CHANGES revision fb623f9a07857d95cf6c47db0aa81a28c3bbc5c0
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews3655. [cleanup] Simplify TCP message processing when requesting a
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews zone transfer. [RT #34825]
f8dfdef682c54f61cacebfb31260f3d6ba4ea54aMark Andrews3654. [bug] Address race condition with manual notify requests.
b3d3e578410209d849efb59c9ea4925ca5c9ca68Mark Andrews3653. [func] Create delegations for all "children" of empty zones
ea40cebe2b51bd2b3c228ac6d08a3cfeca17960aMark Andrews except "forward first". [RT #34826]
96c973a6a96f10c93ede4c66964ceae47535a07aMark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
9cf0970f43a41fe78a78d878f1d45c65f0b733d3Mark Andrews3651. [tuning] Adjust when a master server is deemed unreachable.
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
ad430189fb0028e41ae722f6e3c465b4bdd47af1Mark Andrews notify requests. [RT #30589]
b857ba993de91a3863de92db6462afdbec47d993Mark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
b857ba993de91a3863de92db6462afdbec47d993Mark Andrews the associated view. [RT #34765]
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3648. [test] Updated the ATF test framework to version 0.17.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3647. [bug] Address a race condition when shutting down a zone.
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews3646. [bug] Journal filename string could be set incorrectly,
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews causing garbage in log messages. [RT #34738]
1f1b47a2ba565f96a97981e8447f80eba6854887Mark Andrews --- 9.10.0a1 released ---
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews3645. [protocol] Use case sensitive compression when responding to
61fb42c4ef45d88e115bd769c30c4f36b461870bMark Andrews queries. [RT #34737]
9cc75a3e5b0b54c5015e3f73a4a64d273560d5e3Mark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
94d1015e65882e0f0c527abb0e8f66a609f46cb8Mark Andrews3643. [doc] Clarify RRL "slip" documentation.
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews3642. [func] Allow externally generated DNSKEY to be imported
dbbcb98a7069e5b79c5100b3c9cc3f3e5704d14eMark Andrews into the DNSKEY management framework. A new tool
c52ae25dd70636c673d4a299859137a1c8ba611aMark Andrews dnssec-importkey is used to do this. [RT #34698]
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews3641. [bug] Handle changes to sig-validity-interval settings
6286983c506433d642b23e64845c50be30f2a7f6Mark Andrews better. [RT #34625]
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews3640. [bug] ndots was not being checked when searching. Only
d0aebc5a55b6145297d94f8aee939852357c59fcMark Andrews continue searching on NXDOMAIN responses. Add the
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews ability to specify ndots to nslookup. [RT #34711]
f470686d921e6aa26726109226310a42ad8a44f3Mark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews in a key zone. [RT #34238]
fd447061627e77db3ccf2536e14134e50647b9beMark Andrews3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews encountered. [RT #34668]
9f1bca36e43f076ab49d8de51301cb3c2dc04995Mark Andrews3637. [bug] 'allow-query-on' was checking the source address
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews rather than the destination address. [RT #34590]
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews3636. [bug] Automatic empty zones now behave better with
0e0d2891c08b70886f811d627bfb91a0c5e07dfcMark Andrews forward only "zones" beneath them. [RT #34583]
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews3635. [bug] Signatures were not being removed from a zone with
6f3e68a8dbad508b815f42a0250122ca5e58972eMark Andrews only KSK keys for a algorithm. [RT #34439]
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews3634. [func] Report build-id in rndc status. Report build-id
62bdc6103b8245b812eef9faabee8e644afcc25fMark Andrews when building from a git repository. [RT #20422]
fb31e2890814be0ac3c343d91144f89ce5e05784Mark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
ce75d8bec3e93ef9fbd4a235f14f99483b3f238fMark Andrews to support new EDNS options. [RT #34414]
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews3632. [bug] Signature from newly inactive keys were not being
62700b67eb8abb7d13f9c3c1bc4b60a1477d35d8Mark Andrews removed. [RT #32178]
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews3631. [bug] Remove spurious warning about missing signatures when
cdb6532e86a8f3d3d563b6da8c333bdf377d51ddMark Andrews qtype is SIG. [RT #34600]
6fd711065f5878c526f88f2825ab8024e2296644Mark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
5e41884b4a1871eb83e66f0d68ca4d04bbbc857eMark Andrews3629. [func] Allow the printing of cryptographic fields in DNSSEC
54a565b1409a0c259ee3b20791db1b4636addc5eMark Andrews records by dig to be suppressed (dig +nocrypto).
37225662b64e44a3c59f92dd6156db37b52ca7a3Mark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
8f2b99738760449de3431b191c0c9c0ea08fdc2eMark Andrews3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
6342df69b05f2f62d060fd4affdf536e51504084Mark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
5caf500beeb91b96a2bb2fd55080141569aead97Mark Andrews3625. [bug] Don't send notify messages to machines outside of the
012dedf87438043ff00d4deec8b488eec2be2a1cMark Andrews3624. [bug] Look for 'json_object_new_int64' when looking for a
6f808593181c16d5a7625cb527a5755872f9680cMark Andrews the json library. [RT #34449]
2eb9c4150491acfb429d67de1fddd8722d83553eMark Andrews3623. [placeholder]
1edbf336252ea6a94d58f3f1a135567e2956e8caMark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
e407562a75eb93073bb72089cced150d7ffe4d4fTatuya JINMEI 神明達哉 cache statistics. [RT #34339]
8cb1558ff82868e45e76aa64e2ff72986aeebce2Tatuya JINMEI 神明達哉3621. [security] Incorrect bounds checking on private type 'keydata'
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 can lead to a remotely triggerable REQUIRE failure
6da7c87a77ecfd9ccce36f96b4ccd20e1b9cccf1Tatuya JINMEI 神明達哉 (CVE-2013-4854). [RT #34238]
668767dc6471dfed4741869c8dd20af8e9ace3cdTatuya JINMEI 神明達哉3620. [func] Added "rpz-client-ip" policy triggers, enabling
668767dc6471dfed4741869c8dd20af8e9ace3cdTatuya JINMEI 神明達哉 RPZ responses to be configured on the basis of
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews the client IP address; this can be used, for
bb030ee88e51488a464146dfce4db74d16e05a0cMark Andrews example, to blacklist misbehaving recursive
634d053dfe806ee6a3d9ed5c2bda7f68ba410de4Tatuya JINMEI 神明達哉 or stub resolvers. [RT #33605]
b6d52ee5bea1b9d9074698e693b49ce96edff47bMark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews3618. [func] "rndc reload" now checks modification times of
b657d7db3b73701430b7d1fa17e9c016fd859088Mark Andrews include files as well as master files to determine
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews whether to skip reloading a zone. [RT #33936]
8d42bb315ce6745e5631eda4eac59d3b981e58c6Mark Andrews3617. [bug] Named was failing to answer queries during
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews "rndc reload" [RT #34098]
4efe32b8bb512ac03a139b77f008600c5a3624eaMark Andrews3616. [bug] Change #3613 was incomplete. [RT #34177]
89639a5e13cace9166bf14931b9e1ce9dc8c47a3Mark Andrews3615. [cleanup] "configure" now finishes by printing a summary
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews of optional BIND features and whether they are
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews active or inactive. ("configure --enable-full-report"
94be8e357c37c843027e899bb277a314ea828a4cMark Andrews increases the verbosity of the summary.) [RT #31777]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews3614. [port] Check for <linux/types.h>. [RT #34162]
49fcdcd940274fedcb9cf943f0ee8144369527fdMark Andrews3613. [bug] named could crash when deleting inline-signing
846f974d5737710588eb676b64ba138da27c45ddMark Andrews zones with "rndc delzone". [RT #34066]
93d6dfaf66258337985427c86181f01fc51f0bb4Mark Andrews3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
600cbd1fcea3c9cc9706dc1ff8fc0d0034ebdeacTatuya JINMEI 神明達哉3611. [bug] Improved resistance to a theoretical authentication
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 attack based on differential timing. [RT #33939]
1160ecfd146301ff0d053ed054e5276f33f28b4eMark Andrews3610. [cleanup] win32: Some executables had been omitted from the
436fd79f52d39c64aff47d4993db39c1cd09723bMark Andrews installer. [RT #34116]
d3fc633c344e15179480d887aeecf4a6263baeabMark Andrews3609. [bug] Corrected a possible deadlock in applications using
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the export version of the isc_app API. [RT #33967]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3608. [port] win32: added todos.pl script to ensure all text files
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the win32 build depends on are converted to DOS
baee883e378402698eeb7326538a7d432c8350d1Mark Andrews newline format. [RT #22067]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
0b1da8124c817270f5dfe46cd0211b993c931a91Mark Andrews message. [RT #34045]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3606. [func] "rndc flushtree" now flushes matching
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 records in the address database and bad cache
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as well as the DNS cache. (Previously only the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNS cache was flushed.) [RT #33970]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3605. [port] win32: Addressed several compatibility issues
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with newer versions of Visual Studio. [RT #33916]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews3604. [bug] Fixed a compile-time error when building with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 JSON but not XML. [RT #33959]
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews3603. [bug] Install <isc/stat.h>. [RT #33956]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
da34d92aeee25dedd6affd69623dc7d0aba2cc23Mark Andrews integrate with named and serve DNS data.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (Contributed by John Eaglesham of Yahoo.)
20d90a37532b92b0471c56fb583d6b2ddc32caa6Mark Andrews3601. [bug] Added to PKCS#11 openssl patches a value len
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 attribute in DH derive key. [RT #33928]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3600. [cleanup] dig: Fixed a typo in the warning output when receiving
4607e7a9b8dfb1b41c70e51c2b603daaf22cf302Mark Andrews an oversized response. [RT #33910]
2f025ec6fe68421d942330afaf1980b7a4976e30Mark Andrews3599. [tuning] Check for pointer equivalence in name comparisons.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3598. [cleanup] Improved portability of map file code. [RT #33820]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3597. [bug] Ensure automatic-resigning heaps are reconstructed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when loading zones in map format. [RT #33381]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3596. [port] Updated win32 build documentation, added
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-verify. [RT #22067]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3595. [port] win32: Fix build problems introduced by change #3550.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3594. [maint] Update config.guess and config.sub. [RT #33816]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3593. [func] Update EDNS processing to better track remote server
3184ff5e45c8f821e5165ea60d674bfb87faf5b8Mark Andrews capabilities. [RT #30655]
1e107b3d7b54de5022c3328423164e533afcc15eMark Andrews3592. [doc] Moved documentation of rndc command options to the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rndc man page. [RT #33506]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3591. [func] Use CRC-64 to detect map file corruption at load
87c7b822b7bcdd8bec7ba1c01937286308b4847cMark Andrews time. [RT #33746]
17a14e451df80b3d82278e5c925682ade3263dbcMark Andrews3590. [bug] When using RRL on recursive servers, defer
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rate-limiting until after recursion is complete;
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 also, use correct rcode for slipped NXDOMAIN
a4b3e51a8f1c9742c0f7d9f7d70f1ad926985145Mark Andrews responses. [RT #33604]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3589. [func] Report serial numbers in when starting zone transfers.
c282d16311ce06b6bcb594be716cde4ad5c40af9Mark Andrews Report accepted NOTIFY requests including serial.
f488b1c311f2fc09ae8e45f7893185e608b17edeMark Andrews3588. [bug] dig: addressed a memory leak in the sigchase code
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that could cause a shutdown crash. [RT #33733]
4bb16c5856e5c6b05ac43c60f9f9376641bdcccfMark Andrews3587. [func] 'named -g' now checks the logging configuration but
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 does not use it. [RT #33473]
c676c1b4978bfe2d00bdf5085fd44544067f9de4Mark Andrews3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3585. [func] "rndc delzone -clean" option removes zone files
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when deleting a zone. [RT #33570]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3584. [security] Caching data from an incompletely signed zone could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trigger an assertion failure in resolver.c
471e0563c7965c556c759775882cd3448dae78eaMark Andrews (CVE-2013-3919). [RT #33690]
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews3583. [bug] Address memory leak in GSS-API processing [RT #33574]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3582. [bug] Silence false positive warning regarding missing file
743ffc91bdd462be6f91b3bab8f440c6a69f0770Mark Andrews directive for inline slave zones. [RT #33662]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
072e21c2bbf0907706b18a4a3857913e79d380fbMark Andrews3580. [bug] Addressed a possible race in acache.c [RT #33602]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3579. [maint] Updates to PKCS#11 openssl patches, supporting
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3577. [bug] Handle zero TTL values better. [RT #33411]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3576. [bug] Address a shutdown race when validating. [RT #33573]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3575. [func] Changed the logging category for RRL events from
ad4b2f37e0f51a90c160edbe8633589ce42e60b9Mark Andrews 'queries' to 'query-errors'. [RT #33540]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3574. [doc] The 'hostname' keyword was missing from server-id
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 description in the named.conf man page. [RT #33476]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone names containing punctuation marks and other
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nonstandard characters. [RT #33419]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3572. [func] Threads are now enabled by default on most
edfcbabd60f8479b72d91bcc2d2082a36ace4003Mark Andrews operating systems. [RT #25483]
f95231835fdcd8d5f58486c9f9993602f27fe157Mark Andrews3571. [bug] Address race condition in dns_client_startresolve().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3570. [bug] Check internal pointers are valid when loading map
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 files. [RT #33403]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 module, and added multithread support. [RT #33394]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3568. [cleanup] Add a product description line to the version file,
7a857bdb6828e75eec5a7080e4670ce199875922Mark Andrews to be reported by named -v/-V. [RT #33366]
fc87397df60d3c5e5d9900ff5ac82da29fe1dbb7Mark Andrews3567. [bug] Silence clang static analyzer warnings. [RT #33365]
a22f967b7e3589dab640d2cc65fd202d077a9d90Mark Andrews3566. [func] Log when forwarding updates to master. [RT #33240]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3565. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3564. [bug] Improved handling of corrupted map files. [RT #33380]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews3562. [func] Update map file header format to include a SHA-1 hash
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of the database content, so that corrupted map files
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 can be rejected at load time. [RT #32459]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or NOTIMP. Adjust usage message. [RT #33363]
b0c2141b236832664119c9c7c647359b0c7fead4Mark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when set via configure. [RT #33345]
182a34004c7c48e2c1626f3ce7e787f413955126Mark Andrews3559. [func] Check that both forms of Sender Policy Framework
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 records exist or do not exist. [RT #33355]
603658ea65b34c4b57f154b1e2412b4f01866b6bMark Andrews3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3557. [bug] Reloading redirect zones was broken. [RT #33292]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3555. [bug] Address theoretical race conditions in acache.c
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (change #3553 was incomplete). [RT #33252]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3554. [bug] RRL failed to correctly rate-limit upward
806c235ecf533b98d068b3f8df9d7abbe1e30cf9Mark Andrews referrals and failed to count dropped error
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 responses in the statistics. [RT #33225]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3553. [bug] Address suspected double free in acache. [RT #33252]
cfa19fe5c9cf279b38e4258a54acb3fd16b9550bMark Andrews3552. [bug] Wrong getopt option string for 'nsupdate -r'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
8ca42f6318be756354b70260050132545aa680d3Mark Andrews3550. [func] Unified the internal and export versions of the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 BIND libraries, allowing external clients to use
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the same libraries as BIND. [RT #33131]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3549. [doc] Documentation for "request-nsid" was missing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3548. [bug] The NSID request code in resolver.c was broken
4cb69e7c919cc43b16852016588af714bc421da3Mark Andrews resulting in invalid EDNS options being sent.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3547. [bug] Some malformed unknown rdata records were not properly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 detected and rejected. [RT #33129]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3546. [func] Add EUI48 and EUI64 types. [RT #33082]
0c2509b0b9f9e455fa9d347d08f6ba9abd86d418Mark Andrews3545. [bug] RRL slip behavior was incorrect when set to 1.
8b5de9701428e2b5eb50aba96af23dc1186124ddMark Andrews3544. [contrib] check5011.pl: Script to report the status of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 managed keys as recorded in managed-keys.bind.
80b782f356f0692c11b4e52e8dd46ec41704e5a2Mark Andrews Contributed by Tony Finch <dot@dotat.at>
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3543. [bug] Update socket structure before attaching to socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 manager after accept. [RT #33084]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3542. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3541. [bug] Parts of libdns were not properly initialized when
6a2f7bba6f4df137ab3f781fe07b0b88e72e0b19Mark Andrews built in libexport mode. [RT #33028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3540. [test] libt_api: t_info and t_assert were not thread safe.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3539. [port] win32: timestamp format didn't match other platforms.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3538. [test] Running "make test" now requires loopback interfaces
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews to be set up. [RT #32452]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3537. [tuning] Slave zones, when updated, now send NOTIFY messages
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to peers before being dumped to disk rather than
53cf67186506f9557aaf2149898dd76715803db2Mark Andrews after. [RT #27242]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3536. [func] Add support for setting Differentiated Services Code
888bb8bf68ba1a2b032a64122efd9125a9155ad7Mark Andrews Point (DSCP) values in named. Most configuration
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 options which take a "port" option (e.g.,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 listen-on, forwarders, also-notify, masters,
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews notify-source, etc) can now also take a "dscp"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option specifying a code point for use with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 outgoing traffic, if supported by the underlying
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 OS. [RT #27596]
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews3535. [bug] Minor win32 cleanups. [RT #32962]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3534. [bug] Extra text after an embedded NULL was ignored when
b312748a11d27fe387984973ba79975a9d6863c4Mark Andrews parsing zone files. [RT #32699]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
ee84964a7d29ae88769f67326a65256731769ea7Mark Andrews3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3531. [bug] win32: A uninitialized value could be returned on out
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of memory. [RT #32960]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3529. [func] Named now listens on both IPv4 and IPv6 interfaces
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews by default. Named previously only listened on IPv4
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 interfaces by default unless named was running in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 IPv6 only mode. [RT #32945]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3528. [func] New "dnssec-coverage" command scans the timing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 metadata for a set of DNSSEC keys and reports if a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lapse in signing coverage has been scheduled
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inadvertently. (Note: This tool depends on python;
c3ea698877cdde327f2bf6a8e97347798fead2d4Mark Andrews it will not be built or installed on systems that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 do not have a python interpreter.) [RT #28098]
9368d7df838f58cd32922b526775ca730bc633cfMark Andrews3527. [compat] Add a URI to allow applications to explicitly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 request a particular XML schema from the statistics
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 channel, returning 404 if not supported. [RT #32481]
e2fb08b85de8158fe6b71008311e3d98104b92a6Mark Andrews3526. [cleanup] Set up dependencies for unit tests correctly during
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 build. [RT #32803]
22a9cd54c072545d13788ceead759911fe8cfe34Mark Andrews3525. [func] Support for additional signing algorithms in rndc:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 The -A option to rndc-confgen can be used to
21ba6c18e4ccc73933af5cf28701a5cc3b7963ecMark Andrews select the algorithm for the generated key.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (The default is still hmac-md5; this may
266296414d0ed79980c6d3144a587b42324a50ffMark Andrews change in a future release.) [RT #20363]
c960dffe35970da729219b72f2e41350d3b64c35Mark Andrews3524. [func] Added an alternate statistics channel in JSON format,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when the server is built with the json-c library:
5da49e379c79fbd597cf0d47e7697b65991f761fMark Andrews http://[address]:[port]/json. [RT #32630]
31b3dc1c6b4fe99a2af2ee63314e842af4a20070Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dynamically-loadable modules, and added the
59f51f864c752d2e4bf8d1ad94404ada0c9aa6e9Mark Andrews "wildcard" module based on a contribution from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
a207a2835e37de52e11d4c143c0425e749409c46Mark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 they ought to. [RT #32685]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3520. [bug] 'mctx' was not being referenced counted in some places
64cc9c8818db2552cbdd77f1050e890ffa5a17d8Mark Andrews where it should have been. [RT #32794]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3519. [func] Full replay protection via four-way handshake is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 now mandatory for rndc clients. Very old versions
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews of rndc will no longer work. [RT #32798]
0f09ef5a50ef09eaed8e6630b4004d5143d6b52cMark Andrews3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 so that all dns_rrl_rtype_t enum values fit regardless
c7fc6434fe5949c8e3f76bf69f5655eb3a76dfaeMark Andrews of whether it is teated as signed or unsigned by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the compiler. [RT #32792]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
421e4cf66e4cba0b0751a34a9c027e39fe0474f9Mark Andrews3516. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3515. [port] '%T' is not portable in strftime(). [RT #32763]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3514. [bug] The ranges for valid key sizes in ddns-confgen and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rndc-confgen were too constrained. Keys up to 512
b0c15bd9792112fb47f6d956e580e4369e92f4e7Mark Andrews bits are now allowed for most algorithms, and up
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to 1024 bits for hmac-sha384 and hmac-sha512.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3513. [func] "dig -u" prints times in microseconds rather than
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews milliseconds. [RT #32704]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3512. [func] "rndc validation check" reports the current status
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of DNSSEC validation. [RT #21397]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3511. [doc] Improve documentation of redirect zones. [RT #32756]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3510. [func] "rndc status" and XML statistics channel now report
12ff7274fe2ea531ecca6a71fb9f7e1ae92da389Mark Andrews server start and reconfiguration times. [RT #21048]
9d3ad53203f1ac49f9e876dbbcaca18656eb3e19Mark Andrews3509. [cleanup] Added a product line to version file to allow for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 easy naming of different products (BIND
767fd19da4b699aae46959d834f53af0e1166e80Mark Andrews vs BIND ESV, for example). [RT #32755]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3508. [contrib] queryperf was incorrectly rejecting the -T option.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3507. [bug] Statistics channel XSL had a glitch when attempting
5b76a09697bfc76f5acefd65d5b37b1214d271a8Mark Andrews to chart query data before any queries had been
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 received. [RT #32620]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3506. [func] When setting "max-cache-size" and "max-acache-size",
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the keyword "unlimited" is no longer defined as equal
93e353425a81da7793dde3776f4caca658f57c11Mark Andrews to 4 gigabytes (except on 32-bit platforms); it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 means literally unlimited. [RT #32358]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3505. [bug] When setting "max-cache-size" and "max-acache-size",
49a940dc68b30d9e4f9e1bd3c0503d8b90bb1726Mark Andrews larger values than 4 gigabytes could not be set
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 explicitly, though larger sizes were available
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when setting cache size to 0. This has been
d92770e851ebbc1005b3bf121e3c9f13b67a3f42Mark Andrews corrected; the full range is now available.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3504. [func] Add support for ACLs based on geographic location,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 using MaxMind GeoIP databases. Based on code
90295f915c883d1aeeda856f518584d4219a704aMark Andrews contributed by Ken Brownfield <kb@slide.com>.
1c75ea91cdb49dac65f0f592ddbf66bfdfc4a2d7Mark Andrews3503. [doc] Clarify size_spec syntax. [RT #32449]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3502. [func] zone-statistics: "no" is now a synonym for "none",
142d155dd68fd601dc38c6b6f7c35f2798ec24caMark Andrews instead of "terse". [RT #29165]
99776003811a413457a2c35a808ad860df877d24Mark Andrews3501. [func] zone-statistics now takes three options: full,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 terse, and none. "yes" and "no" are retained as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 synonyms for full and terse, respectively. [RT #29165]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3500. [security] Support NAPTR regular expression validation on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 all platforms without using libregex, which
aa39170da817cae7b4c6c735cc832e05ec3d2351Mark Andrews can be vulnerable to memory exhaustion attack
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (CVE-2013-2266). [RT #32688]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3499. [doc] Corrected ARM documentation of built-in zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3498. [bug] zone statistics for zones which matched a potential
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 empty zone could have their zone-statistics setting
6526fd032fc418411da3af4201214e95c113d3e2Mark Andrews3497. [func] When deleting a slave/stub zone using 'rndc delzone'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 report the files that were being used so they can
b8fff4f0d70bb9c5e53023ad0dae0acda67b5cdaMark Andrews be cleaned up if desired. [RT #27899]
757bf8a1e5d85806c648d7a6267da8d49a8ab822Tatuya JINMEI 神明達哉3496. [placeholder]
be0e075ac2c10ade3e80edef7fa14ac0fda92690Mark Andrews3495. [func] Support multiple response-policy zones (up to 32),
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 while improving RPZ performance. "response-policy"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 syntax now includes a "min-ns-dots" clause, with
2a908588fbeacebc5f13b153b73c96e12dacaadcTatuya JINMEI 神明達哉 default 1, to exclude top-level domains from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NSIP and NSDNAME checking. --enable-rpz-nsip and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --enable-rpz-nsdname are now the default. [RT #32251]
af2be1a46813e228cb9d71230d3f41222fdb69baTatuya JINMEI 神明達哉3494. [func] DNS RRL: Blunt the impact of DNS reflection and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 amplification attacks by rate-limiting substantially-
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 identical responses. [RT #28130]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3493. [contrib] Added BDBHPT dynamically-lodable DLZ module,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 contributed by Mark Goldfinch. [RT #32549]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3492. [bug] Fixed a regression in zone loading performance
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 due to lock contention. [RT #30399]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3491. [bug] Slave zones using inline-signing must specify a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 file name. [RT #31946]
8b0ee8448bec37bf1e771363dccce7c0e73eb1a7Mark Andrews3490. [bug] When logging RDATA during update, truncate if it's
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 too long. [RT #32365]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_dlzcreate() failed to properly initialize
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dlzdb.link. When cloning a rdataset do not copy
a9ae9d743c7f85bec44e95b1f62c7a2a114a2fd6Mark Andrews the link contents. [RT #32651]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3488. [bug] Use after free error with DH generated keys. [RT #32649]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3487. [bug] Change 3444 was not complete. There was a additional
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 place where the NOQNAME proof needed to be saved.
