-call grow_headerspace() until we do. [RT #22521]
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington3025. [bug] Fixed a possible deadlock due to zone resigning.
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson3024. [func] RTT Banding removed due to minor security increase
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews but major impact on resolver latency. [RT #23310]
0c9dd74fecd876563b7f0e4662243ff026b59622Andreas Gustafsson3023. [bug] Named could be left in an inconsistent state when
76873278a44e5ac36ac61b070035ca6d1f353f59Andreas Gustafsson receiving multiple AXFR response messages that were
0c9dd74fecd876563b7f0e4662243ff026b59622Andreas Gustafsson not all TSIG-signed. [RT #23254]
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington3021. [bug] Change #3010 was incomplete. [RT #22296]
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington3020. [bug] auto-dnssec failed to correctly update the zone when
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington changing the DNSKEY RRset. [RT #23232]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3019. [test] Test: check apex NSEC3 records after adding DNSKEY
55ddb88e53838693370c213930beda1652b8a583Brian Wellington record via UPDATE. [RT #23229]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3018. [bug] Named failed to check for the "none;" acl when deciding
daad43e5a4e83bd3c055632799ab67e269467db0Brian Wellington if a zone may need to be re-signed. [RT #23120]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3017. [doc] dnssec-keyfromlabel -I was not properly documented.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3016. [bug] rndc usage missing '-b'. [RT #22937]
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
907620b5e0d898da324192cbbe5a5b518f55d175Bob Halley IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington3014. [placeholder]
2c9db9314993504064c1a71f4a059ff9493a75caBrian Wellington3013. [bug] The DNS64 ttl was not always being set as expected.
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence3012. [bug] Remove DNSKEY TTL change pairs before generating
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence signing records for any remaining DNSKEY changes.
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence3011. [func] Change the default query timeout from 30 seconds
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington to 10. Allow setting this in named.conf using the new
668f8d91db59f4dd89a0b54206f87879354339f5Brian Wellington 'resolver-query-timeout' option, which specifies a max
d7ba3622ffa20c653ef6c8cfae42d8cd26465b7fBrian Wellington time in seconds. 0 means 'default' and anything longer
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson than 30 will be silently set to 30. [RT #22852]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson for refreshing managed-keys. [RT #22296]
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington3009. [bug] clients-per-query code didn't work as expected with
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington particular query patterns. [RT #22972]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson --- 9.8.0b1 released ---
c1ff0308f3f67bf148f96ca952db081eb5fd8383Brian Wellington3008. [func] Response policy zones (RPZ) support. [RT #21726]
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson3007. [bug] Named failed to preserve the case of domain names in
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson rdata which is not compressible when writing master
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson files. [RT #22863]
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson3006. [func] Allow dynamically generated TSIG keys to be preserved
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson across restarts of named. Initially this is for
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson TSIG keys generated using GSSAPI. [RT #22639]
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson3005. [port] Solaris: Work around the lack of
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington gsskrb5_register_acceptor_identity() by setting
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington the KRB5_KTNAME environment variable to the
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson contents of tkey-gssapi-keytab. Also fixed
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson test errors on MacOSX. [RT #22853]
3d1483d86dce11fffd03c5b6c93be2e689f522abAndreas Gustafsson3004. [func] DNS64 reverse support. [RT #22769]
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington3003. [experimental] Added update-policy match type "external",
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson enabling named to defer the decision of whether to
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson allow a dynamic update to an external daemon.
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson (Contributed by Andrew Tridgell.) [RT #22758]
48565891e8f2f8c77b87908b4893f693a08e9ba9Brian Wellington3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
b0390aab30438a13f533cccae9389945214b1421Brian Wellington3001. [func] Added a default trust anchor for the root zone, which
b0390aab30438a13f533cccae9389945214b1421Brian Wellington can be switched on by setting "dnssec-validation auto;"
b0390aab30438a13f533cccae9389945214b1421Brian Wellington in the named.conf options. [RT #21727]
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington3000. [bug] More TKEY/GSS fixes:
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson - nsupdate can now get the default realm from
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson the user's Kerberos principal
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson - corrected gsstest compilation flags
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington - improved documentation
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington - fixed some NULL dereferences
d9112843333472bb7700c02a10d18e2b253b2708Bob Halley2999. [func] Add GOST support (RFC 5933). [RT #20639]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson to the task api. [RT #22776]
279de54fe3a0ac10b64762b18a4569c07b15d742Andreas Gustafsson2997. [func] named -V now reports the OpenSSL and libxml2 verions
04cb6056a6539539e0fc2ed695298f7fa7b1d632Brian Wellington it was compiled against. [RT #22687]
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington2996. [security] Temporarily disable SO_ACCEPTFILTER support.
02e7e0ba65a26a5f8728b0ee256f7253795cf839Brian Wellington2995. [bug] The Kerberos realm was not being correctly extracted
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson from the signer's identity. [RT #22770]
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence do not use threads on earlier versions. Also kill
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence the unproven-pthreads, mit-pthreads, and ptl2 support.
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2993. [func] Dynamically grow adb hash tables. [RT #21186]
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson for looking at a secure delegation. [RT #22059]
88a790c39176f72a8f98f134b83df92e09a8c56bAndreas Gustafsson2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington dynamic zones. [RT #22365]
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington2990. [bug] 'dnssec-settime -S' no longer tests prepublication
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington interval validity when the interval is set to 0.
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley2989. [func] Added support for writable DLZ zones. (Contributed
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley by Andrew Tridgell of the Samba project.) [RT #22629]
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
76b3ec5e0c3ae856bc1000270bf3df13580673ebBrian Wellington of external DLZ drivers that can be loaded as
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley shared objects at runtime rather than linked with
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley named. Currently this is switched on via a
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley compile-time option, "configure --with-dlz-dlopen".
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington Note: the syntax for configuring DLZ zones
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington is likely to be refined in future releases.
f9e1aa0c440b6c6938967ed5356ec025ea40502eBrian Wellington (Contributed by Andrew Tridgell of the Samba
4e3f8e480f220ef8a87fd28d02f9001b8fc6f423Bob Halley project.) [RT #22629]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2987. [func] Improve ease of configuring TKEY/GSS updates by
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson adding a "tkey-gssapi-keytab" option. If set,
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson updates will be allowed with any key matching
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson a principal in the specified keytab file.
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson "tkey-gssapi-credential" is no longer required
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson and is expected to be deprecated. (Contributed
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson by Andrew Tridgell of the Samba project.)
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2986. [func] Add new zone type "static-stub". It's like a stub
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson zone, but the nameserver names and/or their IP
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington addresses are statically configured. [RT #21474]
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley2985. [bug] Add a regression test for change #2896. [RT #21324]
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington2984. [bug] Don't run MX checks when the target of the MX record
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington is ".". [RT #22645]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson --- 9.8.0a1 released ---
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2982. [bug] Reference count dst keys. dst_key_attach() can be used
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson increment the reference count.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson Note: dns_tsigkey_createfromkey() callers should now
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson always call dst_key_free() rather than setting it
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews to NULL on success. [RT #22672]
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
a93cf7e83be621d3d68f51e37121a47a70a6757bMark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
a97b72bac75dd2b4294108f59e1273f50495583cAndreas Gustafsson TTL of the NSEC3PARAM RRset. [RT #22363]
1c1156b6e71555e593ed4bbca2284055c9f6fa45Andreas Gustafsson2979. [bug] named could deadlock during shutdown if two
1c1156b6e71555e593ed4bbca2284055c9f6fa45Andreas Gustafsson "rndc stop" commands were issued at the same
c05eeed3c915d55a4949f5c2ce8700a0b0f9381bAndreas Gustafsson time. [RT #22108]
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2978. [port] hpux: look for <devpoll.h> [RT #21919]
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2977. [bug] 'nsupdate -l' report if the session key is missing.
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2976. [bug] named could die on exit after negotiating a GSS-TSIG
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson key. [RT #22573]
4d35b6836eb57387a9da6b103331b59cc988b827Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews wrong lock which could lead to server deadlock.
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley2974. [bug] Some valid UPDATE requests could fail due to a
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley consistency check examining the existing version
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley of the zone rather than the new version resulting
f4b5a0f43481026ea27bd96e3584ca0e92542f0dBob Halley from the UPDATE. [RT #22413]
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2973. [bug] bind.keys.h was being removed by the "make clean"
4e605108c6533c2ec6311ee7a466582392656dddAndreas Gustafsson at the end of configure resulting in build failures
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson where there is very old version of perl installed.
ea544b0511a66bc5f3700d56a72dcd808fdf22e8Brian Wellington Move it to "make maintainer-clean". [RT #22230]
762a538eed7f4de4c340090536553f9c73f6432aBrian Wellington2972. [bug] win32: address windows socket errors. [RT #21906]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2971. [bug] Fixed a bug that caused journal files not to be
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington compacted on Windows systems as a result of
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington non-POSIX-compliant rename() semantics. [RT #22434]
7ae7d499f353549162ddcf6fed957ea21e4fa52bMark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson any matching RRSIG records. A subsequent lookup of
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley of NO DATA cache entry could trigger a INSIST when the
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley unexpected RRSIG was also returned with the NO DATA
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley cache entry.
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley CVE-2010-3613, VU#706148. [RT #22288]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson2969. [security] Fix acl type processing so that allow-query works
40c1177517ca5312371da6cc697d813576cfe5a8Andreas Gustafsson in options and view statements. Also add a new
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson set of tests to verify proper functioning.
22cafd0ece9c8d22a1218f000afdbceda21fe8afBrian Wellington CVE-2010-3615, VU#510208. [RT #22418]
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington2968. [security] Named could fail to prove a data set was insecure
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington before marking it as insecure. One set of conditions
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington that can trigger this occurs naturally when rolling
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington DNSKEY algorithms.
218c8472e6c8c1a014e412615cc97bb93c0ef9c2Brian Wellington CVE-2010-3614, VU#837744. [RT #22309]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2967. [bug] 'host -D' now turns on debugging messages earlier.
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2966. [bug] isc_print_vsnprintf() failed to check if there was
4b9f0fd0791cb9cb31087789a03fa3a28dd4b583Andreas Gustafsson space available in the buffer when adding a left
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson justified character with a non zero width,
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson (e.g. "%-1c"). [RT #22270]
dc1453b15d6656cd0661d5bec56359efa649268dAndreas Gustafsson2965. [func] Test HMAC functions using test data from RFC 2104 and
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews RFC 4634. [RT #21702]
31039b15173fb3e375269991920e4843f664457eMark Andrews2964. [placeholder]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2963. [security] The allow-query acl was being applied instead of the
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson allow-query-cache acl to cache lookups. [RT #22114]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2962. [port] win32: add more dependencies to BINDBuild.dsw.
019fefd77d7e77f3c841808ab604f8ce31679d2dBrian Wellington2961. [bug] Be still more selective about the non-authoritative
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson answers we apply change 2748 to. [RT #22074]
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2960. [func] Check that named accepts non-authoritative answers.
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington2959. [func] Check that named starts with a missing masterfile.
e880677f633f726b7df11ba3e59d4406e22256aaMark Andrews2958. [bug] named failed to start with a missing master file.
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson2957. [bug] entropy_get() and entropy_getpseudo() failed to match
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson the API for RAND_bytes() and RAND_pseudo_bytes()
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson respectively. [RT #21962]
9e560b59a722d06a62b5aed761e71fec72638a7cBrian Wellington2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington2955. [func] Provide more detail in the recursing log. [RT #22043]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson build_sqldbinstance failure. [RT #21623]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley2953. [bug] Silence spurious "expected covering NSEC3, got an
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson exact match" message when returning a wildcard
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley no data response. [RT #21744]
8e68489885e744ab48907414b4199c36858c27ddMark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
8e68489885e744ab48907414b4199c36858c27ddMark Andrews to initialise winsock. [RT #21932]
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson2951. [bug] named failed to generate a correct signed response
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson in a optout, delegation only zone with no secure
c17c59662f0969a5e52e8b7529cbde1a7c746095Andreas Gustafsson delegations. [RT #22007]
ec4f7c6d0f0cfc72bcecdb22bf59890d590218d6Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
d8d95c7d2eae28c5adbde097e88efa115bae6f35Andreas Gustafsson falling back to TCP on UDP timeouts when
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson ixfr-from-differences was set. [RT #21595]
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson2949. [bug] dns_view_setnewzones() contained a memory leak if
651421a5db8a9edf39c76fd8cf859409eb8c373bAndreas Gustafsson it was called multiple times. [RT #21942]
7427490a67b9547242b57c255254f7e146127c48Bob Halley2948. [port] MacOS: provide a mechanism to configure the test
7427490a67b9547242b57c255254f7e146127c48Bob Halley interfaces at reboot. See bin/tests/system/README
7427490a67b9547242b57c255254f7e146127c48Bob Halley for details.
fbe35d126f2c4df000f50662ed9d90ced13188c3Andreas Gustafsson2947. [placeholder]
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson2946. [doc] Document the default values for the minimum and maximum
dfa0badebe5a8260281228d94dbe28e4314a9df6Andreas Gustafsson zone refresh and retry values in the ARM. [RT #21886]
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
2d0627005d48b7657fa11792c123466b4f974b61Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson2943. [func] Add support to load new keys into managed zones
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington without signing immediately with "rndc loadkeys".
