CHANGES revision 000a8970f840a0c27c5cc404826853c4674362ac
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3011. [func] Change the default query timeout from 30 seconds
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to 10. Allow setting this in named.conf using the new
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 'resolver-query-timeout' option, which specifies a max
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync time in seconds. 0 means 'default' and anything longer
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync than 30 will be silently set to 30. [RT #22852]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for refreshing managed-keys. [RT #22296]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3009. [bug] clients-per-query code didn't work as expected with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync particular query patterns. [RT #22972]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.8.0b1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3008. [func] Response policy zones (RPZ) support. [RT #21726]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3007. [bug] Named failed to preserve the case of domain names in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync rdata which is not compressible when writing master
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync files. [RT #22863]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3006. [func] Allow dynamically generated TSIG keys to be preserved
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync across restarts of named. Initially this is for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync TSIG keys generated using GSSAPI. [RT #22639]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3005. [port] Solaris: Work around the lack of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync gsskrb5_register_acceptor_identity() by setting
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the KRB5_KTNAME environment variable to the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync contents of tkey-gssapi-keytab. Also fixed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync test errors on MacOSX. [RT #22853]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3004. [func] DNS64 reverse support. [RT #22769]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3003. [experimental] Added update-policy match type "external",
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync enabling named to defer the decision of whether to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync allow a dynamic update to an external daemon.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (Contributed by Andrew Tridgell.) [RT #22758]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22766]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3001. [func] Added a default trust anchor for the root zone, which
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync can be switched on by setting "dnssec-validation auto;"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in the named.conf options. [RT #21727]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync3000. [bug] More TKEY/GSS fixes:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - nsupdate can now get the default realm from
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the user's Kerberos principal
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - corrected gsstest compilation flags
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - improved documentation
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - fixed some NULL dereferences
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22795]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2999. [func] Add GOST support (RFC 5933). [RT #20639]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to the task api. [RT #22776]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2997. [func] named -V now reports the OpenSSL and libxml2 verions
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync it was compiled against. [RT #22687]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2996. [security] Temporarily disable SO_ACCEPTFILTER support.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22589]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2995. [bug] The Kerberos realm was not being correctly extracted
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync from the signer's identity. [RT #22770]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync do not use threads on earlier versions. Also kill
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the unproven-pthreads, mit-pthreads, and ptl2 support.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2993. [func] Dynamically grow adb hash tables. [RT #21186]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for looking at a secure delegation. [RT #22059]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dynamic zones. [RT #22365]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2990. [bug] 'dnssec-settime -S' no longer tests prepublication
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync interval validity when the interval is set to 0.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22761]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2989. [func] Added support for writable DLZ zones. (Contributed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync by Andrew Tridgell of the Samba project.) [RT #22629]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of external DLZ drivers that can be loaded as
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync shared objects at runtime rather than linked with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named. Currently this is switched on via a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync compile-time option, "configure --with-dlz-dlopen".
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Note: the syntax for configuring DLZ zones
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync is likely to be refined in future releases.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (Contributed by Andrew Tridgell of the Samba
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync project.) [RT #22629]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2987. [func] Improve ease of configuring TKEY/GSS updates by
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync adding a "tkey-gssapi-keytab" option. If set,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync updates will be allowed with any key matching
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a principal in the specified keytab file.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "tkey-gssapi-credential" is no longer required
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and is expected to be deprecated. (Contributed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync by Andrew Tridgell of the Samba project.)
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22629]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2986. [func] Add new zone type "static-stub". It's like a stub
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zone, but the nameserver names and/or their IP
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync addresses are statically configured. [RT #21474]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2985. [bug] Add a regression test for change #2896. [RT #21324]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2984. [bug] Don't run MX checks when the target of the MX record
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync is ".". [RT #22645]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.8.0a1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2982. [bug] Reference count dst keys. dst_key_attach() can be used
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync increment the reference count.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Note: dns_tsigkey_createfromkey() callers should now
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync always call dst_key_free() rather than setting it
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to NULL on success. [RT #22672]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2980. [bug] named didn't properly handle UPDATES that changed the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync TTL of the NSEC3PARAM RRset. [RT #22363]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2979. [bug] named could deadlock during shutdown if two
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "rndc stop" commands were issued at the same
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync time. [RT #22108]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2978. [port] hpux: look for <devpoll.h> [RT #21919]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2977. [bug] 'nsupdate -l' report if the session key is missing.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21670]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2976. [bug] named could die on exit after negotiating a GSS-TSIG
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync key. [RT #22573]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() aquired the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync wrong lock which could lead to server deadlock.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22614]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2974. [bug] Some valid UPDATE requests could fail due to a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync consistency check examining the existing version
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of the zone rather than the new version resulting
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync from the UPDATE. [RT #22413]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2973. [bug] bind.keys.h was being removed by the "make clean"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync at the end of configure resulting in build failures
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync where there is very old version of perl installed.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Move it to "make maintainer-clean". [RT #22230]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2972. [bug] win32: address windows socket errors. [RT #21906]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2971. [bug] Fixed a bug that caused journal files not to be
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync compacted on Windows systems as a result of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync non-POSIX-compliant rename() semantics. [RT #22434]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2970. [security] Adding a NO DATA negative cache entry failed to clear
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync any matching RRSIG records. A subsequent lookup of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of NO DATA cache entry could trigger a INSIST when the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync unexpected RRSIG was also returned with the NO DATA
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync cache entry.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync CVE-2010-3613, VU#706148. [RT #22288]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2969. [security] Fix acl type processing so that allow-query works
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in options and view statements. Also add a new
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync set of tests to verify proper functioning.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync CVE-2010-3615, VU#510208. [RT #22418]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2968. [security] Named could fail to prove a data set was insecure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync before marking it as insecure. One set of conditions
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync that can trigger this occurs naturally when rolling
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync DNSKEY algorithms.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync CVE-2010-3614, VU#837744. [RT #22309]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2967. [bug] 'host -D' now turns on debugging messages earlier.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22361]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2966. [bug] isc_print_vsnprintf() failed to check if there was
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync space available in the buffer when adding a left
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync justified character with a non zero width,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (e.g. "%-1c"). [RT #22270]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2965. [func] Test HMAC functions using test data from RFC 2104 and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync RFC 4634. [RT #21702]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2964. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2963. [security] The allow-query acl was being applied instead of the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync allow-query-cache acl to cache lookups. [RT #22114]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2962. [port] win32: add more dependencies to BINDBuild.dsw.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22062]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2961. [bug] Be still more selective about the non-authoritative
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync answers we apply change 2748 to. [RT #22074]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2960. [func] Check that named accepts non-authoritative answers.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21594]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2959. [func] Check that named starts with a missing masterfile.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22076]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2958. [bug] named failed to start with a missing master file.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #22076]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2957. [bug] entropy_get() and entropy_getpseudo() failed to match
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the API for RAND_bytes() and RAND_pseudo_bytes()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync respectively. [RT #21962]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2955. [func] Provide more detail in the recursing log. [RT #22043]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync build_sqldbinstance failure. [RT #21623]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2953. [bug] Silence spurious "expected covering NSEC3, got an
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync exact match" message when returning a wildcard
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync no data response. [RT #21744]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2952. [port] win32: named-checkzone and named-checkconf failed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to initialise winsock. [RT #21932]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2951. [bug] named failed to generate a correct signed response
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in a optout, delegation only zone with no secure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync delegations. [RT #22007]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2950. [bug] named failed to perform a SOA up to date check when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync falling back to TCP on UDP timeouts when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ixfr-from-differences was set. [RT #21595]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2949. [bug] dns_view_setnewzones() contained a memory leak if
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync it was called multiple times. [RT #21942]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2948. [port] MacOS: provide a mechanism to configure the test
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync interfaces at reboot. See bin/tests/system/README
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for details.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2947. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2946. [doc] Document the default values for the minimum and maximum
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zone refresh and retry values in the ARM. [RT #21886]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2945. [doc] Update empty-zones list in ARM. [RT #21772]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2944. [maint] Remove ORCHID prefix from built in empty zones.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21772]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2943. [func] Add support to load new keys into managed zones
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync without signing immediately with "rndc loadkeys".