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3486. [bug] named could crash when using TKEY-negotiated keys
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that had been deleted and then recreated. [RT #32506]
75ace6601e66840436f52e61353ee0d400577b55Mark Andrews3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3484. [bug] Some statistics were incorrectly rendered in XML.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3483. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3482. [func] dig +nssearch now prints name servers that don't
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 have address records (missing AAAA or A, or the name
f411c2e81cbfcf89ee073a0e31ac902a42fc8f22Mark Andrews doesn't exist). [RT #29348]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3481. [cleanup] Removed use of const const in atf.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3480. [bug] Silence logging noise when setting up zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 statistics. [RT #32525]
3bdf879a5301bce17e0a955585eb3decc541ba79Mark Andrews3479. [bug] Address potential memory leaks in gssapi support
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 code. [RT #32405]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3478. [port] Fix a build failure in strict C99 environments
1b5b46942d149f891bb91e90c6f52944b77c8a68Mark Andrews3477. [func] Expand logging when adding records via DDNS update
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3476. [bug] "rndc zonestatus" could report a spurious "not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 found" error on inline-signing zones. [RT #29226]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3475. [cleanup] Changed name of 'map' zone file format (previously
39fe146f2ab82cb8e49caa319a3345174fa2d69aMark Andrews 'fast'). [RT #32458]
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews3474. [bug] nsupdate could assert when the local and remote
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 address families didn't match. [RT #22897]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3473. [bug] dnssec-signzone/verify could incorrectly report
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 an error condition due to an empty node above an
8689f943a4859a8f68344236a1dcb81299a98347Mark Andrews opt-out delegation lacking an NSEC3. [RT #32072]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3472. [bug] The active-connections counter in the socket
2434ccfde7efa30b6fedf4630e5036eeb5d647d0Mark Andrews statistics could underflow. [RT #31747]
d8ec783e6dc0bd16a80b30d9888306b1faae6037Mark Andrews3471. [bug] The number of UDP dispatches now defaults to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the number of CPUs even if -n has been set to
5bd76af084edfdcd1cb4db9453ac781d32dde6f7Mark Andrews a higher value. [RT #30964]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3470. [bug] Slave zones could fail to dump when successfully
8bcb0f297b50e80e3c7aab1a41b94d937acf4dc0Mark Andrews refreshing after an initial failure. [RT #31276]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3469. [bug] Handle DLZ lookup failures more gracefully. Improve
7f32428506d55083fe5ac9aa515294bdef7c6e27Mark Andrews backward compatibility between versions of DLZ dlopen
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 API. [RT #32275]
5c10f54fe38795cbd3d5cf22e3fbd1d22b8226e4Mark Andrews3468. [security] RPZ rules to generate A records (but not AAAA records)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could trigger an assertion failure when used in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 conjunction with DNS64 (CVE-2012-5689). [RT #32141]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3467. [bug] Added checks in dnssec-keygen and dnssec-settime
1feb76edcbb8ee97d1757f73115b7c4a71de6e0eMark Andrews to check for delete date < inactive date. [RT #31719]
4c342614f80d867bba23e63795ec6ee79dd6395dMark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in DLZ example driver. [RT #32275]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3465. [bug] Handle isolated reserved ports. [RT #31778]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3464. [maint] Updates to PKCS#11 openssl patches, supporting
6c6673405c7e29c1d91d07b326d0fe1d7b52e478Mark Andrews versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3462. [doc] Clarify server selection behavior of dig when using
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 -4 or -6 options. [RT #32181]
0ad5cb4782cd419b089bcab28d2fd9e140dbcc59Mark Andrews3461. [bug] Negative responses could incorrectly have AD=1
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 set. [RT #32237]
7c5d5a7932b8ac27281eeff64506dff8220bb3eaMark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3459. [func] Added -J option to named-checkzone/named-compilezone
1aed0905a50ff8d2bdc4d253b38ae24afe3bab1cDanny Mayer to specify the path to the journal file. [RT #30958]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3458. [bug] Return FORMERR when presented with a overly long
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 domain named in a request. [RT #29682]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3456. [port] g++47: ATF failed to compile. [RT #32012]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3455. [contrib] queryperf: fix getopt option list. [RT #32338]
87f4715d6c0a22f3449eb3291c91aa45ba86c955Mark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failed. [RT #31960]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3452. [bug] Accept duplicate singleton records. [RT #32329]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3451. [port] Increase per thread stack size from 64K to 1M.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3450. [bug] Stop logfileconfig system test spam system logs.
f6ff00810196d0c0973f62c7917b9975011fa45aMark Andrews3449. [bug] gen.c: use the pre-processor to construct format
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 strings so that compiler can perform sanity checks;
ec3984e9df6fd9b7811daa0dacb1b3dd1423ebf3Mark Andrews check the snprintf results. [RT #17576]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3448. [bug] The allow-query-on ACL was not processed correctly.
fa4e1438016331502e6d665588021aa7ffef8cc2Mark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
f0471ca4b7bca6e907130ec84e36cf69f2b79a5aMark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3445. [bug] Warn about zone files with blank owner names
638fe804a524ee0c028863c0301b999c79de7651Mark Andrews immediately after $ORIGIN directives. [RT #31848]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3444. [bug] The NOQNAME proof was not being returned from cached
9db3d9d14e2f3641d696dadc59c40c52b6f888bcMark Andrews insecure responses. [RT #21409]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews rejected when generating keys. [RT #31927]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3442. [port] Net::DNS 0.69 introduced a non backwards compatible
0b75a2dd3bd81a69e2d68fe446cacb46be04c1f1Mark Andrews change. [RT #32216]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3440. [bug] Reorder get_key_struct to not trigger a assertion when
0d993c02babc1e00516272783b310e83bb292d5cMark Andrews cleaning up due to out of memory error. [RT #32131]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3439. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 buffers with constant data. [RT #32064]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3436. [bug] Check malloc/calloc return values. [RT #32088]
25276bd1ecb372b82c9235648e5defab0655dcd5Mark Andrews3435. [bug] Cross compilation support in configure was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3434. [bug] Pass client info to the DLZ findzone() entry
320d6ee24ea59c0dbcb2c08038586ef03c6a191dMark Andrews point in addition to lookup(). This makes it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 possible for a database to answer differently
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 whether it's authoritative for a name depending
475fe52dc33d8d8344e8b1e48fa7bb6643f7ca66Mark Andrews on the address of the client. [RT #31775]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3433. [bug] dlz_findzone() did not correctly handle
5af560664daaa984f98cec6925518a3e06c4ab4fMark Andrews ISC_R_NOMORE. [RT #31172]
0f8f42a09eb102fa88e4d2caacdafbeda931f94cMark Andrews3432. [func] Multiple DLZ databases can now be configured.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DLZ databases are searched in the order configured,
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews unless set to "search no", in which case a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone can be configured to be retrieved from a
8d77066ba0feb1353a7c85f929c365c5103f3976Mark Andrews particular DLZ database by using a "dlz <name>"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option in the zone statement. DLZ databases can
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 support type "master" and "redirect" zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3431. [bug] ddns-confgen: Some valid key algorithms were
54532c54130de8f374465bb23d5576fc3257ea96Mark Andrews not accepted. [RT #31927]
020f7361a49c5b1cda91927cf8206c1283fc7496Mark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'T' between the date and time. [RT #32044]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3429. [bug] dns_zone_getserial2 could a return success without
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 returning a valid serial. [RT #32007]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3428. [cleanup] dig: Add timezone to date output. [RT #2269]
70f8c70cdd3ca68edcf9d448eb508abf3697719aMark Andrews3427. [bug] dig +trace incorrectly displayed name server
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addresses instead of names. [RT #31641]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3426. [bug] dnssec-checkds: Clearer output when records are not
ac65e45126dda424b5cc9d2865b353dc0ec23e1eMark Andrews found. [RT #31968]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3425. [bug] "acacheentry" reference counting was broken resulting
0423090da198f31ac615cd3a8f7d83aada32d5b3Mark Andrews in use after free. [RT #31908]
d9e0458a890c49f977fdcf9d995681f546f7c427Mark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3423. [bug] "rndc signing -nsec3param" didn't accept the full
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 range of possible values. Address portability issues.
0b09763c354ec91fb352b6b4cea383bd0195b2d8Mark Andrews3422. [bug] Added a clear error message for when the SOA does not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 match the referral. [RT #31281]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3421. [bug] Named loops when re-signing if all keys are offline.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3420. [bug] Address VPATH compilation issues. [RT #31879]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3419. [bug] Memory leak on validation cancel. [RT #31869]
7d389c324cc032475f9d219a12ab84bacbd7fbaaMark Andrews3418. [func] New XML schema (version 3.0) for the statistics channel
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 adds query type statistics at the zone level, and
cd9bfe5b256a3e84ba090e8fcb5de0d6c50974aeMark Andrews flattens the XML tree and uses compressed format to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 optimize parsing. Includes new XSL that permits
dcd371be7d481b242d277d735e4c2d974297c164Mark Andrews charting via the Google Charts API on browsers that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 support javascript in XSL. The old XML schema has been
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 deprecated. [RT #30023]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3417. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3416. [bug] Named could die on shutdown if running with 128 UDP
c3184b4e2a1f238f4615d36fee79df82b1711344Mark Andrews dispatches per interface. [RT #31743]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3415. [bug] named could die with a REQUIRE failure if a validation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was canceled. [RT #31804]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3414. [bug] Address locking issues found by Coverity. [RT #31626]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3413. [func] Record the number of DNS64 AAAA RRsets that have been
0a1fa37641b59c56d02f5390917a49e4987f0f75Mark Andrews synthesized. [RT #27636]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3412. [bug] Copy timeval structure from control message data.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
49f7d1585e0e4f1ffa1667391dd7ae1c4d3d4e81Mark Andrews to UDP. [RT #31690]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3410. [bug] Addressed Coverity warnings. [RT #31626]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from X.509 certificates, for use with DANE
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (DNS-based Authentication of Named Entities).
5ed4b0d4452967d9b3aaf7a22a2956a6ee67a614Mark Andrews3408. [bug] Some DNSSEC-related options (update-check-ksk,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 are now legal in slave zones as long as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inline-signing is in use. [RT #31078]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3407. [placeholder]
a483e67c4cdcbfc29ddc62b5a2d0d99b1c542fadMark Andrews3406. [bug] mem.c: Fix compilation errors when building with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3405. [bug] Handle time going backwards in acache. [RT #31253]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3404. [bug] dnssec-signzone: When re-signing a zone, remove
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RRSIG and NSEC records from nodes that used to be
da091cda77fa951e682119c3df84f60a62bed702Mark Andrews in-zone but are now below a zone cut. [RT #31556]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
d8d489cd8efc45b06a232ac07a636b3d36cc7e8fMark Andrews3402. [test] The IPv6 interface numbers used for system
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 tests were incorrect on some platforms. [RT #25085]
bdb1394788a677d0b6e8499ba1ece17a73f476c7Mark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3400. [cleanup] "named -V" can now report a source ID string, defined
c8aa2c83113229a59069cbd05c735896f51b886bMark Andrews in the "srcid" file in the build tree and normally set
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to the most recent git hash. [RT #31494]
a1edcd1b8d430650d85ec0962cd32efde76a71fbMark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 clash. [RT #31515]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3398. [bug] SOA parameters were not being updated with inline
7c23b791f4ae8f0c4c2982a91d13c0ecb15ee798Mark Andrews signed zones if the zone was modified while the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 server was offline. [RT #29272]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3396. [bug] OPT records were incorrectly removed from signed,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 truncated responses. [RT #31439]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
e7bb307667cc89287e810b95bddd342cb5dcb4e7Mark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3394. [bug] Adjust 'successfully validated after lower casing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signer' log level and category. [RT #31414]
8e5893c36cdccc706f9632f51e0c8d390d2a8d06Mark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3392. [func] Keep statistics on REFUSED responses. [RT #31412]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
88aa68f478c1634f5f10034fb6ea4158efa20ff4Mark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3388. [bug] Fixed several Coverity warnings.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: This change includes a fix for a bug that
5f4098e478ae913cdc1bb8851599b8f2431050d3Mark Andrews was subsequently determined to be an exploitable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 security vulnerability, CVE-2012-5688: named could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 die on specific queries with dns64 enabled.
26cf4737b3e84c3a686a5eacebf22ac39e57d4caMark Andrews3387. [func] DS digest can be disabled at runtime with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 disable-ds-digests. [RT #21581]
34e5a08809dda3276252269ebddd1616e62081a2Mark Andrews3386. [bug] Address locking violation when generating new NSEC /
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NSEC3 chains. [RT #31224]
0cd36f1d15caf6622ec3128544d4238ad180a300Mark Andrews3385. [bug] named-checkconf didn't detect missing master lists
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in also-notify clauses. [RT #30810]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3384. [bug] Improved logging of crypto errors. [RT #30963]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3383. [security] A certain combination of records in the RBT could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 cause named to hang while populating the additional
29f5bb81e2d1d72fc6e44c87404bd4598a34df94Mark Andrews section of a response. [RT #31090]
ddc592d128cdde85ada64efbda95981c10c4c03cMark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if set, regardless of the address family in use.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3381. [contrib] Update queryperf to support more RR types.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3380. [bug] named could die if a nonexistent master list was
c7c1bf7dc167ff164193bc04f33a22109e4c0829Mark Andrews referenced in a also-notify. [RT #31004]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3379. [bug] isc_interval_zero and isc_time_epoch should be
9e205a3c51e68d19a7ed03244d45b14b3e0d69afMark Andrews "const (type)* const". [RT #31069]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3378. [bug] Handle missing 'managed-keys-directory' better.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3377. [bug] Removed spurious newline from NSEC3 multiline
93e6ebcd0a0f044ba2add424c265b5e0bb4c8afdMark Andrews output. [RT #31044]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3376. [bug] Lack of EDNS support was being recorded without a
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews successful response. [RT #30811]
c99d9017ba00099bfa89e1ed53e63a5cb07d28d5Mark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3374. [bug] isc_parse_uint32 failed to return a range error on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 systems with 64 bit longs. [RT #30232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3373. [bug] win32: open raw files in binary mode. [RT #30944]
c4a9ce445c48a57eed5aa16582b1964cf8cedf87Mark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 messages. [RT #30501]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3371. [bug] AD=1 should behave like DO=1 when deciding whether to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 add NS RRsets to the additional section or not.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3370. [bug] Address use after free while shutting down. [RT #30241]
810e8d27763c5d8557239ab321eb125163af9236Mark Andrews3369. [bug] nsupdate terminated unexpectedly in interactive mode
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if built with readline support. [RT #29550]
15f358ed4ea081793041bbfba70849be472236d3Mark Andrews3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 were not C++ safe.
984c39beed2fee49dda75c4c8a37b7f32bf434bfMark Andrews3367. [bug] dns_dnsseckey_create() result was not being checked.
c08a03a43116c21cf12dea7cbcb5465588f7955cMark Andrews3366. [bug] Fixed Read-After-Write dependency violation for IA64
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 atomic operations. [RT #25181]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3365. [bug] Removed spurious newlines from log messages in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3364. [security] Named could die on specially crafted record.
5d26560e2b93e1aa0334931ec6ccb6045c3581fcMark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in static-stub zones; this had been overlooked.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3362. [bug] Setting some option values to 0 in named.conf
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could trigger an assertion failure on startup.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3361. [bug] "rndc signing -nsec3param" didn't work correctly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when salt was set to '-' (no salt). [RT #30099]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3360. [bug] 'host -w' could die. [RT #18723]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3359. [bug] An improperly-formed TSIG secret could cause a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory leak. [RT #30607]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3358. [placeholder]
7c441b7f4afdedb6e5a99f113a4f926a005fa950Mark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 approaching their expiry, so they don't remain
f0ffc28f61a68b350fef9257f5f50e1ac866e0abMark Andrews in caches after expiry. [RT #26429]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3355. [port] Use more portable awk in verify system test.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3354. [func] Improve OpenSSL error logging. [RT #29932]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3353. [bug] Use a single task for task exclusive operations.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3352. [bug] Ensure that learned server attributes timeout of the
b597abd9cc44c7b9ecd0ff67df59a21ff45e88d5Mark Andrews adb cache. [RT #29856]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
81e302788a444b81231a7cda721548a020ae5660Brian Wellington memory debugging flags are set. [RT #30243]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3350. [bug] Memory read overrun in isc___mem_reallocate if
c00a1eb423623442aff428336bb55590f79013bbMark Andrews ISC_MEM_DEBUGCTX memory debugging flag is set.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3349. [bug] Change #3345 was incomplete. [RT #30233]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3348. [bug] Prevent RRSIG data from being cached if a negative
4b171ebd702d72200a4d7609f11c5f79d6b6f964Brian Wellington record matching the covering type exists at a higher
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trust level. Such data already can't be retrieved from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the cache since change 3218 -- this prevents it
cceca51fec3b4af660d28e2d3df7242823312eb6Brian Wellington being inserted into the cache as well. [RT #26809]
03fae7ef2173cdf32918853b047d95d9046574ccMark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 private key file would cause a change in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 permissions of the existing file. [RT #27724]
ad611e746d6fdcbb9e67da361a3a039c226a9236Mark Andrews3346. [security] Bad-cache data could be used before it was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 initialized, causing an assert. [RT #30025]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3345. [bug] Addressed race condition when removing the last item
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or inserting the first item in an ISC_QUEUE.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3344. [func] New "dnssec-checkds" command checks a zone to
2dd99c098ca162f985b7ef3c8142a964ad8281aeMark Andrews determine which DS records should be published
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in the parent zone, or which DLV records should be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 published in a DLV zone, and queries the DNS to
1fb264ed3aa861a67d7bab9aeb5aea5836e03c14Mark Andrews ensure that it exists. (Note: This tool depends
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 on python; it will not be built or installed on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 systems that do not have a python interpreter.)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3343. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3342. [bug] Change #3314 broke saving of stub zones to disk
27151990b2b48f027f7f01972fe8e0dfa1df52d3Mark Andrews resulting in excessive cpu usage in some cases.
95b604c5e972a5e9eb713bf45cf0b2d9b98da27eMark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to ensure correctness of signatures and of NSEC/NSEC3
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 chains. [RT #23673]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3340. [func] Added new 'map' zone file format, which is an image
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of a zone database that can be loaded directly into
fcb2ecdb52a594a5c0d07c2e98e67c14708c16dfMark Andrews memory via mmap(), allowing much faster zone loading.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (Note: Because of pointer sizes and other
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 considerations, this file format is platform-dependent;
3561e645d77448b20b1676680b08c76d559e5335Mark Andrews 'map' zone files cannot always be transferred from one
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 server to another.) [RT #25419]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3339. [func] Allow the maximum supported rsa exponent size to be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified: "max-rsa-exponent-size <value>;" [RT #29228]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3338. [bug] Address race condition in units tests: asyncload_zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and asyncload_zt. [RT #26100]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3337. [bug] Change #3294 broke support for the multiple keys
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in controls. [RT #29694]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3336. [func] Maintain statistics for RRsets tagged as "stale".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3335. [func] nslookup: return a nonzero exit code when unable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to get an answer. [RT #29492]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3334. [bug] Hold a zone table reference while performing a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 asynchronous load of a zone. [RT #28326]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3333. [bug] Setting resolver-query-timeout too low can cause
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named to not recover if it loses connectivity.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
c26c65b7a0d036e78bfc73f3e7e0817adb0365c0Mark Andrews3331. [security] dns_rdataslab_fromrdataset could produce bad
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rdataslabs. [RT #29644]
43733a83ed92359555c0dcc766e04216ba858309Mark Andrews3330. [func] Fix missing signatures on NOERROR results despite
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RPZ rewriting. Also
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - add optional "recursive-only yes|no" to the
bda64555f62216c3e785338f372a7ad9b79c197cMark Andrews response-policy statement
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - add optional "max-policy-ttl" to the response-policy
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 statement to limit the false data that
39c2b741427eedafe5054909773c2e121c078b72Mark Andrews "recursive-only no" can introduce into
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 resolvers' caches
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - add a RPZ performance test to bin/tests/system/rpz
de36c606c52ad51e5abca6e42faf655937e5ed10Mark Andrews when queryperf is available.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - the encoding of PASSTHRU action to "rpz-passthru".
23cb957a81a51a9656917ea98d0ae56b7abdcaccMark Andrews (The old encoding is still accepted.)
28d8b4118da7abed531ca09136a6d1402837d721Mark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 generate RRSIG records with the signer-name in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lower case. We accept them with any case, but if
d6c0627d1e4d841eac9576427f2d4a0cf9a47e2cMark Andrews they fail to validate, we try again in lower case.
5d7b81d2a49d237ff5e73fdc4bd3394a3ee29392Mark Andrews3328. [bug] Fixed inconsistent data checking in dst_parse.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
8f63de30293716a22054e7db47f27e81bab545c5Mark Andrews to 'filter-aaaa-on-v4' but applies to IPv6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 connections. (Use "configure --enable-filter-aaaa"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to enable this option.) [RT #27308]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3326. [func] Added task list statistics: task model, worker
9ae90732df942a7ffcbaa26ba254b55248ce79a5Mark Andrews threads, quantum, tasks running, tasks ready.
f3222d48cc3d81706d198faa00dea9720eb0768dMark Andrews3325. [func] Report cache statistics: memory use, number of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nodes, number of hash buckets, hit and miss counts.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3324. [test] Add better tests for ADB stats [RT #27057]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3323. [func] Report the number of buckets the resolver is using.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3322. [func] Monitor the number of active TCP and UDP dispatches.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3321. [func] Monitor the number of recursive fetches and the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 number of open sockets, and report these values in
cde7dfea4c1267a2b526114f4ea80fe9db1fc557Brian Wellington the statistics channel. [RT #27054]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3320. [func] Added support for monitoring of recursing client
fca9cc33ad4299e58e53aa5273d805477267e27aBrian Wellington count. [RT #27009]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3319. [func] Added support for monitoring of ADB entry count and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 hash size. [RT #27057]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3318. [tuning] Reduce the amount of work performed while holding a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 bucket lock when finished with a fetch context.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3316. [tuning] Improved locking performance when recursing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3315. [tuning] Use multiple dispatch objects for sending upstream
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 queries; this can improve performance on busy
5da1e589c2288dbe87002f771005a78d80a2e258Mark Andrews multiprocessor systems by reducing lock contention.
852fa3b2e32719d094f3ad6513238841ae1f078bMark Andrews3314. [bug] The masters list could be updated while stub_callback
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or refresh_callback were using it. [RT #26732]
8569ab045a4cf6ecd1b5a3354ddb1c93ef34ea57Brian Wellington3313. [protocol] Add TLSA record type. [RT #28989]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3311. [bug] Abort the zone dump if zone->db is NULL in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone.c:zone_gotwritehandle. [RT #29028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3310. [test] Increase table size for mutex profiling. [RT #28809]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3309. [bug] resolver.c:fctx_finddone() was not thread safe.
e1c2a8b9c120bcfc2f56e866ca3069b8a90c38dbMark Andrews3308. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3305. [func] Add wire format lookup method to sdb. [RT #28563]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3303. [bug] named could die when reloading. [RT #28606]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3302. [bug] dns_dnssec_findmatchingkeys could fail to find
d073663cb45bef2fff5f9a43b9b6006edfc52483Mark Andrews keys if the zone name contained character that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 required special mappings. [RT #28600]
cad61731f8e960d9d99034a2a6eaafe1069c405cMark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for non-recursive queries. [RT #28565]
54469c2b2262f6a3f09610df69e16e9c75fd1fe5Mark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 but was not compiled in. [RT #28338]
90e303b114e56db5809fdd19805243457fa43cd9Olafur Gudmundsson3299. [bug] Make SDB handle errors from database drivers better.
adbb11147cd5d97d140485fa37e85e66e15cf594Mark Andrews3298. [bug] Named could dereference a NULL pointer in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zmgr_start_xfrin_ifquota if the zone was being removed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3297. [bug] Named could die on a malformed master file. [RT #28467]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3296. [bug] Named could die with a INSIST failure in
13ba983cc86bc7d80d5f66ba09002f7d510a6631Mark Andrews client.c:exit_check. [RT #28346]
da5d1cf1b1aa29ae53a0427be49291b04bd60549Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 portable. [RT # 26542]
66291de2060a1569de3fe9c5f0c1225448868f7aMark Andrews3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 error. [RT #28265]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3293. [func] nsupdate: list supported type. [RT #28261]
c36f45e354c0d5b6ab9f821bfe315d0ce9d95a29Mark Andrews3292. [func] Log messages in the axfr stream at debug 10.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3291. [port] Fixed a build error on systems without ENOTSUP.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
0cb27602e5690baa9ab61c7c1430e507536adca7Brian Wellington3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3288. [bug] dlz_destroy() function wasn't correctly registered
ff1b064f5e2bf19c8e25f8927d23df5714e666edMark Andrews by the DLZ dlopen driver. [RT #28056]
8e40433e347bc487cd70f02487fc7ce947a2422aMark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3286. [bug] Managed key maintenance timer could fail to start
880723fb130841459d45695b387651cacd6c9bb8Mark Andrews after 'rndc reconfig'. [RT #26786]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3285. [bug] val-frdataset was incorrectly disassociated in
8f44fd4f8d5cefc227ab0fe59cbcbc3979fbc9caAndreas Gustafsson proveunsecure after calling startfinddlvsep.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3284. [bug] Address race conditions with the handling of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3283. [bug] Raw zones with with more than 512 records in a RRset
111e3433d289e8b4ea1260add39baa78c2a46891Mark Andrews failed to load. [RT #27863]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3282. [bug] Restrict the TTL of NS RRset to no more than that
cf300e03de3df3ff422db922520bf07c686c86daMark Andrews of the old NS RRset when replacing it.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 [RT #27792] [RT #27884]
9ac8796f1653d89af589753a3e42c694f35ddd8aMark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 despite succeeding over the loopback interface.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3280. [bug] Potential double free of a rdataset on out of memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with DNS64. [RT #27762]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3279. [bug] Hold a internal reference to the zone while performing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a asynchronous load. Address potential memory leak
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if the asynchronous is cancelled. [RT #27750]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3278. [bug] Make sure automatic key maintenance is started
02bdc23f8e3ca0f710e0a40daa15941ab1db6bb2Mark Andrews when "auto-dnssec maintain" is turned on during
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "rndc reconfig". [RT #26805]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3276. [bug] win32: ns_os_openfile failed to return NULL on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 safe_open failure. [RT #27696]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option had been misspelled as '-clear'. (To avoid
0cfa2fb26df42f781eca8c4c856d2d0165055bebMark Andrews future confusion, both options now work.) [RT #27173]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3274. [placeholder]
06a949d2ce8d4b4cbfbf4e7a0335316520aafa46Andreas Gustafsson3273. [bug] AAAA responses could be returned in the additional
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 section even when filter-aaaa-on-v4 was in use.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3272. [func] New "rndc zonestatus" command prints information
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 about the specified zone. [RT #21671]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3271. [port] darwin: mksymtbl is not always stable, loop several
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 times before giving up. mksymtbl was using non
8771fbe4a2cee7bebd785a486824833d741c7315Brian Wellington portable perl to covert 64 bit hex strings. [RT #27653]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.9.0rc2 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3270. [bug] "rndc reload" didn't reuse existing zones correctly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when inline-signing was in use. [RT #27650]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3269. [port] darwin 11 and later now built threaded by default.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 out the earliest expiry time. [RT #23311]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3267. [bug] Memory allocation failures could be mis-reported as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unexpected error. New ISC_R_UNSET result code.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3266. [bug] The maximum number of NSEC3 iterations for a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNSKEY RRset was not being properly computed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3265. [bug] Corrected a problem with lock ordering in the
6b31d9c56874d3bd58b420cbe6cd64be502dbe08Andreas Gustafsson inline-signing code. [RT #27557]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3264. [bug] Automatic regeneration of signatures in an
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inline-signing zone could stall when the server
ee80f4506479e189ca1320eb87ac89188c5a7848Mark Andrews was restarted. [RT #27344]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3263. [bug] "rndc sync" did not affect the unsigned side of an
d9d6d2f77fe54831dec9cde8ca03ae1f825599f9Andreas Gustafsson inline-signing zone. [RT #27337]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3262. [bug] Signed responses were handled incorrectly by RPZ.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3261. [func] RRset ordering now defaults to random. [RT #27174]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3260. [bug] "rrset-order cyclic" could appear not to rotate
92094d44a2d0cb2b1be58a87299903ba7c436a0cAndreas Gustafsson for some query patterns. [RT #27170/27185]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.9.0rc1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3259. [bug] named-compilezone: Suppress "dump zone to <file>"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 message when writing to stdout. [RT #27109]
b4aeceec736cd16d4c4e98f519c8df79b15fbe45Andreas Gustafsson3258. [test] Add "forcing full sign with unreadable keys" test.