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington Add support to link keys with "dnssec-keygen -S"
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington and "dnssec-settime -S". [RT #21351]
1ac2c28488fb5de80b3ce9aac3500d215cb61728Brian Wellington2942. [contrib] zone2sqlite failed to setup the entropy sources.
a1cad3b231800ca928751ff8889bdc6d312d1f88Andreas Gustafsson2941. [bug] sdb and sdlz (dlz's zone database) failed to support
a12d9cfa59b5981c52e1aaafedf652d5128f3448Brian Wellington DNAME at the zone apex. [RT #21610]
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington2940. [port] Remove connection aborted error message on
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington Windows. [RT #21549]
e4aeba32725a79e295c2ceed1919cba076530ba3Andreas Gustafsson2939. [func] Check that named successfully skips NSEC3 records
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington that fail to match the NSEC3PARAM record currently
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson in use. [RT# 21868]
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson2938. [bug] When generating signed responses, from a signed zone
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson that uses NSEC3, named would use a uninitialised
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson pointer if it needed to skip a NSEC3 record because
f6987630ce2d424a34bb9d373b3c08de48010287Andreas Gustafsson it didn't match the selected NSEC3PARAM record for
c27148868266dd718b6677c794b3e6dca53c3bdcAndreas Gustafsson zone. [RT# 21868]
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews2937. [bug] Worked around an apparent race condition in over
f8a44ed40032e034883019ac556f3bb732491a32Mark Andrews memory conditions. Without this fix a DNS cache DB or
f1007e99b7db3f4e65663d348530f078adb48ccbMark Andrews ADB could incorrectly stay in an over memory state,
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews effectively refusing further caching, which
07d6480b684d3745e645f35a8b95dae9bda982a3Mark Andrews subsequently made a BIND 9 caching server unworkable.
363cb30a83e8e57bc8874e621910f0e23dd84909Mark Andrews This fix prevents this problem from happening by
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson polling the state of the memory context, rather than
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington making a copy of the state, which appeared to cause
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington a race. This is a "workaround" in that it doesn't
ea6709ec8a66e3ffef9c9466613df499567c57f8Brian Wellington solve the possible race per se, but several experiments
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson proved this change solves the symptom. Also, the
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson polling overhead hasn't been reported to be an issue.
c2c275f5f4ead0943c76b6463cf7a93095559c64Andreas Gustafsson This bug should only affect a caching server that
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson specifies a finite max-cache-size. It's also quite
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson likely that the bug happens only when enabling threads,
634784cb66a1c9ddee0c448f71580f024c8fe40bAndreas Gustafsson but it's not confirmed yet. [RT #21818]
ce1269825c9d9c4bca42ae9750a7a2fd93a45557Mark Andrews2936. [func] Improved configuration syntax and multiple-view
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson support for addzone/delzone feature (see change
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson #2930). Removed "new-zone-file" option, replaced
e8af4e152413190e5553c2fb3074a1cc689c6cefAndreas Gustafsson with "allow-new-zones (yes|no)". The new-zone-file
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington for each view is now created automatically, with
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington a filename generated from a hash of the view name.
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington It is no longer necessary to "include" the
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington new-zone-file in named.conf; this happens
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington automatically. Zones that were not added via
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington "rndc addzone" can no longer be removed with
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington "rndc delzone". [RT #19447]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2935. [bug] nsupdate: improve 'file not found' error message.
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson2933. [bug] 'dig +nsid' used stack memory after it went out of
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson scope. This could potentially result in a unknown,
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington potentially malformed, EDNS option being sent instead
1ec527b71267747cc3ae4d9849aa4f6362c78ea9Brian Wellington of the desired NSID option. [RT #21781]
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington2932. [cleanup] Corrected a numbering error in the "dnssec" test.
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson2931. [bug] Temporarily and partially disable change 2864
bfd14616fa53e2572e7492a21467fad239deeae7Andreas Gustafsson because it would cause infinite attempts of RRSIG
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson queries. This is an urgent care fix; we'll
14bb9cccae74676e25ae145dc14a3681cc3022b9Mark Andrews revisit the issue and complete the fix later.
01b8865b1462ba219c90cf6c00f1bf0fdf780d9bBrian Wellington2930. [experimental] New "rndc addzone" and "rndc delzone" commads
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley allow dynamic addition and deletion of zones.
3b77946b751f39bd4db5a7d1fe48a81e6b1e7a28Bob Halley To enable this feature, specify a "new-zone-file"
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson option at the view or options level in named.conf.
fb0663dbdd4811c6062fe602b511227be66aec56Mark Andrews Zone configuration information for the new zones
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson will be written into that file. To make the new
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson zones persist after a restart, "include" the file
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington into named.conf in the appropriate view. (Note:
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington This feature is not yet documented, and its syntax
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington is expected to change.) [RT #19447]
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson2929. [bug] Improved handling of GSS security contexts:
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington - added LRU expiration for generated TSIGs
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson - added the ability to use a non-default realm
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews - added new "realm" keyword in nsupdate
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson - limited lifetime of generated keys to 1 hour
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews or the lifetime of the context (whichever is
d72269740049af28b091ba81d68a067c88f53547Mark Andrews2928. [bug] Be more selective about the non-authoritative
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson answer we apply change 2748 to. [RT #21594]
7dbb39a417a28f61ba13e6e066c2f9c711f61471Mark Andrews2927. [placeholder]
a51f77a70bba62f227fb15fe72ecf959893e3f0fMark Andrews2926. [placeholder]
5e16689bd396d261779526345a1c5207e3308477Andreas Gustafsson2925. [bug] Named failed to accept uncachable negative responses
f7321615eaaf63461bd682513d2873d97ae31771Mark Andrews from insecure zones. [RT# 21555]
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington2924. [func] 'rndc secroots' dump a combined summary of the
7dec36c225ad044a6546a4e232888f3412c030a8Brian Wellington current managed keys combined with trusted keys.
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson2923. [bug] 'dig +trace' could drop core after "connection
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson timeout". [RT #21514]
725fec8d79ff36402b0f90a7a05aafa7964e387fBrian Wellington2922. [contrib] Update zkt to version 1.0.
9b0c4bf7003db929fe00a345fc96fb97677d29e0Brian Wellington2921. [bug] The resolver could attempt to destroy a fetch context
19c7cce8555ccc0c95455a0c35dedd017d420d05Mark Andrews too soon. [RT #19878]
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson to IPv4 clients. New acl 'filter-aaaa' (default any).
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
0c70ab306505d89983186e9f8bb8647de55b5d04Mark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington2917. [func] Virtual time test framework. [RT #20801]
32e64787d9bd84a012ddac506f88fbc677b49377Brian Wellington2916. [func] Add framework to use IPv6 in tests.
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington2915. [cleanup] Be smarter about which objects we attempt to compile
fa5a42fbad42f4e033376d5d4624e29d018d97b7Brian Wellington based on configure options. [RT #21444]
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington2914. [bug] Make the "autosign" system test more portable.
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews2913. [func] Add pkcs#11 system tests. [RT #20784]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington2912. [func] Windows clients don't like UPDATE responses that clear
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington the zone section. [RT #20986]
d119051ef75d5a88d28c13fb0a7c6d6757a4e9b5Brian Wellington2911. [bug] dnssec-signzone didn't handle out of zone records well.
9b0e404e5fc71a2bd4fba8a66296477f815af7d5Brian Wellington2910. [func] Sanity check Kerberos credentials. [RT #20986]
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington2909. [bug] named-checkconf -p could die if "update-policy local;"
fff07c1022643da7274d4ba1b086c9c218762dc9Brian Wellington was specified in named.conf. [RT #21416]
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson2908. [bug] It was possible for re-signing to stop after removing
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson a DNSKEY. [RT #21384]
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson2907. [bug] The export version of libdns had undefined references.
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2905. [port] aix: set use_atomic=yes with native compiler.
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson2904. [bug] When using DLV, sub-zones of the zones in the DLV,
8c6058d00f89792733b5c8d4ceee84ab5025857bAndreas Gustafsson could be incorrectly marked as insecure instead of
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson secure leading to negative proofs failing. This was
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington a unintended outcome from change 2890. [RT# 21392]
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2903. [bug] managed-keys-directory missing from namedconf.c.
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2902. [func] Add regression test for change 2897. [RT #21040]
175ba246fb074ae8caca0e76ecc8055517ab486cBrian Wellington2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
54ce9b2e29aafe1cb5f898a0983fb66e450e9559Brian Wellington2900. [bug] The placeholder negative caching element was not
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington properly constructed triggering a INSIST in
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington dns_ncache_towire(). [RT #21346]
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington2899. [port] win32: Support linking against OpenSSL 1.0.0.
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews2898. [bug] nslookup leaked memory when -domain=value was
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews specified. [RT #21301]
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson2897. [bug] NSEC3 chains could be left behind when transitioning
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer to insecure. [RT #21040]
bbd3d20d0843165a74698166a3180897fd019e18Andreas Gustafsson2896. [bug] "rndc sign" failed to properly update the zone
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer when adding a DNSKEY for publication only. [RT #21045]
f7e900edbc368275aa7cec7ebec0986e45aeadd7Mark Andrews2895. [func] genrandom: add support for the generation of multiple
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington files. [RT #20917]
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington2893. [bug] Improve managed keys support. New named.conf option
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington managed-keys-directory. [RT #20924]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2892. [bug] Handle REVOKED keys better. [RT #20961]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2891. [maint] Update empty-zones list to match
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2890. [bug] Handle the introduction of new trusted-keys and
065958bd3d26dbc25ff313cfcee07bb6a77ee47eBrian Wellington DS, DLV RRsets better. [RT #21097]
4e7942dc7612acb71b111a5e8d919960f5a9efc5Mark Andrews2889. [bug] Elements of the grammar where not properly reported.
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson2888. [bug] Only the first EDNS option was displayed. [RT #21273]
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson2887. [bug] Report the keytag times in UTC in the .key file,
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson local time is presented as a comment within the
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence comment. [RT #21223]
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence2886. [bug] ctime() is not thread safe. [RT #21223]
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence2885. [bug] Improve -fno-strict-aliasing support probing in
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence configure. [RT #21080]
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews2884. [bug] Insufficient validation in dns_name_getlabelsequence().
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews2883. [bug] 'dig +short' failed to handle really large datasets.
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson2882. [bug] Remove memory context from list of active contexts
be171be1799e0ba8cdd35d4f67b772ff086d0d81Andreas Gustafsson before clearing 'magic'. [RT #21274]
9f28451bca8377ef6c9ea3b0a49bf342c9fa6800Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson is held when closing a version. [RT #21198]
af5dc286ff4b750deec50d1c006aae5fc38019c0Mark Andrews2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson consistent. [RT #21078]
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence2878. [func] Incrementally write the master file after performing
9b2a2a9016980fbed6b2025d365a8ae99897608cDavid Lawrence a AXFR. [RT #21010]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2877. [bug] The validator failed to skip obviously mismatching
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence RRSIGs. [RT #21138]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2876. [bug] Named could return SERVFAIL for negative responses
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence from unsigned zones. [RT #21131]
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence2875. [bug] dns_time64_fromtext() could accept non digits.
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington2874. [bug] Cache lack of EDNS support only after the server
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington successfully responds to the query using plain DNS.
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence2873. [bug] Cancelling a dynamic update via the dns/client module
f8da2d95835c5216570a45e9000f740321503ae3David Lawrence could trigger an assertion failure. [RT #21133]
fdb2cda3ed366699d70aaf67ee5ae7fcd2ca7561David Lawrence2872. [bug] Modify dns/client.c:dns_client_createx() to only
6094a7774954463e312f7266c8d4d3f26aa07d4aAndreas Gustafsson require one of IPv4 or IPv6 rather than both.
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson2871. [bug] Type mismatch in mem_api.c between the definition and
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson the header file, causing build failure with
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson --enable-exportlib. [RT #21138]
bd5f2ac1880f5f2e96b291378c3dff296fc011f1Mark Andrews2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
24c5978e0b32137305c2bef2c6e116ee7680a610Andreas Gustafsson2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington2868. [cleanup] Run "make clean" at the end of configure to ensure
63612a0fe1abbeb8ab6d727a4cfe46831c481387Brian Wellington any changes made by configure are integrated.
9be0c3d823200bed1286cff6bddf2a8c639f5287Brian Wellington Use --with-make-clean=no to disable. [RT #20994]
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence don't like it. [RT #20986]
32bb863ea960caa650105b60dcd45e3db6840a6fAndreas Gustafsson2866. [bug] Windows does not like the TSIG name being compressed.