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Add support to link keys with "dnssec-keygen -S"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and "dnssec-settime -S". [RT #21351]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2942. [contrib] zone2sqlite failed to setup the entropy sources.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21610]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2941. [bug] sdb and sdlz (dlz's zone database) failed to support
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync DNAME at the zone apex. [RT #21610]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2940. [port] Remove connection aborted error message on
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Windows. [RT #21549]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2939. [func] Check that named successfully skips NSEC3 records
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync that fail to match the NSEC3PARAM record currently
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in use. [RT# 21868]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2938. [bug] When generating signed responses, from a signed zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync that uses NSEC3, named would use a uninitialised
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync pointer if it needed to skip a NSEC3 record because
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync it didn't match the selected NSEC3PARAM record for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zone. [RT# 21868]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2937. [bug] Worked around an apparent race condition in over
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync memory conditions. Without this fix a DNS cache DB or
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ADB could incorrectly stay in an over memory state,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync effectively refusing further caching, which
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync subsequently made a BIND 9 caching server unworkable.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync This fix prevents this problem from happening by
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync polling the state of the memory context, rather than
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync making a copy of the state, which appeared to cause
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a race. This is a "workaround" in that it doesn't
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync solve the possible race per se, but several experiments
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync proved this change solves the symptom. Also, the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync polling overhead hasn't been reported to be an issue.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync This bug should only affect a caching server that
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync specifies a finite max-cache-size. It's also quite
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync likely that the bug happens only when enabling threads,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync but it's not confirmed yet. [RT #21818]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2936. [func] Improved configuration syntax and multiple-view
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync support for addzone/delzone feature (see change
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync #2930). Removed "new-zone-file" option, replaced
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync with "allow-new-zones (yes|no)". The new-zone-file
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for each view is now created automatically, with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a filename generated from a hash of the view name.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync It is no longer necessary to "include" the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync new-zone-file in named.conf; this happens
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync automatically. Zones that were not added via
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "rndc addzone" can no longer be removed with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "rndc delzone". [RT #19447]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2935. [bug] nsupdate: improve 'file not found' error message.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21871]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21871]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2933. [bug] 'dig +nsid' used stack memory after it went out of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync scope. This could potentially result in a unknown,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync potentially malformed, EDNS option being sent instead
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of the desired NSID option. [RT #21781]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2932. [cleanup] Corrected a numbering error in the "dnssec" test.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21597]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2931. [bug] Temporarily and partially disable change 2864
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync because it would cause infinite attempts of RRSIG
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync queries. This is an urgent care fix; we'll
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync revisit the issue and complete the fix later.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21710]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2930. [experimental] New "rndc addzone" and "rndc delzone" commads
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync allow dynamic addition and deletion of zones.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync To enable this feature, specify a "new-zone-file"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync option at the view or options level in named.conf.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Zone configuration information for the new zones
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync will be written into that file. To make the new
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zones persist after a restart, "include" the file
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync into named.conf in the appropriate view. (Note:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync This feature is not yet documented, and its syntax
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync is expected to change.) [RT #19447]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2929. [bug] Improved handling of GSS security contexts:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - added LRU expiration for generated TSIGs
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - added the ability to use a non-default realm
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - added new "realm" keyword in nsupdate
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - limited lifetime of generated keys to 1 hour
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync or the lifetime of the context (whichever is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19737]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2928. [bug] Be more selective about the non-authoritative
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync answer we apply change 2748 to. [RT #21594]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2927. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2926. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2925. [bug] Named failed to accept uncachable negative responses
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync from insecure zones. [RT# 21555]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2924. [func] 'rndc secroots' dump a combined summary of the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync current managed keys combined with trusted keys.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20904]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2923. [bug] 'dig +trace' could drop core after "connection
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync timeout". [RT #21514]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2922. [contrib] Update zkt to version 1.0.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2921. [bug] The resolver could attempt to destroy a fetch context
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync too soon. [RT #19878]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to IPv4 clients. New acl 'filter-aaaa' (default any).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20840]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2917. [func] Virtual time test framework. [RT #20801]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2916. [func] Add framework to use IPv6 in tests.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2915. [cleanup] Be smarter about which objects we attempt to compile
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync based on configure options. [RT #21444]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2914. [bug] Make the "autosign" system test more portable.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20997]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2913. [func] Add pkcs#11 system tests. [RT #20784]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2912. [func] Windows clients don't like UPDATE responses that clear
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the zone section. [RT #20986]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2911. [bug] dnssec-signzone didn't handle out of zone records well.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21367]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2910. [func] Sanity check Kerberos credentials. [RT #20986]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2909. [bug] named-checkconf -p could die if "update-policy local;"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync was specified in named.conf. [RT #21416]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2908. [bug] It was possible for re-signing to stop after removing
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a DNSKEY. [RT #21384]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2907. [bug] The export version of libdns had undefined references.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21444]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2905. [port] aix: set use_atomic=yes with native compiler.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21402]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2904. [bug] When using DLV, sub-zones of the zones in the DLV,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync could be incorrectly marked as insecure instead of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync secure leading to negative proofs failing. This was
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a unintended outcome from change 2890. [RT# 21392]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2903. [bug] managed-keys-directory missing from namedconf.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21370]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2902. [func] Add regression test for change 2897. [RT #21040]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2900. [bug] The placeholder negative caching element was not
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync properly constructed triggering a INSIST in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dns_ncache_towire(). [RT #21346]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2899. [port] win32: Support linking against OpenSSL 1.0.0.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2898. [bug] nslookup leaked memory when -domain=value was
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync specified. [RT #21301]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2897. [bug] NSEC3 chains could be left behind when transitioning
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to insecure. [RT #21040]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2896. [bug] "rndc sign" failed to properly update the zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync when adding a DNSKEY for publication only. [RT #21045]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2895. [func] genrandom: add support for the generation of multiple
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync files. [RT #20917]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2893. [bug] Improve managed keys support. New named.conf option
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync managed-keys-directory. [RT #20924]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2892. [bug] Handle REVOKED keys better. [RT #20961]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2891. [maint] Update empty-zones list to match
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2890. [bug] Handle the introduction of new trusted-keys and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync DS, DLV RRsets better. [RT #21097]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2889. [bug] Elements of the grammar where not properly reported.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21046]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2888. [bug] Only the first EDNS option was displayed. [RT #21273]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2887. [bug] Report the keytag times in UTC in the .key file,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync local time is presented as a comment within the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync comment. [RT #21223]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2886. [bug] ctime() is not thread safe. [RT #21223]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2885. [bug] Improve -fno-strict-aliasing support probing in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync configure. [RT #21080]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2884. [bug] Insufficient validation in dns_name_getlabelsequence().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21283]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2883. [bug] 'dig +short' failed to handle really large datasets.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21113]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2882. [bug] Remove memory context from list of active contexts
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync before clearing 'magic'. [RT #21274]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2881. [bug] Reduce the amount of time the rbtdb write lock