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson3257. [bug] Do not generate a error message when calling fsync()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in a pipe or socket. [RT #27109]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3255. [func] No longer require that a empty zones be explicitly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 enabled or that a empty zone is disabled for
31f6e44dcaad33d66d607e3a919d4aa59cdbaec5Andreas Gustafsson RFC 1918 empty zones to be configured. [RT #27139]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 too long. [RT #26956]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3252. [bug] When master zones using inline-signing were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 updated while the server was offline, the source
c0fe9b0d1b01a9a0883977a362ce4128723a56d6Mark Andrews zone could fall out of sync with the signed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 copy. They can now resynchronize. [RT #26676]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory dns_sdlz_putrr() can allocate per record to
138cc7f283889367b11840ff77a9ea08e17a9daeAndreas Gustafsson prevent run away memory consumption on ISC_R_NOSPACE.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3250. [func] 'configure --enable-developer'; turn on various
ac1a59e95cfd035f38222e739affd43eafa9eeefMark Andrews configure options, normally off by default, that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 we want developers to build and test with. [RT #27103]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3249. [bug] Update log message when saving slave zones files for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 analysis after load failures. [RT #27087]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3248. [bug] Configure options --enable-fixed-rrset and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --enable-exportlib were incompatible with each
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 other. [RT #27087]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3247. [bug] 'raw' format zones failed to preserve load order
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 breaking 'fixed' sort order. [RT #27087]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3246. [bug] Named failed to start with a empty also-notify list.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3245. [bug] Don't report a error unchanged serials unless there
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 were other changes when thawing a zone with
b20eef7ab022dd984e2e9c12f6a7edf35661d3b0Mark Andrews ixfr-fromdifferences. [RT #26845]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3244. [func] Added readline support to nslookup and nsupdate.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Also simplified nsupdate syntax to make "update"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and "prereq" optional. [RT #24659]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
ea01b618d981e58f85071a40550bc7f7565d4509Andreas Gustafsson being properly set.
80dd46d7aab16c42a8c1acf6156c95406a9f20a4Mark Andrews3242. [func] Extended the header of raw-format master files to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 include the serial number of the zone from which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 they were generated, if different (as in the case
993572b2495561c57b556621dd9fe493e8c6dd1bDanny Mayer of inline-signing zones). This is to be used in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inline-signing zones, to track changes between the
78bf1ca89505820ed7b03be4bf0c0b53b557f3cdAndreas Gustafsson unsigned and signed versions of the zone, which may
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 have different serial numbers.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (Note: raw zonefiles generated by this version of
afeabf9f707ca71192041c1132d9f07d7bd83132Mark Andrews BIND are no longer compatible with prior versions.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 To generate a backward-compatible raw zonefile
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 using dnssec-signzone or named-compilezone, specify
3842a051baf34ffc4e428cd6f2d4a641e548e6f6Mark Andrews output format "raw=0" instead of simply "raw".)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3241. [bug] Address race conditions in the resolver code.
04f158ce9a12746eb216892b2bf8259749db254eAndreas Gustafsson3240. [bug] DNSKEY state change events could be missed. [RT #26874]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 timestamp. [RT #26883]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3238. [bug] keyrdata was not being reinitialized in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lib/dns/rbtdb.c:iszonesecure. [RT#26913]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3237. [bug] dig -6 didn't work with +trace. [RT #26906]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3236. [bug] Backed out changes #3182 and #3202, related to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 EDNS(0) fallback behavior. [RT #26416]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3235. [func] dns_db_diffx, a extended dns_db_diff which returns
90c5477ca11a94b0e7d8071181d69544e1ab9be9Mark Andrews the generated diff and optionally writes it to a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 journal. [RT #26386]
552a117791c17878c5c1b94b0fc3ac4e8491543eMark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
f3e4c3d6c536973bae92611402ba55277069eba2Mark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3232. [bug] Zero zone->curmaster before return in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_zone_setmasterswithkeys(). [RT #26732]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3231. [bug] named could fail to send a incompressible zone.
c8bedec446212b07511ded85ba04a9a3d5965ba8Mark Andrews3230. [bug] 'dig axfr' failed to properly handle a multi-message
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 axfr with a serial of 0. [RT #26796]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3229. [bug] Fix local variable to struct var assignment
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 found by CLANG warning.
923de3bb9cf4d619de206544975986a22b18196fMark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 loading performance. [RT #26523]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3227. [bug] Interim fix to make WKS's use of getprotobyname()
769cd7d5dd677434c3dfa27cbfdd8cb76296fcdcMark Andrews and getservbyname() self thread safe. [RT #26232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3226. [bug] Address minor resource leakages. [RT #26624]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
11931cc68d6c8139f507a724e7ca9814eed8b552Mark Andrews messages. [RT #26507]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3223. [bug] 'task_test privilege_drop' generated false positives.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3222. [cleanup] Replace dns_journal_{get,set}_bitws with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_journal_{get,set}_sourceserial. [RT #26634]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3221. [bug] Fixed a potential core dump on shutdown due to
1d556695ef3c7918ba5061d7d846122d60f5f6c5Mark Andrews referencing fetch context after it's been freed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.9.0b2 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could fail to set the database version correctly,
137a1f98e3862577ae9ccbb6b735ef63a51c456eMark Andrews causing an assertion failure. [RT #26180]
5cd7e9d4db393c314dd1a761c52d2cb3a4da9b72Andreas Gustafsson3219. [bug] Disable NOEDNS caching following a timeout.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3218. [security] Cache lookup could return RRSIG data associated with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nonexistent records, leading to an assertion
cc8e8b59d6780889739657226a95e23ca1ecadb1Andreas Gustafsson failure. [RT #26590]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
65775fe205e8ac935313c42062c75460e0bc1514Andreas Gustafsson3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
17b687ef360ba8c07201dc6511a3c975cc1bb2a8Andreas Gustafsson3214. [func] Add 'named -U' option to set the number of UDP
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 listener threads per interface. [RT #26485]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 list prior to adding a reference to it leading a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 possible assertion failure. [RT #23219]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option prints in single-line-per-record format.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3210. [bug] Canceling the oldest query due to recursive-client
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 overload could trigger an assertion failure. [RT #26463]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3208. [bug] 'dig -y' handle unknown tsig algorithm better.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
4e57d3ff7d92abdef4b0b6aebc23a9dfae2ba040Andreas Gustafsson3206. [cleanup] Add ISC information to log at start time. [RT #25484]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3205. [func] Upgrade dig's defaults to better reflect modern
081cff0c33514a5dc63ab794fc199c07377ab756Mark Andrews nameserver behavior. Enable "dig +adflag" and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "dig +edns=0" by default. Enable "+dnssec" when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 running "dig +trace". [RT #23497]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3204. [bug] When a master server that has been marked as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unreachable sends a NOTIFY, mark it reachable
3d38596530c389610494e6a6ba70d9f5dc9717c5Andreas Gustafsson again. [RT #25960]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3203. [bug] Increase log level to 'info' for validation failures
a7cb695600c3c14ac12676f0fb1e179690c5883cMark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3202. [bug] NOEDNS caching on timeout was too aggressive.
1500a4fe5da9475d5918b27b566a1278ec6b54ebAndreas Gustafsson3201. [func] 'rndc querylog' can now be given an on/off parameter
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 instead of only being used as a toggle. [RT #18351]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3200. [doc] Some rndc functions were undocumented or were
c615c2ddce6c08e5a26d9ca61742a20fa8dc1938Mark Andrews missing from 'rndc -h' output. [RT #25555]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3199. [func] When logging client information, include the name
31d3464c0c0a35236c7924f698c5a8a66a9ed534Mark Andrews being queried. [RT #25944]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3198. [doc] Clarified that dnssec-settime can alter keyfile
2f6d1483f665d86501049199b9698554da0eacb0Mark Andrews permissions. [RT #24866]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3197. [bug] Don't try to log the filename and line number when
ea7b38cd1e5c6c9e099f1b3a702ba531bc4aba0aMark Andrews the config parser can't open a file. [RT #22263]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3196. [bug] nsupdate: return nonzero exit code when target zone
32d248107a5bc92b4bf9fc77deaa55b3da969ba2Andreas Gustafsson doesn't exist. [RT #25783]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3195. [cleanup] Silence "file not found" warnings when loading
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 managed-keys zone. [RT #26340]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3194. [doc] Updated RFC references in the 'empty-zones-enable'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 documentation. [RT #25203]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3192. [bug] A query structure could be used after being freed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3191. [bug] Print NULL records using "unknown" format. [RT #26392]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3190. [bug] Underflow in error handling in isc_mutexblock_init.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3189. [test] Added a summary report after system tests. [RT #25517]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3188. [bug] zone.c:zone_refreshkeys() could fail to detach
2ba574f329c14376d26d7c0f22c89d7a978a2625Mark Andrews references correctly when errors occurred, causing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a hang on shutdown. [RT #26372]
3c3fe072252aecffae43e6349125663c315b092dAndreas Gustafsson3187. [port] win32: support for Visual Studio 2008. [RT #26356]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.9.0b1 released ---
05a4a299b599195ca6ede9395b245956a8c3a790Mark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3185. [func] New 'rndc signing' option for auto-dnssec zones:
3ad07fa335d40330cd1859da42e67f2457443990Andreas Gustafsson - 'rndc signing -list' displays the current
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 state of signing operations
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - 'rndc signing -clear' clears the signing state
1094dec52a86e57df53f6167d86de94360a7a382Mark Andrews records for keys that have fully signed the zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - 'rndc signing -nsec3param' sets the NSEC3
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 parameters for the zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 The 'rndc keydone' syntax is removed. [RT #23729]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3184. [bug] named had excessive cpu usage when a redirect zone was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configured. [RT #26013]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3182. [bug] Auth servers behind firewalls which block packets
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 greater than 512 bytes may cause other servers to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 perform poorly. Now, adb retains edns information
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and caches noedns servers. [RT #23392/24964]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3181. [func] Inline-signing is now supported for master zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3180. [func] Local copies of slave zones are now saved in raw
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 format by default, to improve startup performance.
a77ad145d0109081c5da6ac40a2303369db89735Andreas Gustafsson 'masterfile-format text;' can be used to override
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the default, if desired. [RT #25867]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3179. [port] kfreebsd: build issues. [RT #26273]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3178. [bug] A race condition introduced by change #3163 could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 cause an assertion failure on shutdown. [RT #26271]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3177. [func] 'rndc keydone', remove the indicator record that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named has finished signing the zone with the
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson corresponding key. [RT #26206]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3176. [doc] Corrected example code and added a README to the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 sample external DLZ module in contrib/dlz/example.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3175. [bug] Fix how DNSSEC positive wildcard responses from a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NSEC3 signed zone are validated. Stop sending a
024face21cdfbfc7a862a3be061e6780533ef755Andreas Gustafsson unnecessary NSEC3 record when generating such
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 responses. [RT #26200]
1beaa9e45738ad18cb7cae55aea95a1b16a14f94Andreas Gustafsson3174. [bug] Always compute to revoked key tag from scratch.
f953788d75c7df2db43907c68da18ed75c235dd3Andreas Gustafsson3173. [port] Correctly validate root DS responses. [RT #25726]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3172. [port] darwin 10.* and freebsd [89] are now built threaded by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3171. [bug] Exclusively lock the task when adding a zone using
fbdde79262a4ba2bdf4bfae61167026b3220488aAndreas Gustafsson 'rndc addzone'. [RT #25600]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.9.0a3 released ---
3fc4c1434d7ac377c720640e2e925a3af567cccbMark Andrews3170. [func] RPZ update:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - fix precedence among competing rules
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - improve ARM text including documenting rule precedence
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - try to rewrite CNAME chains until first hit
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - new "rpz" logging channel
0aba41458d345ea901cf945d47162e5f23647de9Mark Andrews - RDATA for CNAME rules can include wildcards
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - replace "NO-OP" named.conf policy override with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "PASSTHRU" and add "DISABLED" override ("NO-OP"
5f7516bee5ace9542701f23fc7723a3e3196802aMark Andrews is still recognized)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3169. [func] Catch db/version mis-matches when calling dns_db_*().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3168. [bug] Nxdomain redirection could trigger an assert with
d5169236b7260d447e672db8256fdd7c70f5ee1dMark Andrews a ANY query. [RT #26017]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3167. [bug] Negative answers from forwarders were not being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 correctly tagged making them appear to not be cached.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3166. [bug] Upgrading a zone to support inline-signing failed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3165. [bug] dnssec-signzone could generate new signatures when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 resigning, even when valid signatures were already
ed2cefaf0ea367ee408cb7f6a54a413814240fa7Andreas Gustafsson present. [RT #26025]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3164. [func] Enable DLZ modules to retrieve client information,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 so that responses can be changed depending on the
b923e278535b4e8d264998a85a6ae1eb4b3aa4c6Andreas Gustafsson source address of the query. [RT #25768]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3163. [bug] Use finer-grained locking in client.c to address
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 concurrency problems with large numbers of threads.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3162. [test] start.pl: modified to allow for "named.args" in
9e46f410e716f73abb345be215ccb4c61782b718Andreas Gustafsson ns*/ subdirectory to override stock arguments to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named. Largely from RT#26044, but no separate ticket.
769ef0b7bdc9520dd62d2f440ea36bc020e88934Andreas Gustafsson3161. [bug] zone.c:del_sigs failed to always reset rdata leading
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 assertion failures. [RT #25880]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3160. [bug] When printing out a NSEC3 record in multiline form
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the newline was not being printed causing type codes
40dd9cb8cc240c33d820fe79f176ed51e4c06a1aMark Andrews to be run together. [RT #25873]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3159. [bug] On some platforms, named could assert on startup
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when running in a chrooted environment without
96ea98af241ef00395f4e61de7e2dacfd9941afcMark Andrews /proc. [RT #25863]
54c4aa0f62aebeb01b6861ee068c1044433fe8feMark Andrews3158. [bug] Recursive servers would prefer a particular UDP
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 socket instead of using all available sockets.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the config file before pausing the server. [RT #21373]
846474d5a6aa21cebb3e94243a11faa5c20200bfAndreas Gustafsson3156. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.9.0a2 released ---
7655e78c366cc0d25e24e2a96ba58e04a96042faAndreas Gustafsson3155. [bug] Fixed a build failure when using contrib DLZ
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 drivers (e.g., mysql, postgresql, etc). [RT #25710]
6859033d425170380bcfac4809257bc6e9b60383Andreas Gustafsson3154. [bug] Attempting to print an empty rdataset could trigger
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 an assert. [RT #25452]
f558da602e8b74ed181d9189f20bf32dfa6d8723Brian Wellington3153. [func] Extend request-ixfr to zone level and remove the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 side effect of forcing an AXFR. [RT #25156]
ff4322d44f8404683b6fb6c86a38a2bc14f6c083Andreas Gustafsson3152. [cleanup] Some versions of gcc and clang failed due to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 incorrect use of __builtin_expect. [RT #25183]
8d146b6e1156f5b562af9a4a9aba76b09650412cAndreas Gustafsson3151. [bug] Queries for type RRSIG or SIG could be handled
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 incorrectly. [RT #21050]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3150. [func] Improved startup and reconfiguration time by
808b909f27c30d36b27efb5aa5ef2d18f83b6d4bAndreas Gustafsson enabling zones to load in multiple threads. [RT #25333]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3149. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3148. [bug] Processing of normal queries could be stalled when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 forwarding a UPDATE message. [RT #24711]
d9e690eb71bde3c748208733ba40a34e9d0ba29dAndreas Gustafsson3147. [func] Initial inline signing support. [RT #23657]
1299e93989afbe1fee0739811b05fd1641ea14aeAndreas Gustafsson --- 9.9.0a1 released ---
640923da589bc5b8492ac407ef89ea1ee9a1c358Andreas Gustafsson3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3145. [test] Capture output of ATF unit tests in "./atf.out" if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 there were any errors while running them. [RT #25527]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3144. [bug] dns_dbiterator_seek() could trigger an assert when
aa30ee42c4b6da9bab4fb84d6cbbda6036a4d426Mark Andrews used with a nonexistent database node. [RT #25358]
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson3143. [bug] Silence clang compiler warnings. [RT #25174]
01446841be2b73f9a2ead74056df2d5342414041Andreas Gustafsson3142. [bug] NAPTR is class agnostic. [RT #25429]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3141. [bug] Silence spurious "zone serial (0) unchanged" messages
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 associated with empty zones. [RT #25079]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3140. [func] New command "rndc flushtree <name>" clears the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified name from the server cache along with
1de63e34f163b7a4708a6ad1779f93ae7636b92eAndreas Gustafsson all names under it. [RT #19970]
feb1f6a4ac42988558ecb8dc5dc0c974ec1f0509Brian Wellington3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for the hashing algorithms (md5, sha1 - sha512, and
d1a6976967d6cfd93f5a8d80878215691ac8fe74Mark Andrews their hmac counterparts). [RT #25067]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3138. [bug] Address memory leaks and out-of-order operations when
5e4c83cfec3f267ea8f22fbb535c61434c94d43cDanny Mayer shutting named down. [RT #25210]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3137. [func] Improve hardware scalability by allowing multiple
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 worker threads to process incoming UDP packets.
e6f17474cb43a138bf7fc9ad30c6b3a2847cb7a7Mark Andrews This can significantly increase query throughput
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 on some systems. [RT #22992]
5fe21da364d4397c9a413fe689ce82dea36a7b29Mark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 empty zones switched on by the 'empty-zones-enable'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option. [RT #24990]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3134. [bug] Improve the accuracy of dnssec-signzone's signing
98e231525fda817d393ef0c529b50bfc08cebe47Mark Andrews statistics. [RT #16030]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3133. [bug] Change #3114 was incomplete. [RT #24577]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3132. [placeholder]
56d69016f4fae2eda4d39c92fe13595251aaadd3Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 per 100 zones at startup time, rather than using a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fixed-size task table. [RT #24406]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3130. [func] Support alternate methods for managing a dynamic
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone's serial number. Two methods are currently
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 defined using serial-update-method, "increment"
e60b3717f0e6f28d6fb2c5124ffb3bd31cc3a746Mark Andrews (default) and "unixtime". [RT #23849]
3d8ab44d14f3de797b8454fc2edb7421a6bfc874Andreas Gustafsson3129. [bug] Named could crash on 'rndc reconfig' when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-new-zones was set to yes and named ACLs
3426f7118c92cab8714a7fddc9e721ff09554447Andreas Gustafsson were used. [RT #22739]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3128. [func] Inserting an NSEC3PARAM via dynamic update in an
db235e65884c04058cc6e99ca485170d67cf9538Andreas Gustafsson auto-dnssec zone that has not been signed yet
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 will cause it to be signed with the specified NSEC3
64a5004a66accd190bfd5ddf115667726537be50Andreas Gustafsson parameters when keys are activated. The
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NSEC3PARAM record will not appear in the zone until
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it is signed, but the parameters will be stored.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3127. [bug] 'rndc thaw' will now remove a zone's journal file
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if the zone serial number has been changed and
b1ae7a591a4b99a26036e919b87247b65abfcd77Mark Andrews ixfr-from-differences is not in use. [RT #24687]
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson3126. [security] Using DNAME record to generate replacements caused
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RPZ to exit with a assertion failure. [RT #24766]
cab0ee644db604d56b45ec39429d505d635da347Andreas Gustafsson3125. [security] Using wildcard CNAME records as a replacement with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RPZ caused named to exit with a assertion failure.
7780a3e5a4659bb8fc44f8915d20a8d3ffa33e00Andreas Gustafsson3124. [bug] Use an rdataset attribute flag to indicate
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 negative-cache records rather than using rrtype 0;
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 this will prevent problems when that rrtype is
6dbc6fae496db1f584c055e63bcd7afd332fe8f6Andreas Gustafsson used in actual DNS packets. [RT #24777]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3123. [security] Change #2912 exposed a latent flaw in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_rdataset_totext() that could cause named to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 crash with an assertion failure. [RT #24777]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
3f543c371fff724d1fb05eb564f732476e946b5bBrian Wellington3121. [security] An authoritative name server sending a negative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 response containing a very large RRset could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trigger an off-by-one error in the ncache code
847169dab2d0496df1d66842b2cce67c66bf9680Andreas Gustafsson and crash named. [RT #24650]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3120. [bug] Named could fail to validate zones listed in a DLV
9aba20edee4e704433a464ae43b070b0775de506Mark Andrews that validated insecure without using DLV and had
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DS records in the parent zone. [RT #24631]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3119. [bug] When rolling to a new DNSSEC key, a private-type
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 record could be created and never marked complete.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3118. [bug] nsupdate could dump core on shutdown when using
bae5d9fcb4616005fbc861e327b0a48b7bd4d89aMark Andrews SIG(0) keys. [RT #24604]
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson3117. [cleanup] Remove doc and parser references to the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 never-implemented 'auto-dnssec create' option.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3116. [func] New 'dnssec-update-mode' option controls updates
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of DNSSEC records in signed dynamic zones. Set to
98a5dc52bf668b093cda7901c057f7b54e18a2fcAndreas Gustafsson 'no-resign' to disable automatic RRSIG regeneration
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 while retaining the ability to sign new or changed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 data. [RT #24533]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3115. [bug] Named could fail to return requested data when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 following a CNAME that points into the same zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3114. [bug] Retain expired RRSIGs in dynamic zones if key is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inactive and there is no replacement key. [RT #23136]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3113. [doc] Document the relationship between serial-query-rate
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson and NOTIFY messages.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3112. [doc] Add missing descriptions of the update policy name
cad3210bb95057a37aaed20bc8a1542e0534422cAndreas Gustafsson types "ms-self", "ms-subdomain", "krb5-self" and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "krb5-subdomain", which allow machines to update
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 their own records, to the BIND 9 ARM.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3111. [bug] Improved consistency checks for dnssec-enable and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-validation, added test cases to the
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer checkconf system test. [RT #24398]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3110. [bug] dnssec-signzone: Wrong error message could appear
afeded2289de8d193b072da2b44a2d580cc235c1Danny Mayer when attempting to sign with no KSK. [RT #24369]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3109. [func] The also-notify option now uses the same syntax
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as a zone's masters clause. This means it is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 now possible to specify a TSIG key to use when
89555ff443c8127a533f6c742316c9b1a713cfd5Mark Andrews sending notifies to a given server, or to include
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 an explicit named masters list in an also-notfiy
aa9a67adeb48069f5c2e5d8936a8ed5aac7d6ad7Andreas Gustafsson statement. [RT #23508]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3108. [cleanup] dnssec-signzone: Clarified some error and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
73ac1894ea64bc50aff7406872d0e9c5df6d9cf6Mark Andrews code (use -P instead). [RT #20852]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3107. [bug] dnssec-signzone: Report the correct number of ZSKs
330b421487d7c3a5e699472fe889aa633772057fMark Andrews when using -x. [RT #20852]
e22dca2a9ad30d493a869586abed86f7268204f9Mark Andrews3106. [func] When logging client requests, include the name of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the TSIG key if any. [RT #23619]
2c0b26955ee32fcee1757ec1be5a8caf8fe695a6Mark Andrews3105. [bug] GOST support can be suppressed by "configure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --without-gost" [RT #24367]
2449f41e75d3b3f1c0ec3f05b1603fd8f80d8ae0Mark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3103. [bug] Configuring 'dnssec-validation auto' in a view
6f7660093e70d3a7c80738b681ac0f5c1b661c00Mark Andrews instead of in the options statement could trigger
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 an assertion failure in named-checkconf. [RT #24382]
1fdbadc594a49b423052ea342dac74ff1a36089dMark Andrews3102. [func] New 'dnssec-loadkeys-interval' option configures
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 how often, in minutes, to check the key repository
a1898260ad19d02e88ab76c1855d33c67add9defMark Andrews for updates when using automatic key maintenance.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Default is every 60 minutes (formerly hard-coded
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to 12 hours). [RT #23744]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3101. [bug] Zones using automatic key maintenance could fail
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to check the key repository for updates. [RT #23744]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3100. [security] Certain response policy zone configurations could
d16b4e8ba885a45933dc6a46f340b76811d60c74Andreas Gustafsson trigger an INSIST when receiving a query of type
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RRSIG. [RT #24280]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3099. [test] "dlz" system test now runs but gives R:SKIPPED if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not compiled with --with-dlz-filesystem. [RT #24146]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3098. [bug] DLZ zones were answering without setting the AA bit.