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington2865. [bug] memset to zero event.data. [RT #20986]
736aab3076e9bec708cec073f5cf8e6c4b588886Brian Wellington2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2862. [bug] nsupdate didn't default to the parent zone when
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson updating DS records. [RT #20896]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson2861. [doc] dnssec-settime man pages didn't correctly document the
f53848e17123569387b279578f0100dca5407da5Mark Andrews inactivation time. [RT #21039]
f53848e17123569387b279578f0100dca5407da5Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington2859. [bug] When cancelling validation it was possible to leak
d46bf932ed5e1f58a4c424ce1ce7525963354482Brian Wellington memory. [RT #20800]
1599bd6998f54b2b34804d7332f543744368a586Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson2857. [bug] named-checkconf did not fail on a bad trusted key.
c8fc692fa1445ccfc39b68902546cdfc7ee30d3eBrian Wellington2856. [bug] The size of a memory allocation was not always properly
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson recorded. [RT #20927]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2855. [func] nsupdate will now preserve the entered case of domain
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson names in update requests it sends. [RT #20928]
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2854. [func] dig: allow the final soa record in a axfr response to
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson be suppressed, dig +onesoa. [RT #20929]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2851. [doc] nslookup.1, removed <informalexample> from the docbook
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson source as it produced bad nroff. [RT #21007]
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson2850. [bug] If isc_heap_insert() failed due to memory shortage
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson the heap would have corrupted entries. [RT #20951]
3d509f54ac6bbcc19de5aa6d1ce37e001821dc7bDavid Lawrence2849. [bug] Don't treat errors from the xml2 library as fatal.
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence README.rfc5011 into the ARM. [RT #20899]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2846. [bug] EOF on unix domain sockets was not being handled
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence correctly. [RT #20731]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington2844. [doc] notify-delay default in ARM was wrong. It should have
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington been five (5) seconds.
bf00f50cf43a43a999b5ab054cab652f7775dce6Brian Wellington2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
253f774e358dba38742a484426a4cadf4f248817Brian Wellington creating key files if there is a chance that the new
253f774e358dba38742a484426a4cadf4f248817Brian Wellington key ID will collide with an existing one after
253f774e358dba38742a484426a4cadf4f248817Brian Wellington either of the keys has been revoked. (To override
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington this in the case of dnssec-keyfromlabel, use the -y
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington option. dnssec-keygen will simply create a
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington different, non-colliding key, so an override is
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson not necessary.) [RT #20838]
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson2842. [func] Added "smartsign" and improved "autosign" and
4ae3a03bb7dbb050adddc051a5df6f3de057eb27Andreas Gustafsson "dnssec" regression tests. [RT #20865]
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson2841. [bug] Change 2836 was not complete. [RT #20883]
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington2840. [bug] Temporary fixed pkcs11-destroy usage check.
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer2839. [bug] A KSK revoked by named could not be deleted.
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence2838. [placeholder]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington2837. [port] Prevent Linux spurious warnings about fwrite().
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer2836. [bug] Keys that were scheduled to become active could
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer be delayed. [RT #20874]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson2835. [bug] Key inactivity dates were inadvertently stored in
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence the private key file with the outdated tag
b74896ead5671943135727b50d86d1040d7ffbf3David Lawrence "Unpublish" rather than "Inactive". This has been
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson fixed; however, any existing keys that had Inactive
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington dates set will now need to have them reset, using
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington 'dnssec-settime -I'. [RT #20868]
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington2834. [bug] HMAC-SHA* keys that were longer than the algorithm
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington digest length were used incorrectly, leading to
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington interoperability problems with other DNS
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington implementations. This has been corrected.
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington (Note: If an oversize key is in use, and
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington compatibility is needed with an older release of
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington BIND, the new tool "isc-hmac-fixup" can convert
833535ea78ec7a15376b862fd288ffd00f808666Brian Wellington the key secret to a form that will work with all
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington versions.) [RT #20751]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson to avoid redefinition in some OSs [RT 20831]
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington2831. [security] Do not attempt to validate or cache
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington out-of-bailiwick data returned with a secure
3562c9dc12f06eb964ccefd3291a012f4e6b1743Brian Wellington answer; it must be re-fetched from its original
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson source and validated in that context. [RT #20819]
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson2830. [bug] Changing the OPTOUT setting could take multiple
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington passes. [RT #20813]
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington2829. [bug] Fixed potential node inconsistency in rbtdb.c.
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson2828. [security] Cached CNAME or DNAME RR could be returned to clients
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson without DNSSEC validation. [RT #20737]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
5a6335a8bffdcc15ab4b3bb01d070080f9bc892eMark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson being released. [RT #20740]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson was in the process of being created was not properly
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson recorded in the zone. [RT #20786]
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson2824. [bug] "rndc sign" was not being run by the correct task.
4c08b67a5f01eda472a9dfee4c73dbbac49c0065Mark Andrews2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2821. [doc] Add note that named-checkconf doesn't automatically
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson2820. [func] Handle read access failure of OpenSSL configuration
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson file more user friendly (PKCS#11 engine patch).
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews2818. [cleanup] rndc could return an incorrect error code
483958540f0034d543f0564beb7877326f15a45bMark Andrews when a zone was not found. [RT #20767]
59e1a928bc4253b91ead0f7c46be7d3984cb3016Bob Halley2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2816. [bug] previous_closest_nsec() could fail to return
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson data for NSEC3 nodes [RT #29730]
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
f9870620b346ed267023dc98ee81adcfef2e16b7Andreas Gustafsson2814. [func] Provide a definitive error message when a master
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews zone is not loaded. [RT #20757]
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews2812. [bug] Make sure updates can't result in a zone with
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews NSEC-only keys and NSEC3 records. [RT #20748]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
42928d936e79dbda7ea00bbcab6e5d8034a95bf8Andreas Gustafsson output. [RT #20733]
0c0619cc1983ff58e855c5159d8892e46dddac5eBrian Wellington2810. [doc] Clarified the process of transitioning an NSEC3 zone
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson to insecure. [RT #20746]
c472ead4a932f93251eddaa41e120c3bfc4f95a4Andreas Gustafsson2809. [cleanup] Restored accidentally-deleted text in usage output
d7e77a9b59138e8a94d3dfa4e41e1852ad51ac25Andreas Gustafsson in dnssec-settime and dnssec-revoke [RT #20739]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson2808. [bug] Remove the attempt to install atomic.h from lib/isc.
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson atomic.h is correctly installed by the architecture
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson specific subdirectories. [RT #20722]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2807. [bug] Fixed a possible ASSERT when reconfiguring zone
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley keys. [RT #20720]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley --- 9.7.0rc1 released ---
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley when it had changed. [RT #20703]
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley2805. [bug] Fixed namespace problems encountered when building
5bbed85a33186db4e629e98f45ca702ac6b09127Brian Wellington external programs using non-exported BIND9 libraries
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson (i.e., built without --enable-exportlib). [RT #20679]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2804. [bug] Send notifies when a zone is signed with "rndc sign"
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson or as a result of a scheduled key change. [RT #20700]
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
86a4d80e0624a10b1824d25018246e1ea63f55d2Andreas Gustafsson and genrandom under windows. [RT #20670]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington2801. [func] Detect and report records that are different according
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson to DNSSEC but are semantically equal according to plain
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson DNS. Apply plain DNS comparisons rather than DNSSEC
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson comparisons when processing UPDATE requests.
d3a86da2e8f09e2c3f55721aae537b9cacc7e537Andreas Gustafsson dnssec-signzone now removes such semantically duplicate
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson records prior to signing the RRset.
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence named-checkzone -r {ignore|warn|fail} (default warn)
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence named-compilezone -r {ignore|warn|fail} (default warn)
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence named.conf: check-dup-records {ignore|warn|fail};
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2800. [func] Reject zones which have NS records which refer to
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence CNAMEs, DNAMEs or don't have address record (class IN
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence only). Reject UPDATEs which would cause the zone
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence to fail the above checks if committed. [RT #20678]
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2799. [cleanup] Changed the "secure-to-insecure" option to
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence "dnssec-secure-to-insecure", and "dnskey-ksk-only"
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2798. [bug] Addressed bugs in managed-keys initialization
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington and rollover. [RT #20683]
78d78f05d91205cbde33ca87d24b8d13aa2d8d66Brian Wellington2797. [bug] Don't decrement the dispatch manager's maxbuffers.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2796. [bug] Missing dns_rdataset_disassociate() call in
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson dns_nsec3_delnsec3sx(). [RT #20681]
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington2795. [cleanup] Add text to differentiate "update with no effect"
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington log messages. [RT #18889]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson2794. [bug] Install <isc/namespace.h>. [RT #20677]
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson2793. [func] Add "autosign" and "metadata" tests to the
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson automatic tests. [RT #19946]
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2792. [func] "filter-aaaa-on-v4" can now be set in view
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson options (if compiled in). [RT #20635]
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson2791. [bug] The installation of isc-config.sh was broken.
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2790. [bug] Handle DS queries to stub zones. [RT #20440]
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
dffdc24ffd76ef3d8c8141671e89fb39428fef06Brian Wellington2788. [bug] dnssec-signzone could sign with keys that were
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews not requested [RT #20625]
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer2787. [bug] Spurious log message when zone keys were
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer dynamically reconfigured. [RT #20659]
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer2786. [bug] Additional could be promoted to answer. [RT #20663]
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer --- 9.7.0b3 released ---
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer2785. [bug] Revoked keys could fail to self-sign [RT #20652]
3dcb97b199693012d12e978b8f577a339e434361Andreas Gustafsson2784. [bug] TC was not always being set when required glue was
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson dropped. [RT #20655]
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
a3e41e3c03a32b00fc243fce538a39ddc7237885Andreas Gustafsson buffer size of 512 or less. [RT #20654]
fa3cbea8bfba19d1c11f9a6ad20f40a2c15377f0Brian Wellington2782. [port] win32: use getaddrinfo() for hostname lookups.
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington2780. [bug] dnssec-keygen -A none didn't properly unset the
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews activation date in all cases. [RT #20648]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews without deleting the unrevoked version. [RT #20638]
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence in dnssec-keyfromlabel. [RT #20643]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2774. [bug] Existing cache DB wasn't being reused after
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence reconfiguration. [RT #20629]
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews2773. [bug] In autosigned zones, the SOA could be signed
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews with the KSK. [RT #20628]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2772. [security] When validating, track whether pending data was from
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews the additional section or not and only return it if
c03bb27f0675a6e60ceea66b451548e8481bc05cMark Andrews validates as secure. [RT #20438]
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews corrupted when importing from key files [RT #20624]
09671f9551077f9eae8c41619b61272cb9821100Andreas Gustafsson2770. [cleanup] Add log messages to resolver.c to indicate events
72fa265baa3d138b43427bcb5c0838740f807045Mark Andrews causing FORMERR responses. [RT #20526]
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson2769. [cleanup] Change #2742 was incomplete. [RT #19589]
4b6d5b2312d1482cc406fe58fa3269dd7a915b3fMark Andrews2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
29c818c7d40fc8898b062903ec703851328a4deaMark Andrews2767. [bug] named could crash on startup if a zone was
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington configured with auto-dnssec and there was no
b1cde6bf3a8e3a77eb77caf97df0d7ec5c8450dfBrian Wellington key-directory. [RT #20615]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews socketmgr state if the socket is not pending on a
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews read or write. [RT #20603]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2765. [bug] Skip masters for which the TSIG key cannot be found.
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2762. [bug] DLV validation failed with a local slave DLV zone.
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington2761. [cleanup] Enable internal symbol table for backtrace only for
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington systems that are known to work. Currently, BSD
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington variants, Linux and Solaris are supported. [RT# 20202]
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews2759. [doc] Add information about .jbk/.jnw files to
b20ee662a7c847c9ef7b96ab9e5e34543efe5c0dMark Andrews the ARM. [RT #20303]
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson2758. [bug] win32: Added a workaround for a windows 2008 bug
450995b90c8cb66d82c2377d4f9bd9812a132c30Andreas Gustafsson that could cause the UDP client handler to shut
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington down. [RT #19176]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2757. [bug] dig: assertion failure could occur in connect
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence timeout. [RT #20599]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence2755. [placeholder]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2754. [bug] Secure-to-insecure transitions failed when zone
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington was signed with NSEC3. [RT #20587]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2753. [bug] Removed an unnecessary warning that could appear when
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley building an NSEC chain. [RT #20589]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2752. [bug] Locking violation. [RT #20587]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
7b438bdb9b821f9f1c96443762072e137716048dBrian Wellington2750. [bug] dig: assertion failure could occur when a server
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley didn't have an address. [RT #20579]
86c270cbb24117976d6cd3098c3010e067915c24Andreas Gustafsson2749. [bug] ixfr-from-differences generated a non-minimal ixfr
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews for NSEC3 signed zones. [RT #20452]
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews as referrals. [RT #18884]
8217f91f8d2dd6e94a2bf893284506ea47cd294aAndreas Gustafsson2747. [bug] Journal roll forwards failed to set the re-signing
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer time of RRSIGs correctly. [RT #20541]
588b63e1a86fb707172830e14897da624ed380edMark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington2745. [bug] configure script didn't probe the return type of
bb17aa91c14de959b191a200df61afb6a68f110fBrian Wellington gai_strerror(3) correctly. [RT #20573]
452d75b18f9d050086964fa39c326cf388517396Mark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
2b4db0b6d4b5a0307cecbafdd1d34d6f61b7dbadMark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington for a insecure delegation.
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington --- 9.7.0b2 released ---
2a37aa188c2297e0c0856c3e5740c43dd426a432Mark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews suppressed (dnssec-keygen -q). Automatically
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington suppress the progress messages when stdin is not
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington a tty. [RT #20474]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2740. [placeholder]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews anchors for a view. [RT #20211]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer test. [RT #20453]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2737. [func] UPDATE requests can leak existence information.