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync is held when closing a version. [RT #21198]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync consistent. [RT #21078]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21106]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2878. [func] Incrementally write the master file after performing
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a AXFR. [RT #21010]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2877. [bug] The validator failed to skip obviously mismatching
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync RRSIGs. [RT #21138]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2876. [bug] Named could return SERVFAIL for negative responses
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync from unsigned zones. [RT #21131]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2875. [bug] dns_time64_fromtext() could accept non digits.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21033]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2874. [bug] Cache lack of EDNS support only after the server
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync successfully responds to the query using plain DNS.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20930]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2873. [bug] Cancelling a dynamic update via the dns/client module
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync could trigger an assertion failure. [RT #21133]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2872. [bug] Modify dns/client.c:dns_client_createx() to only
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync require one of IPv4 or IPv6 rather than both.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21122]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2871. [bug] Type mismatch in mem_api.c between the definition and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the header file, causing build failure with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --enable-exportlib. [RT #21138]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20877]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2868. [cleanup] Run "make clean" at the end of configure to ensure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync any changes made by configure are integrated.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Use --with-make-clean=no to disable. [RT #20994]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync don't like it. [RT #20986]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2866. [bug] Windows does not like the TSIG name being compressed.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20986]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2865. [bug] memset to zero event.data. [RT #20986]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21050]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #21056]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2862. [bug] nsupdate didn't default to the parent zone when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync updating DS records. [RT #20896]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2861. [doc] dnssec-settime man pages didn't correctly document the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync inactivation time. [RT #21039]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2860. [bug] named-checkconf's usage was out of date. [RT #21039]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2859. [bug] When cancelling validation it was possible to leak
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync memory. [RT #20800]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2858. [bug] RTT estimates were not being adjusted on ICMP errors.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20772]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2857. [bug] named-checkconf did not fail on a bad trusted key.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20705]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2856. [bug] The size of a memory allocation was not always properly
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync recorded. [RT #20927]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2855. [func] nsupdate will now preserve the entered case of domain
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync names in update requests it sends. [RT #20928]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2854. [func] dig: allow the final soa record in a axfr response to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync be suppressed, dig +onesoa. [RT #20929]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2851. [doc] nslookup.1, removed <informalexample> from the docbook
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync source as it produced bad nroff. [RT #21007]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2850. [bug] If isc_heap_insert() failed due to memory shortage
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the heap would have corrupted entries. [RT #20951]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2849. [bug] Don't treat errors from the xml2 library as fatal.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20945]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync README.rfc5011 into the ARM. [RT #20899]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2846. [bug] EOF on unix domain sockets was not being handled
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync correctly. [RT #20731]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2844. [doc] notify-delay default in ARM was wrong. It should have
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync been five (5) seconds.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync creating key files if there is a chance that the new
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync key ID will collide with an existing one after
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync either of the keys has been revoked. (To override
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync this in the case of dnssec-keyfromlabel, use the -y
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync option. dnssec-keygen will simply create a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync different, non-colliding key, so an override is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync not necessary.) [RT #20838]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2842. [func] Added "smartsign" and improved "autosign" and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "dnssec" regression tests. [RT #20865]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2841. [bug] Change 2836 was not complete. [RT #20883]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2840. [bug] Temporary fixed pkcs11-destroy usage check.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20760]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2839. [bug] A KSK revoked by named could not be deleted.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20881]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2838. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2837. [port] Prevent Linux spurious warnings about fwrite().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20812]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2836. [bug] Keys that were scheduled to become active could
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync be delayed. [RT #20874]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2835. [bug] Key inactivity dates were inadvertently stored in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the private key file with the outdated tag
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "Unpublish" rather than "Inactive". This has been
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync fixed; however, any existing keys that had Inactive
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dates set will now need to have them reset, using
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 'dnssec-settime -I'. [RT #20868]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2834. [bug] HMAC-SHA* keys that were longer than the algorithm
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync digest length were used incorrectly, leading to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync interoperability problems with other DNS
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync implementations. This has been corrected.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (Note: If an oversize key is in use, and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync compatibility is needed with an older release of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync BIND, the new tool "isc-hmac-fixup" can convert
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the key secret to a form that will work with all
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync versions.) [RT #20751]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20851]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to avoid redefinition in some OSs [RT 20831]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2831. [security] Do not attempt to validate or cache
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync out-of-bailiwick data returned with a secure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync answer; it must be re-fetched from its original
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync source and validated in that context. [RT #20819]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2830. [bug] Changing the OPTOUT setting could take multiple
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync passes. [RT #20813]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2829. [bug] Fixed potential node inconsistency in rbtdb.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20808]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2828. [security] Cached CNAME or DNAME RR could be returned to clients
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync without DNSSEC validation. [RT #20737]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync being released. [RT #20740]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync was in the process of being created was not properly
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync recorded in the zone. [RT #20786]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2824. [bug] "rndc sign" was not being run by the correct task.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20759]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2822. [bug] rbtdb.c:loadnode() could return the wrong result.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20802]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2821. [doc] Add note that named-checkconf doesn't automatically
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2820. [func] Handle read access failure of OpenSSL configuration
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync file more user friendly (PKCS#11 engine patch).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20668]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20771]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2818. [cleanup] rndc could return an incorrect error code
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync when a zone was not found. [RT #20767]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20768]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2816. [bug] previous_closest_nsec() could fail to return
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync data for NSEC3 nodes [RT #29730]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2815. [bug] Exclusively lock the task when freezing a zone.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19838]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2814. [func] Provide a definitive error message when a master
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zone is not loaded. [RT #20757]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2813. [bug] Better handling of unreadable DNSSEC key files.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20710]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2812. [bug] Make sure updates can't result in a zone with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync NSEC-only keys and NSEC3 records. [RT 20748]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync output. [RT #20733]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2810. [doc] Clarified the process of transitioning an NSEC3 zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to insecure. [RT #20746]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2809. [cleanup] Restored accidentally-deleted text in usage output
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in dnssec-settime and dnssec-revoke [RT #20739]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2808. [bug] Remove the attempt to install atomic.h from lib/isc.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync atomic.h is correctly installed by the architecture
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync specific subdirectories. [RT #20722]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2807. [bug] Fixed a possible ASSERT when reconfiguring zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync keys. [RT #20720]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.7.0rc1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync when it had changed. [RT #20703]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2805. [bug] Fixed namespace problems encountered when building
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync external programs using non-exported BIND9 libraries
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (i.e., built without --enable-exportlib). [RT #20679]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2804. [bug] Send notifies when a zone is signed with "rndc sign"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync or as a result of a scheduled key change. [RT #20700]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and genrandom under windows. [RT #20670]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2801. [func] Detect and report records that are different according
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to DNSSEC but are semantically equal according to plain
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync DNS. Apply plain DNS comparisons rather than DNSSEC
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync comparisons when processing UPDATE requests.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-signzone now removes such semantically duplicate