ec5a06ccf7b15f07d20fd872c3dc1ab8f82f2ceaMark Andrews3097. [test] Add a tool to test handling of malformed packets.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3096. [bug] Set KRB5_KTNAME before calling log_cred() in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dst_gssapi_acceptctx(). [RT #24004]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3095. [bug] Handle isolated reserved ports in the port range.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3094. [doc] Expand dns64 documentation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3092. [bug] Signatures for records at the zone apex could go
0a532842050020a1b0577c65f91f38bd022daa78Andreas Gustafsson stale due to an incorrect timer setting. [RT #23769]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3091. [bug] Fixed a bug in which zone keys that were published
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and then subsequently activated could fail to trigger
23a020bc1312fc35e7c4ea36df846c550cb13634Andreas Gustafsson automatic signing. [RT #22911]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3090. [func] Make --with-gssapi default [RT #23738]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3089. [func] dnssec-dsfromkey now supports reading keys from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 standard input "dnssec-dsfromkey -f -". [RT# 20662]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
7250c1a2616761395bdb9ae7cd1ba43f20d3edc4Andreas Gustafsson and add setup.sh in order to resolve changing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named.conf issue. [RT #23687]
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington3087. [bug] DDNS updates using SIG(0) with update-policy match
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 type "external" could cause a crash. [RT #23735]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3086. [bug] Running dnssec-settime -f on an old-style key will
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 now force an update to the new key format even if no
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 other change has been specified, using "-P now -A now"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as default values. [RT #22474]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3085. [func] New '-R' option in dnssec-signzone forces removal
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of signatures which have not yet expired but
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 were generated by a key that no longer exists.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3084. [func] A new command "rndc sync" dumps pending changes in
d81622b537be1971530cfb459acdbbe7d82d883bBrian Wellington a dynamic zone to disk; "rndc sync -clean" also
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 removes the journal file after syncing. Also,
a5b9c2b208b51b039c8f4006cddf3d37dd781561Brian Wellington "rndc freeze" no longer removes journal files.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3083. [bug] NOTIFY messages were not being sent when generating
2da0b7dfbd02fab454b8ba60f1fdb7e2a5cbd2dbMark Andrews a NSEC3 chain incrementally. [RT #23702]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3082. [port] strtok_r is threads only. [RT #23747]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3081. [bug] Failure of DNAME substitution did not return
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 YXDOMAIN. [RT #23591]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
e980502db40155234b4e8d320b748b34dbaba3a2Brian Wellington3079. [bug] Handle isc_event_allocate failures in t_tasks.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3078. [func] Added a new include file with function typedefs
ecd1addb86319bacc6c0bff2c68373619eebbffcMark Andrews for the DLZ "dlopen" driver. [RT #23629]
ea20115e347264b9bc1c686d6dfc1b5af3a5516bAndreas Gustafsson3077. [bug] zone.c:zone_refreshkeys() incorrectly called
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_zone_attach(), use zone->irefs instead. [RT #23303]
bddfe77128b0f16af263ff149db40f0d885f43d0Mark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-keyfromlabel sets the default TTL of the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key. When possible, automatic signing will use that
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson TTL when the key is published. [RT #23304]
aa0dc8d920a1f79626c3564408db9c5c9a5319a7Andreas Gustafsson3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 timestamp when determining which keys are active.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3074. [bug] Make the adb cache read through for zone data and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 glue learn for zone named is authoritative for.
5e88852b94830bf71e37dc700d568cb35e2e6f7eAndreas Gustafsson3073. [bug] managed-keys changes were not properly being recorded.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3071. [bug] has_nsec could be used uninitialized in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 update.c:next_active. [RT #20256]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3070. [bug] dnssec-signzone potential NULL pointer dereference.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3069. [cleanup] Silence warnings messages from clang static analysis.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3068. [bug] Named failed to build with a OpenSSL without engine
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 support. [RT #23473]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3067. [bug] ixfr-from-differences {master|slave}; failed to
1e289d3cca5cdd01dda650fa6e4c1de1aa8b4196Andreas Gustafsson select the master/slave zones. [RT #23580]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3066. [func] The DLZ "dlopen" driver is now built by default,
c54210716ee55b55e22d8dad56fd696a641fc98dBob Halley no longer requiring a configure option. To
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 disable it, use "configure --without-dlopen".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Driver also supported on win32. [RT #23467]
3fcf6b956f47405750724bd84e1b2290b61c9186Brian Wellington3065. [bug] RRSIG could have time stamps too far in the future.
0a2d5c990559ce2b9f95df752db6e93024d9a250Brian Wellington3064. [bug] powerpc: add sync instructions to the end of atomic
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 operations. [RT #23469]
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3062. [func] Made several changes to enhance human readability
96ed62425310854fd6f6f06bfb7651b3e4c17ee7Andreas Gustafsson of DNSSEC data in dig output and in generated
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - DNSKEY record comments are more verbose, no
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington longer used in multiline mode only
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - multiline RRSIG records reformatted
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - multiline output mode for NSEC3PARAM records
5733d25b06b46067b3751d10436d82aef09cd705Brian Wellington - "dig +norrcomments" suppresses DNSKEY comments
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - "dig +split=X" breaks hex/base64 records into
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fields of width X; "dig +nosplit" disables this.
eb6e3b04169a766d2b968bcc978191605c2ef24cAndreas Gustafsson3061. [func] New option "dnssec-signzone -D", only write out
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 generated DNSSEC records. [RT #22896]
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson3060. [func] New option "dnssec-signzone -X <date>" allows
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specification of a separate expiration date
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
fed846067d265db1037483d81d01f3651c8a3f28Brian Wellington3059. [test] Added a regression test for change #3023.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3058. [bug] Cause named to terminate at startup or rndc reconfig/
a26ad011f382d12058478704cb5e90e6f4366d01Andreas Gustafsson reload to fail, if a log file specified in the conf
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 file isn't a plain file. [RT #22771]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3057. [bug] "rndc secroots" would abort after the first error
7d8c3693d0426b56750b14d80c47df5e42fc75e4Andreas Gustafsson and so could miss some views. [RT #23488]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3056. [func] Added support for URI resource record. [RT #23386]
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson3055. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3054. [bug] Added elliptic curve support check in
07c336a9a85791dff886b1e28514589a25d9b720Andreas Gustafsson GOST OpenSSL engine detection. [RT #23485]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3053. [bug] Under a sustained high query load with a finite
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 max-cache-size, it was possible for cache memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be exhausted and not recovered. [RT #23371]
712fa28946312882a60b0c6a913914d3e8c69867Mark Andrews3052. [test] Fixed last autosign test report. [RT #23256]
63fd201fde27ce408cde1c73a054e401fcfb9e3bDavid Lawrence3051. [bug] NS records obscure DNAME records at the bottom of the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone if both are present. [RT #23035]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3050. [bug] The autosign system test was timing dependent.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Wait for the initial autosigning to complete
f8644da8d948dbc973f6dd4c94a79774e16ec07bDavid Lawrence before running the rest of the test. [RT #23035]
9bfa90768ab83ea5a8571c98d3774377da4bdcbeDavid Lawrence3049. [bug] Save and restore the gid when creating creating
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named.pid at startup. [RT #23290]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3048. [bug] Fully separate view key management. [RT #23419]
2d67c2474475acf52c8251dc48bfb7565ee5f2ffDavid Lawrence3047. [bug] DNSKEY NODATA responses not cached fixed in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 validator.c. Tests added to dnssec system test.
6a7a69e9f764812872ec2db775be2ac8bb073102Andreas Gustafsson3046. [bug] Use RRSIG original TTL to compute validated RRset
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and RRSIG TTL. [RT #23332]
0a9a3d8c6daf9ffcfb62dbe366e26f521cbb9736Brian Wellington3045. [removed] Replaced by change #3050.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3044. [bug] Hold the socket manager lock while freeing the socket.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3043. [test] Merged in the NetBSD ATF test framework (currently
1d9ab721315555ac75e7d4f57585323909283688Andreas Gustafsson version 0.12) for development of future unit tests.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Use configure --with-atf to build ATF internally
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or configure --with-atf=prefix to use an external
ef8d97818f0d30a4e09db97af695f504b311372cMark Andrews copy. [RT #23209]
6af5c66df334c4e275e07b03c9b35e40dbaa4f31Andreas Gustafsson3042. [bug] dig +trace could fail attempting to use IPv6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addresses on systems with only IPv4 connectivity.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3041. [bug] dnssec-signzone failed to generate new signatures on
519f8475ff8218e3981ae2b249eb1403da7c52f6Andreas Gustafsson ttl changes. [RT #23330]
edc1c60621b44fbc8131ad1542f657dd129f9a30Andreas Gustafsson3040. [bug] Named failed to validate insecure zones where a node
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with a CNAME existed between the trust anchor and the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 top of the zone. [RT #23338]
41626c0997c89dcdecf67c931f0031aadd507977Andreas Gustafsson3039. [func] Redirect on NXDOMAIN support. [RT #23146]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3038. [bug] Install <dns/rpz.h>. [RT #23342]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3037. [doc] Update COPYRIGHT to contain all the individual
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 copyright notices that cover various parts.
6112718b0dbb01ffbfd3fabc61e30c7e4485b0a7David Lawrence3036. [bug] Check built-in zone arguments to see if the zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is re-usable or not. [RT #21914]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3035. [cleanup] Simplify by using strlcpy. [RT #22521]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3029. [bug] isc_netaddr_format() handle a zero sized buffer.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
f808bd34fbd3dd9508e8183e8025635bc330c34aAndreas Gustafsson3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 catch NULL pointer dereferences before they happen.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3026. [bug] lib/isc/httpd.c: check that we have enough space
841179549b6433e782c164a562eb3422f603533dAndreas Gustafsson after calling grow_headerspace() and if not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 re-call grow_headerspace() until we do. [RT #22521]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3025. [bug] Fixed a possible deadlock due to zone resigning.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3024. [func] RTT Banding removed due to minor security increase
2445d14b1a95132a473aa30076d0ce1762027e76Mark Andrews but major impact on resolver latency. [RT #23310]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3023. [bug] Named could be left in an inconsistent state when
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews receiving multiple AXFR response messages that were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not all TSIG-signed. [RT #23254]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3021. [bug] Change #3010 was incomplete. [RT #22296]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 changing the DNSKEY RRset. [RT #23232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3019. [test] Test: check apex NSEC3 records after adding DNSKEY
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews record via UPDATE. [RT #23229]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if a zone may need to be re-signed. [RT #23120]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3017. [doc] dnssec-keyfromlabel -I was not properly documented.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3014. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3013. [bug] The DNS64 ttl was not always being set as expected.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3012. [bug] Remove DNSKEY TTL change pairs before generating
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing records for any remaining DNSKEY changes.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews3011. [func] Change the default query timeout from 30 seconds
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to 10. Allow setting this in named.conf using the new
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews 'resolver-query-timeout' option, which specifies a max
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 time in seconds. 0 means 'default' and anything longer
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews than 30 will be silently set to 30. [RT #22852]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for refreshing managed-keys. [RT #22296]
56877490bc70e4004f6b5e4a16067750ca64be85Andreas Gustafsson3009. [bug] clients-per-query code didn't work as expected with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 particular query patterns. [RT #22972]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.8.0b1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3008. [func] Response policy zones (RPZ) support. [RT #21726]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3007. [bug] Named failed to preserve the case of domain names in
af0be81b2f6ea700dd882d3b18468c7815bd5ef2Andreas Gustafsson rdata which is not compressible when writing master
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 files. [RT #22863]
ed0e1ae6bc3df39389a24d72cf544b2437bf8340Andreas Gustafsson3006. [func] Allow dynamically generated TSIG keys to be preserved
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 across restarts of named. Initially this is for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 TSIG keys generated using GSSAPI. [RT #22639]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3005. [port] Solaris: Work around the lack of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 gsskrb5_register_acceptor_identity() by setting
6cefb60af55912df4411389bccfc38a74e992332Mark Andrews the KRB5_KTNAME environment variable to the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 contents of tkey-gssapi-keytab. Also fixed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 test errors on MacOSX. [RT #22853]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3004. [func] DNS64 reverse support. [RT #22769]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3003. [experimental] Added update-policy match type "external",
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence enabling named to defer the decision of whether to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow a dynamic update to an external daemon.
dccd7f8459d811141fde04d4a307b9b695cf58b1David Lawrence (Contributed by Andrew Tridgell.) [RT #22758]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3001. [func] Added a default trust anchor for the root zone, which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 can be switched on by setting "dnssec-validation auto;"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in the named.conf options. [RT #21727]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉3000. [bug] More TKEY/GSS fixes:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - nsupdate can now get the default realm from
03f91269f5453bcbd924910ef85a8f8496cf2661Mark Andrews the user's Kerberos principal
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - corrected gsstest compilation flags
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - improved documentation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - fixed some NULL dereferences
17dba29ba5db791976e505114baee53a1dde88aaBrian Wellington2999. [func] Add GOST support (RFC 5933). [RT #20639]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to the task api. [RT #22776]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2997. [func] named -V now reports the OpenSSL and libxml2 verions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it was compiled against. [RT #22687]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2996. [security] Temporarily disable SO_ACCEPTFILTER support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2995. [bug] The Kerberos realm was not being correctly extracted
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from the signer's identity. [RT #22770]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence do not use threads on earlier versions. Also kill
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the unproven-pthreads, mit-pthreads, and ptl2 support.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2993. [func] Dynamically grow adb hash tables. [RT #21186]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence for looking at a secure delegation. [RT #22059]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence dynamic zones. [RT #22365]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2990. [bug] 'dnssec-settime -S' no longer tests prepublication
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 interval validity when the interval is set to 0.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2989. [func] Added support for writable DLZ zones. (Contributed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 by Andrew Tridgell of the Samba project.) [RT #22629]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of external DLZ drivers that can be loaded as
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence shared objects at runtime rather than linked with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named. Currently this is switched on via a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 compile-time option, "configure --with-dlz-dlopen".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: the syntax for configuring DLZ zones
adcd8c93196ad0a3516252d80597c3c52472ffb2David Lawrence is likely to be refined in future releases.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (Contributed by Andrew Tridgell of the Samba
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 project.) [RT #22629]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2987. [func] Improve ease of configuring TKEY/GSS updates by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 adding a "tkey-gssapi-keytab" option. If set,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 updates will be allowed with any key matching
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a principal in the specified keytab file.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "tkey-gssapi-credential" is no longer required
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and is expected to be deprecated. (Contributed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 by Andrew Tridgell of the Samba project.)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2986. [func] Add new zone type "static-stub". It's like a stub
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington zone, but the nameserver names and/or their IP
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addresses are statically configured. [RT #21474]
cf74d05a50e342e5b3870005c04ae5ed8013ab3eBrian Wellington2985. [bug] Add a regression test for change #2896. [RT #21324]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2984. [bug] Don't run MX checks when the target of the MX record
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is ".". [RT #22645]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson --- 9.8.0a1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2982. [bug] Reference count dst keys. dst_key_attach() can be used
f3ac8ee19231ae3018ec21756f19b1bd639ce7e7Andreas Gustafsson increment the reference count.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: dns_tsigkey_createfromkey() callers should now
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson always call dst_key_free() rather than setting it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to NULL on success. [RT #22672]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2980. [bug] named didn't properly handle UPDATES that changed the
508d17362c2c43ddf95ddc87ae6a8c5f32f35323Andreas Gustafsson TTL of the NSEC3PARAM RRset. [RT #22363]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2979. [bug] named could deadlock during shutdown if two
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "rndc stop" commands were issued at the same
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 time. [RT #22108]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2978. [port] hpux: look for <devpoll.h> [RT #21919]
e7a4f58d55042cbc981a70b5071aaea46b9ebf7fAndreas Gustafsson2977. [bug] 'nsupdate -l' report if the session key is missing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2976. [bug] named could die on exit after negotiating a GSS-TSIG
5fdc9aaf401f6816df65d0e9cf701872f345c558Andreas Gustafsson key. [RT #22573]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 wrong lock which could lead to server deadlock.
50097b38c075be55a73bb3737d091c503c70061dBrian Wellington2974. [bug] Some valid UPDATE requests could fail due to a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 consistency check examining the existing version
751aa24c98fea02215cad95a08411af547d70e41Bob Halley of the zone rather than the new version resulting
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from the UPDATE. [RT #22413]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2973. [bug] bind.keys.h was being removed by the "make clean"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at the end of configure resulting in build failures
fd5847ef0954117d5f905dbbfb68f1e67e4f285fAndreas Gustafsson where there is very old version of perl installed.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Move it to "make maintainer-clean". [RT #22230]
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson2972. [bug] win32: address windows socket errors. [RT #21906]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2971. [bug] Fixed a bug that caused journal files not to be
82e991b8ed4e0ed3b010d191e0cadfd60226c2d9Andreas Gustafsson compacted on Windows systems as a result of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 non-POSIX-compliant rename() semantics. [RT #22434]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2970. [security] Adding a NO DATA negative cache entry failed to clear
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 any matching RRSIG records. A subsequent lookup of
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson of NO DATA cache entry could trigger a INSIST when the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unexpected RRSIG was also returned with the NO DATA
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 CVE-2010-3613, VU#706148. [RT #22288]
5f539d5fc68ca056bd1791e3156b0fe6b28cde16Brian Wellington2969. [security] Fix acl type processing so that allow-query works
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in options and view statements. Also add a new
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 set of tests to verify proper functioning.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 CVE-2010-3615, VU#510208. [RT #22418]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2968. [security] Named could fail to prove a data set was insecure
e491ef29043ae77d3d78fb7a59328f143fcf70feAndreas Gustafsson before marking it as insecure. One set of conditions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that can trigger this occurs naturally when rolling
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNSKEY algorithms.
1a286a6613d385b443030a8c932e40ac9e9c301fBob Halley CVE-2010-3614, VU#837744. [RT #22309]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2967. [bug] 'host -D' now turns on debugging messages earlier.
3242899a56da9c245956979d5be9c92b2cf0ee24Andreas Gustafsson2966. [bug] isc_print_vsnprintf() failed to check if there was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 space available in the buffer when adding a left
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 justified character with a non zero width,
9ffcab1e9a398e431c10c9936c28e4166c2e82e0Andreas Gustafsson (e.g. "%-1c"). [RT #22270]
de8717a7218a4f034144ad7b8755ad43e3fd45c9David Lawrence2965. [func] Test HMAC functions using test data from RFC 2104 and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RFC 4634. [RT #21702]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2964. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2963. [security] The allow-query acl was being applied instead of the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-query-cache acl to cache lookups. [RT #22114]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2962. [port] win32: add more dependencies to BINDBuild.dsw.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2961. [bug] Be still more selective about the non-authoritative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 answers we apply change 2748 to. [RT #22074]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2960. [func] Check that named accepts non-authoritative answers.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2959. [func] Check that named starts with a missing masterfile.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2958. [bug] named failed to start with a missing master file.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2957. [bug] entropy_get() and entropy_getpseudo() failed to match
ac6afcd0caf72aaa2a537e0003de30b363b4a68bBrian Wellington the API for RAND_bytes() and RAND_pseudo_bytes()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 respectively. [RT #21962]
c20ffa38dee7efa0dc01822d4bac5e41729b9b61Brian Wellington2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
2b7a77a68e27fc7991a857d403cb34b2ae90fc0bMark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 build_sqldbinstance failure. [RT #21623]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2953. [bug] Silence spurious "expected covering NSEC3, got an
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 exact match" message when returning a wildcard
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 no data response. [RT #21744]
aed6a8ed2e706404ccca0f31faf110fd6efd34e6Andreas Gustafsson2952. [port] win32: named-checkzone and named-checkconf failed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to initialize winsock. [RT #21932]
f8b3c627949bd4bc2f6aafb3dab2f56e3aa9ba06Brian Wellington2951. [bug] named failed to generate a correct signed response
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in a optout, delegation only zone with no secure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 delegations. [RT #22007]
55ddb88e53838693370c213930beda1652b8a583Brian Wellington2950. [bug] named failed to perform a SOA up to date check when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 falling back to TCP on UDP timeouts when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ixfr-from-differences was set. [RT #21595]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2949. [bug] dns_view_setnewzones() contained a memory leak if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it was called multiple times. [RT #21942]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2948. [port] MacOS: provide a mechanism to configure the test
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 interfaces at reboot. See bin/tests/system/README
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2947. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2946. [doc] Document the default values for the minimum and maximum
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone refresh and retry values in the ARM. [RT #21886]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2945. [doc] Update empty-zones list in ARM. [RT #21772]
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2944. [maint] Remove ORCHID prefix from built in empty zones.
9027e1bcf1b245226e3053a75d16c5351d7e60caDavid Lawrence2943. [func] Add support to load new keys into managed zones
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 without signing immediately with "rndc loadkeys".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Add support to link keys with "dnssec-keygen -S"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and "dnssec-settime -S". [RT #21351]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2942. [contrib] zone2sqlite failed to setup the entropy sources.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2941. [bug] sdb and sdlz (dlz's zone database) failed to support
c0968380c4fb0b8196aafb8de225531bd847bb6dBrian Wellington DNAME at the zone apex. [RT #21610]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2940. [port] Remove connection aborted error message on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Windows. [RT #21549]
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington2939. [func] Check that named successfully skips NSEC3 records
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that fail to match the NSEC3PARAM record currently
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in use. [RT# 21868]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2938. [bug] When generating signed responses, from a signed zone
b52a5b063050f209b0f47379178a1e7ae7404624Andreas Gustafsson that uses NSEC3, named would use a uninitialized
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 pointer if it needed to skip a NSEC3 record because
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it didn't match the selected NSEC3PARAM record for
34613b2e39478a83076f6a626a4b855cebb19533Andreas Gustafsson zone. [RT# 21868]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2937. [bug] Worked around an apparent race condition in over
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory conditions. Without this fix a DNS cache DB or
6eccf5bd07eb9abf65cc08fec4a8fc97b62c0e1bBrian Wellington ADB could incorrectly stay in an over memory state,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 effectively refusing further caching, which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 subsequently made a BIND 9 caching server unworkable.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 This fix prevents this problem from happening by
3bd8e7cf1c082cd1021e5a6cae1cf21911217858Brian Wellington polling the state of the memory context, rather than
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 making a copy of the state, which appeared to cause
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a race. This is a "workaround" in that it doesn't
b8a85202af814468421a6541b4c935bd14773c53Brian Wellington solve the possible race per se, but several experiments
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 proved this change solves the symptom. Also, the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 polling overhead hasn't been reported to be an issue.
b879ed05f4fb8209add6c19a509c984b6c8b3a98Andreas Gustafsson This bug should only affect a caching server that
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specifies a finite max-cache-size. It's also quite
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 likely that the bug happens only when enabling threads,
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson but it's not confirmed yet. [RT #21818]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2936. [func] Improved configuration syntax and multiple-view
b0390aab30438a13f533cccae9389945214b1421Brian Wellington support for addzone/delzone feature (see change
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 #2930). Removed "new-zone-file" option, replaced
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with "allow-new-zones (yes|no)". The new-zone-file
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for each view is now created automatically, with
54d64c7994d01da590462ecc56faf1a87fc4abb9Brian Wellington a filename generated from a hash of the view name.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 It is no longer necessary to "include" the
4c03e69ab845f703c1ffa3b7772938ca98cce44dAndreas Gustafsson new-zone-file in named.conf; this happens
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 automatically. Zones that were not added via
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "rndc addzone" can no longer be removed with
225a66da7ea2671a3e4db3cc4337f97ff67be647Brian Wellington "rndc delzone". [RT #19447]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2935. [bug] nsupdate: improve 'file not found' error message.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2933. [bug] 'dig +nsid' used stack memory after it went out of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 scope. This could potentially result in a unknown,
17789c880460c0bca3f3693c759be2214b936e69Brian Wellington potentially malformed, EDNS option being sent instead
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of the desired NSID option. [RT #21781]
55b62439233d930152690b9eba97b06d9dc13d23Mark Andrews2932. [cleanup] Corrected a numbering error in the "dnssec" test.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2931. [bug] Temporarily and partially disable change 2864
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence because it would cause infinite attempts of RRSIG
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 queries. This is an urgent care fix; we'll
590233519e14f3cf49840a93d2648d5560dd957eDavid Lawrence revisit the issue and complete the fix later.
123a3dddc94534d3a6c6f81c118a5b63dc5994c3Andreas Gustafsson2930. [experimental] New "rndc addzone" and "rndc delzone" commands
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow dynamic addition and deletion of zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 To enable this feature, specify a "new-zone-file"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option at the view or options level in named.conf.