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2736. [func] Improve the performance of NSEC signed zones with
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer more than a normal amount of glue below a delegation.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2735. [bug] dnssec-signzone could fail to read keys
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer that were specified on the command line with
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer full paths, but weren't in the current
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer directory. [RT #20421]
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2734. [port] cygwin: arpaname did not compile. [RT #20473]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson2732. [func] Add optional filter-aaaa-on-v4 option, available
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson if built with './configure --enable-filter-aaaa'.
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson Filters out AAAA answers to clients connecting
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington via IPv4. (This is NOT recommended for general
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson use.) [RT #20339]
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews2731. [func] Additional work on change 2709. The key parser
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews will now ignore unrecognized fields when the
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews minor version number of the private key format
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews has been increased. It will reject any key with
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews the major version number increased. [RT #20310]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
fce9a9550e8e7a6dff4093d4815ec41fae2d7b55Mark Andrews a la 'openssl genrsa' on standard error. Note
fce9a9550e8e7a6dff4093d4815ec41fae2d7b55Mark Andrews when the first '.' is followed by a long stop
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson one has the choice between slow generation vs.
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson poor random quality, i.e., '-r /dev/urandom'.
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2729. [func] When constructing a CNAME from a DNAME use the DNAME
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson TTL. [RT #20451]
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson dnssec-signzone now warn immediately if asked to
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews write into a nonexistent directory. [RT #20278]
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington2727. [func] The 'key-directory' option can now specify a relative
4da10bce4bf64b574b59aa4fb5be0f237d0d41edBrian Wellington path. [RT #20154]
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington2726. [func] Added support for SHA-2 DNSSEC algorithms,
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer RSASHA256 and RSASHA512. [RT #20023]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer2725. [doc] Added information about the file "managed-keys.bind"
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer to the ARM. [RT #20235]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer2724. [bug] Updates to a existing node in secure zone using NSEC
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer were failing. [RT #20448]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson isc_base64_totext(), didn't always mark regions of
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson memory as fully consumed after conversion. [RT #20445]
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson2722. [bug] Ensure that the memory associated with the name of
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson a node in a rbt tree is not altered during the life
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson of the node. [RT #20431]
e412ae947df6de858883564b8676a9650df70d9aMark Andrews2721. [port] Have dst__entropy_status() prime the random number
e412ae947df6de858883564b8676a9650df70d9aMark Andrews generator. [RT #20369]
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson2720. [bug] RFC 5011 trust anchor updates could trigger an
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson2718. [bug] The space calculations in opensslrsa_todns() were
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson incorrect. [RT #20394]
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson2717. [bug] named failed to update the NSEC/NSEC3 record when
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson the last private type record was removed as a result
280747fa7c1d4597d47f7be8ec5fb7c8980c1952Andreas Gustafsson of completing the signing the zone with a key.
0e07026a21dfcaf57dc789e7ece20182dc36029cMark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson --- 9.7.0b1 released ---
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2715. [bug] Require OpenSSL support to be explicitly disabled.
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson2713. [bug] powerpc: atomic operations missing asm("ics") /
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson __isync() calls.
dc2e45d08d73fdaefd92dbfa4d69b4d3f3b0f249Andreas Gustafsson2712. [func] New 'auto-dnssec' zone option allows zone signing
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson to be fully automated in zones configured for
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson dynamic DNS. 'auto-dnssec allow;' permits a zone
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson to be signed by creating keys for it in the
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson key-directory and using 'rndc sign <zone>'.
27d725f2b0f8d176d4625dc8b2ed71269b25c9a7Andreas Gustafsson 'auto-dnssec maintain;' allows that too, plus it
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson also keeps the zone's DNSSEC keys up to date
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson according to their timing metadata. [RT #19943]
c89ac488df58cf6a37918cd00236eedf015830f8Andreas Gustafsson2711. [port] win32: Add the bin/pkcs11 tools into the full
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington build. [RT #20372]
eb059776a206e9be778de0f196a0304b558a779cAndreas Gustafsson2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews zone option cause a zone to be signed with only KSKs
9d3ef72b37c7d23ce3aaaaa5cd0434b4e5ed5c12Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews the size of a DNSKEY answer. [RT #20340]
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2709. [func] Added some data fields, currently unused, to the
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews private key file format, to allow implementation
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews of explicit key rollover in a future release
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews without impairing backward or forward compatibility.
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews update are now fully supported and no longer require
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence defines to enable. We now no longer overload the
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence NSEC3PARAM flag field, nor the NSEC OPT bit at the
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson apex. Secure to insecure changes are controlled by
566155f16e43fe5f1550456e534b31b0cc36d243David Lawrence by the named.conf option 'secure-to-insecure'.
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson Warning: If you had previously enabled support by
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson adding defines at compile time to BIND 9.6 you should
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson ensure that all changes that are in progress have
cd73a1c823bc9feea603803a96a9e5f5da8bf33dMichael Sawyer completed prior to upgrading to BIND 9.7. BIND 9.7
6d85ebc2d2ccbb8ef01c3ac1659686d3c2be0377Brian Wellington is not backwards compatible.
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson2707. [func] dnssec-keyfromlabel no longer require engine name
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson to be specified in the label if there is a default
4a0b04961653b4153402dabd71dfd8474b6c230dAndreas Gustafsson engine or the -E option has been used. Also, it
b0796437d493ca2e083ab0ff02acf0dc0c8ad2a3David Lawrence now uses default algorithms as dnssec-keygen does
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
e42c402595802edceafbd3e5338dda011fbbcdb6Michael Sawyer2706. [bug] Loading a zone with a very large NSEC3 salt could
cc7420cb3b8eb2c48a00384784701bfee37cc96fAndreas Gustafsson trigger an assert. [RT #20368]
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer2705. [placeholder]
a94948ad5b3b258ce9503b7322bdf82c0baabcabAndreas Gustafsson2704. [bug] Serial of dynamic and stub zones could be inconsistent
abb38b673379d6dae7cbb495f814d73a4afe5c8bAndreas Gustafsson with their SOA serial. [RT #19387]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews for all binaries which can take benefit of
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews crypto hardware. [RT #20230]
d922e82162b4d0d2387a531ebc127abe9fe4cf2bAndreas Gustafsson2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
2868291ab5d4deba4d61c110f92dc397807702c7Mark Andrews supported TSIG key algorithm. [RT #18046]
be1d71fd17c92b0acee36ba43ebe4daa498e8014Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2699. [bug] Missing lock in rbtdb.c. [RT #20037]
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2698. [placeholder]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson S_IFREG are defined after including <isc/stat.h>.
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews2696. [bug] named failed to successfully process some valid
c605f30cd7d540243509c86cf31b01bdd4fe19feMark Andrews acl constructs. [RT #20308]
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley2695. [func] DHCP/DDNS - update fdwatch code for use by
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley DHCP. Modify the api to isc_sockfdwatch_t (the
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley callback functon for isc_socket_fdwatchcreate)
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley to include information about the direction (read
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson or write) and add isc_socket_fdwatchpoke.
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
91ac60fe11b3ebd095c5fed0db343b2c9a97e646Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2692. [port] win32: 32/64 bit cleanups. [RT #20335]
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff chain when re-signing a previously-signed zone.
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff Use -u to modify NSEC3 parameters or switch
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff between NSEC and NSEC3. [RT #20304]
42e31e6ef7689e0c0569a1f9a5c250d73870b073Michael Graff2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2689. [bug] Correctly handle snprintf result. [RT #20306]
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson to decide to fetch the destination address. [RT #20305]
53df51bf458da9b04074b6b62b5639c926a751e4Andreas Gustafsson2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
ba43c53451d5c38765f376eeede457178b36951aBob Halley Also, added warnings when revoking a ZSK, as this is
ba43c53451d5c38765f376eeede457178b36951aBob Halley not defined by protocol (but is legal). [RT #19943]
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
b9dead30b1806bcfcca9a47dfa3f5078c6377910Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
668278867ba063995988507b6b28724ebb9f9391Mark Andrews +adflag and +cdflag. [RT #19305]
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson the NSEC3 parameters used to sign the zone change.
2053a53eeac7f069311d8ed67333503c7d3a2e2bAndreas Gustafsson2682. [bug] "configure --enable-symtable=all" failed to
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson build. [RT #20282]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson decoded. [RT #20269]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson2679. [func] dig -k can now accept TSIG keys in named.conf
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson format. [RT #20031]
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson2678. [func] Treat DS queries as if "minimal-response yes;"
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson was set. [RT #20258]
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson2677. [func] Changes to key metadata behavior:
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson - Keys without "publish" or "active" dates set will
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson no longer be used for smart signing. However,
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson those dates will be set to "now" by default when
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson a key is created; to generate a key but not use
94361d586755d4de09b717782f7002e9dd282c89Andreas Gustafsson it yet, use dnssec-keygen -G.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff - New "inactive" date (dnssec-keygen/settime -I)
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff sets the time when a key is no longer used for
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff signing but is still published.
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff - The "unpublished" date (-U) is deprecated in
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff favour of "deleted" (-D).
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2676. [bug] --with-export-installdir should have been
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington --with-export-includedir. [RT #20252]
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington2675. [bug] dnssec-signzone could crash if the key directory
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington did not exist. [RT #20232]
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley --- 9.7.0a3 released ---
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley2674. [bug] "dnssec-lookaside auto;" crashed if named was built
3ad16d4c3a5029662d4ec804f7644739d011d03dBob Halley without openssl. [RT #20231]
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2673. [bug] The managed-keys.bind zone file could fail to
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington load due to a spurious result from sync_keyzone()
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson2672. [bug] Don't enable searching in 'host' when doing reverse
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson lookups. [RT #20218]
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley2671. [bug] Add support for PKCS#11 providers not returning
3113e4dac81fa7b9f0ee5d663d54fbb8ed92738dBob Halley the public exponent in RSA private keys
7f52817a92d74be0d970c33b204f8f13309eece5Andreas Gustafsson (OpenCryptoki for instance) in
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff dnssec-keyfromlabel. [RT #19294]
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff2670. [bug] Unexpected connect failures failed to log enough
8cf8a04209c3b6c8d4f0936f1dce06b629605c81Michael Graff information to be useful. [RT #20205]
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson2669. [func] Update PKCS#11 support to support Keyper HSM.
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson Update PKCS#11 patch to be against openssl-0.9.8i.
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson2668. [func] Several improvements to dnssec-* tools, including:
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff - dnssec-keygen and dnssec-settime can now set key
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff metadata fields 0 (to unset a value, use "none")
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson - dnssec-revoke sets the revocation date in
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff addition to the revoke bit
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff - dnssec-settime can now print individual metadata
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff fields instead of always printing all of them,
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson and can print them in unix epoch time format for
c4ec2c3190175705df255aa3d5e842a96137a5a1Andreas Gustafsson use by scripts
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson2667. [func] Add support for logging stack backtrace on assertion
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson failure (not available for all platforms). [RT #19780]
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson2666. [func] Added an 'options' argument to dns_name_fromstring()
f38a84ce830efefe48838425ab281e0ae2a91d0eAndreas Gustafsson (API change from 9.7.0a2). [RT #20196]
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington2665. [func] Clarify syntax for managed-keys {} statement, add
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington ARM documentation about RFC 5011 support. [RT #19874]
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington2664. [bug] create_keydata() and minimal_update() in zone.c
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson didn't properly check return values for some
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson functions. [RT #19956]
4187398298c1916f409b44e0457f60e551f5ea1bAndreas Gustafsson2663. [func] win32: allow named to run as a service using
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington "NT AUTHORITY\LocalService" as the account. [RT #19977]
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson returned a misleading error code when lwresd was
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson down. [RT #20028]
d9ec31a329a14588127b0a15618dec53ca41c73eAndreas Gustafsson2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson creating lwres context. [RT #20029]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington2660. [func] Add a new set of DNS libraries for non-BIND9
37a8fbab3a1fe6d513b767118cba7515152c2b9bBrian Wellington applications. See README.libdns. [RT #19369]
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson2659. [doc] Clarify dnssec-keygen doc: key name must match zone
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson name for DNSSEC keys. [RT #19938]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2658. [bug] dnssec-settime and dnssec-revoke didn't process
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson key file paths correctly. [RT #20078]
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson2657. [cleanup] Lower "journal file <path> does not exist, creating it"
cdc2d4a065b6b1a00f0b07aae94bc7cb380d15bcAndreas Gustafsson log level to debug 1. [RT #20058]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2656. [func] win32: add a "tools only" check box to the installer
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson which causes it to only install dig, host, nslookup,
2c7097eac0aed3b0b3387082cb783db64f2d7765Andreas Gustafsson nsupdate and relevant DLLs. [RT #19998]
d70e2f3652fcbcfb2cfa0781a71e2bd2396871f3Andreas Gustafsson2655. [doc] Document that key-directory does not affect
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson bind.keys, rndc.key or session.key. [RT #20155]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2654. [bug] Improve error reporting on duplicated names for
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington deny-answer-xxx. [RT #20164]
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington2653. [bug] Treat ENGINE_load_private_key() failures as key
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington not found rather than out of memory. [RT #18033]
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson2652. [func] Provide more detail about what record is being
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson deleted. [RT #20061]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2651. [bug] Dates could print incorrectly in K*.key files on
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson 64-bit systems. [RT #20076]
87075c90f668f4c2f7a709a6bd32bb8e013ae73dBrian Wellington2650. [bug] Assertion failure in dnssec-signzone when trying
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington to read keyset-* files. [RT #20075]
cea88d887559f209ae9d993e0a8fb58d03f60e77Brian Wellington2649. [bug] Set the domain for forward only zones. [RT #19944]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2647. [bug] Remove unnecessary SOA updates when a new KSK is
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson added. [RT #19913]
a7705f38e91cc6afaba0426f6b452c9ae5a4efeaAndreas Gustafsson2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson which default to 64 bits. [RT #19927]
e1368a7770744cbeadcdc27967f855196988eceaAndreas Gustafsson --- 9.7.0a2 released ---
c05eb51a1b9ebd156b9fec957d60c2579c968468Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson named was unable to write the PID file and would
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson fail on startup. [RT #20001]
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2643. [bug] Stub zones interacted badly with NSEC3 support.