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync records prior to signing the RRset.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named-checkzone -r {ignore|warn|fail} (default warn)
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named-compilezone -r {ignore|warn|fail} (default warn)
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named.conf: check-dup-records {ignore|warn|fail};
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2800. [func] Reject zones which have NS records which refer to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync CNAMEs, DNAMEs or don't have address record (class IN
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync only). Reject UPDATEs which would cause the zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to fail the above checks if committed. [RT #20678]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2799. [cleanup] Changed the "secure-to-insecure" option to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "dnssec-secure-to-insecure", and "dnskey-ksk-only"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2798. [bug] Addressed bugs in managed-keys initialization
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and rollover. [RT #20683]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2797. [bug] Don't decrement the dispatch manager's maxbuffers.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20613]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2796. [bug] Missing dns_rdataset_disassociate() call in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dns_nsec3_delnsec3sx(). [RT #20681]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2795. [cleanup] Add text to differentiate "update with no effect"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync log messages. [RT #18889]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2794. [bug] Install <isc/namespace.h>. [RT #20677]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2793. [func] Add "autosign" and "metadata" tests to the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync automatic tests. [RT #19946]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2792. [func] "filter-aaaa-on-v4" can now be set in view
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync options (if compiled in). [RT #20635]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2791. [bug] The installation of isc-config.sh was broken.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20667]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2790. [bug] Handle DS queries to stub zones. [RT #20440]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2788. [bug] dnssec-signzone could sign with keys that were
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync not requested [RT #20625]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2787. [bug] Spurious log message when zone keys were
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dynamically reconfigured. [RT #20659]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2786. [bug] Additional could be promoted to answer. [RT #20663]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.7.0b3 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2785. [bug] Revoked keys could fail to self-sign [RT #20652]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2784. [bug] TC was not always being set when required glue was
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dropped. [RT #20655]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync buffer size of 512 or less. [RT #20654]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2782. [port] win32: use getaddrinfo() for hostname lookups.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20650]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2781. [bug] Inactive keys could be used for signing. [RT #20649]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2780. [bug] dnssec-keygen -A none didn't properly unset the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync activation date in all cases. [RT #20648]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2779. [bug] Dynamic key revocation could fail. [RT #20644]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2778. [bug] dnssec-signzone could fail when a key was revoked
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync without deleting the unrevoked version. [RT #20638]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2776. [bug] Change #2762 was not correct. [RT #20647]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in dnssec-keyfromlabel. [RT #20643]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2774. [bug] Existing cache DB wasn't being reused after
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync reconfiguration. [RT #20629]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2773. [bug] In autosigned zones, the SOA could be signed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync with the KSK. [RT #20628]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2772. [security] When validating, track whether pending data was from
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the additional section or not and only return it if
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync validates as secure. [RT #20438]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2771. [bug] dnssec-signzone: DNSKEY records could be
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync corrupted when importing from key files [RT #20624]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2770. [cleanup] Add log messages to resolver.c to indicate events
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync causing FORMERR responses. [RT #20526]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2769. [cleanup] Change #2742 was incomplete. [RT #19589]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2767. [bug] named could crash on startup if a zone was
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync configured with auto-dnssec and there was no
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync key-directory. [RT #20615]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2766. [bug] isc_socket_fdwatchpoke() should only update the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync socketmgr state if the socket is not pending on a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync read or write. [RT #20603]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2765. [bug] Skip masters for which the TSIG key cannot be found.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20595]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2762. [bug] DLV validation failed with a local slave DLV zone.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20577]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2761. [cleanup] Enable internal symbol table for backtrace only for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync systems that are known to work. Currently, BSD
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync variants, Linux and Solaris are supported. [RT# 20202]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2759. [doc] Add information about .jbk/.jnw files to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the ARM. [RT #20303]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2758. [bug] win32: Added a workaround for a windows 2008 bug
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync that could cause the UDP client handler to shut
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync down. [RT #19176]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2757. [bug] dig: assertion failure could occur in connect
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync timeout. [RT #20599]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2755. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2754. [bug] Secure-to-insecure transitions failed when zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync was signed with NSEC3. [RT #20587]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2753. [bug] Removed an unnecessary warning that could appear when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync building an NSEC chain. [RT #20589]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2752. [bug] Locking violation. [RT #20587]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2750. [bug] dig: assertion failure could occur when a server
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync didn't have an address. [RT #20579]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2749. [bug] ixfr-from-differences generated a non-minimal ixfr
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for NSEC3 signed zones. [RT #20452]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2748. [func] Identify bad answers from GTLD servers and treat them
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync as referrals. [RT #18884]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2747. [bug] Journal roll forwards failed to set the re-signing
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync time of RRSIGs correctly. [RT #20541]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2746. [port] hpux: address signed/unsigned expansion mismatch of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2745. [bug] configure script didn't probe the return type of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync gai_strerror(3) correctly. [RT #20573]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2744. [func] Log if a query was over TCP. [RT #19961]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for a insecure delegation.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.7.0b2 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2742. [cleanup] Clarify some DNSSEC-related log messages in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2741. [func] Allow the dnssec-keygen progress messages to be
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync suppressed (dnssec-keygen -q). Automatically
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync suppress the progress messages when stdin is not
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a tty. [RT #20474]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2740. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2739. [cleanup] Clean up API for initializing and clearing trust
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync anchors for a view. [RT #20211]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync test. [RT #20453]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2737. [func] UPDATE requests can leak existence information.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17261]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2736. [func] Improve the performance of NSEC signed zones with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync more than a normal amount of glue below a delegation.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20191]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2735. [bug] dnssec-signzone could fail to read keys
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync that were specified on the command line with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync full paths, but weren't in the current
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync directory. [RT #20421]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2734. [port] cygwin: arpaname did not compile. [RT #20473]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2732. [func] Add optional filter-aaaa-on-v4 option, available
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync if built with './configure --enable-filter-aaaa'.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Filters out AAAA answers to clients connecting
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync via IPv4. (This is NOT recommended for general
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync use.) [RT #20339]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2731. [func] Additional work on change 2709. The key parser
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync will now ignore unrecognized fields when the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync minor version number of the private key format
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync has been increased. It will reject any key with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the major version number increased. [RT #20310]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2730. [func] Have dnssec-keygen display a progress indication
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a la 'openssl genrsa' on standard error. Note
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync when the first '.' is followed by a long stop
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync one has the choice between slow generation vs.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20284]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2729. [func] When constructing a CNAME from a DNAME use the DNAME
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync TTL. [RT #20451]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-signzone now warn immediately if asked to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync write into a nonexistent directory. [RT #20278]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2727. [func] The 'key-directory' option can now specify a relative
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync path. [RT #20154]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2726. [func] Added support for SHA-2 DNSSEC algorithms,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync RSASHA256 and RSASHA512. [RT #20023]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2725. [doc] Added information about the file "managed-keys.bind"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to the ARM. [RT #20235]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2724. [bug] Updates to a existing node in secure zone using NSEC
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync were failing. [RT #20448]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync isc_base64_totext(), didn't always mark regions of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync memory as fully consumed after conversion. [RT #20445]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2722. [bug] Ensure that the memory associated with the name of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a node in a rbt tree is not altered during the life
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of the node. [RT #20431]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2721. [port] Have dst__entropy_status() prime the random number
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync generator. [RT #20369]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2720. [bug] RFC 5011 trust anchor updates could trigger an