5ea0d11ca45bfd1ea9db8db07f18fbb02f500661Brian Wellington Zone configuration information for the new zones
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 will be written into that file. To make the new
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zones persist after a restart, "include" the file
d25dd5b0567f67ecf40b7ed1cb20e0dce7b41c49Brian Wellington into named.conf in the appropriate view. (Note:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 This feature is not yet documented, and its syntax
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is expected to change.) [RT #19447]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2929. [bug] Improved handling of GSS security contexts:
7c058f1c384ebdba74231111f9358cf08109a5dbBob Halley - added LRU expiration for generated TSIGs
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - added the ability to use a non-default realm
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - added new "realm" keyword in nsupdate
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - limited lifetime of generated keys to 1 hour
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley or the lifetime of the context (whichever is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2928. [bug] Be more selective about the non-authoritative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 answer we apply change 2748 to. [RT #21594]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2927. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2926. [placeholder]
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson2925. [bug] Named failed to accept uncachable negative responses
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from insecure zones. [RT# 21555]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2924. [func] 'rndc secroots' dump a combined summary of the
dc2e09d48b49d96a0572a971180718f680140cf0Andreas Gustafsson current managed keys combined with trusted keys.
90c099e88e9f16bfee9edee3ac1a51fc98843772Brian Wellington2923. [bug] 'dig +trace' could drop core after "connection
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 timeout". [RT #21514]
620de5a4b1f23dc9b4ec30d30c0607ff389be0daBob Halley2922. [contrib] Update zkt to version 1.0.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2921. [bug] The resolver could attempt to destroy a fetch context
68b952dc98a9e02b269c0712da120cd773679652Brian Wellington too soon. [RT #19878]
d1cc210d2091916df6f9858fae20a1c760f3b257Andreas Gustafsson2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to IPv4 clients. New acl 'filter-aaaa' (default any).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2917. [func] Virtual time test framework. [RT #20801]
ed0a4f1a302a5e543a9a2e4f8e61ca8a0673c6a7Mark Andrews2916. [func] Add framework to use IPv6 in tests.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2915. [cleanup] Be smarter about which objects we attempt to compile
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 based on configure options. [RT #21444]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2914. [bug] Make the "autosign" system test more portable.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2913. [func] Add pkcs#11 system tests. [RT #20784]
3bb043a8b8b15eece3794ec31ad0ccab103a1c21Brian Wellington2912. [func] Windows clients don't like UPDATE responses that clear
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the zone section. [RT #20986]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2911. [bug] dnssec-signzone didn't handle out of zone records well.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2910. [func] Sanity check Kerberos credentials. [RT #20986]
903e9d41ef730f098d38da9588f2824f37b7d73cMark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was specified in named.conf. [RT #21416]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2908. [bug] It was possible for re-signing to stop after removing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a DNSKEY. [RT #21384]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2907. [bug] The export version of libdns had undefined references.
6211baaa66d7cac28a21b6426681e597ff04ca9eAndreas Gustafsson2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2905. [port] aix: set use_atomic=yes with native compiler.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2904. [bug] When using DLV, sub-zones of the zones in the DLV,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could be incorrectly marked as insecure instead of
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington secure leading to negative proofs failing. This was
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a unintended outcome from change 2890. [RT# 21392]
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson2903. [bug] managed-keys-directory missing from namedconf.c.
1e50dad10da55802152d00d5573f8b7d49d752a6Bob Halley2902. [func] Add regression test for change 2897. [RT #21040]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2900. [bug] The placeholder negative caching element was not
c8d185ad5827bf2cf9982075e3336f680759a260Andreas Gustafsson properly constructed triggering a INSIST in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_ncache_towire(). [RT #21346]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2899. [port] win32: Support linking against OpenSSL 1.0.0.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2898. [bug] nslookup leaked memory when -domain=value was
2cb74c5bc52ef415a771fafe0bf504eab609feadBrian Wellington specified. [RT #21301]
3d60fe9bafbf633e3a7811c11227baebb17878a4Brian Wellington2897. [bug] NSEC3 chains could be left behind when transitioning
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to insecure. [RT #21040]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2896. [bug] "rndc sign" failed to properly update the zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when adding a DNSKEY for publication only. [RT #21045]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2895. [func] genrandom: add support for the generation of multiple
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 files. [RT #20917]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2893. [bug] Improve managed keys support. New named.conf option
02940eaf0f732c28c0b39ed114a3803074a80138Andreas Gustafsson managed-keys-directory. [RT #20924]
9a7d163f6f305d48771b4c56d8d18efc6dfc8fc3Mark Andrews2892. [bug] Handle REVOKED keys better. [RT #20961]
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson2891. [maint] Update empty-zones list to match
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2890. [bug] Handle the introduction of new trusted-keys and
aa23a35d81a9618a40c4a9b44be48009553e4777Andreas Gustafsson DS, DLV RRsets better. [RT #21097]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2889. [bug] Elements of the grammar where not properly reported.
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington2888. [bug] Only the first EDNS option was displayed. [RT #21273]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2887. [bug] Report the keytag times in UTC in the .key file,
91425b5e7204b05165e2c5b244f3dad502f9627dBrian Wellington local time is presented as a comment within the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 comment. [RT #21223]
b18a5b6730dcb062cf7f47c6b3cb909030b58f36Brian Wellington2886. [bug] ctime() is not thread safe. [RT #21223]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2885. [bug] Improve -fno-strict-aliasing support probing in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configure. [RT #21080]
328b080b4af258fdd4d3a2ea1558b48706bd8116Andreas Gustafsson2884. [bug] Insufficient validation in dns_name_getlabelsequence().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2883. [bug] 'dig +short' failed to handle really large datasets.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2882. [bug] Remove memory context from list of active contexts
f91dc72b422479b5a0caf1fe54c4054d25ae6055Brian Wellington before clearing 'magic'. [RT #21274]
7e361074bc8a2df7a0891a7040eea02ca3a5e286Andreas Gustafsson2881. [bug] Reduce the amount of time the rbtdb write lock
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is held when closing a version. [RT #21198]
d6b3d06db7ce3b9229dc30cc0e3a72ba2603da28Bob Halley2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 consistent. [RT #21078]
8e68489885e744ab48907414b4199c36858c27ddMark Andrews2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2878. [func] Incrementally write the master file after performing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a AXFR. [RT #21010]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2877. [bug] The validator failed to skip obviously mismatching
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RRSIGs. [RT #21138]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2876. [bug] Named could return SERVFAIL for negative responses
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from unsigned zones. [RT #21131]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2875. [bug] dns_time64_fromtext() could accept non digits.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2874. [bug] Cache lack of EDNS support only after the server
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 successfully responds to the query using plain DNS.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2873. [bug] Canceling a dynamic update via the dns/client module
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could trigger an assertion failure. [RT #21133]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2872. [bug] Modify dns/client.c:dns_client_createx() to only
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 require one of IPv4 or IPv6 rather than both.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2871. [bug] Type mismatch in mem_api.c between the definition and
80ddc8b22bf2ede60038393be5cad9da99d3f03fAndreas Gustafsson the header file, causing build failure with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --enable-exportlib. [RT #21138]
94baac869a70b529a24ff23d8dc899faa5d4fdc4Brian Wellington2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2868. [cleanup] Run "make clean" at the end of configure to ensure
a12d9cfa59b5981c52e1aaafedf652d5128f3448Brian Wellington any changes made by configure are integrated.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Use --with-make-clean=no to disable. [RT #20994]
702a69f04a89422968ef8fc6fc271fac058e03efBrian Wellington2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 don't like it. [RT #20986]
0f537d1c63f643924355ff9ca2cf72c547101aa4Brian Wellington2866. [bug] Windows does not like the TSIG name being compressed.
9ee323b64bc9dcd73f9a0a0e69a31475026721daAndreas Gustafsson2865. [bug] memset to zero event.data. [RT #20986]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2862. [bug] nsupdate didn't default to the parent zone when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 updating DS records. [RT #20896]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2861. [doc] dnssec-settime man pages didn't correctly document the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inactivation time. [RT #21039]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2860. [bug] named-checkconf's usage was out of date. [RT #21039]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2859. [bug] When canceling validation it was possible to leak
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory. [RT #20800]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2858. [bug] RTT estimates were not being adjusted on ICMP errors.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2857. [bug] named-checkconf did not fail on a bad trusted key.
49576ae7a481415d5e815ff59b71c76203259619Andreas Gustafsson2856. [bug] The size of a memory allocation was not always properly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 recorded. [RT #20927]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2855. [func] nsupdate will now preserve the entered case of domain
4d30acbac52fcb20a4f0ab4f8508f24861386fe7Brian Wellington names in update requests it sends. [RT #20928]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2854. [func] dig: allow the final soa record in a axfr response to
131d5feb05fce60143bc17dab73df20753d9301fBrian Wellington be suppressed, dig +onesoa. [RT #20929]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
76c9d2f6c0a5d6ea8bcc35fc3228d2019507b2bbBrian Wellington2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2851. [doc] nslookup.1, removed <informalexample> from the docbook
187a97287e626b2f2e9774479e145dfbf1eba66cBrian Wellington source as it produced bad nroff. [RT #21007]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2850. [bug] If isc_heap_insert() failed due to memory shortage
7ed2d93fa4e12e0ceaa0c7c0da3a89e7a5d78296Andreas Gustafsson the heap would have corrupted entries. [RT #20951]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2849. [bug] Don't treat errors from the xml2 library as fatal.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
703e1c0bb66f3cd3d300358ca0c1fdf3cb5fb1c5Brian Wellington README.rfc5011 into the ARM. [RT #20899]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2846. [bug] EOF on unix domain sockets was not being handled
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 correctly. [RT #20731]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2844. [doc] notify-delay default in ARM was wrong. It should have
fcc3c131e03cb7e844eaecf74d4f9b7fd38c8398Andreas Gustafsson been five (5) seconds.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
6d3e8dffb447b9a961360f7f4fd77b0bdb81de76Andreas Gustafsson creating key files if there is a chance that the new
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key ID will collide with an existing one after
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 either of the keys has been revoked. (To override
7017ede939a5d3e7f2dc113061887a9e81fe8627Brian Wellington this in the case of dnssec-keyfromlabel, use the -y
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option. dnssec-keygen will simply create a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 different, non-colliding key, so an override is
66921d6dd259c4486a07aba19eee2b8349698575Brian Wellington not necessary.) [RT #20838]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2842. [func] Added "smartsign" and improved "autosign" and
b65fc651b8aaab5d0fb9b8f6ef583d699d14a113Mark Andrews "dnssec" regression tests. [RT #20865]
2728a98ee4104b2fb30f273893a7f354e20002b5Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
be387fd057ee54ae5d84904e69587d6e29bd3950Mark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2839. [bug] A KSK revoked by named could not be deleted.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2838. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2837. [port] Prevent Linux spurious warnings about fwrite().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2836. [bug] Keys that were scheduled to become active could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be delayed. [RT #20874]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2835. [bug] Key inactivity dates were inadvertently stored in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the private key file with the outdated tag
ff7f1dc0393cfc8a033be7e94aa56cd57c97d174Andreas Gustafsson "Unpublish" rather than "Inactive". This has been
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fixed; however, any existing keys that had Inactive
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dates set will now need to have them reset, using
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'dnssec-settime -I'. [RT #20868]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2834. [bug] HMAC-SHA* keys that were longer than the algorithm
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 digest length were used incorrectly, leading to
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson interoperability problems with other DNS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 implementations. This has been corrected.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (Note: If an oversize key is in use, and
576f85e5fdb8805307f318db79dfc0d19e390d1aAndreas Gustafsson compatibility is needed with an older release of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 BIND, the new tool "isc-hmac-fixup" can convert
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the key secret to a form that will work with all
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 versions.) [RT #20751]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to avoid redefinition in some OSs [RT 20831]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2831. [security] Do not attempt to validate or cache
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 out-of-bailiwick data returned with a secure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 answer; it must be re-fetched from its original
523dd6a979865b8b1b8f1ecc81e5ce47a168c63fBrian Wellington source and validated in that context. [RT #20819]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2830. [bug] Changing the OPTOUT setting could take multiple
5bb4ceb2a67fd558962f8a786c93daedc148a599Mark Andrews passes. [RT #20813]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2829. [bug] Fixed potential node inconsistency in rbtdb.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2828. [security] Cached CNAME or DNAME RR could be returned to clients
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 without DNSSEC validation. [RT #20737]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
4817a0628785835abb57d06f2f616b4a6515ac2fAndreas Gustafsson2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 being released. [RT #20740]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
c26c349eab7ca0499786c2091f0e407ec90eee6bAndreas Gustafsson was in the process of being created was not properly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 recorded in the zone. [RT #20786]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2824. [bug] "rndc sign" was not being run by the correct task.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2822. [bug] rbtdb.c:loadnode() could return the wrong result.
148af05e15f5d7ae3b076231617369fdaf57d26dAndreas Gustafsson2821. [doc] Add note that named-checkconf doesn't automatically
d31498a54482c8d5d934875d3fdeaa621c962d6fBrian Wellington2820. [func] Handle read access failure of OpenSSL configuration
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 file more user friendly (PKCS#11 engine patch).
a2a7eaf89cd68acdb16177bb05701107ceab52b9Brian Wellington2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2818. [cleanup] rndc could return an incorrect error code
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when a zone was not found. [RT #20767]
7357590beef5f671cfdd4ec4304e5210adfb0d8aBrian Wellington2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2816. [bug] previous_closest_nsec() could fail to return
8dd5237a27e2e824d18f835dc711573aeb23a173Mark Andrews data for NSEC3 nodes [RT #29730]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2815. [bug] Exclusively lock the task when freezing a zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2814. [func] Provide a definitive error message when a master
3b5102fc018a29e52befde5991844843c7b70786Michael Sawyer zone is not loaded. [RT #20757]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2813. [bug] Better handling of unreadable DNSSEC key files.
ec772e873bd7f24418049b5b1b5d7c44ff781356Brian Wellington2812. [bug] Make sure updates can't result in a zone with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NSEC-only keys and NSEC3 records. [RT #20748]
abfbf760f3bc2a6744b0249a31ca5153234b49e8Brian Wellington2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 output. [RT #20733]
75768d5fa2c6c5c441b849ca4efa649a7c2a9e88Bob Halley2810. [doc] Clarified the process of transitioning an NSEC3 zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to insecure. [RT #20746]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2809. [cleanup] Restored accidentally-deleted text in usage output
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in dnssec-settime and dnssec-revoke [RT #20739]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2808. [bug] Remove the attempt to install atomic.h from lib/isc.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 atomic.h is correctly installed by the architecture
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specific subdirectories. [RT #20722]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2807. [bug] Fixed a possible ASSERT when reconfiguring zone
22dbaf9ad8065127fd93eff0f239fd9c548d18b6Andreas Gustafsson keys. [RT #20720]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0rc1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
184867e88b5a30bbc29f17edbc7b50a6c8a944e7David Lawrence when it had changed. [RT #20703]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2805. [bug] Fixed namespace problems encountered when building
fa280ff02ad0c29616a0c3a22ef02cbb3f6db7efDavid Lawrence external programs using non-exported BIND9 libraries
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (i.e., built without --enable-exportlib). [RT #20679]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2804. [bug] Send notifies when a zone is signed with "rndc sign"
f4e4111795ceb13066d09c38723afacb04e33ad4Mark Andrews or as a result of a scheduled key change. [RT #20700]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
253ab81bf2760d3d7f68512b43710afc02d788daMark Andrews and genrandom under windows. [RT #20670]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2801. [func] Detect and report records that are different according
a110543bb4d2e53caa40f83c2b45786a1efe63efAndreas Gustafsson to DNSSEC but are semantically equal according to plain
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNS. Apply plain DNS comparisons rather than DNSSEC
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 comparisons when processing UPDATE requests.
ef9f9001fca9445ef315b1e76a66fc84fef6fdc6Andreas Gustafsson dnssec-signzone now removes such semantically duplicate
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 records prior to signing the RRset.
ee303f481dfefcd4e4994f8b8b17f2de32aa4d69Brian Wellington named-checkzone -r {ignore|warn|fail} (default warn)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named-compilezone -r {ignore|warn|fail} (default warn)
86b8c485762daa54a96d033110f6f41ea96e5213David Lawrence named.conf: check-dup-records {ignore|warn|fail};
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2800. [func] Reject zones which have NS records which refer to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 CNAMEs, DNAMEs or don't have address record (class IN
125a916d1a0c01f139ced5736145703df28d07cfDavid Lawrence only). Reject UPDATEs which would cause the zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to fail the above checks if committed. [RT #20678]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2799. [cleanup] Changed the "secure-to-insecure" option to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "dnssec-secure-to-insecure", and "dnskey-ksk-only"
2115bc7d6433c92499d8e4f67e1c1dfa42ecd6f0David Lawrence to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2798. [bug] Addressed bugs in managed-keys initialization
02e38214502c3a946cdfe87e16525747617a1150Brian Wellington and rollover. [RT #20683]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2797. [bug] Don't decrement the dispatch manager's maxbuffers.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2796. [bug] Missing dns_rdataset_disassociate() call in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_nsec3_delnsec3sx(). [RT #20681]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2795. [cleanup] Add text to differentiate "update with no effect"
8dc3d2006f679d0a291f7a20612c37e2a7146096Brian Wellington log messages. [RT #18889]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2794. [bug] Install <isc/namespace.h>. [RT #20677]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2793. [func] Add "autosign" and "metadata" tests to the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 automatic tests. [RT #19946]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2792. [func] "filter-aaaa-on-v4" can now be set in view
f0f61db621eed0c453e31bb85f6803c550e19a6bAndreas Gustafsson options (if compiled in). [RT #20635]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2791. [bug] The installation of isc-config.sh was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2790. [bug] Handle DS queries to stub zones. [RT #20440]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2788. [bug] dnssec-signzone could sign with keys that were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not requested [RT #20625]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2787. [bug] Spurious log message when zone keys were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dynamically reconfigured. [RT #20659]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2786. [bug] Additional could be promoted to answer. [RT #20663]
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson --- 9.7.0b3 released ---
7cb10f77890fe36b14079c7beb848ec390a53e44Andreas Gustafsson2785. [bug] Revoked keys could fail to self-sign [RT #20652]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2784. [bug] TC was not always being set when required glue was
bb1cf189bb9fd9059cf13b785d15b0e50c0be8fbAndreas Gustafsson dropped. [RT #20655]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 buffer size of 512 or less. [RT #20654]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2782. [port] win32: use getaddrinfo() for hostname lookups.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2781. [bug] Inactive keys could be used for signing. [RT #20649]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2780. [bug] dnssec-keygen -A none didn't properly unset the
acc63b06d9e4e2137950dabddcccd17d8b336ca0Olafur Gudmundsson activation date in all cases. [RT #20648]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2779. [bug] Dynamic key revocation could fail. [RT #20644]
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews2778. [bug] dnssec-signzone could fail when a key was revoked
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 without deleting the unrevoked version. [RT #20638]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
f19771c55d7e7d5bb38160e710185e6e61749d16Andreas Gustafsson2776. [bug] Change #2762 was not correct. [RT #20647]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in dnssec-keyfromlabel. [RT #20643]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2774. [bug] Existing cache DB wasn't being reused after
f1d427043e94371cdf1f21b3cbd65917adbcff25Andreas Gustafsson reconfiguration. [RT #20629]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2773. [bug] In autosigned zones, the SOA could be signed
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson with the KSK. [RT #20628]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2772. [security] When validating, track whether pending data was from
6c29053a20f7614167bafa4388c666644a095349Andreas Gustafsson the additional section or not and only return it if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 validates as secure. [RT #20438]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2771. [bug] dnssec-signzone: DNSKEY records could be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 corrupted when importing from key files [RT #20624]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2770. [cleanup] Add log messages to resolver.c to indicate events
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causing FORMERR responses. [RT #20526]
a59ed6543bbc13e7c784d6badce7b757c2620e28David Lawrence2769. [cleanup] Change #2742 was incomplete. [RT #19589]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2767. [bug] named could crash on startup if a zone was
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence configured with auto-dnssec and there was no
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key-directory. [RT #20615]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2766. [bug] isc_socket_fdwatchpoke() should only update the
91b191a90cae9b162b8c68a3b4820031e129b37bBrian Wellington socketmgr state if the socket is not pending on a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 read or write. [RT #20603]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2765. [bug] Skip masters for which the TSIG key cannot be found.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
2de31518c3da27092120b40fc373cecf600d64e6Brian Wellington2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2762. [bug] DLV validation failed with a local slave DLV zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2761. [cleanup] Enable internal symbol table for backtrace only for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 systems that are known to work. Currently, BSD
10e22ebcc3629be94d37bf408157e2c5ee5740e0Andreas Gustafsson variants, Linux and Solaris are supported. [RT# 20202]
2732332fe53d00592109ef69c0075fcc2ad09db9Brian Wellington2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2759. [doc] Add information about .jbk/.jnw files to
8fa78d9ad5f5ab6c69d1d52b00b1ffcdf1bd5bebMichael Sawyer the ARM. [RT #20303]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2758. [bug] win32: Added a workaround for a windows 2008 bug
e544b507b8019a62c5d2716281f6832519a8791dDavid Lawrence that could cause the UDP client handler to shut
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 down. [RT #19176]
09de21079e902c7356d936ef4f2a31060b36e5f3Brian Wellington2757. [bug] dig: assertion failure could occur in connect
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 timeout. [RT #20599]
ee4429e13e08f30c366cdc5d10585388b8a9f212Michael Sawyer2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
3c7ce471aa8a1a9c5bc0ca9e41f406bdc9f0b2aeAndreas Gustafsson2755. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2754. [bug] Secure-to-insecure transitions failed when zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was signed with NSEC3. [RT #20587]
8aff41ca8ac8dbd9671f3da824406a8783db49d1Brian Wellington2753. [bug] Removed an unnecessary warning that could appear when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 building an NSEC chain. [RT #20589]
c9d7e543d0da2996d1cc52d3c5920141df49a4ecBrian Wellington2752. [bug] Locking violation. [RT #20587]
6dbf9cbe6a39a00de910ef843b9f864abf68bc40Brian Wellington2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2750. [bug] dig: assertion failure could occur when a server
17aac384e029f5dd3314876058c7501f4d84b90bBrian Wellington didn't have an address. [RT #20579]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2749. [bug] ixfr-from-differences generated a non-minimal ixfr
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for NSEC3 signed zones. [RT #20452]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2748. [func] Identify bad answers from GTLD servers and treat them
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as referrals. [RT #18884]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2747. [bug] Journal roll forwards failed to set the re-signing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 time of RRSIGs correctly. [RT #20541]
4d5c668a91c6e5a26653031dd137292bfc03da52Andreas Gustafsson2746. [port] hpux: address signed/unsigned expansion mismatch of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2745. [bug] configure script didn't probe the return type of
f437f6ffae28f88334cf47ce8f948cbf40331ffaAndreas Gustafsson gai_strerror(3) correctly. [RT #20573]
704d6eeab1d8d6a2aeb99c37fa5a97322d9340fcBrian Wellington2744. [func] Log if a query was over TCP. [RT #19961]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
ed8ba54e644957e0ebd51601552193275299ca8dAndreas Gustafsson for a insecure delegation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0b2 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2742. [cleanup] Clarify some DNSSEC-related log messages in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2741. [func] Allow the dnssec-keygen progress messages to be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 suppressed (dnssec-keygen -q). Automatically
9c566a852f31c3a5d0b9d6eaf11463114339c01dAndreas Gustafsson suppress the progress messages when stdin is not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a tty. [RT #20474]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2740. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2739. [cleanup] Clean up API for initializing and clearing trust
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 anchors for a view. [RT #20211]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
1addbb84718fdb7635459ed05f060be086e88f35Andreas Gustafsson test. [RT #20453]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2737. [func] UPDATE requests can leak existence information.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2736. [func] Improve the performance of NSEC signed zones with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 more than a normal amount of glue below a delegation.
d3be9a9c6ef76a5d7671b0962785ca025b153d2bAndreas Gustafsson2735. [bug] dnssec-signzone could fail to read keys
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 that were specified on the command line with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 full paths, but weren't in the current
e9fce1415f8be4cd38d528950c92c481bd105254Mark Andrews directory. [RT #20421]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2734. [port] cygwin: arpaname did not compile. [RT #20473]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
90cd33e0baf23574a88a4c967afec8b95a1801deAndreas Gustafsson2732. [func] Add optional filter-aaaa-on-v4 option, available
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if built with './configure --enable-filter-aaaa'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Filters out AAAA answers to clients connecting
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 via IPv4. (This is NOT recommended for general
517950ae99fa271b034a5cfec1c9fbb62696f975Mark Andrews use.) [RT #20339]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2731. [func] Additional work on change 2709. The key parser
dfd7798d8b870abf03795d8095297a4b982ab6e9Mark Andrews will now ignore unrecognized fields when the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 minor version number of the private key format
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 has been increased. It will reject any key with
19ff7edc1a6388085193f5487e1599f45aa62648Mark Andrews the major version number increased. [RT #20310]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2730. [func] Have dnssec-keygen display a progress indication
8a0ff6c15cb20c903f9e16a3d5c2cab603478bc3Mark Andrews a la 'openssl genrsa' on standard error. Note
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when the first '.' is followed by a long stop
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson one has the choice between slow generation vs.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 poor random quality, i.e., '-r /dev/urandom'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2729. [func] When constructing a CNAME from a DNAME use the DNAME
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 TTL. [RT #20451]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-signzone now warn immediately if asked to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 write into a nonexistent directory. [RT #20278]
a6dbd6b6604e27ae3c7190de20dbcaaa6e5a1fd8Andreas Gustafsson2727. [func] The 'key-directory' option can now specify a relative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 path. [RT #20154]
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley2726. [func] Added support for SHA-2 DNSSEC algorithms,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RSASHA256 and RSASHA512. [RT #20023]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2725. [doc] Added information about the file "managed-keys.bind"
383665e42ad838046472e847b16c4e0d3f1aaf76Bob Halley to the ARM. [RT #20235]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2724. [bug] Updates to a existing node in secure zone using NSEC
6b5a6fbe1cc0ceb7e2b516aaada596b79360a5b8Bob Halley were failing. [RT #20448]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson isc_base64_totext(), didn't always mark regions of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory as fully consumed after conversion. [RT #20445]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2722. [bug] Ensure that the memory associated with the name of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a node in a rbt tree is not altered during the life
ba6fd2580863759baedd9c47153602b19006a324Andreas Gustafsson of the node. [RT #20431]
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2721. [port] Have dst__entropy_status() prime the random number
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 generator. [RT #20369]
dd16d9d9e77c2d906ee5ffa3dd9f71cacfbcb081Brian Wellington2720. [bug] RFC 5011 trust anchor updates could trigger an
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 assert if the DNSKEY record was unsigned. [RT #20406]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2719. [func] Skip trusted/managed keys for unsupported algorithms.