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2642. [bug] nsupdate could dump core on solaris when reading
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews improperly formatted key files. [RT #20015]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews added a regression test to check it. [RT #20007]
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2640. [security] A specially crafted update packet will cause named
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews to exit. [RT #20000]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2638. [bug] Install arpaname. [RT #19957]
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson2636. [func] Simplify zone signing and key maintenance with the
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson dnssec-* tools. Major changes:
405ffb1f0d2c12d199f85f03973d1a02ac12e000Andreas Gustafsson - all dnssec-* tools now take a -K option to
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson specify a directory in which key files will be
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson - DNSSEC can now store metadata indicating when
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson they are scheduled to be published, activated,
6d8568cb45240974da0ee1b653b28e3fdfffe93eAndreas Gustafsson revoked or removed; these values can be set by
e3402551ac9be809eeb3a4b7b30d023ba67dad28Brian Wellington dnssec-keygen or overwritten by the new
6d3f954c572db02159deedd444373161fda47a88Brian Wellington dnssec-settime command
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington - dnssec-signzone -S (for "smart") option reads key
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington metadata and uses it to determine automatically
b0f941a50f24656b3523609f86cead41b0269c7aBrian Wellington which keys to publish to the zone, use for
ea419adc4eca4c3e44f2c282035b5dce6b795fe2Andreas Gustafsson signing, revoke, or remove from the zone
ff59f0e4feaefb45a49427bd91775058b4b4f2d0Andreas Gustafsson2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence2634. [port] win32: Add support for libxml2, enable
8af0b86ade4c15a7db207bd7643f8a9f6cb5a648David Lawrence statschannel. [RT #19773]
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington2633. [bug] Handle 15 bit rand() functions. [RT #19783]
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington2632. [func] util/kit.sh: warn if documentation appears to be out of
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson date. [RT #19922]
69d17bea6be937b92f3375e6249b5677c90f4fe2Andreas Gustafsson2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington2630. [func] Improved syntax for DDNS autoconfiguration: use
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington "update-policy local;" to switch on local DDNS in a
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington zone. (The "ddns-autoconf" option has been removed.)
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson2629. [port] Check for seteuid()/setegid(), use setresuid()/
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence setresgid() if not present. [RT #19932]
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
b41de87910a4c57039a4f5968e272a9aec566959Brian Wellington at startup with reduced capabilities in operation.
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson2627. [bug] Named aborted if the same key was included in
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington trusted-keys more than once. [RT #19918]
ab8668fb583a92df0698f5cdac7e7b12ead614aaBrian Wellington2626. [bug] Multiple trusted-keys could trigger an assertion
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson failure. [RT #19914]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson2624. [func] 'named-checkconf -p' will print out the parsed
575db903aabb08137a757d1c60ebb0d286ecff56Andreas Gustafsson configuration. [RT #18871]
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson2623. [bug] Named started searches for DS non-optimally. [RT #19915]
c851f1cc2187b59687af94725fbacac022987d05Andreas Gustafsson2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2621. [doc] Made copyright boilerplate consistent. [RT #19833]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2620. [bug] Delay thawing the zone until the reload of it has
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson completed successfully. [RT #19750]
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
512661edd7d51c8c179cce89a855df6cec2fcdcdMark Andrews maintenance. The new "managed-keys" statement can
385a9cb48a70b329e507c39d043fa9a44c659913James Brister be used in place of "trusted-keys" for zones which
385a9cb48a70b329e507c39d043fa9a44c659913James Brister support this protocol. (Note: this syntax is
385a9cb48a70b329e507c39d043fa9a44c659913James Brister expected to change prior to 9.7.0 final.) [RT #19248]
3cb0de1c667237085c6a805715c31ddc5fdc9c4dBrian Wellington2618. [bug] The sdb and sdlz db_interator_seek() methods could
385a9cb48a70b329e507c39d043fa9a44c659913James Brister loop infinitely. [RT #19847]
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington2617. [bug] ifconfig.sh failed to emit an error message when
bd77de5fcaea4dcf2f0250ded32adfccd3a38256Brian Wellington run from the wrong location. [RT #19375]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2616. [bug] 'host' used the nameservers from resolv.conf even
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer when a explicit nameserver was specified. [RT #19852]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2615. [bug] "__attribute__((unused))" was in the wrong place
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington for ia64 gcc builds. [RT #19854]
47ddde42728034854444cf17e278cebaea06f666Michael Graff2614. [port] win32: 'named -v' should automatically be executed
47ddde42728034854444cf17e278cebaea06f666Michael Graff in the foreground. [RT #19844]
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence2613. [placeholder]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence --- 9.7.0a1 released ---
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2612. [func] Add default values for the arguments to
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence dnssec-keygen. Without arguments, it will now
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence generate a 1024-bit RSASHA1 zone-signing key,
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence or with the -f KSK option, a 2048-bit RSASHA1
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence key-signing key. [RT #19300]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2611. [func] Add -l option to dnssec-dsfromkey to generate
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence DLV records instead of DS records. [RT #19300]
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington2610. [port] sunos: Change #2363 was not complete. [RT #19796]
529a6b5224d751504027293a766a4c8b81241869Brian Wellington2609. [func] Simplify the configuration of dynamic zones:
529a6b5224d751504027293a766a4c8b81241869Brian Wellington - add ddns-confgen command to generate
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson configuration text for named.conf
186ba80b8e391cf8421872f26771324644e45d83Andreas Gustafsson - add zone option "ddns-autoconf yes;", which
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington causes named to generate a TSIG session key
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington and allow updates to the zone using that key
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington - add '-l' (localhost) option to nsupdate, which
677045ed612e1c26a32b5700479e26c25bcede58Brian Wellington causes nsupdate to connect to a locally-running
febf5f8b55abb2e6e840488a29a5ef4e20654f67David Lawrence named process using the session key generated
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson2608. [func] Perform post signing verification checks in
05f6d0c0381d19eec721e11f6fd88caef25dacd8Andreas Gustafsson dnssec-signzone. These can be disabled with -P.
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington The post sign verification test ensures that for each
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson algorithm in use there is at least one non revoked
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson self signed KSK key. That all revoked KSK keys are
a32738e3e4ed9619c8ace22cd119e6769176b22cAndreas Gustafsson self signed. That all records in the zone are signed
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington by the algorithm. [RT #19653]
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington2607. [bug] named could incorrectly delete NSEC3 records for
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson empty nodes when processing a update request.
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2606. [bug] "delegation-only" was not being accepted in
ffea7c2e73a0771c80b32df93cf4547fcea64eaeAndreas Gustafsson delegation-only type zones. [RT #19717]
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2605. [bug] Accept DS responses from delegation only zones.
55bfdb0a1491f0668bb279826ee864f4a7425e22Andreas Gustafsson2604. [func] Add support for DNS rebinding attack prevention through
d4ab9cd94f0fe0cf24ba36d21240215ae648c8d5James Brister new options, deny-answer-addresses and
cef18335b7f37bf02bc9e9f2c8750a3a9dcd718aAndreas Gustafsson deny-answer-aliases. Based on contributed code from
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer JD Nurmi, Google. [RT #18192]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer2603. [port] win32: handle .exe extension of named-checkzone and
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer named-comilezone argv[0] names under windows.
375f19cfb2f9cf5a9efbc65b557a8ce865de85c2Michael Sawyer2602. [port] win32: fix debugging command line build of libisccfg.
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson2601. [doc] Mention file creation mode mask in the
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson named manual page.
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson2600. [doc] ARM: miscellaneous reformatting for different
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson page widths. [RT #19574]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2599. [bug] Address rapid memory growth when validation fails.
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2598. [func] Reserve the -F flag. [RT #19657]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2597. [bug] Handle a validation failure with a insecure delegation
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson from a NSEC3 signed master/slave zone. [RT #19464]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence long, leading to inefficient memory usage or rejecting
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence newer cache entries in the worst case. [RT #19563]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2594. [func] Have rndc warn if using its default configuration
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence file when the key file also exists. [RT #19424]
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2591. [bug] named could die when processing a update in
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson removed_orphaned_ds(). [RT #19507]
663841abe0bb1cc8040e552597ef721c35b799e5Brian Wellington2590. [func] Report zone/class of "update with no effect".
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson2588. [bug] SO_REUSEADDR could be set unconditionally after failure
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson of bind(2) call. This should be rare and mostly
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington harmless, but may cause interference with other
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington processes that happen to use the same port. [RT #19642]
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington2587. [func] Improve logging by reporting serial numbers for
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington when zone serial has gone backwards or unchanged.
0e65062acb2b0d14ab64e0c7ae7eb4137758339bAndreas Gustafsson2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson or SDB. [RT #19577]
da527e4ff6a013364826637963e7ac372e024f33David Lawrence2585. [bug] Uninitialized socket name could be referenced via a
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson statistics channel, triggering an assertion failure in
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews XML rendering. [RT #19427]
db6fa2e944b3a0682168e9ee145b86c81a6a5321Andreas Gustafsson2584. [bug] alpha: gcc optimization could break atomic operations.
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2583. [port] netbsd: provide a control to not add the compile
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence date to the version string, -DNO_VERSION_DATE.
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2582. [bug] Don't emit warning log message when we attempt to
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence remove non-existent journal. [RT #19516]
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister Requires MySQL 5.0.19 or later. [RT #19084]
adade77942b069127a7094df419b3ad39dafb385James Brister2580. [bug] UpdateRej statistics counter could be incremented twice
adade77942b069127a7094df419b3ad39dafb385James Brister for one rejection. [RT #19476]
9bf765ab3a5203b854d32266e6162e547791383cDavid Lawrence2579. [bug] DNSSEC lookaside validation failed to handle unknown
adade77942b069127a7094df419b3ad39dafb385James Brister algorithms. [RT #19479]
5c0a406664065d54824675e3d2f795ea9e2a56b8Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson 65535 turns out to be reserved. [RT #19477]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2577. [doc] Clarified some statistics counters. [RT #19454]
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson2576. [bug] NSEC record were not being correctly signed when
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence a zone transitions from insecure to secure.
ea01648cb950b8d4b5625a8a91a4c1c019dec885Andreas Gustafsson Handle such incorrectly signed zones. [RT #19114]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2575. [func] New functions dns_name_fromstring() and
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence dns_name_tostring(), to simplify conversion
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson of a string to a dns_name structure and vice
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson versa. [RT #19451]
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson2574. [doc] Document nsupdate -g and -o. [RT #19351]
ce8d0fffea20fe03fd0f075263f529ad55f82aacAndreas Gustafsson2573. [bug] Replacing a non-CNAME record with a CNAME record in a
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson single transaction in a signed zone failed. [RT #19397]
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson2572. [func] Simplify DLV configuration, with a new option
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson "dnssec-lookaside auto;" This is the equivalent
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson of "dnssec-lookaside . trust-anchor dlv.isc.org;"
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson plus setting a trusted-key for dlv.isc.org.
04d58db32739157df6c44e3f37ecb83816fd3f75Andreas Gustafsson Note: The trusted key is hard-coded into named,
5096958739769958dd7a6b69356bf41260033873David Lawrence but is also stored in (and can be overridden
5096958739769958dd7a6b69356bf41260033873David Lawrence by) $sysconfdir/bind.keys. As the ISC DLV key
5096958739769958dd7a6b69356bf41260033873David Lawrence rolls over it can be kept up to date by replacing
5096958739769958dd7a6b69356bf41260033873David Lawrence the bind.keys file with a key downloaded from
5096958739769958dd7a6b69356bf41260033873David Lawrence https://www.isc.org/solutions/dlv. [RT #18685]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence2571. [func] Add a new tool "arpaname" which translates IP addresses
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
838281ed55d0d3939c2f510559d5852872ed4ddbDavid Lawrence2570. [func] Log the destination address the query was sent to.
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence2569. [func] Move journalprint, nsec3hash, and genrandom
280942843277ca894571ca94c1e431ba079d0ca0Mark Andrews "make install" will put them in $sbindir. [RT #19301]
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews2568. [bug] Report when the write to indicate a otherwise
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson successful start fails. [RT #19360]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2567. [bug] dst__privstruct_writefile() could miss write errors.
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence write_public_key() could miss write errors.
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister dnssec-dsfromkey could miss write errors.