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync assert if the DNSKEY record was unsigned. [RT #20406]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2719. [func] Skip trusted/managed keys for unsupported algorithms.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20392]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2718. [bug] The space calculations in opensslrsa_todns() were
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync incorrect. [RT #20394]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2717. [bug] named failed to update the NSEC/NSEC3 record when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the last private type record was removed as a result
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of completing the signing the zone with a key.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20399]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.7.0b1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2715. [bug] Require OpenSSL support to be explicitly disabled.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20288]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2713. [bug] powerpc: atomic operations missing asm("ics") /
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync __isync() calls.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2712. [func] New 'auto-dnssec' zone option allows zone signing
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to be fully automated in zones configured for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dynamic DNS. 'auto-dnssec allow;' permits a zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to be signed by creating keys for it in the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync key-directory and using 'rndc sign <zone>'.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 'auto-dnssec maintain;' allows that too, plus it
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync also keeps the zone's DNSSEC keys up to date
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync according to their timing metadata. [RT #19943]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2711. [port] win32: Add the bin/pkcs11 tools into the full
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync build. [RT #20372]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zone option cause a zone to be signed with only KSKs
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync signing the DNSKEY RRset, not ZSKs. This reduces
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the size of a DNSKEY answer. [RT #20340]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2709. [func] Added some data fields, currently unused, to the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync private key file format, to allow implementation
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of explicit key rollover in a future release
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync without impairing backward or forward compatibility.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20310]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2708. [func] Insecure to secure and NSEC3 parameter changes via
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync update are now fully supported and no longer require
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync defines to enable. We now no longer overload the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync NSEC3PARAM flag field, nor the NSEC OPT bit at the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync apex. Secure to insecure changes are controlled by
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync by the named.conf option 'secure-to-insecure'.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Warning: If you had previously enabled support by
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync adding defines at compile time to BIND 9.6 you should
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ensure that all changes that are in progress have
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync completed prior to upgrading to BIND 9.7. BIND 9.7
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync is not backwards compatible.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2707. [func] dnssec-keyfromlabel no longer require engine name
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to be specified in the label if there is a default
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync engine or the -E option has been used. Also, it
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync now uses default algorithms as dnssec-keygen does
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20371]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2706. [bug] Loading a zone with a very large NSEC3 salt could
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync trigger an assert. [RT #20368]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2705. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2704. [bug] Serial of dynamic and stub zones could be inconsistent
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync with their SOA serial. [RT #19387]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2703. [func] Introduce an OpenSSL "engine" argument with -E
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for all binaries which can take benefit of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync crypto hardware. [RT #20230]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2701. [doc] Correction to ARM: hmac-md5 is no longer the only
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync supported TSIG key algorithm. [RT #18046]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2700. [doc] The match-mapped-addresses option is discouraged.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #12252]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2699. [bug] Missing lock in rbtdb.c. [RT #20037]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2698. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync S_IFREG are defined after including <isc/stat.h>.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20309]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2696. [bug] named failed to successfully process some valid
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync acl constructs. [RT #20308]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2695. [func] DHCP/DDNS - update fdwatch code for use by
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync DHCP. Modify the api to isc_sockfdwatch_t (the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync callback funciton for isc_socket_fdwatchcreate)
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to include information about the direction (read
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync or write) and add isc_socket_fdwatchpoke.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20253]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19970]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2693. [port] Add some noreturn attributes. [RT #20257]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2692. [port] win32: 32/64 bit cleanups. [RT #20335]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync chain when re-signing a previously-signed zone.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Use -u to modify NSEC3 parameters or switch
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync between NSEC and NSEC3. [RT #20304]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20315]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2689. [bug] Correctly handle snprintf result. [RT #20306]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to decide to fetch the destination address. [RT #20305]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Also, added warnings when revoking a ZSK, as this is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync not defined by protocol (but is legal). [RT #19943]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2686. [bug] dnssec-signzone should clean the old NSEC chain when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync signing with NSEC3 and vice versa. [RT #20301]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2684. [cleanup] dig: formalize +ad and +cd as synonyms for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync +adflag and +cdflag. [RT #19305]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the NSEC3 parameters used to sign the zone change.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20246]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2682. [bug] "configure --enable-symtable=all" failed to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync build. [RT #20282]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync decoded. [RT #20269]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2679. [func] dig -k can now accept TSIG keys in named.conf
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync format. [RT #20031]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2678. [func] Treat DS queries as if "minimal-response yes;"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync was set. [RT #20258]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2677. [func] Changes to key metadata behavior:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - Keys without "publish" or "active" dates set will
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync no longer be used for smart signing. However,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync those dates will be set to "now" by default when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a key is created; to generate a key but not use
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync it yet, use dnssec-keygen -G.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - New "inactive" date (dnssec-keygen/settime -I)
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync sets the time when a key is no longer used for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync signing but is still published.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - The "unpublished" date (-U) is deprecated in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync favor of "deleted" (-D).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20247]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2676. [bug] --with-export-installdir should have been
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --with-export-includedir. [RT #20252]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2675. [bug] dnssec-signzone could crash if the key directory
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync did not exist. [RT #20232]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.7.0a3 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2674. [bug] "dnssec-lookaside auto;" crashed if named was built
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync without openssl. [RT #20231]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2673. [bug] The managed-keys.bind zone file could fail to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync load due to a spurious result from sync_keyzone()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #20045]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2672. [bug] Don't enable searching in 'host' when doing reverse
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync lookups. [RT #20218]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2671. [bug] Add support for PKCS#11 providers not returning
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the public exponent in RSA private keys
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (OpenCryptoki for instance) in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-keyfromlabel. [RT #19294]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2670. [bug] Unexpected connect failures failed to log enough
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync information to be useful. [RT #20205]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2669. [func] Update PKCS#11 support to support Keyper HSM.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Update PKCS#11 patch to be against openssl-0.9.8i.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2668. [func] Several improvements to dnssec-* tools, including:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - dnssec-keygen and dnssec-settime can now set key
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync metadata fields 0 (to unset a value, use "none")
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - dnssec-revoke sets the revocation date in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync addition to the revoke bit
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - dnssec-settime can now print individual metadata
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync fields instead of always printing all of them,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and can print them in unix epoch time format for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync use by scripts
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19942]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2667. [func] Add support for logging stack backtrace on assertion
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync failure (not available for all platforms). [RT #19780]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2666. [func] Added an 'options' argument to dns_name_fromstring()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (API change from 9.7.0a2). [RT #20196]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2665. [func] Clarify syntax for managed-keys {} statement, add
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ARM documentation about RFC 5011 support. [RT #19874]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2664. [bug] create_keydata() and minimal_update() in zone.c
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync didn't properly check return values for some
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync functions. [RT #19956]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2663. [func] win32: allow named to run as a service using
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "NT AUTHORITY\LocalService" as the account. [RT #19977]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync returned a misleading error code when lwresd was
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync down. [RT #20028]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync creating lwres context. [RT #20029]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2660. [func] Add a new set of DNS libraries for non-BIND9