850d70818503ca1b0f98c9c70b16b51e789fd705Andreas Gustafsson2718. [bug] The space calculations in opensslrsa_todns() were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 incorrect. [RT #20394]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2717. [bug] named failed to update the NSEC/NSEC3 record when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the last private type record was removed as a result
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence of completing the signing the zone with a key.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0b1 released ---
3c82f274bd880a33fdaf211af4fe8f6b3d6ca556David Lawrence2715. [bug] Require OpenSSL support to be explicitly disabled.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2713. [bug] powerpc: atomic operations missing asm("ics") /
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 __isync() calls.
5afc10d6d8278c9ab34b9f6c82ef7bb3bfefd0efAndreas Gustafsson2712. [func] New 'auto-dnssec' zone option allows zone signing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be fully automated in zones configured for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dynamic DNS. 'auto-dnssec allow;' permits a zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be signed by creating keys for it in the
3f01dde0bd24561fc3a6c2f7e259a58af4457a86Brian Wellington key-directory and using 'rndc sign <zone>'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'auto-dnssec maintain;' allows that too, plus it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 also keeps the zone's DNSSEC keys up to date
626b221f7113479a0709f0bb0a8193c0ab0dcf84Andreas Gustafsson according to their timing metadata. [RT #19943]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2711. [port] win32: Add the bin/pkcs11 tools into the full
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 build. [RT #20372]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone option cause a zone to be signed with only KSKs
febaa091847ab004f40500cc475a819f2c73fcddAndreas Gustafsson signing the DNSKEY RRset, not ZSKs. This reduces
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the size of a DNSKEY answer. [RT #20340]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2709. [func] Added some data fields, currently unused, to the
c379c1bddb2d84c9219ab6c394b33aa866b9f3bfAndreas Gustafsson private key file format, to allow implementation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of explicit key rollover in a future release
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 without impairing backward or forward compatibility.
5613bf7de9760875da9f5fbc6ffcd93e0af967ffMark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 update are now fully supported and no longer require
17442ccc2b2e9c3b3bfc337f0fdfad6186fbb123Mark Andrews defines to enable. We now no longer overload the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 NSEC3PARAM flag field, nor the NSEC OPT bit at the
61b0df9eb522f13aef13cc2704728e799cbc251aMichael Sawyer apex. Secure to insecure changes are controlled by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 by the named.conf option 'secure-to-insecure'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Warning: If you had previously enabled support by
369bb68c2c7709c7fd8b0d6c1d1f8abc6422a7e2Michael Sawyer adding defines at compile time to BIND 9.6 you should
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ensure that all changes that are in progress have
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 completed prior to upgrading to BIND 9.7. BIND 9.7
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is not backwards compatible.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2707. [func] dnssec-keyfromlabel no longer require engine name
4ec1a96d90784f70380bdec66f8a0bd6718a5b71Mark Andrews to be specified in the label if there is a default
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 engine or the -E option has been used. Also, it
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 now uses default algorithms as dnssec-keygen does
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2706. [bug] Loading a zone with a very large NSEC3 salt could
0fc89c4ee660e825ac66774f2d4912cfc396386aMark Andrews trigger an assert. [RT #20368]
e21d199dca95aff5d50f133d6b064309e209af00Brian Wellington2705. [placeholder]
c03298d879554fc5dc197c28fd4b686e0d880ee3Mark Andrews2704. [bug] Serial of dynamic and stub zones could be inconsistent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with their SOA serial. [RT #19387]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2703. [func] Introduce an OpenSSL "engine" argument with -E
04c22ceaf2d3812eaab69d79958d0e0d62048cd2Mark Andrews for all binaries which can take benefit of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 crypto hardware. [RT #20230]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
6ef15459b8fd3fc8b5672da4ad72c19a755dbe45Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 supported TSIG key algorithm. [RT #18046]
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2700. [doc] The match-mapped-addresses option is discouraged.
b65f2ab14abb4b6ef906d7d02064fba158f07b1eDavid Lawrence2699. [bug] Missing lock in rbtdb.c. [RT #20037]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2698. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 S_IFREG are defined after including <isc/stat.h>.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2696. [bug] named failed to successfully process some valid
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 acl constructs. [RT #20308]
389c749a5ee18f1c0d6278ae49f2aae5d5f0d2dcMark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DHCP. Modify the api to isc_sockfdwatch_t (the
051706a29a73416fbae116952dd6b6bdda765538Mark Andrews callback function for isc_socket_fdwatchcreate)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to include information about the direction (read
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or write) and add isc_socket_fdwatchpoke.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2693. [port] Add some noreturn attributes. [RT #20257]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2692. [port] win32: 32/64 bit cleanups. [RT #20335]
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 chain when re-signing a previously-signed zone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Use -u to modify NSEC3 parameters or switch
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 between NSEC and NSEC3. [RT #20304]
37d1c8ee546ae89720c3e17e57ee3a05e9cdc7b9Brian Wellington2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
28b7844ee93231da831ba3c090e1677bb1be5f18Andreas Gustafsson2689. [bug] Correctly handle snprintf result. [RT #20306]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to decide to fetch the destination address. [RT #20305]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
78db9e8f4b686fde6dfa0ec85a68c06cc9d4bf28Brian Wellington Also, added warnings when revoking a ZSK, as this is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not defined by protocol (but is legal). [RT #19943]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2686. [bug] dnssec-signzone should clean the old NSEC chain when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing with NSEC3 and vice versa. [RT #20301]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
f90fe7c8b9a3eef8968fac74905e868c8ab583a3Brian Wellington2684. [cleanup] dig: formalize +ad and +cd as synonyms for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 +adflag and +cdflag. [RT #19305]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
190fbe9738bd0c1b9b13732bb8bd56b2b7c71640David Lawrence the NSEC3 parameters used to sign the zone change.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2682. [bug] "configure --enable-symtable=all" failed to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 build. [RT #20282]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley decoded. [RT #20269]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley2679. [func] dig -k can now accept TSIG keys in named.conf
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 format. [RT #20031]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2678. [func] Treat DS queries as if "minimal-response yes;"
c40085afa75a5eae732ec1198384dd5cb24400b6Bob Halley was set. [RT #20258]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2677. [func] Changes to key metadata behavior:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - Keys without "publish" or "active" dates set will
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 no longer be used for smart signing. However,
10258f6b3d1ce54ffb22e6b9a31f8f001f7ee2d5Mark Andrews those dates will be set to "now" by default when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a key is created; to generate a key but not use
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it yet, use dnssec-keygen -G.
b38ebe307cb2411535c79afd441870a99cc50eddMark Andrews - New "inactive" date (dnssec-keygen/settime -I)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 sets the time when a key is no longer used for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing but is still published.
c2e0aac879097f81bcd31e3d09660a71e70c5fb0Michael Sawyer - The "unpublished" date (-U) is deprecated in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 favor of "deleted" (-D).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2676. [bug] --with-export-installdir should have been
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --with-export-includedir. [RT #20252]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2675. [bug] dnssec-signzone could crash if the key directory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 did not exist. [RT #20232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0a3 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2674. [bug] "dnssec-lookaside auto;" crashed if named was built
6850cdd4497424c9d42ade487edfde9fb9a47de9Brian Wellington without openssl. [RT #20231]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2673. [bug] The managed-keys.bind zone file could fail to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 load due to a spurious result from sync_keyzone()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2672. [bug] Don't enable searching in 'host' when doing reverse
6c87cf19970a9eef43c1e38227cd23b3a2f6151aMark Andrews lookups. [RT #20218]
7869b99dc815e3b863351b8095d1b71b3f583541Brian Wellington2671. [bug] Add support for PKCS#11 providers not returning
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the public exponent in RSA private keys
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews (OpenCryptoki for instance) in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-keyfromlabel. [RT #19294]
df1e829dde71ab960545453e4ae439ae601d5a9eMark Andrews2670. [bug] Unexpected connect failures failed to log enough
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 information to be useful. [RT #20205]
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2669. [func] Update PKCS#11 support to support Keyper HSM.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Update PKCS#11 patch to be against openssl-0.9.8i.
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer2668. [func] Several improvements to dnssec-* tools, including:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - dnssec-keygen and dnssec-settime can now set key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 metadata fields 0 (to unset a value, use "none")
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer - dnssec-revoke sets the revocation date in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 addition to the revoke bit
fb04db11ee6aad3ac3e023ab89b5f9d8a4d5674dMichael Sawyer - dnssec-settime can now print individual metadata
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fields instead of always printing all of them,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and can print them in unix epoch time format for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 use by scripts
e65fe7af00935a0a81d4b0b0ed51c7f6c89f5c3bAndreas Gustafsson2667. [func] Add support for logging stack backtrace on assertion
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure (not available for all platforms). [RT #19780]
4bb3a1a63d7943564f30bf9efd312283141439a2Andreas Gustafsson2666. [func] Added an 'options' argument to dns_name_fromstring()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (API change from 9.7.0a2). [RT #20196]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2665. [func] Clarify syntax for managed-keys {} statement, add
e2b52099918681498136fc82df192d256cc3cdd3Brian Wellington ARM documentation about RFC 5011 support. [RT #19874]
389ec663f262cc219e986d6600eec9707ef2cb24Brian Wellington2664. [bug] create_keydata() and minimal_update() in zone.c
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 didn't properly check return values for some
e549eb1242b69ee050440e7205a5633cb56199b3Mark Andrews functions. [RT #19956]
88cef4408ab6b4c48702ed1b3ae27e20f485d864Mark Andrews2663. [func] win32: allow named to run as a service using
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "NT AUTHORITY\LocalService" as the account. [RT #19977]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 returned a misleading error code when lwresd was
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson down. [RT #20028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
693ddf84daa745a0ea8ca311a8154dfa03eabc43Andreas Gustafsson creating lwres context. [RT #20029]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2660. [func] Add a new set of DNS libraries for non-BIND9
ff7e6f2791cc5ad7c5f401a184b88343fde5ec3cAndreas Gustafsson applications. See README.libdns. [RT #19369]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2659. [doc] Clarify dnssec-keygen doc: key name must match zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 name for DNSSEC keys. [RT #19938]
2bebe117bf96d7e24df4d703d6488d61a5179bcaMark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key file paths correctly. [RT #20078]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2657. [cleanup] Lower "journal file <path> does not exist, creating it"
3f123dcc2fe5d2cd08ca91b732741d86a4036906Brian Wellington log level to debug 1. [RT #20058]
16ea60d0dbbaf1206f4800cb16744ef568fd7be8Michael Sawyer2656. [func] win32: add a "tools only" check box to the installer
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 which causes it to only install dig, host, nslookup,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nsupdate and relevant DLLs. [RT #19998]
85b23709431b1a84924fe2844f5cf657d1689eefMichael Sawyer2655. [doc] Document that key-directory does not affect
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 bind.keys, rndc.key or session.key. [RT #20155]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2654. [bug] Improve error reporting on duplicated names for
d15f51c600ed29b2dc379c433fb226c3a13ac0bbAndreas Gustafsson deny-answer-xxx. [RT #20164]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2653. [bug] Treat ENGINE_load_private_key() failures as key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not found rather than out of memory. [RT #18033]
aa2c453d3c6e416b56b29247bedd9a0af2721e93Mark Andrews2652. [func] Provide more detail about what record is being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 deleted. [RT #20061]
e412ae947df6de858883564b8676a9650df70d9aMark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 64-bit systems. [RT #20076]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews2650. [bug] Assertion failure in dnssec-signzone when trying
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to read keyset-* files. [RT #20075]
07a926724c0a91d85b85a94441938d0094e88cffMark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
90023730de34721b8cd8f3b5d059a28b7a65cf04Andreas Gustafsson2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2647. [bug] Remove unnecessary SOA updates when a new KSK is
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson added. [RT #19913]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 which default to 64 bits. [RT #19927]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0a2 released ---
337ca1838428c52bca3c72288342ce3dee550a04Andreas Gustafsson2644. [bug] Change #2628 caused a regression on some systems;
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named was unable to write the PID file and would
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fail on startup. [RT #20001]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2643. [bug] Stub zones interacted badly with NSEC3 support.
6b0ce7d29fac9df84ed34aa2d4634e754aec750dAndreas Gustafsson2642. [bug] nsupdate could dump core on solaris when reading
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 improperly formatted key files. [RT #20015]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2641. [bug] Fixed an error in parsing update-policy syntax,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 added a regression test to check it. [RT #20007]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2640. [security] A specially crafted update packet will cause named
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to exit. [RT #20000]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2638. [bug] Install arpaname. [RT #19957]
46a7e707fee6d7ba6ca6dae200ff6e0230f4d2f1Brian Wellington2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2636. [func] Simplify zone signing and key maintenance with the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-* tools. Major changes:
a7c76f1924d5fc914c579fd3b0276ffbddd2f65aMark Andrews - all dnssec-* tools now take a -K option to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specify a directory in which key files will be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - DNSSEC can now store metadata indicating when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 they are scheduled to be published, activated,
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews revoked or removed; these values can be set by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-keygen or overwritten by the new
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-settime command
c50a002bd1e36d13e95d74b43ed4a2b5d6fdcec3Mark Andrews - dnssec-signzone -S (for "smart") option reads key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 metadata and uses it to determine automatically
07a46d6dca37ef96b6e9c1fc0c2789983d91819cAndreas Gustafsson which keys to publish to the zone, use for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 signing, revoke, or remove from the zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2634. [port] win32: Add support for libxml2, enable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 statschannel. [RT #19773]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2633. [bug] Handle 15 bit rand() functions. [RT #19783]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2632. [func] util/kit.sh: warn if documentation appears to be out of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 date. [RT #19922]
98b8d49c0c0bbace27966eed5811bc81255ce297Brian Wellington2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2630. [func] Improved syntax for DDNS autoconfiguration: use
3291587f23b940c986f41cf37b2e531f618ec2bdMichael Sawyer "update-policy local;" to switch on local DDNS in a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zone. (The "ddns-autoconf" option has been removed.)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2629. [port] Check for seteuid()/setegid(), use setresuid()/
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 setresgid() if not present. [RT #19932]
b374727d513049b4bfcb9eb021002595fe6a7c63Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at startup with reduced capabilities in operation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2627. [bug] Named aborted if the same key was included in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trusted-keys more than once. [RT #19918]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2626. [bug] Multiple trusted-keys could trigger an assertion
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure. [RT #19914]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
8e732de92e9814e3fa54e36d2154939ea6086b16Andreas Gustafsson2624. [func] 'named-checkconf -p' will print out the parsed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 configuration. [RT #18871]
afd2f40b3cff8c3c307155bdc27e5b60e9115545Andreas Gustafsson2623. [bug] Named started searches for DS non-optimally. [RT #19915]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2621. [doc] Made copyright boilerplate consistent. [RT #19833]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2620. [bug] Delay thawing the zone until the reload of it has
3302ed8d6eaef8f598338f5682477c5f6acd583cBob Halley completed successfully. [RT #19750]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2619. [func] Add support for RFC 5011, automatic trust anchor
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 maintenance. The new "managed-keys" statement can
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be used in place of "trusted-keys" for zones which
d03bffc40e68ddb63d278946fd9f7f1ad784f5bcMichael Sawyer support this protocol. (Note: this syntax is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 expected to change prior to 9.7.0 final.) [RT #19248]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2618. [bug] The sdb and sdlz db_interator_seek() methods could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 loop infinitely. [RT #19847]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2617. [bug] ifconfig.sh failed to emit an error message when
83d2840b6f1a5ec898e441be148ddd3211f11583Bob Halley run from the wrong location. [RT #19375]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2616. [bug] 'host' used the nameservers from resolv.conf even
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when a explicit nameserver was specified. [RT #19852]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2615. [bug] "__attribute__((unused))" was in the wrong place
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for ia64 gcc builds. [RT #19854]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2614. [port] win32: 'named -v' should automatically be executed
a405a53d536521e6c93f47485aacd7c1a1ffb29eAndreas Gustafsson in the foreground. [RT #19844]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2613. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.7.0a1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2612. [func] Add default values for the arguments to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-keygen. Without arguments, it will now
ba43c53451d5c38765f376eeede457178b36951aBob Halley generate a 1024-bit RSASHA1 zone-signing key,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 or with the -f KSK option, a 2048-bit RSASHA1
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key-signing key. [RT #19300]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2611. [func] Add -l option to dnssec-dsfromkey to generate
056141f2878d1046306ef0ba035263a00de57f98Mark Andrews DLV records instead of DS records. [RT #19300]
5126112bc3639b9dae5726c3148d6699d277e789Mark Andrews2610. [port] sunos: Change #2363 was not complete. [RT #19796]
4440f995911810aaa98d8985ac1a8192095879f2Michael Graff2609. [func] Simplify the configuration of dynamic zones:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - add ddns-confgen command to generate
72c815ed1780b9039b9ad0d31faf68b3b5c05637Andreas Gustafsson configuration text for named.conf
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - add zone option "ddns-autoconf yes;", which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causes named to generate a TSIG session key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and allow updates to the zone using that key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 - add '-l' (localhost) option to nsupdate, which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causes nsupdate to connect to a locally-running
b7e031d5173476224027407d8e23eaa7557fc396Andreas Gustafsson named process using the session key generated
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2608. [func] Perform post signing verification checks in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dnssec-signzone. These can be disabled with -P.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 The post sign verification test ensures that for each
7ec4367f3d578170a9495ff3c851b248c1656f08Andreas Gustafsson algorithm in use there is at least one non revoked
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 self signed KSK key. That all revoked KSK keys are
2c9c7c5bb5975a18925c30aeb33a26094902f1c1Andreas Gustafsson self signed. That all records in the zone are signed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 by the algorithm. [RT #19653]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2607. [bug] named could incorrectly delete NSEC3 records for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 empty nodes when processing a update request.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2606. [bug] "delegation-only" was not being accepted in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 delegation-only type zones. [RT #19717]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2605. [bug] Accept DS responses from delegation only zones.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2604. [func] Add support for DNS rebinding attack prevention through
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 new options, deny-answer-addresses and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 deny-answer-aliases. Based on contributed code from
abaec24086f0cc3d7c0994ca9d2247b40eb6aaedBrian Wellington JD Nurmi, Google. [RT #18192]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2603. [port] win32: handle .exe extension of named-checkzone and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named-comilezone argv[0] names under windows.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2602. [port] win32: fix debugging command line build of libisccfg.
32b2cdf212de957e3f9b0efca59f098ed4fb42deBrian Wellington2601. [doc] Mention file creation mode mask in the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named manual page.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2600. [doc] ARM: miscellaneous reformatting for different
b42a7e9d80e293a5104d9de6ddabd29676918aa5Andreas Gustafsson page widths. [RT #19574]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2599. [bug] Address rapid memory growth when validation fails.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2598. [func] Reserve the -F flag. [RT #19657]
4b809ba3464c9fb6bb08e9153b9286a8f8a37b01Brian Wellington2597. [bug] Handle a validation failure with a insecure delegation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from a NSEC3 signed master/slave zone. [RT #19464]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 long, leading to inefficient memory usage or rejecting
1fc26319b5d69d19a7a31c8d0ab1afc2beef0c41Andreas Gustafsson newer cache entries in the worst case. [RT #19563]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
7da0286b540515c82ea83163d6cba59a64fa3eddMichael Graff2594. [func] Have rndc warn if using its default configuration
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 file when the key file also exists. [RT #19424]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2591. [bug] named could die when processing a update in
8529c3cdc6abdf3514cb0127313a976bbc3b3936Andreas Gustafsson removed_orphaned_ds(). [RT #19507]
87ecd67dae468cf5c9bae213c6fa321449b2ebc2Andreas Gustafsson2590. [func] Report zone/class of "update with no effect".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
1b32bc7da1da9059abd68d6dd15b23e8a442afa3Brian Wellington2588. [bug] SO_REUSEADDR could be set unconditionally after failure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of bind(2) call. This should be rare and mostly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 harmless, but may cause interference with other
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 processes that happen to use the same port. [RT #19642]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2587. [func] Improve logging by reporting serial numbers for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when zone serial has gone backwards or unchanged.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
a69cebac84ec223b908e056678fa7c1181785b20Andreas Gustafsson or SDB. [RT #19577]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2585. [bug] Uninitialized socket name could be referenced via a
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson statistics channel, triggering an assertion failure in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 XML rendering. [RT #19427]
e5d0f6d61e2349e1512c40922305b28c69cb4d3fBrian Wellington2584. [bug] alpha: gcc optimization could break atomic operations.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2583. [port] netbsd: provide a control to not add the compile
a38f86ea5bb9f924b5912d8444862000a1323082Andreas Gustafsson date to the version string, -DNO_VERSION_DATE.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2582. [bug] Don't emit warning log message when we attempt to
7d8d82cee0910a0252e1c37bace732e996789772Andreas Gustafsson remove non-existent journal. [RT #19516]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Requires MySQL 5.0.19 or later. [RT #19084]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2580. [bug] UpdateRej statistics counter could be incremented twice
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for one rejection. [RT #19476]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2579. [bug] DNSSEC lookaside validation failed to handle unknown
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 algorithms. [RT #19479]
9139e153da3ffa88457d3e035e2f0132c63a4a71Andreas Gustafsson2578. [bug] Changed default sig-signing-type to 65534, because
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 65535 turns out to be reserved. [RT #19477]
30e6ea9dedbe0738f9729833b1b59042dbebc4dfBrian Wellington2577. [doc] Clarified some statistics counters. [RT #19454]
1aae88078f409b39c24e2313ffdd767ed29ac787Brian Wellington2576. [bug] NSEC record were not being correctly signed when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a zone transitions from insecure to secure.
17a28c1f02c5093b207a3b64201aa9e71df78ebaAndreas Gustafsson Handle such incorrectly signed zones. [RT #19114]
b5232b135db580a2c16666e74a82f11130e0731fAndreas Gustafsson2575. [func] New functions dns_name_fromstring() and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_name_tostring(), to simplify conversion
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of a string to a dns_name structure and vice
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 versa. [RT #19451]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2574. [doc] Document nsupdate -g and -o. [RT #19351]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2573. [bug] Replacing a non-CNAME record with a CNAME record in a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 single transaction in a signed zone failed. [RT #19397]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2572. [func] Simplify DLV configuration, with a new option
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "dnssec-lookaside auto;" This is the equivalent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of "dnssec-lookaside . trust-anchor dlv.isc.org;"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 plus setting a trusted-key for dlv.isc.org.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: The trusted key is hard-coded into named,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 but is also stored in (and can be overridden
735fb4ffa6a76413f85101d7d625a4776d6ee6cdAndreas Gustafsson by) $sysconfdir/bind.keys. As the ISC DLV key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rolls over it can be kept up to date by replacing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the bind.keys file with a key downloaded from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2571. [func] Add a new tool "arpaname" which translates IP addresses
a3365e361f0066609d250005e2b1082cb2ba35fdAndreas Gustafsson to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
e32394a2ac3466a2235f79ee32c247a11be42a8dAndreas Gustafsson2570. [func] Log the destination address the query was sent to.
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
031f9084fc1ca8b258c151f428677e7226556ad0Mark Andrews "make install" will put them in $sbindir. [RT #19301]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2568. [bug] Report when the write to indicate a otherwise
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 successful start fails. [RT #19360]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2567. [bug] dst__privstruct_writefile() could miss write errors.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 write_public_key() could miss write errors.
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews dnssec-dsfromkey could miss write errors.
44215b932d4f0ce5257d794cb6f76b9282455eb1Mark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 response arrives from a zone thought to be secure:
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson "insecurity proof failed" instead of "not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 insecure". [RT #19400]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2565. [func] Add support for HIP record. Includes new functions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dns_rdata_hip_first(), dns_rdata_hip_next()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and dns_rdata_hip_current(). [RT #19384]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2564. [bug] Only take EDNS fallback steps when processing timeouts.
6d3f954c572db02159deedd444373161fda47a88Brian Wellington2563. [bug] Dig could leak a socket causing it to wait forever
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to exit. [RT #19359]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2562. [doc] ARM: miscellaneous improvements, reorganization,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and some new content.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
eea2865feca4ea56facd2ef6e7226386a3604f65Andreas Gustafsson2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2559. [bug] dnssec-dsfromkey could compute bad DS records when
886b96ebfd555cfeaf37ae46fc08421a41c61392Andreas Gustafsson reading from a K* files. [RT #19357]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2558. [func] Set the ownership of missing directories created
674f1cfb1d7dfa92e52db950dbe80e60ef8f5cddBrian Wellington for pid-file if -u has been specified on the command
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 line. [RT #19328]
da76a8046e01e1c1c2e6f75772afb2c4f202cc25Brian Wellington2557. [cleanup] PCI compliance:
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 * new libisc log module file
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 * isc_dir_chroot() now also changes the working
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 directory to "/".
cd7ffa4c1286a48c10056632be3fb0b64c575c35Brian Wellington * additional INSISTs
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 * additional logging when files can't be removed.