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington2566. [cleanup] Clarify logged message when an insecure DNSSEC
d8c8722f28ca439b9ca46f109e2804a7eb33a1acBrian Wellington response arrives from a zone thought to be secure:
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington "insecurity proof failed" instead of "not
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington insecure". [RT #19400]
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington2565. [func] Add support for HIP record. Includes new functions
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington dns_rdata_hip_first(), dns_rdata_hip_next()
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington and dns_rdata_hip_current(). [RT #19384]
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington2564. [bug] Only take EDNS fallback steps when processing timeouts.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2563. [bug] Dig could leak a socket causing it to wait forever
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister to exit. [RT #19359]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2562. [doc] ARM: miscellaneous improvements, reorganization,
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister and some new content.
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister2559. [bug] dnssec-dsfromkey could compute bad DS records when
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence reading from a K* files. [RT #19357]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2558. [func] Set the ownership of missing directories created
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson for pid-file if -u has been specified on the command
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson line. [RT #19328]
08133a2dbe88e0715e092fbdeec2431971ec0711Andreas Gustafsson2557. [cleanup] PCI compliance:
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews * new libisc log module file
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson * isc_dir_chroot() now also changes the working
8c1aa8573dd85774ac8921dc0482b91d73e8b8b6Mark Andrews directory to "/".
96ab25294b028270eb1be867613df8a6c999b332David Lawrence * additional INSISTs
96ab25294b028270eb1be867613df8a6c999b332David Lawrence * additional logging when files can't be removed.
96ab25294b028270eb1be867613df8a6c999b332David Lawrence2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
96ab25294b028270eb1be867613df8a6c999b332David Lawrence error checks in the correct order resulting in the
96ab25294b028270eb1be867613df8a6c999b332David Lawrence wrong error code sometimes being returned. [RT #19249]
e68de4a7dbf5b6a1b2ff3f4f4dd8adf80b80525bBrian Wellington2555. [func] dig: when emitting a hex dump also display the
4ebb4093f80e32e4a57ff3769f7fd4ad2217ee44Andreas Gustafsson corresponding characters. [RT #19258]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2554. [bug] Validation of uppercase queries from NSEC3 zones could
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson fail. [RT #19297]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
5aa96829fdd12f30a2e9f717e66d44a4698b0675Andreas Gustafsson2552. [bug] zero-no-soa-ttl-cache was not being honoured.
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington2551. [bug] Potential Reference leak on return. [RT #19341]
e2894b0e5007e49f5b21be9113e41419ca8489a0Brian Wellington2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
845e0b5f968d4ac069ac8b802730467df8cd7136Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
c4252cd10ba9a35ef03c53b97961a4c0b15fe44fAndreas Gustafsson2548. [bug] Install iterated_hash.h. [RT #19335]
bc334fc90142b2ca26823a3ed1a3f4f086c7d558Andreas Gustafsson2547. [bug] openssl_link.c:mem_realloc() could reference an
1318ddb52d8a8a22eae47f7d82137e74b9beacf1Mark Andrews out-of-range area of the source buffer. New public
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence function isc_mem_reallocate() was introduced to address
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence this bug. [RT #19313]
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence2546. [func] Add --enable-openssl-hash configure flag to use
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence OpenSSL (in place of internal routine) for hash
de8e189332e884db065b921f84e3ee4922ad10e3David Lawrence functions (MD5, SHA[12] and HMAC). [RT #18815]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2545. [doc] ARM: Legal hostname checking (check-names) is
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence for SRV RDATA too. [RT #19304]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson2542. [doc] Update the description of dig +adflag. [RT #19290]
e405739af20dcdc6c7f604548e78806a0d1515c5Brian Wellington2541. [bug] Conditionally update dispatch manager statistics.
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson2539. [security] Update the interaction between recursion, allow-query,
b719a598e77aada962b3a05cb00179dc929d3939Andreas Gustafsson allow-query-cache and allow-recursion. [RT #19198]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2538. [bug] cache/ADB memory could grow over max-cache-size,
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson especially with threads and smaller max-cache-size
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson values. [RT #19240]
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson2537. [func] Added more statistics counters including those on socket
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson I/O events and query RTT histograms. [RT #18802]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews specified. [RT #19083]
b74e73c5b4b299da20a6b196b68b9068d376ff35Mark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2534. [func] Check NAPTR records regular expressions and
323b6387ce2575627427859b8668e7f27f090c4cMark Andrews replacement strings to ensure they are syntactically
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson valid and consistant. [RT #18168]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2533. [doc] ARM: document @ (at-sign). [RT #17144]
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson2532. [bug] dig: check the question section of the response to
d68e4b66b1075e556b480f8bfb607aeba5da46f6Andreas Gustafsson see if it matches the asked question. [RT #18495]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson2531. [bug] Change #2207 was incomplete. [RT #19098]
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson2530. [bug] named failed to reject insecure to secure transitions
e44d56866bd609e066380cbef414e6ce11a08976Andreas Gustafsson via UPDATE. [RT #19101]
84c4c99c9e2cf14fb9ef6f6815a9fdb824475423Michael Sawyer2529. [cleanup] Upgrade libtool to silence complaints from recent
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence version of autoconf. [RT #18657]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2528. [cleanup] Silence spurious configure warning about
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence --datarootdir [RT #19096]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2527. [placeholder]
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence2526. [func] New named option "attach-cache" that allows multiple
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence views to share a single cache to save memory and
0df2335526caaebd8639129fd0327a6cc97060eaDavid Lawrence improve lookup efficiency. Based on contributed code
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence from Barclay Osborn, Google. [RT #18905]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2525. [func] New logging category "query-errors" to provide detailed
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson internal information about query failures, especially
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson about server failures. [RT #19027]
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence2523. [bug] Random type rdata freed by dns_nsec_typepresent().
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2521. [bug] Improve epoll cross compilation support. [RT #19047]
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson2520. [bug] Update xml statistics version number to 2.0 as change
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson #2388 made the schema incompatible to the previous
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence version. [RT #19080]
8775909be9fc67180fc480115716f88174e74471James Brister2519. [bug] dig/host with -4 or -6 didn't work if more than two
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence nameserver addresses of the excluded address family
406ce0cd9633188a79c008e8f7c8092fa54bc98cJames Brister preceded in resolv.conf. [RT #19081]
a797a75953e21b514427d188bf5d5051419c10adBrian Wellington2518. [func] Add support for the new CERT types from RFC 4398.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2517. [bug] dig +trace with -4 or -6 failed when it chose a
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence nameserver address of the excluded address type.
17d91fddb33cc6e0bf2dfacf7156bb1ebba197d8David Lawrence2516. [bug] glue sort for responses was performed even when not
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence needed. [RT #19039]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a nameserver of the excluded address family.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2513. [bug] Fix windows cli build. [RT #19062]
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews2512. [func] Print a summary of the cached records which make up
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews the negative response. [RT #18885]
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
727eef0cbc8bf889ddb3b58eb89e9ea2c3b4b047Andreas Gustafsson2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2509. [bug] Specifying a fixed query source port was broken.
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2508. [placeholder]
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2507. [func] Log the recursion quota values when killing the
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson oldest query or refusing to recurse due to quota.
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson2506. [port] solaris: Check at configure time if
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington hack_shutup_pthreadonceinit is needed. [RT #19037]
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington2505. [port] Treat amd64 similarly to x86_64 when determining
b35a009df86b4aa3793e87602c95af2a503ec0eeMark Andrews atomic operation support. [RT #19031]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2504. [bug] Address race condition in the socket code. [RT #18899]
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson2503. [port] linux: improve compatibility with Linux Standard
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson Base. [RT #18793]
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson2502. [cleanup] isc_radix: Improve compliance with coding style,
482b9dae17bc5dc4e51b78d3c5b1a18c7c1adae9Andreas Gustafsson document function in <isc/radix.h>. [RT #18534]
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer2501. [func] $GENERATE now supports all rdata types. Multi-field
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer rdata types need to be quoted. See the ARM for
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson details. [RT #18368]
8ae26e9f87560f9d2e495328d573c25af81c49beMark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews function. [RT #18582]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews --- 9.6.0rc1 released ---
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2498. [bug] Removed a bogus function argument used with
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister ISC_SOCKET_USE_POLLWATCH: it could cause compiler
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister warning or crash named with the debug 1 level
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister of logging. [RT #18917]
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington installed. [RT #18826]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2493. [bug] The linux capabilities code was not correctly cleaning
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister up after itself. [RT #18767]
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister2492. [func] Rndc status now reports the number of cpus discovered
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister and the number of worker threads when running
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister multi-threaded. [RT #18273]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2491. [func] Attempt to re-use a local port if we are already using
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence the port. [RT #18548]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson is cleared when IPV6_V6ONLY is set. [RT #18785]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2489. [port] solaris: Workaround Solaris's kernel bug about
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson Define ISC_SOCKET_USE_POLLWATCH at build time to enable
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence this workaround. [RT #18870]
0bfcec250f9705a1211d0374f0fc1049960de84bMark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson from keyset and .key files. [RT #18694]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2487. [bug] Give TCP connections longer to complete. [RT #18675]
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister2486. [func] The default locations for named.pid and lwresd.pid
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister This allows the owner of the containing directory
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson to be set, for "named -u" support, and allows there
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson to be a permanent symbolic link in the path, for
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister "named -t" support. [RT #18306]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2485. [bug] Change update's the handling of obscured RRSIG
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister records. Not all orphaned DS records were being
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister removed. [RT #18828]
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2484. [bug] It was possible to trigger a REQUIRE failure when
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister adding NSEC3 proofs to the response in
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister query_addwildcardproof(). [RT #18828]
47c196192afa37b2dea728e52579779f190bf07fJames Brister2483. [port] win32: chroot() is not supported. [RT #18805]
47c196192afa37b2dea728e52579779f190bf07fJames Brister2482. [port] libxml2: support versions 2.7.* in addition
adf82221858138f295bce732e86dcac34645692eJames Brister to 2.6.*. [RT #18806]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson --- 9.6.0b1 released ---
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson collisions. [RT #18812]
94c5757a7a2d98b4de3e7a68cfe330d59450f09eAndreas Gustafsson2480. [bug] named could fail to emit all the required NSEC3
f3b52d9fe5e7e851adecad4eec8952cceda47592Brian Wellington records. [RT #18812]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2478. [bug] 'addresses' could be used uninitialized in
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister configure_forward(). [RT #18800]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2477. [bug] dig: the global option to print the command line is
0380c44d0238a88e167526954d630d071739ed28Mark Andrews +cmd not print_cmd. Update the output to reflect
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson this. [RT #17008]
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews2476. [doc] ARM: improve documentation for max-journal-size and
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
40817ed9c13782a7844e15dde24432611c4694acDavid Lawrence2475. [bug] LRU cache cleanup under overmem condition could purge
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington particular entries more aggressively. [RT #17628]
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington2474. [bug] ACL structures could be allocated with insufficient
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence space, causing an array overrun. [RT #18765]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2473. [port] linux: raise the limit on open files to the possible
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence maximum value before spawning threads; 'files'
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence specified in named.conf doesn't seem to work with
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence threads as expected. [RT #18784]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson2472. [port] linux: check the number of available cpu's before
ed71ea51c6ecb5d7d659b6e6a20f6b3f5c2678c6David Lawrence calling chroot as it depends on "/proc". [RT #16923]
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson2471. [bug] named-checkzone was not reporting missing mandatory
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister glue when sibling checks were disabled. [RT #18768]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2470. [bug] Elements of the isc_radix_node_t could be incorrectly
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence overwritten. [RT# 18719]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2469. [port] solaris: Work around Solaris's select() limitations.
d5399cc351a549db957185993b320a3bffa40e41James Brister2468. [bug] Resolver could try unreachable servers multiple times.
40f349ad1f2f0a63ef2784b8affcd44dc660b39cJames Brister2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
ac3b769801d794993e9eb6065b2f7144ffcfc9acMark Andrews2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2465. [bug] Adb's handling of lame addresses was different
69b691c9624f31e59b8d128ada902a82127c15a3James Brister for IPv4 and IPv6. [RT #18738]
69b691c9624f31e59b8d128ada902a82127c15a3James Brister2464. [port] linux: check that a capability is present before
dba20696eb808075d849e5a4cc8d854555869fb2Brian Wellington trying to set it. [RT #18135]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence API and glibc hides parts of the IPv6 Advanced Socket
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister API as a result. This is stupid as it breaks how the
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister two halves (Basic and Advanced) of the IPv6 Socket API
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence were designed to be used but we have to live with it.
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister API. [RT #18388]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2462. [doc] Document -m (enable memory usage debugging)
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence option for dig. [RT #18757]
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence2461. [port] sunos: Change #2363 was not complete. [RT #17513]
705cb05a187558959d20ec2c31e06de8e96f61b2David Lawrence --- 9.6.0a1 released ---
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2458. [doc] ARM: update and correction for max-cache-size.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2457. [tuning] max-cache-size is reverted to 0, the previous
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence default. It should be safe because expired cache
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence entries are also purged. [RT #18684]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence address, regardless of family. They now correctly
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence distinguish IPv4 from IPv6. [RT #18559]
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson2455. [bug] Stop metadata being transferred via axfr/ixfr.
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
dccfe96a449d135d1b3806a9ab8fd7481d017c8bAndreas Gustafsson2453. [bug] Remove NULL pointer dereference in dns_journal_print().