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync applications. See README.libdns. [RT #19369]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2659. [doc] Clarify dnssec-keygen doc: key name must match zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync name for DNSSEC keys. [RT #19938]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2658. [bug] dnssec-settime and dnssec-revoke didn't process
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync key file paths correctly. [RT #20078]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2657. [cleanup] Lower "journal file <path> does not exist, creating it"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync log level to debug 1. [RT #20058]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2656. [func] win32: add a "tools only" check box to the installer
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync which causes it to only install dig, host, nslookup,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync nsupdate and relevant DLLs. [RT #19998]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2655. [doc] Document that key-directory does not affect
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2654. [bug] Improve error reporting on duplicated names for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync deny-answer-xxx. [RT #20164]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2653. [bug] Treat ENGINE_load_private_key() failures as key
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync not found rather than out of memory. [RT #18033]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2652. [func] Provide more detail about what record is being
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync deleted. [RT #20061]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2651. [bug] Dates could print incorrectly in K*.key files on
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 64-bit systems. [RT #20076]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2650. [bug] Assertion failure in dnssec-signzone when trying
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to read keyset-* files. [RT #20075]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2649. [bug] Set the domain for forward only zones. [RT #19944]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2647. [bug] Remove unnecessary SOA updates when a new KSK is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync added. [RT #19913]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync which default to 64 bits. [RT #19927]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.7.0a2 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2644. [bug] Change #2628 caused a regression on some systems;
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named was unable to write the PID file and would
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync fail on startup. [RT #20001]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2643. [bug] Stub zones interacted badly with NSEC3 support.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19777]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2642. [bug] nsupdate could dump core on solaris when reading
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync improperly formatted key files. [RT #20015]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2641. [bug] Fixed an error in parsing update-policy syntax,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync added a regression test to check it. [RT #20007]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2640. [security] A specially crafted update packet will cause named
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to exit. [RT #20000]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2638. [bug] Install arpaname. [RT #19957]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19959]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2636. [func] Simplify zone signing and key maintenance with the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-* tools. Major changes:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - all dnssec-* tools now take a -K option to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync specify a directory in which key files will be
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - DNSSEC can now store metadata indicating when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync they are scheduled to be published, activated,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync revoked or removed; these values can be set by
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-keygen or overwritten by the new
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-settime command
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - dnssec-signzone -S (for "smart") option reads key
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync metadata and uses it to determine automatically
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync which keys to publish to the zone, use for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync signing, revoke, or remove from the zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19816]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19716]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2634. [port] win32: Add support for libxml2, enable
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync statschannel. [RT #19773]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2633. [bug] Handle 15 bit rand() functions. [RT #19783]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2632. [func] util/kit.sh: warn if documentation appears to be out of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync date. [RT #19922]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19926 ]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2630. [func] Improved syntax for DDNS autoconfiguration: use
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "update-policy local;" to switch on local DDNS in a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zone. (The "ddns-autoconf" option has been removed.)
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19875]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2629. [port] Check for seteuid()/setegid(), use setresuid()/
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync setresgid() if not present. [RT #19932]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2628. [port] linux: Allow /var/run/named/named.pid to be opened
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync at startup with reduced capabilities in operation.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19884]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2627. [bug] Named aborted if the same key was included in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync trusted-keys more than once. [RT #19918]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2626. [bug] Multiple trusted-keys could trigger an assertion
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync failure. [RT #19914]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2624. [func] 'named-checkconf -p' will print out the parsed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync configuration. [RT #18871]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2621. [doc] Made copyright boilterplate consistent. [RT #19833]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2620. [bug] Delay thawing the zone until the reload of it has
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync completed successfully. [RT #19750]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2619. [func] Add support for RFC 5011, automatic trust anchor
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync maintenance. The new "managed-keys" statement can
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync be used in place of "trusted-keys" for zones which
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync support this protocol. (Note: this syntax is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync expected to change prior to 9.7.0 final.) [RT #19248]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2618. [bug] The sdb and sdlz db_interator_seek() methods could
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync loop infinitely. [RT #19847]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2617. [bug] ifconfig.sh failed to emit an error message when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync run from the wrong location. [RT #19375]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2616. [bug] 'host' used the nameservers from resolv.conf even
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync when a explicit nameserver was specified. [RT #19852]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2615. [bug] "__attribute__((unused))" was in the wrong place
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for ia64 gcc builds. [RT #19854]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2614. [port] win32: 'named -v' should automatically be executed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in the foreground. [RT #19844]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2613. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.7.0a1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2612. [func] Add default values for the arguments to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-keygen. Without arguments, it will now
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync generate a 1024-bit RSASHA1 zone-signing key,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync or with the -f KSK option, a 2048-bit RSASHA1
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync key-signing key. [RT #19300]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2611. [func] Add -l option to dnssec-dsfromkey to generate
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync DLV records instead of DS records. [RT #19300]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2610. [port] sunos: Change #2363 was not complete. [RT #19796]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2609. [func] Simplify the configuration of dynamic zones:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - add ddns-confgen command to generate
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync configuration text for named.conf
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - add zone option "ddns-autoconf yes;", which
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync causes named to generate a TSIG session key
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and allow updates to the zone using that key
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync - add '-l' (localhost) option to nsupdate, which
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync causes nsupdate to connect to a locally-running
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named process using the session key generated
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19284]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2608. [func] Perform post signing verification checks in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-signzone. These can be disabled with -P.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync The post sign verification test ensures that for each
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync algorithm in use there is at least one non revoked
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync self signed KSK key. That all revoked KSK keys are
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync self signed. That all records in the zone are signed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync by the algorithm. [RT #19653]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2607. [bug] named could incorrectly delete NSEC3 records for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync empty nodes when processing a update request.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19749]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2606. [bug] "delegation-only" was not being accepted in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync delegation-only type zones. [RT #19717]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2605. [bug] Accept DS responses from delegation only zones.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT # 19296]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2604. [func] Add support for DNS rebinding attack prevention through
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync new options, deny-answer-addresses and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync deny-answer-aliases. Based on contributed code from
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync JD Nurmi, Google. [RT #18192]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2603. [port] win32: handle .exe extension of named-checkzone and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named-comilezone argv[0] names under windows.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19767]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2602. [port] win32: fix debugging command line build of libisccfg.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19767]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2601. [doc] Mention file creation mode mask in the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync named manual page.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2600. [doc] ARM: miscellaneous reformatting for different
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync page widths. [RT #19574]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2599. [bug] Address rapid memory growth when validation fails.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19654]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2598. [func] Reserve the -F flag. [RT #19657]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2597. [bug] Handle a validation failure with a insecure delegation
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync from a NSEC3 signed master/slave zone. [RT #19464]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync long, leading to inefficient memory usage or rejecting
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync newer cache entries in the worst case. [RT #19563]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2594. [func] Have rndc warn if using its default configuration
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync file when the key file also exists. [RT #19424]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2591. [bug] named could die when processing a update in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync removed_orphaned_ds(). [RT #19507]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2590. [func] Report zone/class of "update with no effect".