0cff88818a96197995c3533f6cbfb1a0efc06db0Brian Wellington2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 error checks in the correct order resulting in the
5bba7216f3263dc49dd4db2ac64b6203a9e2b180Andreas Gustafsson wrong error code sometimes being returned. [RT #19249]
e06aebbe7b5b3128f99b16d6756a074b4de28d37Mark Andrews2555. [func] dig: when emitting a hex dump also display the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 corresponding characters. [RT #19258]
40b1b44ed65b9655a135fc867ed9f0374c247ad4Andreas Gustafsson2554. [bug] Validation of uppercase queries from NSEC3 zones could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 fail. [RT #19297]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2552. [bug] zero-no-soa-ttl-cache was not being honored.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2551. [bug] Potential Reference leak on return. [RT #19341]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
a4c55a3d0813e00e3d7846cc9736110c61d0a2baAndreas Gustafsson2549. [port] linux: define NR_OPEN if not currently defined.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2548. [bug] Install iterated_hash.h. [RT #19335]
91614f2bc498ef7eea22e449c91951f4598c8223Andreas Gustafsson2547. [bug] openssl_link.c:mem_realloc() could reference an
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 out-of-range area of the source buffer. New public
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 function isc_mem_reallocate() was introduced to address
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 this bug. [RT #19313]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2546. [func] Add --enable-openssl-hash configure flag to use
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 OpenSSL (in place of internal routine) for hash
385a9cb48a70b329e507c39d043fa9a44c659913James Brister functions (MD5, SHA[12] and HMAC). [RT #18815]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2545. [doc] ARM: Legal hostname checking (check-names) is
385a9cb48a70b329e507c39d043fa9a44c659913James Brister for SRV RDATA too. [RT #19304]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
48674819ebf9176b5d5582ae851e485c324c1159Michael Sawyer2542. [doc] Update the description of dig +adflag. [RT #19290]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2541. [bug] Conditionally update dispatch manager statistics.
9594482ba300a4d694162fa62ba636c7dd00d3b6Brian Wellington2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
47ddde42728034854444cf17e278cebaea06f666Michael Graff2539. [security] Update the interaction between recursion, allow-query,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-query-cache and allow-recursion. [RT #19198]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2538. [bug] cache/ADB memory could grow over max-cache-size,
edf8c55546efa9fb42da1c055ce02462a5c709c0David Lawrence especially with threads and smaller max-cache-size
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 values. [RT #19240]
c5944292e9ebee4a39fe939b9a16fe5596808556David Lawrence2537. [func] Added more statistics counters including those on socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 I/O events and query RTT histograms. [RT #18802]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2536. [cleanup] Silence some warnings when -Werror=format-security is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified. [RT #19083]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2534. [func] Check NAPTR records regular expressions and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 replacement strings to ensure they are syntactically
36e0c379080343a0272dc076b7d7795ded04ee1dBrian Wellington valid and consistent. [RT #18168]
529a6b5224d751504027293a766a4c8b81241869Brian Wellington2533. [doc] ARM: document @ (at-sign). [RT #17144]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2532. [bug] dig: check the question section of the response to
862a026a7d752fbc8b376df6f7a9080d7c778b49Brian Wellington see if it matches the asked question. [RT #18495]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2531. [bug] Change #2207 was incomplete. [RT #19098]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2530. [bug] named failed to reject insecure to secure transitions
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 via UPDATE. [RT #19101]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2529. [cleanup] Upgrade libtool to silence complaints from recent
c34bdef6bd197a04990e52469ad68481532dd35aAndreas Gustafsson version of autoconf. [RT #18657]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2528. [cleanup] Silence spurious configure warning about
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington --datarootdir [RT #19096]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2527. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2526. [func] New named option "attach-cache" that allows multiple
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 views to share a single cache to save memory and
6dc130c7c95107748fff5f767161c2bb742f9f87Brian Wellington improve lookup efficiency. Based on contributed code
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from Barclay Osborn, Google. [RT #18905]
49855f0856a0f6f9fed80af88faddf38f3e74eefAndreas Gustafsson2525. [func] New logging category "query-errors" to provide detailed
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 internal information about query failures, especially
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 about server failures. [RT #19027]
dc2c974dcf954a0a238d1afb886c445d06b1aa8bBrian Wellington2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2523. [bug] Random type rdata freed by dns_nsec_typepresent().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
080a4fe83c3ad208073bffbce1a2af8fe444214fMichael Sawyer2521. [bug] Improve epoll cross compilation support. [RT #19047]
36007b707f28f36864e8d76f11379b22e9737538Michael Sawyer2520. [bug] Update xml statistics version number to 2.0 as change
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 #2388 made the schema incompatible to the previous
9bef4575d71a084edf59ac681e53e35ae1b72166Andreas Gustafsson version. [RT #19080]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2519. [bug] dig/host with -4 or -6 didn't work if more than two
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nameserver addresses of the excluded address family
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 preceded in resolv.conf. [RT #19081]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2518. [func] Add support for the new CERT types from RFC 4398.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2517. [bug] dig +trace with -4 or -6 failed when it chose a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 nameserver address of the excluded address type.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2516. [bug] glue sort for responses was performed even when not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 needed. [RT #19039]
87f4c7933fd2962cca3b9b7e046327f3c6306b84Andreas Gustafsson2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence a nameserver of the excluded address family.
10e6498d6d7b2cfd8d822788d817fc9a3e0b0c3aDavid Lawrence2513. [bug] Fix windows cli build. [RT #19062]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2512. [func] Print a summary of the cached records which make up
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the negative response. [RT #18885]
dae5ce6ddb0a3c425865d3b6f0f13c4126eacc17Andreas Gustafsson2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
9a8fea7bc8fb79ff1d31f0a2ba3c9694041c6f3aAndreas Gustafsson2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2509. [bug] Specifying a fixed query source port was broken.
c49e3222b0912479015161e8b54a67a1abf9a0ffAndreas Gustafsson2508. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2507. [func] Log the recursion quota values when killing the
bf68c5151b5c4f7d6b2783584434e61045a88d7fAndreas Gustafsson oldest query or refusing to recurse due to quota.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2506. [port] solaris: Check at configure time if
178f73169a27ac031f58863ae12cdb33dc15f6c4Brian Wellington hack_shutup_pthreadonceinit is needed. [RT #19037]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2505. [port] Treat amd64 similarly to x86_64 when determining
9c4cba349f52bb8176c3858b2b5b340f13603802Brian Wellington atomic operation support. [RT #19031]
64024eaa4d029b0bd090c435b8b02b45eef5cd89Andreas Gustafsson2504. [bug] Address race condition in the socket code. [RT #18899]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2503. [port] linux: improve compatibility with Linux Standard
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Base. [RT #18793]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2502. [cleanup] isc_radix: Improve compliance with coding style,
8d51d9e67e1e5dcf10203c4147ece519c7daa57dMark Andrews document function in <isc/radix.h>. [RT #18534]
30576c592b538cab293cf6e1f6265d376cd5a12cAndreas Gustafsson2501. [func] $GENERATE now supports all rdata types. Multi-field
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rdata types need to be quoted. See the ARM for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 details. [RT #18368]
ce2be9b7211ab5bacaa10fe74ef35def3a3f6089David Lawrence2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 function. [RT #18582]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
f4d9f465cd29963a99554bbe2936509ea3568c89James Brister --- 9.6.0rc1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2498. [bug] Removed a bogus function argument used with
adade77942b069127a7094df419b3ad39dafb385James Brister ISC_SOCKET_USE_POLLWATCH: it could cause compiler
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 warning or crash named with the debug 1 level
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of logging. [RT #18917]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2496. [bug] Add sanity length checks to NSID option. [RT #18813]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2495. [bug] Tighten RRSIG checks. [RT #18795]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 installed. [RT #18826]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2493. [bug] The linux capabilities code was not correctly cleaning
7d7bd1b4f0270691f434d37b1052259a13185663Andreas Gustafsson up after itself. [RT #18767]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2492. [func] Rndc status now reports the number of cpus discovered
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and the number of worker threads when running
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 multi-threaded. [RT #18273]
81f11a70588c6929d1aefd529b940efb70747fc2Andreas Gustafsson2491. [func] Attempt to re-use a local port if we are already using
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the port. [RT #18548]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is cleared when IPV6_V6ONLY is set. [RT #18785]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2489. [port] solaris: Workaround Solaris's kernel bug about
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Define ISC_SOCKET_USE_POLLWATCH at build time to enable
5096958739769958dd7a6b69356bf41260033873David Lawrence this workaround. [RT #18870]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from keyset and .key files. [RT #18694]
84f4e4a656926a795f3bae40b2a6308bebb48b49David Lawrence2487. [bug] Give TCP connections longer to complete. [RT #18675]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2486. [func] The default locations for named.pid and lwresd.pid
89e57b472d87a37aa6c49a5544d1d1dfe9617f5dDavid Lawrence This allows the owner of the containing directory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be set, for "named -u" support, and allows there
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to be a permanent symbolic link in the path, for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "named -t" support. [RT #18306]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2485. [bug] Change update's the handling of obscured RRSIG
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 records. Not all orphaned DS records were being
d1e971ba027a8d320cc87a02a71158970bd03308Mark Andrews removed. [RT #18828]
475c936d4cd0fb83700eb3e022aaecc5626b9b4fJames Brister2484. [bug] It was possible to trigger a REQUIRE failure when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 adding NSEC3 proofs to the response in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 query_addwildcardproof(). [RT #18828]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2483. [port] win32: chroot() is not supported. [RT #18805]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2482. [port] libxml2: support versions 2.7.* in addition
4b7167e96abe79cdf194ac3865760a7139b70090Brian Wellington to 2.6.*. [RT #18806]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.6.0b1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
a4b496f2abd35b0f27761385c8679de1f5714b0dBrian Wellington collisions. [RT #18812]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2480. [bug] named could fail to emit all the required NSEC3
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister records. [RT #18812]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2478. [bug] 'addresses' could be used uninitialized in
952e9025b0ecd20e6c7f7852551e36bb9677f713James Brister configure_forward(). [RT #18800]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2477. [bug] dig: the global option to print the command line is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 +cmd not print_cmd. Update the output to reflect
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 this. [RT #17008]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2476. [doc] ARM: improve documentation for max-journal-size and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ixfr-from-differences. [RT #15909] [RT #18541]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2475. [bug] LRU cache cleanup under overmem condition could purge
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 particular entries more aggressively. [RT #17628]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2474. [bug] ACL structures could be allocated with insufficient
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 space, causing an array overrun. [RT #18765]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2473. [port] linux: raise the limit on open files to the possible
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 maximum value before spawning threads; 'files'
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified in named.conf doesn't seem to work with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 threads as expected. [RT #18784]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2472. [port] linux: check the number of available cpu's before
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 calling chroot as it depends on "/proc". [RT #16923]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2471. [bug] named-checkzone was not reporting missing mandatory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 glue when sibling checks were disabled. [RT #18768]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2470. [bug] Elements of the isc_radix_node_t could be incorrectly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 overwritten. [RT# 18719]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2469. [port] solaris: Work around Solaris's select() limitations.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2468. [bug] Resolver could try unreachable servers multiple times.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2465. [bug] Adb's handling of lame addresses was different
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for IPv4 and IPv6. [RT #18738]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2464. [port] linux: check that a capability is present before
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 trying to set it. [RT #18135]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 API and glibc hides parts of the IPv6 Advanced Socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 API as a result. This is stupid as it breaks how the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 two halves (Basic and Advanced) of the IPv6 Socket API
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 were designed to be used but we have to live with it.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 API. [RT #18388]
202991557a4b7e8d3df7725d84f0fcae90dbaee6David Lawrence2462. [doc] Document -m (enable memory usage debugging)
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 option for dig. [RT #18757]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2461. [port] sunos: Change #2363 was not complete. [RT #17513]
1c823819b73f17cbfd188d35962da196a48190fbAndreas Gustafsson --- 9.6.0a1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2458. [doc] ARM: update and correction for max-cache-size.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2457. [tuning] max-cache-size is reverted to 0, the previous
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 default. It should be safe because expired cache
428b78e56dc10ea220fadfed11242ceb1d51d0e3Andreas Gustafsson entries are also purged. [RT #18684]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 address, regardless of family. They now correctly
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 distinguish IPv4 from IPv6. [RT #18559]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2455. [bug] Stop metadata being transferred via axfr/ixfr.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2453. [bug] Remove NULL pointer dereference in dns_journal_print().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2452. [func] Improve bin/test/journalprint. [RT #18316]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2451. [port] solaris: handle runtime linking better. [RT #18356]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2450. [doc] Fix lwresd docbook problem for manual page.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2449. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2448. [func] Add NSEC3 support. [RT #15452]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2447. [cleanup] libbind has been split out as a separate product.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2446. [func] Add a new log message about build options on startup.
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence A new command-line option '-V' for named is also
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 provided to show this information. [RT# 18645]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2445. [doc] ARM out-of-date on empty reverse zones (list includes
f204bdd8e6703ff0ef1adf0a2c407202418a936dDavid Lawrence RFC1918 address, but these are not yet compiled in).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (clear DF) for UDP responses and requests.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2443. [bug] win32: UDP connect() would not generate an event,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and so connected UDP sockets would never clean up.
8b31f5630f6345f686449f8a84c33c0813283e42Andreas Gustafsson Fix this by doing an immediate WSAConnect() rather
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 than an io completion port type for UDP.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2442. [bug] A lock could be destroyed twice. [RT# 18626]
13c32cb589e571e9204dbb091e145809288c9c21David Lawrence2441. [bug] isc_radix_insert() could copy radix tree nodes
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 incompletely. [RT #18573]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2440. [bug] named-checkconf used an incorrect test to determine
822f118444dcaddaf977bc73e958b2f755e4ddfdAndreas Gustafsson if an ACL was set to none.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2438. [bug] Timeouts could be logged incorrectly under win32.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2437. [bug] Sockets could be closed too early, leading to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 inconsistent states in the socket module. [RT #18298]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2435. [bug] Fixed an ACL memory leak affecting win32.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2434. [bug] Fixed a minor error-reporting bug in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2433. [tuning] Set initial timeout to 800ms.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2432. [bug] More Windows socket handling improvements. Stop
a38e5f0695a8ddf0b3cbb70b5a172a5c6dce994bDavid Lawrence using I/O events and use IO Completion Ports
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 throughout. Rewrite the receive path logic to make
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 it easier to support multiple simultaneous
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 requesters in the future. Add stricter consistency
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 checking as a compile-time option (define
c244584cad2a71276e60919bf2c80c7d79dc073bDavid Lawrence ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2431. [bug] Acl processing could leak memory. [RT #18323]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2430. [bug] win32: isc_interval_set() could round down to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 zero if the input was less than NS_INTERVAL
abeb505bb6c1400dde1a40d0bff7b3a435666e1cMark Andrews nanoseconds. Round up instead. [RT #18549]
57b3597444bc8716459f0fb3022b2c12f4eee2aeAndreas Gustafsson2429. [doc] nsupdate should be in section 1 of the man pages.
99524919752c9b9abe1814007732b86592011cc1Brian Wellington2428. [bug] dns_iptable_merge() mishandled merges of negative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 tables. [RT #18409]
26c86a6fc85c89447d23d4a3e34b11157a2ff6f4Andreas Gustafsson2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was set. [RT #18528]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2426. [bug] libbind: inet_net_pton() can sometimes return the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 wrong value if excessively large net masks are
b3157263ee12a5792737f09b708d3fc65ca99e01Andreas Gustafsson supplied. [RT #18512]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2425. [bug] named didn't detect unavailable query source addresses
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at load time. [RT #18536]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2424. [port] configure now probes for a working epoll
b90d3f516fd62514ff0b06a6ee0311d7ab5fbbb4Brian Wellington implementation. Allow the use of kqueue,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 epoll and /dev/poll to be selected at compile
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 time. [RT #18277]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2423. [security] Randomize server selection on queries, so as to
7bb1e299e133de5d530aa4cb545f4130aabf5235Andreas Gustafsson make forgery a little more difficult. Instead of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 always preferring the server with the lowest RTT,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 pick a server with RTT within the same 128
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 millisecond band. [RT #18441]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2422. [bug] Handle the special return value of a empty node as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if it was a NXRRSET in the validator. [RT #18447]
34ea3c6fd940a8514b5ec609491f823263a735c7Michael Sawyer2421. [func] Add new command line option '-S' for named to specify
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the max number of sockets. [RT #18493]
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews Use caution: this option may not work for some
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 operating systems without rebuilding named.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2420. [bug] Windows socket handling cleanup. Let the io
3c671ac666de8a7dcd7bd02afa20968da0b85bbdMark Andrews completion event send out canceled read/write
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 done events, which keeps us from writing to memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 we no longer have ownership of. Add debugging
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 socket_log() function. Rework TCP socket handling
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to not leak sockets.
58c42ee18c186b2151ced62f64aa4ca23cff4a1dJames Brister2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 should not be used for isc_sockettype_fdwatch sockets.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
5dc6a24e8b6808f03e7a9bc6530d646ebba927dbMark Andrews2417. [bug] Connecting UDP sockets for outgoing queries could
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unexpectedly fail with an 'address already in use'
242dfd9cc6901a5e02dae94acdecdb91e78ea07cMark Andrews error. [RT #18411]
77771185071bf74d53378f1a3099a04d2af5153eBrian Wellington2416. [func] Log file descriptors that cause exceeding the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 internal maximum. [RT #18460]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2415. [bug] 'rndc dumpdb' could trigger various assertion failures
0d5d8e2bbf2c0c129f0416f24758a0925ce12be8James Brister in rbtdb.c. [RT #18455]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2414. [bug] A masterdump context held the database lock too long,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 causing various troubles such as dead lock and
99f3a24e69edbb19e4fe7f2fb0a72c478f8c3cafJames Brister recursive lock acquisition. [RT #18311, #18456]
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2412. [bug] win32: address a resource leak. [RT #18374]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 at compilation time. [RT #18433]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: with changes #2469 and #2421 above, there is no
aa79283a0d97d5d77d3c17bcb1756035eabe647aAndreas Gustafsson need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2410. [bug] Correctly delete m_versionInfo. [RT #18432]
b5f24a6988e04710bee0281b03b7e168358ac868Andreas Gustafsson2409. [bug] Only log that we disabled EDNS processing if we were
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 subsequently successful. [RT #18029]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2408. [bug] A duplicate TCP dispatch event could be sent, which
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could then trigger an assertion failure in
379bd2c19cec393f56a2e9c42cc87fc8213a1b62James Brister resquery_response(). [RT #18275]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
c24265935e70d17279153b3cde43e3f6c3527577Andreas Gustafsson2406. [placeholder]
bedfa169b4cc5511b34c0c4a54c5b8aae364babeJames Brister2405. [cleanup] The default value for dnssec-validation was changed to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "yes" in 9.5.0-P1 and all subsequent releases; this
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was inadvertently omitted from CHANGES at the time.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2404. [port] hpux: files unlimited support.
d85552c450141012e7cbeaacc77fb9575b0bb4cbJames Brister2403. [bug] TSIG context leak. [RT #18341]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2402. [port] Support Solaris 2.11 and over. [RT #18362]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2401. [bug] Expect to get E[MN]FILE errno internal_accept()
adf82221858138f295bce732e86dcac34645692eJames Brister (from accept() or fcntl() system calls). [RT #18358]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2399. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2398. [bug] Improve file descriptor management. New,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 temporary, named.conf option reserved-sockets,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 default 512. [RT #18344]
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2397. [bug] gssapi_functions had too many elements. [RT #18355]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2396. [bug] Don't set SO_REUSEADDR for randomized ports.
71a4339351de0d8233d61025a667ec4dc3e0f868James Brister2395. [port] Avoid warning and no effect from "files unlimited"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 on Linux when running as root. [RT #18335]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2394. [bug] Default configuration options set the limit for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 open files to 'unlimited' as described in the
a6733246eafeb43755ce6d7ec3627ac4209cbccbMark Andrews documentation. [RT #18331]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2393. [bug] nested acls containing keys could trigger an
36bcb04af27e050ddc04b2ff37dbeafc84538fd4Brian Wellington assertion in acl.c. [RT #18166]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2392. [bug] remove 'grep -q' from acl test script, some platforms
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 don't support it. [RT #18253]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2391. [port] hpux: cover additional recvmsg() error codes.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2390. [bug] dispatch.c could make a false warning on 'odd socket'.
9c11326b18c69b9b2fd6102d80fbd568ae6bd31eAndreas Gustafsson2389. [bug] Move the "working directory writable" check to after
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the ns_os_changeuser() call. [RT #18326]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2388. [bug] Avoid using tables for layout purposes in
c78dc8b001ba46ef1edb784635c3ba7b3e4456ceJames Brister statistics XSL [RT #18159].
40f53fa8d9c6a4fc38c0014495e7a42b08f52481David Lawrence2387. [bug] Silence compiler warnings in lib/isc/radix.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 [RT #18147] [RT #18258]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2386. [func] Add warning about too small 'open files' limit.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2385. [bug] A condition variable in socket.c could leak in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rare error handling [RT #17968].
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2384. [security] Fully randomize UDP query ports to improve
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 forgery resilience. [RT #17949, #18098]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2383. [bug] named could double queries when they resulted in
69b691c9624f31e59b8d128ada902a82127c15a3James Brister SERVFAIL due to overkilling EDNS0 failure detection.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2381. [port] dlz/mysql: support multiple install layouts for
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister mysql. <prefix>/include/{,mysql/}mysql.h and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 <prefix>/lib/{,mysql/}. [RT #18152]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
98c2f9a11185b8a5dd601798990612beb6d1578eJames Brister proofs which, in turn, caused validation failures
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for insecure zones immediately below a secure zone
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the server was authoritative for. [RT #18112]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 TLDs and supported RRs with TTLs [RT #17972]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2376. [bug] Change #2144 was not complete.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2375. [placeholder]
174a4f7b80af7f7a33cd9a098c13af23e5ec2a28David Lawrence2374. [bug] "blackhole" ACLs could cause named to segfault due
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to some uninitialized memory. [RT #18095]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2373. [bug] Default values of zone ACLs were re-parsed each time a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 new zone was configured, causing an overconsumption
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of memory. [RT #18092]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2371. [doc] Add +nsid option to dig man page. [RT #18039]
0640343258a99230c62e39dfbbe1505e3a970ee8Andreas Gustafsson2370. [bug] "rndc freeze" could trigger an assertion in named
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when called on a nonexistent zone. [RT #18050]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2369. [bug] libbind: Array bounds overrun on read in bitncmp().
d98c74e2ec5b96bd22aa4ed6d893e8993787493bMichael Graff2368. [port] Linux: use libcap for capability management if
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 possible. [RT# 18026]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2367. [bug] Improve counting of dns_resstatscounter_retry
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2366. [bug] Adb shutdown race. [RT #18021]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2365. [bug] Fix a bug that caused dns_acl_isany() to return
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 spurious results. [RT #18000]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2364. [bug] named could trigger a assertion when serving a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 malformed signed zone. [RT #17828]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2362. [cleanup] Make "rrset-order fixed" a compile-time option.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 settable by "./configure --enable-fixed-rrset".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Disabled by default. [RT #17977]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2361. [bug] "recursion" statistics counter could be counted
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 multiple times for a single query. [RT #17990]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2360. [bug] Fix a condition where we release a database version
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 (which may acquire a lock) while holding the lock.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2359. [bug] Fix NSID bug. [RT #17942]
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson2358. [doc] Update host's default query description. [RT #17934]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2357. [port] Don't use OpenSSL's engine support in versions before
b3aaa872e12e5c8658271bde8e4dd85d015e823fAndreas Gustafsson OpenSSL 0.9.7f. [RT #17922]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2356. [bug] Built in mutex profiler was not scalable enough.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2355. [func] Extend the number statistics counters available.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2354. [bug] Failed to initialize some rdatasetheader_t elements.
a9bc95f22ef2dd4a12e79be99412c9f18b814a5dBrian Wellington2353. [func] Add support for Name Server ID (RFC 5001).
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'dig +nsid' requests NSID from server.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'request-nsid yes;' causes recursive server to send
3c8e458ed2118828b13f35ca6fcc409da66c2869David Lawrence NSID requests to upstream servers. Server responds
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to NSID requests with the string configured by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 'server-id' option. [RT #17091]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2352. [bug] Various GSS_API fixups. [RT #17729]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2350. [port] win32: IPv6 support. [RT #17797]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2349. [func] Provide incremental re-signing support for secure
19d1b1667d073850d4366352aaf8319efc5debeeBrian Wellington dynamic zones. [RT #1091]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
20b20b23948b90cb2f7d7f402da99d09f837efd0David Lawrence Documentation is in the new README.pkcs11 file.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 New tool, dnssec-keyfromlabel, which takes the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 label of a key pair in a HSM and constructs a DNS
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 key pair for use by named and dnssec-signzone.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2347. [bug] Delete now traverses the RB tree in the canonical
a89b06a49cc61cdce2ce0ea0f62b514998fa16d9Andreas Gustafsson order. [RT #17451]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2346. [func] Memory statistics now cover all active memory contexts
7e9bfde7951c4e35bcbd0d3439790cc823a6794cAndreas Gustafsson in increased detail. [RT #17580]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2345. [bug] named-checkconf failed to detect when forwarders
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 were set at both the options/view level and in
4c9406964425ecc33fac38bb093e236b43b449e6Andreas Gustafsson a root zone. [RT #17671]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2344. [bug] Improve "logging{ file ...; };" documentation.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2343. [bug] (Seemingly) duplicate IPv6 entries could be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 created in ADB. [RT #17837]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2341. [bug] libbind: add missing -I../include for off source
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 tree builds. [RT #17606]
533131b93b69c4534b5f1f9138b59211670e6e6dMichael Graff2340. [port] openbsd: interface configuration. [RT #17700]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2339. [port] tru64: support for libbind. [RT #17589]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2338. [bug] check_ds() could be called with a non DS rdataset.