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2452. [func] Improve bin/test/journalprint. [RT #18316]
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2451. [port] solaris: handle runtime linking better. [RT #18356]
d03d4524993ecf5da72694907cb8581eadbe5c4dBrian Wellington2450. [doc] Fix lwresd docbook problem for manual page.
75f6c57d9544aa77a3b1a04587b4702c07343c90Brian Wellington2449. [placeholder]
c8df84cb389994b4eaf549f5851e70d18e2d063fAndreas Gustafsson2448. [func] Add NSEC3 support. [RT #15452]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2447. [cleanup] libbind has been split out as a separate product.
7cd4c3ddd1baf5f2b204562fdba3da37c716cc78Andreas Gustafsson2446. [func] Add a new log message about build options on startup.
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson A new command-line option '-V' for named is also
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson provided to show this information. [RT# 18645]
76a191c4202a4839e4ce598ec91f0c0d12f630aaAndreas Gustafsson2445. [doc] ARM out-of-date on empty reverse zones (list includes
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence RFC1918 address, but these are not yet compiled in).
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
5f80c1428b9b7235fc9c1c80aa505457c3043504Brian Wellington (clear DF) for UDP responses and requests.
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2443. [bug] win32: UDP connect() would not generate an event,
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington and so connected UDP sockets would never clean up.
af602636644fdfaabc331bd926b0aabb9432e152Brian Wellington Fix this by doing an immediate WSAConnect() rather
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson than an io completion port type for UDP.
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2442. [bug] A lock could be destroyed twice. [RT# 18626]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2441. [bug] isc_radix_insert() could copy radix tree nodes
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson incompletely. [RT #18573]
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson2440. [bug] named-checkconf used an incorrect test to determine
389f2ccc2f5f00a11a14114d40492f7ac8249fa7Olafur Gudmundsson if an ACL was set to none.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
b1d234eb75e2804e09d89178a76df39c321db51bBrian Wellington2438. [bug] Timeouts could be logged incorrectly under win32.
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington2437. [bug] Sockets could be closed too early, leading to
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington inconsistent states in the socket module. [RT #18298]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2435. [bug] Fixed an ACL memory leak affecting win32.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2434. [bug] Fixed a minor error-reporting bug in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2433. [tuning] Set initial timeout to 800ms.
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence2432. [bug] More Windows socket handling improvements. Stop
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence using I/O events and use IO Completion Ports
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington throughout. Rewrite the receive path logic to make
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington it easier to support multiple simultaneous
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence requesters in the future. Add stricter consistency
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence checking as a compile-time option (define
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2431. [bug] Acl processing could leak memory. [RT #18323]
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson2430. [bug] win32: isc_interval_set() could round down to
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson zero if the input was less than NS_INTERVAL
9c987b20b9246a34f38af8ed3cd22c61040933a7Andreas Gustafsson nanoseconds. Round up instead. [RT #18549]
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2429. [doc] nsupdate should be in section 1 of the man pages.
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson2428. [bug] dns_iptable_merge() mishandled merges of negative
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson tables. [RT #18409]
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson was set. [RT #18528]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2426. [bug] libbind: inet_net_pton() can sometimes return the
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff wrong value if excessively large net masks are
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson supplied. [RT #18512]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2425. [bug] named didn't detect unavailable query source addresses
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff at load time. [RT #18536]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2424. [port] configure now probes for a working epoll
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff implementation. Allow the use of kqueue,
0e7da7ac26cb234763ff03c3a9bc06e3c22e546fAndreas Gustafsson epoll and /dev/poll to be selected at compile
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff time. [RT #18277]
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson2423. [security] Randomize server selection on queries, so as to
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson make forgery a little more difficult. Instead of
73abbeb5823a9b3e01b05a8878db915eb6beccdaAndreas Gustafsson always preferring the server with the lowest RTT,
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson pick a server with RTT within the same 128
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson millisecond band. [RT #18441]
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2422. [bug] Handle the special return value of a empty node as
7ffc4c63ac8841d127c2d77c8716cc0dc483badcDavid Lawrence if it was a NXRRSET in the validator. [RT #18447]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2421. [func] Add new command line option '-S' for named to specify
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister the max number of sockets. [RT #18493]
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister Use caution: this option may not work for some
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister operating systems without rebuilding named.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2420. [bug] Windows socket handling cleanup. Let the io
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence completion event send out canceled read/write
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence done events, which keeps us from writing to memory
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson we no longer have ownership of. Add debugging
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson socket_log() function. Rework TCP socket handling
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson to not leak sockets.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson should not be used for isc_sockettype_fdwatch sockets.
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2417. [bug] Connecting UDP sockets for outgoing queries could
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson unexpectedly fail with an 'address already in use'
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson error. [RT #18411]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2416. [func] Log file descriptors that cause exceeding the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence internal maximum. [RT #18460]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2415. [bug] 'rndc dumpdb' could trigger various assertion failures
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence in rbtdb.c. [RT #18455]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2414. [bug] A masterdump context held the database lock too long,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence causing various troubles such as dead lock and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence recursive lock acquisition. [RT #18311, #18456]
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
52b784e2a662038b833e4f9ad7bff881faf52a85Andreas Gustafsson2412. [bug] win32: address a resource leak. [RT #18374]
a5aca6df165c601d755b8c5f5727048078bf0db5Andreas Gustafsson2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
edb8ffbbf3e4b3c16a10fdd45720d97706e6bf50Mark Andrews at compilation time. [RT #18433]
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews Note: with changes #2469 and #2421 above, there is no
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2410. [bug] Correctly delete m_versionInfo. [RT #18432]
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence2409. [bug] Only log that we disabled EDNS processing if we were
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence subsequently successful. [RT #18029]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2408. [bug] A duplicate TCP dispatch event could be sent, which
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence could then trigger an assertion failure in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence resquery_response(). [RT #18275]
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington2406. [placeholder]
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington2405. [cleanup] The default value for dnssec-validation was changed to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence "yes" in 9.5.0-P1 and all subsequent releases; this
34b394b43e2207e8f8f3703f0402422121455638David Lawrence was inadvertently omitted from CHANGES at the time.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2404. [port] hpux: files unlimited support.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2403. [bug] TSIG context leak. [RT #18341]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2402. [port] Support Solaris 2.11 and over. [RT #18362]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2401. [bug] Expect to get E[MN]FILE errno internal_accept()
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister (from accept() or fcntl() system calls). [RT #18358]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2399. [placeholder]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2398. [bug] Improve file descriptor management. New,
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister temporary, named.conf option reserved-sockets,
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister default 512. [RT #18344]
c0b06c8275c5ea3cde8cc67f3a6f9cab1bd55d65James Brister2397. [bug] gssapi_functions had too many elements. [RT #18355]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2396. [bug] Don't set SO_REUSEADDR for randomized ports.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2395. [port] Avoid warning and no effect from "files unlimited"
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson on Linux when running as root. [RT #18335]
f7d85bae58428b91fde90f87c1e9ef89897acf2eAndreas Gustafsson2394. [bug] Default configuration options set the limit for
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence open files to 'unlimited' as described in the
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson documentation. [RT #18331]
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson2393. [bug] nested acls containing keys could trigger an
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence assertion in acl.c. [RT #18166]
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson2392. [bug] remove 'grep -q' from acl test script, some platforms
289fd0daf888e3f7b1733bd750f60891ce90e1e6Andreas Gustafsson don't support it. [RT #18253]
bd36d3014e8a82d217ed1c88cdb4c717a25fee09Andreas Gustafsson2391. [port] hpux: cover additional recvmsg() error codes.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2390. [bug] dispatch.c could make a false warning on 'odd socket'.
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews [RT #18301].
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2389. [bug] Move the "working directory writable" check to after
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews the ns_os_changeuser() call. [RT #18326]
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2388. [bug] Avoid using tables for layout purposes in
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews statistics XSL [RT #18159].
c052487cdf42c83bb0fa8e4c0ed135e801ac1e90Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson [RT #18147] [RT #18258]
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2386. [func] Add warning about too small 'open files' limit.
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2385. [bug] A condition variable in socket.c could leak in
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews rare error handling [RT #17968].
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews2384. [security] Fully randomize UDP query ports to improve
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews forgery resilience. [RT #17949, #18098]
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson2383. [bug] named could double queries when they resulted in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence SERVFAIL due to overkilling EDNS0 failure detection.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
9dff010bd0224c0eb0046e02c51947bf69cbb718David Lawrence2381. [port] dlz/mysql: support multiple install layouts for
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson mysql. <prefix>/include/{,mysql/}mysql.h and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence <prefix>/lib/{,mysql/}. [RT #18152]
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence proofs which, in turn, caused validation failures
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence for insecure zones immediately below a secure zone
c0fcd6b98bc1fe5bbd2bd1a4d729215f65e3d20fJames Brister the server was authoritative for. [RT #18112]
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews TLDs and supported RRs with TTLs [RT #17972]
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2376. [bug] Change #2144 was not complete.
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister2375. [placeholder]
e411a986b94276c28e6a971f9c3b61d45c635456James Brister2374. [bug] "blackhole" ACLs could cause named to segfault due
e411a986b94276c28e6a971f9c3b61d45c635456James Brister to some uninitialized memory. [RT #18095]
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews2373. [bug] Default values of zone ACLs were re-parsed each time a
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews new zone was configured, causing an overconsumption
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence of memory. [RT #18092]
1d7172079ddd7aaad66a135a814d0013c6503837Andreas Gustafsson2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2371. [doc] Add +nsid option to dig man page. [RT #18039]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2370. [bug] "rndc freeze" could trigger an assertion in named
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence when called on a nonexistent zone. [RT #18050]
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews2369. [bug] libbind: Array bounds overrun on read in bitncmp().
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2368. [port] Linux: use libcap for capability management if
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence possible. [RT# 18026]
3364cad7e4699aff0b2d5090ab09a6da9733a118Andreas Gustafsson2367. [bug] Improve counting of dns_resstatscounter_retry
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2366. [bug] Adb shutdown race. [RT #18021]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2365. [bug] Fix a bug that caused dns_acl_isany() to return
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence spurious results. [RT #18000]
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister2364. [bug] named could trigger a assertion when serving a
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister malformed signed zone. [RT #17828]
dd3fc76a33569ee9d5d30effc0d975651a4567f5Andreas Gustafsson2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
41da7fdc551c50cddebf2c5311e322efd793fd3bDavid Lawrence2362. [cleanup] Make "rrset-order fixed" a compile-time option.
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister settable by "./configure --enable-fixed-rrset".
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Disabled by default. [RT #17977]
36357e4304862fb47e9fae03c704cb6720310c45James Brister2361. [bug] "recursion" statistics counter could be counted
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence multiple times for a single query. [RT #17990]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2360. [bug] Fix a condition where we release a database version
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence (which may acquire a lock) while holding the lock.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2359. [bug] Fix NSID bug. [RT #17942]
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence2358. [doc] Update host's default query description. [RT #17934]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2357. [port] Don't use OpenSSL's engine support in versions before
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence OpenSSL 0.9.7f. [RT #17922]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2356. [bug] Built in mutex profiler was not scalable enough.
4be63b1fd8c18dbeca1648d6cf22fa14f057a469David Lawrence2355. [func] Extend the number statistics counters available.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2354. [bug] Failed to initialize some rdatasetheader_t elements.
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson2353. [func] Add support for Name Server ID (RFC 5001).
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson 'dig +nsid' requests NSID from server.
97f75286ada13a1b06a424607e638bde5ebfb3caAndreas Gustafsson 'request-nsid yes;' causes recursive server to send
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence NSID requests to upstream servers. Server responds
b905ff7cbe3737d3c76115fa71c340a8ce439120David Lawrence to NSID requests with the string configured by
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence 'server-id' option. [RT #17091]
23a09704774241d2dba059e4d9231cd3d28bb116David Lawrence2352. [bug] Various GSS_API fixups. [RT #17729]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
358628c8f4804a2db52be0f6d03a66137fab4884David Lawrence2350. [port] win32: IPv6 support. [RT #17797]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2349. [func] Provide incremental re-signing support for secure
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence dynamic zones. [RT #1091]
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Documentation is in the new README.pkcs11 file.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence New tool, dnssec-keyfromlabel, which takes the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence label of a key pair in a HSM and constructs a DNS
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence key pair for use by named and dnssec-signzone.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2347. [bug] Delete now traverses the RB tree in the canonical
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence order. [RT #17451]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2346. [func] Memory statistics now cover all active memory contexts
344e909ce9c59422a70105aba498e68b2d42623bDavid Lawrence in increased detail. [RT #17580]
738922ba7bb10b206f6f54931aed068e3dcb950dDavid Lawrence2345. [bug] named-checkconf failed to detect when forwarders
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence were set at both the options/view level and in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence a root zone. [RT #17671]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2344. [bug] Improve "logging{ file ...; };" documentation.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2343. [bug] (Seemingly) duplicate IPv6 entries could be
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence created in ADB. [RT #17837]
c403d3f7d6cb17406e9be03a330ed5cf91619abcDavid Lawrence2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson2341. [bug] libbind: add missing -I../include for off source
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson tree builds. [RT #17606]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2340. [port] openbsd: interface configuration. [RT #17700]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2339. [port] tru64: support for libbind. [RT #17589]
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2338. [bug] check_ds() could be called with a non DS rdataset.