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19542]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19626]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2588. [bug] SO_REUSEADDR could be set unconditionally after failure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of bind(2) call. This should be rare and mostly
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync harmless, but may cause interference with other
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync processes that happen to use the same port. [RT #19642]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2587. [func] Improve logging by reporting serial numbers for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync when zone serial has gone backwards or unchanged.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19506]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync or SDB. [RT #19577]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2585. [bug] Uninitialized socket name could be referenced via a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync statistics channel, triggering an assertion failure in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync XML rendering. [RT #19427]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2584. [bug] alpha: gcc optimization could break atomic operations.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19227]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2583. [port] netbsd: provide a control to not add the compile
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync date to the version string, -DNO_VERSION_DATE.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2582. [bug] Don't emit warning log message when we attempt to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync remove non-existent journal. [RT #19516]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Requires MySQL 5.0.19 or later. [RT #19084]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2580. [bug] UpdateRej statistics counter could be incremented twice
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for one rejection. [RT #19476]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2579. [bug] DNSSEC lookaside validation failed to handle unknown
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync algorithms. [RT #19479]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2578. [bug] Changed default sig-signing-type to 65534, because
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 65535 turns out to be reserved. [RT #19477]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2577. [doc] Clarified some statistics counters. [RT #19454]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2576. [bug] NSEC record were not being correctly signed when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a zone transitions from insecure to secure.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Handle such incorrectly signed zones. [RT #19114]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2575. [func] New functions dns_name_fromstring() and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dns_name_tostring(), to simplify conversion
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of a string to a dns_name structure and vice
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync versa. [RT #19451]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2574. [doc] Document nsupdate -g and -o. [RT #19351]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2573. [bug] Replacing a non-CNAME record with a CNAME record in a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync single transaction in a signed zone failed. [RT #19397]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2572. [func] Simplify DLV configuration, with a new option
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "dnssec-lookaside auto;" This is the equivalent
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of "dnssec-lookaside . trust-anchor dlv.isc.org;"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync plus setting a trusted-key for dlv.isc.org.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Note: The trusted key is hard-coded into named,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync but is also stored in (and can be overridden
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync by) $sysconfdir/bind.keys. As the ISC DLV key
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync rolls over it can be kept up to date by replacing
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the bind.keys file with a key downloaded from
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2571. [func] Add a new tool "arpaname" which translates IP addresses
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18976]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2570. [func] Log the destination address the query was sent to.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19209]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2569. [func] Move journalprint, nsec3hash, and genrandom
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "make install" will put them in $sbindir. [RT #19301]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2568. [bug] Report when the write to indicate a otherwise
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync successful start fails. [RT #19360]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2567. [bug] dst__privstruct_writefile() could miss write errors.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync write_public_key() could miss write errors.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dnssec-dsfromkey could miss write errors.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19360]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2566. [cleanup] Clarify logged message when an insecure DNSSEC
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync response arrives from a zone thought to be secure:
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "insecurity proof failed" instead of "not
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync insecure". [RT #19400]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2565. [func] Add support for HIP record. Includes new functions
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dns_rdata_hip_first(), dns_rdata_hip_next()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and dns_rdata_hip_current(). [RT #19384]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2564. [bug] Only take EDNS fallback steps when processing timeouts.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19405]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2563. [bug] Dig could leak a socket causing it to wait forever
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to exit. [RT #19359]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2562. [doc] ARM: miscellaneous improvements, reorganization,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and some new content.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2559. [bug] dnssec-dsfromkey could compute bad DS records when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync reading from a K* files. [RT #19357]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2558. [func] Set the ownership of missing directories created
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for pid-file if -u has been specified on the command
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync line. [RT #19328]
28a247e967c544c8089d1ea01b4610b8311c64c6vboxsync2557. [cleanup] PCI compliance:
28a247e967c544c8089d1ea01b4610b8311c64c6vboxsync * new libisc log module file
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync * isc_dir_chroot() now also changes the working
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync directory to "/".
6ff14916eae1a5211d0fd98247f489cc0bd0959bvboxsync * additional INSISTs
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync * additional logging when files can't be removed.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
28a247e967c544c8089d1ea01b4610b8311c64c6vboxsync error checks in the correct order resulting in the
28a247e967c544c8089d1ea01b4610b8311c64c6vboxsync wrong error code sometimes being returned. [RT #19249]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2555. [func] dig: when emitting a hex dump also display the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync corresponding characters. [RT #19258]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2554. [bug] Validation of uppercase queries from NSEC3 zones could
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync fail. [RT #19297]
28a247e967c544c8089d1ea01b4610b8311c64c6vboxsync2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
28a247e967c544c8089d1ea01b4610b8311c64c6vboxsync2552. [bug] zero-no-soa-ttl-cache was not being honoured.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19340]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2551. [bug] Potential Reference leak on return. [RT #19341]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19343]
28a247e967c544c8089d1ea01b4610b8311c64c6vboxsync2549. [port] linux: define NR_OPEN if not currently defined.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19344]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2548. [bug] Install iterated_hash.h. [RT #19335]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2547. [bug] openssl_link.c:mem_realloc() could reference an
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync out-of-range area of the source buffer. New public
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync function isc_mem_reallocate() was introduced to address
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync this bug. [RT #19313]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2546. [func] Add --enable-openssl-hash configure flag to use
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync OpenSSL (in place of internal routine) for hash
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync functions (MD5, SHA[12] and HMAC). [RT #18815]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2545. [doc] ARM: Legal hostname checking (check-names) is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for SRV RDATA too. [RT #19304]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2542. [doc] Update the description of dig +adflag. [RT #19290]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2541. [bug] Conditionally update dispatch manager statistics.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19247]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2539. [security] Update the interaction between recursion, allow-query,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync allow-query-cache and allow-recursion. [RT #19198]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2538. [bug] cache/ADB memory could grow over max-cache-size,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync especially with threads and smaller max-cache-size
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync values. [RT #19240]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2537. [func] Added more statistics counters including those on socket
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync I/O events and query RTT histograms. [RT #18802]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2536. [cleanup] Silence some warnings when -Werror=format-security is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync specified. [RT #19083]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2534. [func] Check NAPTR records regular expressions and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync replacement strings to ensure they are syntactically
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync valid and consistant. [RT #18168]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2533. [doc] ARM: document @ (at-sign). [RT #17144]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2532. [bug] dig: check the question section of the response to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync see if it matches the asked question. [RT #18495]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2531. [bug] Change #2207 was incomplete. [RT #19098]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2530. [bug] named failed to reject insecure to secure transitions
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync via UPDATE. [RT #19101]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2529. [cleanup] Upgrade libtool to silence complaints from recent
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync version of autoconf. [RT #18657]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2528. [cleanup] Silence spurious configure warning about
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --datarootdir [RT #19096]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2527. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2526. [func] New named option "attach-cache" that allows multiple
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync views to share a single cache to save memory and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync improve lookup efficiency. Based on contributed code
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync from Barclay Osborn, Google. [RT #18905]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2525. [func] New logging category "query-errors" to provide detailed
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync internal information about query failures, especially
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync about server failures. [RT #19027]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2523. [bug] Random type rdata freed by dns_nsec_typepresent().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19112]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2521. [bug] Improve epoll cross compilation support. [RT #19047]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2520. [bug] Update xml statistics version number to 2.0 as change
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync #2388 made the schema incompatible to the previous
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync version. [RT #19080]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2519. [bug] dig/host with -4 or -6 didn't work if more than two
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync nameserver addresses of the excluded address family
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync preceded in resolv.conf. [RT #19081]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2518. [func] Add support for the new CERT types from RFC 4398.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19077]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2517. [bug] dig +trace with -4 or -6 failed when it chose a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync nameserver address of the excluded address type.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18843]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2516. [bug] glue sort for responses was performed even when not