538971e27d45861c937331f52b0e96d3a5157d8eAndreas Gustafsson2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2336. [func] If "named -6" is specified then listen on all IPv6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 interfaces if there are not listen-on-v6 clauses in
8977ab7ca0ed63a39a8cd0b915ab9cb1254dcd3fJames Brister2335. [port] sunos: libbind and *printf() support for long long.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
dc97fe4ed08488d314ab5bc8e99ed839542cf411David Lawrence bug in fromstruct_txt(). [RT #17609]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2333. [bug] Fix off by one error in isc_time_nowplusinterval().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2332. [contrib] query-loc-0.4.0. [RT #17602]
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson2331. [bug] Failure to regenerate any signatures was not being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 reported nor being past back to the UPDATE client.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2330. [bug] Remove potential race condition when handling
95be83b467e2384d414693982318a5c06cccf1d7Andreas Gustafsson over memory events. [RT #17572]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 WARNING: API CHANGE: over memory callback
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 function now needs to call isc_mem_waterack().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 See <isc/mem.h> for details.
6fa1cb5754695d550a58c6e8978fda65f5146af7David Lawrence2329. [bug] Clearer help text for dig's '-x' and '-i' options.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2327. [bug] It was possible to dereference a NULL pointer in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rbtdb.c. Implement dead node processing in zones as
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 we do for caches. [RT #17312]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2326. [bug] It was possible to trigger a INSIST in the acache
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2325. [port] Linux: use capset() function if available. [RT #17557]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
59abb512d344bfa09012cc11b7d814966f035da4Mark Andrews2323. [port] tru64: namespace clash. [RT #17547]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2322. [port] MacOS: work around the limitation of setrlimit()
600cfa2ba4c50017581b6c14e3a688a82ecebbe0David Lawrence for RLIMIT_NOFILE. [RT #17526]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2321. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2320. [func] Make statistics counters thread-safe for platforms
a120694df8156f76eb629e4d686d3729362e3c90David Lawrence that support certain atomic operations. [RT #17466]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2319. [bug] Silence Coverity warnings in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2318. [port] sunos fixes for libbind. [RT #17514]
fcba8f29fedd5a29651579e22c96413b4f37cab9Brian Wellington2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
f6afa4ac95f3a6c86c61c0b122cd0dc6f957649bBrian Wellington2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2315. [bug] Used incorrect address family for mapped IPv4
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister addresses in acl.c. [RT #17519]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2314. [bug] Uninitialized memory use on error path in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2313. [cleanup] Silence Coverity warnings. Handle private stacks.
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister [RT #17447] [RT #17478]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2311. [bug] IPv6 addresses could match IPv4 ACL entries and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 vice versa. [RT #17462]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2310. [bug] dig, host, nslookup: flush stdout before emitting
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister debug/fatal messages. [RT #17501]
cde7793c7fb83adecf1a60bfc76cde6d1d7db0ebJames Brister2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2306. [bug] Remove potential race from lib/dns/resolver.c.
ec7493d8d1966a3dc5f5306fc0a96519e0de6dceAndreas Gustafsson2305. [security] inet_network() buffer overflow. CVE-2008-0122.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2304. [bug] Check returns from all dns_rdata_tostruct() calls.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2301. [bug] Remove resource leak and fix error messages in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2300. [bug] Fixed failure to close open file in
8adf1b9e749ca303ea8a8ffb29b5101ecbe2ecf6Mark Andrews2299. [bug] Remove unnecessary NULL check in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2298. [bug] isc_mutex_lock() failure not caught in
dcd66bf9667816cfc3419f2040e03f5621d88555Andreas Gustafsson2297. [bug] isc_entropy_createfilesource() failure not caught in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2296. [port] Allow docbook stylesheet location to be specified to
f4f3f2cf3499cf6c32f6329aca08b5c557f507f1Mark Andrews configure. [RT #17457]
ff8d15be4e6096329fe6ae8217d0adcabd08c94bOlafur Gudmundsson2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2294. [func] Allow the experimental statistics channels to have
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 multiple connections and ACL.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Note: the stats-server and stats-server-v6 options
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson available in the previous beta releases are replaced
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 with the generic statistics-channels statement.
996f4a8bc34cb0203ce6a40ff82bca8bf32423ccAndreas Gustafsson2293. [func] Add ACL regression test. [RT #17375]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2292. [bug] Log if the working directory is not writable.
6a13d6f3c687d463a2a88f696a5193a5651612baAndreas Gustafsson2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure to set PR_SET_DUMPABLE. [RT #17312]
47b26abe77184f9bedc68e36bdad03332cf67570David Lawrence2290. [bug] Let AD in the query signal that the client wants AD
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 set in the response. [RT #17301]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2289. [func] named-checkzone now reports the out-of-zone CNAME
17d0495c338ca6273cc1e1e3fd9354ab785a9ae9Mark Andrews found. [RT #17309]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2288. [port] win32: mark service as running when we have finished
4c5651ee049cbace08d5350e3d23a0d6da491fa8James Brister loading. [RT #17441]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2286. [func] Allow a TCP connection to be used as a weak
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 authentication method for reverse zones.
e06abf2270cc397e6a1ab8e25055e9c05f256beeJames Brister New update-policy methods tcp-self and 6to4-self.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2285. [func] Test framework for client memory context management.
c6ce77b4dccb15297f78de9e0c00d40f40ce8aa4Mark Andrews2284. [bug] Memory leak in UPDATE prerequisite processing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2283. [bug] TSIG keys were not attaching to the memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 context. TSIG keys should use the rings
5159c427839689d5070e2f9c6c9a0168dd9f6583Mark Andrews memory context rather than the clients memory
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 context. [RT #17377]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2281. [bug] Attempts to use undefined acls were not being logged.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2280. [func] Allow the experimental http server to be reached
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 over IPv6 as well as IPv4. [RT #17332]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to protect applications from receiving spurious
e2cf9c2db3fd484d160d3b7850f5e4d9c19945faJames Brister SIGPIPE signals when using the resolver.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2278. [bug] win32: handle the case where Windows returns no
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 search list or DNS suffix. [RT #17354]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2277. [bug] Empty zone names were not correctly being caught at
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in the post parse checks. [RT #17357]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2275. [func] Add support to dig to perform IXFR queries over UDP.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2274. [func] Log zone transfer statistics. [RT #17336]
36357e4304862fb47e9fae03c704cb6720310c45James Brister2273. [bug] Adjust log level to WARNING when saving inconsistent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 stub/slave master and journal files. [RT# 17279]
9bb05852fed91ff3913601b7ed8e43e711aa9094David Lawrence2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2271. [bug] Fix a memory leak in http server code [RT #17100]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2270. [bug] dns_db_closeversion() version->writer could be reset
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 before it is tested. [RT #17290]
b09983678f5d116d3c8387aaeab4f2dc4deb0454David Lawrence2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0b1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2267. [bug] Radix tree node_num value could be set incorrectly,
014892d86d30b7eceb0003d51788f9b5cadfc1bfAndreas Gustafsson causing positive ACL matches to look like negative
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ones. [RT #17311]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2266. [bug] client.c:get_clientmctx() returned the same mctx
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 once the pool of mctx's was filled. [RT #17218]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2265. [bug] Test that the memory context's basic_table is non NULL
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 before freeing. [RT #17265]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2264. [bug] Server prefix length was being ignored. [RT #17308]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2263. [bug] "named-checkconf -z" failed to set default value
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for "check-integrity". [RT #17306]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2262. [bug] Error status from all but the last view could be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 lost. [RT #17292]
54a2e7e8a21ee765f41bd995101995613bff9e8cDavid Lawrence2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2260. [bug] Reported wrong clients-per-query when increasing the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 value. [RT #17236]
027212247d59c05452abb7a8b253efe52d14459eDavid Lawrence2259. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a7 released ---
a2605214c27439a8af2ad4bd9a8630dcfcc8152eDavid Lawrence2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2257. [bug] win32: Use the full path to vcredist_x86.exe when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 calling it. [RT #17222]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2256. [bug] win32: Correctly register the installation location of
eefea43215016bce437ab4a7441b2851fd182960David Lawrence2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2254. [bug] timer.c:dispatch() failed to lock timer->lock
9c4f33b6718407e94d50dbfb4977e16d3f83de9dDavid Lawrence when reading timer->idle allowing it to see
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 intermediate values as timer->idle was reset by
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 isc_timer_touch(). [RT #17243]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2253. [func] "max-cache-size" defaults to 32M.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 "max-acache-size" defaults to 16M.
a0f6cda5fd9f2fcc4154bb63628f849b639a40caAndreas Gustafsson2252. [bug] Fixed errors in sortlist code [RT #17216]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2251. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2250. [func] New flag 'memstatistics' to state whether the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory statistics file should be written or not.
e3b3a046bf653d39cb5b92534a6a36fce1702d20Bob Halley Additionally named's -m option will cause the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 statistics file to be written. [RT #17113]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2249. [bug] Only set Authentic Data bit if client requested
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 DNSSEC, per RFC 3655 [RT #17175]
904463e94cafd59c8284f472ea8f58f1f311b8cbDavid Lawrence2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
bf6f755a74e24441e96a110b3c8d11cfe2ed0da7David Lawrence2247. [doc] Sort doc/misc/options. [RT #17067]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2246. [bug] Make the startup of test servers (ans.pl) more
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 robust. [RT #17147]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2245. [bug] Validating lack of DS records at trust anchors wasn't
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 working. [RT #17151]
56433595bb938c21fd3b07a0f7c565d942bb8780David Lawrence2244. [func] Allow the check of nameserver names against the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 SOA MNAME field to be disabled by specifying
fc9e755ba340607d76c7de897ee2d985d3b24505David Lawrence 'notify-to-soa yes;'. [RT #17073]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2243. [func] Configuration files without a newline at the end now
7896e45912df15d07eb99f885b9d9c15ad5f3f68David Lawrence parse without error. [RT #17120]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 library could require a source of random data.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
b8dd48ecf83142f6ee7238cbd68fec455e527fc8Mark Andrews a number of INSIST()s into plain fatal() errors
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 which report the triggering result code.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 The 'key' command wasn't disabling GSS-TSIG.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2238. [bug] It was possible to trigger a REQUIRE when a
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 validation was canceled. [RT #17106]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
61e9c1cdbe29683bb2db388e4fc6a6fd59315cefDavid Lawrence2236. [bug] dnssec-signzone failed to preserve the case of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of wildcard owner names. [RT #17085]
8b11f3debd9a9494d5aec60ea228ab393fbdc26eDavid Lawrence2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2233. [func] Add support for O(1) ACL processing, based on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 radix tree code originally written by Kevin
140d92622430165001bd91ba2e7d516992faeb2fMichael Sawyer Brintnall. [RT #16288]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2232. [bug] dns_adb_findaddrinfo() could fail and return
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ISC_R_SUCCESS. [RT #17137]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2230. [bug] We could INSIST reading a corrupted journal.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2229. [bug] Null pointer dereference on query pool creation
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 failure. [RT #17133]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2228. [contrib] contrib: Change 2188 was incomplete.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2227. [cleanup] Tidied up the FAQ. [RT #17121]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2226. [placeholder]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2225. [bug] More support for systems with no IPv4 addresses.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2224. [bug] Defer journal compaction if a xfrin is in progress.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2223. [bug] Make a new journal when compacting. [RT #17119]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2222. [func] named-checkconf now checks server key references.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2221. [bug] Set the event result code to reflect the actual
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 record turned to caller when a cache update is
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rejected due to a more credible answer existing.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2220. [bug] win32: Address a race condition in final shutdown of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 the Windows socket code. [RT #17028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2219. [bug] Apply zone consistency checks to additions, not
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 removals, when updating. [RT #17049]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2217. [func] Adjust update log levels. [RT #17092]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2216. [cleanup] Fix a number of errors reported by Coverity.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2214. [bug] Deregister OpenSSL lock callback when cleaning
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 up. Reorder OpenSSL cleanup so that RAND_cleanup()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is called before the locks are destroyed. [RT #17098]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2213. [bug] SIG0 diagnostic failure messages were looking at the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 wrong status code. [RT #17101]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2212. [func] 'host -m' now causes memory statistics and active
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory to be printed at exit. [RT 17028]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2211. [func] Update "dynamic update temporarily disabled" message.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2210. [bug] Deleting class specific records via UPDATE could
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence fail. [RT #17074]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2209. [port] osx: linking against user supplied static OpenSSL
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 libraries failed as the system ones were still being
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 found. [RT #17078]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2208. [port] win32: make sure both build methods produce the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 same output. [RT #17058]
33e927bf8622db6d3e5ecfd871f517db47fa722bDavid Lawrence2207. [port] Some implementations of getaddrinfo() fail to set
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 ai_canonname correctly. [RT #17061]
3e6b98586e823544344bcbbcad825d3d4485de59David Lawrence --- 9.5.0a6 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2206. [security] "allow-query-cache" and "allow-recursion" now
947bd6c648bd29bc226971324de1b30230a56a22David Lawrence cross inherit from each other.
878363c06b3d42f8fa4acca0c4aec9252b7844d9David Lawrence If allow-query-cache is not set in named.conf then
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-recursion is used if set, otherwise allow-query
cc5547dbcb04bdc498cf050c6104a1974f68c6eaAndreas Gustafsson is used if set, otherwise the default (localnets;
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 localhost;) is used.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 If allow-recursion is not set in named.conf then
c7f22f83aac9e61dafee191cad040e9c42652cc8David Lawrence allow-query-cache is used if set, otherwise allow-query
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 is used if set, otherwise the default (localnets;
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 localhost;) is used.
f6d6835ed5bb14f7d87cb9b736deadf9de2085ddAndreas Gustafsson2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2204. [bug] "rndc flushanme name unknown-view" caused named
d41c9885ecfb4be7382fd32a58ae4a9fb2056b81David Lawrence to crash. [RT #16984]
38feb01f1b0a3ac65897ae63c22c27c72e8cfda1David Lawrence2203. [security] Query id generation was cryptographically weak.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2202. [security] The default acls for allow-query-cache and
802aa6f2b70cc0b4e69ef0a1dcab0a8d68a0fdeaDavid Lawrence allow-recursion were not being applied. [RT #16960]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2201. [bug] The build failed in a separate object directory.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2200. [bug] The search for cached NSEC records was stopping to
32d7adf5ee52c5a86122ee3d9e35a894fc5ed0a6Bob Halley early leading to excessive DLV queries. [RT #16930]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2199. [bug] win32: don't call WSAStartup() while loading dlls.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2198. [bug] win32: RegCloseKey() could be called when
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 RegOpenKeyEx() failed. [RT #16911]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2197. [bug] Add INSIST to catch negative responses which are
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 not setting the event result code appropriately.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2196. [port] win32: yield processor while waiting for once to
cc43f2461d2b7da80105cf6d1b96bda4e93303cdDavid Lawrence to complete. [RT #16958]
58bc93c3ddbdf0b2fde9b7d2b4342f90d83ec633David Lawrence2195. [func] dnssec-keygen now defaults to nametype "ZONE"
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 when generating DNSKEYs. [RT #16954]
7ce81e15fa98db5b13fba06d54526e8679ac064cDavid Lawrence2194. [bug] Close journal before calling 'done' in xfrin.c.
8fedfa7b45989d3c1715e414637bc1a96331fd14David Lawrence --- 9.5.0a5 released ---
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence2193. [port] win32: BINDInstall.exe is now linked statically.
7da5c63dc0eaeec88aaf67b7aeee43ab0b0125baDavid Lawrence2192. [port] win32: use vcredist_x86.exe to install Visual
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Studio's redistributable dlls if building with
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Visual Stdio 2005 or later.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2191. [func] named-checkzone now allows dumping to stdout (-).
f3f88c6802df4cfee59439b19a1c49637b70342dDavid Lawrence named-checkconf now has -h for help.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named-checkzone now has -h for help.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 rndc now has -h for help.
77f372eed39827f5efef476602de7c0505f99b91David Lawrence Better handling of '-?' for usage summaries.
8b7304a34c751e519ede7d00b77f1f962c0a37e4David Lawrence2190. [func] Make fallback to plain DNS from EDNS due to timeouts
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 more visible. New logging category "edns-disabled".
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2189. [bug] Handle socket() returning EINTR. [RT #15949]
cabcfd3e90a647c7bab3c5cc3ef7b36f49830787David Lawrence2188. [contrib] queryperf: autoconf changes to make the search for
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 libresolv or libbind more robust. [RT #16299]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2187. [bug] query_addds(), query_addwildcardproof() and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 query_addnxrrsetnsec() should take a version
585529aaeb95a71cd3d95df2602a4688fc7c3292David Lawrence argument. [RT #16368]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2186. [port] cygwin: libbind: check for struct sockaddr_storage
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 independently of IPv6. [RT #16482]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2185. [port] sunos: libbind: check for ssize_t, memmove() and
e4e183af576855f4ccc9fc28084ffe095aaa5b55Andreas Gustafsson memchr(). [RT #16463]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2184. [bug] bind9.xsl.h didn't build out of the source tree.
195da2b26542b85d60308b2af35ea9966df9c3bbMichael Graff2183. [bug] dnssec-signzone didn't handle offline private keys
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 well. [RT #16832]
e9a9ae4fc627f24cb960a3008f2723ba9a55b274Brian Wellington2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 could return ISC_R_SUCCESS when they ran out of
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 memory. [RT #16365]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
d111a46c88adda33a93839f4934e127b6147d87dBob Halley2180. [cleanup] Remove bit test from 'compress_test' as they
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 are no longer needed. [RT #16497]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2179. [func] 'rndc command zone' will now find 'zone' if it is
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews unique to all the views. [RT #16821]
9e53cbca72767d0c91962b7a01650ea07d7398ddMark Andrews2178. [bug] 'rndc reload' of a slave or stub zone resulted in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a reference leak. [RT #16867]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2177. [bug] Array bounds overrun on read (rcodetext) at
3bb3b7ac462a90c2b8b1fb783324d800e2ba748cMichael Graff debug level 10+. [RT #16798]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2176. [contrib] dbus update to handle race condition during
b5fff54fe9335b20c02d749831fc0eaeda97198fBrian Wellington initialization (Bugzilla 235809). [RT #16842]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2175. [bug] win32: windows broadcast condition variable support
15a0ed30600ea88fe1227233155586f0c3c6cc34Bob Halley was broken. [RT #16592]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2174. [bug] I/O errors should always be fatal when reading
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 master files. [RT #16825]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2173. [port] win32: When compiling with MSVS 2005 SP1 we also
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a4 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2172. [bug] query_addsoa() was being called with a non zone db.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2171. [bug] Handle breaks in DNSSEC trust chains where the parent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 servers are not DS aware (DS queries to the parent
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 return a referral to the child).
b61bbad878d0ac563a093525aa826cdba0fd43bfMark Andrews2170. [func] Add acache processing to test suite. [RT #16711]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2169. [bug] host, nslookup: when reporting NXDOMAIN report the
4716e94840921878b26e493576f84afe4fe08752Mark Andrews given name and not the last name searched for.
622af581bd08a61d12c70f80b1d40d0d9c8a1fa3David Lawrence2168. [bug] nsupdate: in non-interactive mode treat syntax errors
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 as fatal errors. [RT #16785]
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley2167. [bug] When re-using a automatic zone named failed to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 attach it to the new view. [RT #16786]
0e9c5d24d25cb77a6935abf9247734b576626c9fBob Halley --- 9.5.0a3 released ---
3886e748a4086b813e3453232a742903762fedadBob Halley2166. [bug] When running in batch mode, dig could misinterpret
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 a server address as a name to be looked up, causing
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 unexpected output. [RT #16743]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2165. [func] Allow the destination address of a query to determine
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if we will answer the query or recurse.
b4b032ab5a3d0e96e7c752e232e3050e8806b8cbBob Halley allow-query-on, allow-recursion-on and
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 allow-query-cache-on. [RT #16291]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2164. [bug] The code to determine how named-checkzone /
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 named-compilezone was called failed under windows.
ce0004744d2c232581af53cbc6201f4ec4cf1f1cBrian Wellington2163. [bug] If only one of query-source and query-source-v6
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 specified a port the query pools code broke (change
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 2129). [RT #16768]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2162. [func] Allow "rrset-order fixed" to be disabled at compile
134ba0e08a0ae9a564a8d8628fc633377d3fc239Bob Halley time. [RT #16665]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2161. [bug] Fix which log messages are emitted for 'rndc flush'.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 from getifaddrs(). [RT #16708]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 --- 9.5.0a2 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2159. [bug] Array bounds overrun in acache processing. [RT #16710]
0f7045b0c437b158c61c195c319d2762882ece83Andreas Gustafsson2158. [bug] ns_client_isself() failed to initialize key
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 leading to a REQUIRE failure. [RT #16688]
7c0e50b5623a6ffc9e3986e129f8ca6bae9aabfaBrian Wellington2157. [func] dns_db_transfernode() created. [RT #16685]
a25310fd1dce652cdebba2b3dbc5d38cc3706745Andreas Gustafsson2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 resolver.c:validated() and resolver.c:cache_name().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Fix a memory leak in rbtdb.c:free_noqname().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 Make lookup.c:lookup_find() robust against
42712a426dd62518ca7c36982867e5622f7265e7Michael Graff event leaks. [RT #16685]
e6a6c0a5d6393d3a7f75b486f16e4ef15c4857bbDavid Lawrence2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
11a898e05092e8477fbfe1a245c1c5871a846638Andreas Gustafsson matched in acls by omitting the scope. [RT #16599]
5d4f11b265c396d71ec2162a632e620425481a9eDavid Lawrence2153. [bug] nsupdate could leak memory. [RT #16691]
b295930144c8782e84528dcd355153ae5a5d66e8David Lawrence2152. [cleanup] Use sizeof(buf) instead of fixed number in
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 dighost.c:get_trusted_key(). [RT #16678]
0bcb1d4d630f8d7547ee62870e1b059827cc1c8aDavid Lawrence2151. [bug] Missing newline in usage message for journalprint.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2150. [bug] 'rrset-order cyclic' uniformly distribute the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 starting point for the first response for a given
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister RRset. [RT #16655]
ce3be21d63d1e06b222ecb66b4eae909b4658d53James Brister2149. [bug] isc_mem_checkdestroyed() failed to abort on
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 if there were still active memory contexts.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2148. [func] Add positive logging for rndc commands. [RT #14623]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2147. [bug] libbind: remove potential buffer overflow from
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 SO_BSDCOMPAT" message. [RT #16641]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2145. [bug] Check DS/DLV digest lengths for known digests.
9e7c9ad159b581714c67148c3c698c12730d7ef7James Brister2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2143. [bug] We failed to restart the IPv6 client when the
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 kernel failed to return the destination the
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson packet was sent to. [RT #16613]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2142. [bug] Handle master files with a modification time that
bf062442eeef2fe404d728891b1317b01fbb7908Andreas Gustafsson matches the epoch. [RT# 16612]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
404e3e4738e97d5dff48fab1e76839e963cb16a6Brian Wellington equivalent of LDH checks). [RT #16609]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2140. [bug] libbind: missing unlock on pthread_key_create()
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley failures. [RT #16654]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2139. [bug] dns_view_find() was being called with wrong type
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 in adb.c. [RT #16670]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2138. [bug] Lock order reversal in resolver.c. [RT #16653]
7d1d130f4fe1b7485142c4f55a4ef3760b5fa30aBrian Wellington2137. [port] Mips little endian and/or mips 64 bit are now
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 supported for atomic operations. [RT#16648]
d9cc295339982d8d86075ab4285cc700d354e2eeBob Halley2136. [bug] nslookup/host looped if there was no search list
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and the host didn't exist. [RT #16657]
9ac79ef3f89b23d80f9649abf71fdc65bb7a8b62David Lawrence2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2134. [func] Additional statistics support. [RT #16666]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2133. [port] powerpc: Support both IBM and MacOS Power PC
be768c2e952c34438025999125f984995a2c675fBob Halley assembler syntaxes. [RT #16647]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2132. [bug] Missing unlock on out of memory in
da6affdf7dd677a636155e4a41f6de416a2d815bBob Halley dns_dispatchmgr_setudp().
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2130. [func] Log if CD or DO were set. [RT #16640]
be768c2e952c34438025999125f984995a2c675fBob Halley2129. [func] Provide a pool of UDP sockets for queries to be
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 made over. See use-queryport-pool, queryport-pool-ports
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 and queryport-pool-updateinterval. [RT #16415]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2126. [security] Serialize validation of type ANY responses. [RT #16555]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 was defined. [RT #16574]
dd6132005a5c48dea642c2ed0507bf472c8ee9bbJames Brister2124. [security] It was possible to dereference a freed fetch
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 context. [RT #16584]
d6d18435cd47a57f43af2eab835d0f6b7a76f2bdAndreas Gustafsson --- 9.5.0a1 released ---
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2123. [func] Use Doxygen to generate internal documentation.
3f46e84f9ff264cac8c07c2136a507827afb2760James Brister2122. [func] Experimental http server and statistics support
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 for named via xml.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley second timeout. [RT #16553]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2120. [doc] Fix markup on nsupdate man page. [RT #16556]
fdb12d38d325efba64581bdee7fac188466fff55Bob Halley2119. [compat] libbind: allow res_init() to succeed enough to
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 return the default domain even if it was unable
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 to allocate memory.
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2118. [bug] Handle response with long chains of domain name
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 compression pointers which point to other compression
43a5758df763a04d907a8b406e89a96f5c207a9cBrian Wellington pointers. [RT #16427]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
c73aafe6016ed1a7a6972681148cedf6a48a21bcBrian Wellington which could lead to validation failures. named didn't
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 handle negative DS responses that were in the process
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 of being validated. Check CNAME bit before accepting
99b80297d416ebb722b2515023c51b3aacdc1fb9Bob Halley NODATA proof. To be able to ignore a child NSEC there
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 must be SOA (and NS) set in the bitmap. [RT #16399]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2116. [bug] 'rndc reload' could cause the cache to continually
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉 be cleaned. [RT #16401]
54f68aeb5cb37e48df51dc5224917beaeda040cfTatuya JINMEI 神明達哉2115. [bug] 'rndc reconfig' could trigger a INSIST if the
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence number of masters for a zone was reduced. [RT #16444]
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence2114. [bug] dig/host/nslookup: searches for names with multiple
9151d6e15cb9c639a3dca083d7f6e9094f6b89caDavid Lawrence labels were failing. [RT #16447]
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which