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence2336. [func] If "named -6" is specified then listen on all IPv6
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence interfaces if there are not listen-on-v6 clauses in
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence2335. [port] sunos: libbind and *printf() support for long long.
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
1a7f6c3898266854db100fb2cb36418d650de8e7Brian Wellington bug in fromstruct_txt(). [RT #17609]
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence2333. [bug] Fix off by one error in isc_time_nowplusinterval().
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence2332. [contrib] query-loc-0.4.0. [RT #17602]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2331. [bug] Failure to regenerate any signatures was not being
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence reported nor being past back to the UPDATE client.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2330. [bug] Remove potential race condition when handling
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence over memory events. [RT #17572]
32eddfc189108fa93e31761e13150594c7a79d2bDavid Lawrence WARNING: API CHANGE: over memory callback
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews function now needs to call isc_mem_waterack().
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews See <isc/mem.h> for details.
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2329. [bug] Clearer help text for dig's '-x' and '-i' options.
68e4926b2262571e004b4be00b905ec776c01d9cMichael Graff2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
6c7e680943ccdb75f23b050a7bc5ac0825e5244aMark Andrews2327. [bug] It was possible to dereference a NULL pointer in
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence rbtdb.c. Implement dead node processing in zones as
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence we do for caches. [RT #17312]
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence2326. [bug] It was possible to trigger a INSIST in the acache
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence2325. [port] Linux: use capset() function if available. [RT #17557]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer2323. [port] tru64: namespace clash. [RT #17547]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2322. [port] MacOS: work around the limitation of setrlimit()
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence for RLIMIT_NOFILE. [RT #17526]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2321. [placeholder]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2320. [func] Make statistics counters thread-safe for platforms
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence that support certain atomic operations. [RT #17466]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2319. [bug] Silence Coverity warnings in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2318. [port] sunos fixes for libbind. [RT #17514]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2315. [bug] Used incorrect address family for mapped IPv4
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence addresses in acl.c. [RT #17519]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2314. [bug] Uninitialized memory use on error path in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2313. [cleanup] Silence Coverity warnings. Handle private stacks.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence [RT #17447] [RT #17478]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2311. [bug] IPv6 addresses could match IPv4 ACL entries and
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence vice versa. [RT #17462]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2310. [bug] dig, host, nslookup: flush stdout before emitting
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence debug/fatal messages. [RT #17501]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2306. [bug] Remove potential race from lib/dns/resolver.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2305. [security] inet_network() buffer overflow. CVE-2008-0122.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2304. [bug] Check returns from all dns_rdata_tostruct() calls.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2301. [bug] Remove resource leak and fix error messages in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence bin/tests/system/lwresd/lwtest.c. [RT #17474]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2300. [bug] Fixed failure to close open file in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2299. [bug] Remove unnecessary NULL check in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2298. [bug] isc_mutex_lock() failure not caught in
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2297. [bug] isc_entropy_createfilesource() failure not caught in
16a107c904a30a687a08efec86a26a2f9398d2edAndreas Gustafsson2296. [port] Allow docbook stylesheet location to be specified to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence configure. [RT #17457]
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence2294. [func] Allow the experimental statistics channels to have
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence multiple connections and ACL.
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence Note: the stats-server and stats-server-v6 options
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence available in the previous beta releases are replaced
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence with the generic statistics-channels statement.
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson2293. [func] Add ACL regression test. [RT #17375]
b8957f3496b6a900df9ca263864a47dbb1cb8978David Lawrence2292. [bug] Log if the working directory is not writable.
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence failure to set PR_SET_DUMPABLE. [RT #17312]
c4717613e45323ed23dc6e9162cba89f1f83830cDavid Lawrence2290. [bug] Let AD in the query signal that the client wants AD
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson set in the response. [RT #17301]
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson2289. [func] named-checkzone now reports the out-of-zone CNAME
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence found. [RT #17309]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2288. [port] win32: mark service as running when we have finished
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence loading. [RT #17441]
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2286. [func] Allow a TCP connection to be used as a weak
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence authentication method for reverse zones.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence New update-policy methods tcp-self and 6to4-self.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2285. [func] Test framework for client memory context management.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2284. [bug] Memory leak in UPDATE prerequisite processing.
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2283. [bug] TSIG keys were not attaching to the memory
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley context. TSIG keys should use the rings
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley memory context rather than the clients memory
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley context. [RT #17377]
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2281. [bug] Attempts to use undefined acls were not being logged.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2280. [func] Allow the experimental http server to be reached
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence over IPv6 as well as IPv4. [RT #17332]
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to protect applications from receiving spurious
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence SIGPIPE signals when using the resolver.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2278. [bug] win32: handle the case where Windows returns no
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence search list or DNS suffix. [RT #17354]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2277. [bug] Empty zone names were not correctly being caught at
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence in the post parse checks. [RT #17357]
32eeec855957c3dd38f0d6c98ca79b67a71300b6Brian Wellington2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2275. [func] Add support to dig to perform IXFR queries over UDP.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2274. [func] Log zone transfer statistics. [RT #17336]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2273. [bug] Adjust log level to WARNING when saving inconsistent
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence stub/slave master and journal files. [RT# 17279]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2271. [bug] Fix a memory leak in http server code [RT #17100]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2270. [bug] dns_db_closeversion() version->writer could be reset
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence before it is tested. [RT #17290]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
d111a46c88adda33a93839f4934e127b6147d87dBob Halley --- 9.5.0b1 released ---
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson2267. [bug] Radix tree node_num value could be set incorrectly,
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson causing positive ACL matches to look like negative
e49a98d47fea220023c22bcc7204f13f7f0b07feBrian Wellington ones. [RT #17311]
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff2266. [bug] client.c:get_clientmctx() returned the same mctx
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff once the pool of mctx's was filled. [RT #17218]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2265. [bug] Test that the memory context's basic_table is non NULL
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington before freeing. [RT #17265]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2264. [bug] Server prefix length was being ignored. [RT #17308]
d1bdeae7bb7a0642170d5476c2fd901db3028143Andreas Gustafsson2263. [bug] "named-checkconf -z" failed to set default value
d111a46c88adda33a93839f4934e127b6147d87dBob Halley for "check-integrity". [RT #17306]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2262. [bug] Error status from all but the last view could be
d111a46c88adda33a93839f4934e127b6147d87dBob Halley lost. [RT #17292]
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews2260. [bug] Reported wrong clients-per-query when increasing the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence value. [RT #17236]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff2259. [placeholder]
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff --- 9.5.0a7 released ---
c6adcd09c8d5c0acd47a8dccb8061bb1105cad95Michael Graff2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley2257. [bug] win32: Use the full path to vcredist_x86.exe when
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley calling it. [RT #17222]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2256. [bug] win32: Correctly register the installation location of
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington2254. [bug] timer.c:dispatch() failed to lock timer->lock
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington when reading timer->idle allowing it to see
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington intermediate values as timer->idle was reset by
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson isc_timer_touch(). [RT #17243]
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson2253. [func] "max-cache-size" defaults to 32M.
3ae757933270e8298a6c1c5f9dfd30a4d852972cAndreas Gustafsson "max-acache-size" defaults to 16M.
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2252. [bug] Fixed errors in sortlist code [RT #17216]
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2251. [placeholder]
4716e94840921878b26e493576f84afe4fe08752Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
4716e94840921878b26e493576f84afe4fe08752Mark Andrews memory statistics file should be written or not.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Additionally named's -m option will cause the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence statistics file to be written. [RT #17113]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2249. [bug] Only set Authentic Data bit if client requested
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence DNSSEC, per RFC 3655 [RT #17175]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
3886e748a4086b813e3453232a742903762fedadBob Halley2247. [doc] Sort doc/misc/options. [RT #17067]
3886e748a4086b813e3453232a742903762fedadBob Halley2246. [bug] Make the startup of test servers (ans.pl) more
3886e748a4086b813e3453232a742903762fedadBob Halley robust. [RT #17147]
3886e748a4086b813e3453232a742903762fedadBob Halley2245. [bug] Validating lack of DS records at trust anchors wasn't
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley working. [RT #17151]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2244. [func] Allow the check of nameserver names against the
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley SOA MNAME field to be disabled by specifying
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley 'notify-to-soa yes;'. [RT #17073]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2243. [func] Configuration files without a newline at the end now
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington parse without error. [RT #17120]
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington library could require a source of random data.
b4b4adc097365bd3f980b30bc7cc30199f4b8456Andreas Gustafsson2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson a number of INSIST()s into plain fatal() errors
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley which report the triggering result code.
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley The 'key' command wasn't disabling GSS-TSIG.
83a39d3f3c9b9966bc060d46e8e419adb004888aAndreas Gustafsson2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
8426878e988859184706f36e2229e24e77b80aa4Andreas Gustafsson2238. [bug] It was possible to trigger a REQUIRE when a
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence validation was canceled. [RT #17106]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington2236. [bug] dnssec-signzone failed to preserve the case of
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence of wildcard owner names. [RT #17085]
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2233. [func] Add support for O(1) ACL processing, based on
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence radix tree code originally written by Kevin
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence Brintnall. [RT #16288]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2232. [bug] dns_adb_findaddrinfo() could fail and return
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson ISC_R_SUCCESS. [RT #17137]
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence2230. [bug] We could INSIST reading a corrupted journal.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2229. [bug] Null pointer dereference on query pool creation
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister failure. [RT #17133]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2228. [contrib] contrib: Change 2188 was incomplete.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2227. [cleanup] Tidied up the FAQ. [RT #17121]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2226. [placeholder]
6253eaa03c49aac035bdd8b1d9ec4853b45e94a0Andreas Gustafsson2225. [bug] More support for systems with no IPv4 addresses.
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2224. [bug] Defer journal compaction if a xfrin is in progress.
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2223. [bug] Make a new journal when compacting. [RT #17119]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2222. [func] named-checkconf now checks server key references.
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister2221. [bug] Set the event result code to reflect the actual
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister record turned to caller when a cache update is
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson rejected due to a more credible answer existing.
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2220. [bug] win32: Address a race condition in final shutdown of
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson the Windows socket code. [RT #17028]
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson2219. [bug] Apply zone consistency checks to additions, not
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson removals, when updating. [RT #17049]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2217. [func] Adjust update log levels. [RT #17092]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2216. [cleanup] Fix a number of errors reported by Coverity.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2214. [bug] Deregister OpenSSL lock callback when cleaning
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington up. Reorder OpenSSL cleanup so that RAND_cleanup()
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington is called before the locks are destroyed. [RT #17098]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2213. [bug] SIG0 diagnostic failure messages were looking at the
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley wrong status code. [RT #17101]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2212. [func] 'host -m' now causes memory statistics and active
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence memory to be printed at exit. [RT 17028]
a6a0b5e9b7078887a73ecec8be2935daa287a389James Brister2211. [func] Update "dynamic update temporarily disabled" message.
be768c2e952c34438025999125f984995a2c675fBob Halley2210. [bug] Deleting class specific records via UPDATE could
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence fail. [RT #17074]
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley2209. [port] osx: linking against user supplied static OpenSSL
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley libraries failed as the system ones were still being
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley found. [RT #17078]
be768c2e952c34438025999125f984995a2c675fBob Halley2208. [port] win32: make sure both build methods produce the
be768c2e952c34438025999125f984995a2c675fBob Halley same output. [RT #17058]
f00e30e9322fb2170ad3e21c3336c5b81be964c2James Brister2207. [port] Some implementations of getaddrinfo() fail to set
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley ai_canonname correctly. [RT #17061]
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley --- 9.5.0a6 released ---
19e0c849f69ad8b655b4d199e16de0a4a94562d6Bob Halley2206. [security] "allow-query-cache" and "allow-recursion" now
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence cross inherit from each other.
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley If allow-query-cache is not set in named.conf then
01e320c4fb51c802e9fe86c192fbebf4229ca918Bob Halley allow-recursion is used if set, otherwise allow-query
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence is used if set, otherwise the default (localnets;
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister localhost;) is used.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence If allow-recursion is not set in named.conf then
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson allow-query-cache is used if set, otherwise allow-query
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson is used if set, otherwise the default (localnets;
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence localhost;) is used.
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2204. [bug] "rndc flushanme name unknown-view" caused named
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister to crash. [RT #16984]
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2203. [security] Query id generation was cryptographically weak.
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley [RT # 16915]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2202. [security] The default acls for allow-query-cache and
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley allow-recursion were not being applied. [RT #16960]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2201. [bug] The build failed in a separate object directory.
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington2200. [bug] The search for cached NSEC records was stopping to
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington early leading to excessive DLV queries. [RT #16930]
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington2199. [bug] win32: don't call WSAStartup() while loading dlls.
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley2198. [bug] win32: RegCloseKey() could be called when
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley RegOpenKeyEx() failed. [RT #16911]
a5a5371b756f3bbbe33dac1dde196fbd6c063640Bob Halley2197. [bug] Add INSIST to catch negative responses which are
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence not setting the event result code appropriately.
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2196. [port] win32: yield processor while waiting for once to
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence to complete. [RT #16958]
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which