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync needed. [RT #19039]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19063]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a nameserver of the excluded address family.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18848]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2513. [bug] Fix windows cli build. [RT #19062]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2512. [func] Print a summary of the cached records which make up
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the negative response. [RT #18885]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18885]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19033]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2509. [bug] Specifying a fixed query source port was broken.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19051]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2508. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2507. [func] Log the recursion quota values when killing the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync oldest query or refusing to recurse due to quota.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #19022]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2506. [port] solaris: Check at configure time if
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync hack_shutup_pthreadonceinit is needed. [RT #19037]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2505. [port] Treat amd64 similarly to x86_64 when determining
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync atomic operation support. [RT #19031]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2504. [bug] Address race condition in the socket code. [RT #18899]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2503. [port] linux: improve compatibility with Linux Standard
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Base. [RT #18793]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2502. [cleanup] isc_radix: Improve compliance with coding style,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync document function in <isc/radix.h>. [RT #18534]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2501. [func] $GENERATE now supports all rdata types. Multi-field
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync rdata types need to be quoted. See the ARM for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync details. [RT #18368]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync function. [RT #18582]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18837]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.6.0rc1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2498. [bug] Removed a bogus function argument used with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ISC_SOCKET_USE_POLLWATCH: it could cause compiler
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync warning or crash named with the debug 1 level
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of logging. [RT #18917]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync delegation.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2496. [bug] Add sanity length checks to NSID option. [RT #18813]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2495. [bug] Tighten RRSIG checks. [RT #18795]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync installed. [RT #18826]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2493. [bug] The linux capabilities code was not correctly cleaning
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync up after itself. [RT #18767]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2492. [func] Rndc status now reports the number of cpus discovered
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and the number of worker threads when running
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync multi-threaded. [RT #18273]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2491. [func] Attempt to re-use a local port if we are already using
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the port. [RT #18548]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync is cleared when IPV6_V6ONLY is set. [RT #18785]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2489. [port] solaris: Workaround Solaris's kernel bug about
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Define ISC_SOCKET_USE_POLLWATCH at build time to enable
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync this workaround. [RT #18870]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync from keyset and .key files. [RT #18694]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2487. [bug] Give TCP connections longer to complete. [RT #18675]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2486. [func] The default locations for named.pid and lwresd.pid
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync This allows the owner of the containing directory
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to be set, for "named -u" support, and allows there
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to be a permanent symbolic link in the path, for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "named -t" support. [RT #18306]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2485. [bug] Change update's the handling of obscured RRSIG
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync records. Not all orphaned DS records were being
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync removed. [RT #18828]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2484. [bug] It was possible to trigger a REQUIRE failure when
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync adding NSEC3 proofs to the response in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync query_addwildcardproof(). [RT #18828]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2483. [port] win32: chroot() is not supported. [RT #18805]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2482. [port] libxml2: support versions 2.7.* in addition
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to 2.6.*. [RT #18806]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.6.0b1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync collisions. [RT #18812]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2480. [bug] named could fail to emit all the required NSEC3
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync records. [RT #18812]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2478. [bug] 'addresses' could be used uninitialized in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync configure_forward(). [RT #18800]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2477. [bug] dig: the global option to print the command line is
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync +cmd not print_cmd. Update the output to reflect
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync this. [RT #17008]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2476. [doc] ARM: improve documentation for max-journal-size and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ixfr-from-differences. [RT #15909] [RT #18541]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2475. [bug] LRU cache cleanup under overmem condition could purge
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync particular entries more aggressively. [RT #17628]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2474. [bug] ACL structures could be allocated with insufficient
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync space, causing an array overrun. [RT #18765]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2473. [port] linux: raise the limit on open files to the possible
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync maximum value before spawning threads; 'files'
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync specified in named.conf doesn't seem to work with
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync threads as expected. [RT #18784]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2472. [port] linux: check the number of available cpu's before
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync calling chroot as it depends on "/proc". [RT #16923]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2471. [bug] named-checkzone was not reporting missing mandatory
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync glue when sibling checks were disabled. [RT #18768]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2470. [bug] Elements of the isc_radix_node_t could be incorrectly
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync overwritten. [RT# 18719]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2469. [port] solaris: Work around Solaris's select() limitations.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18769]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2468. [bug] Resolver could try unreachable servers multiple times.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18739]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18302]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2465. [bug] Adb's handling of lame addresses was different
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for IPv4 and IPv6. [RT #18738]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2464. [port] linux: check that a capability is present before
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync trying to set it. [RT #18135]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync API and glibc hides parts of the IPv6 Advanced Socket
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync API as a result. This is stupid as it breaks how the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync two halves (Basic and Advanced) of the IPv6 Socket API
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync were designed to be used but we have to live with it.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync API. [RT #18388]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2462. [doc] Document -m (enable memory usage debugging)
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync option for dig. [RT #18757]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2461. [port] sunos: Change #2363 was not complete. [RT #17513]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync --- 9.6.0a1 released ---
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18697]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2458. [doc] ARM: update and correction for max-cache-size.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18294]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2457. [tuning] max-cache-size is reverted to 0, the previous
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync default. It should be safe because expired cache
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync entries are also purged. [RT #18684]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync address, regardless of family. They now correctly
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync distinguish IPv4 from IPv6. [RT #18559]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2455. [bug] Stop metadata being transferred via axfr/ixfr.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18639]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2453. [bug] Remove NULL pointer dereference in dns_journal_print().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18316]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2452. [func] Improve bin/test/journalprint. [RT #18316]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2451. [port] solaris: handle runtime linking better. [RT #18356]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2450. [doc] Fix lwresd docbook problem for manual page.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18672]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2449. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2448. [func] Add NSEC3 support. [RT #15452]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2447. [cleanup] libbind has been split out as a separate product.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2446. [func] Add a new log message about build options on startup.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync A new command-line option '-V' for named is also
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync provided to show this information. [RT# 18645]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2445. [doc] ARM out-of-date on empty reverse zones (list includes
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync RFC1918 address, but these are not yet compiled in).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18578]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (clear DF) for UDP responses and requests.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2443. [bug] win32: UDP connect() would not generate an event,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync and so connected UDP sockets would never clean up.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Fix this by doing an immediate WSAConnect() rather
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync than an io completion port type for UDP.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2442. [bug] A lock could be destroyed twice. [RT# 18626]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2441. [bug] isc_radix_insert() could copy radix tree nodes
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync incompletely. [RT #18573]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2440. [bug] named-checkconf used an incorrect test to determine
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync if an ACL was set to none.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18559]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2438. [bug] Timeouts could be logged incorrectly under win32.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2437. [bug] Sockets could be closed too early, leading to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync inconsistent states in the socket module. [RT #18298]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2435. [bug] Fixed an ACL memory leak affecting win32.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2434. [bug] Fixed a minor error-reporting bug in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2433. [tuning] Set initial timeout to 800ms.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2432. [bug] More Windows socket handling improvements. Stop
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync using I/O events and use IO Completion Ports
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync throughout. Rewrite the receive path logic to make
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync it easier to support multiple simultaneous
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync requesters in the future. Add stricter consistency
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync checking as a compile-time option (define
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2431. [bug] Acl processing could leak memory. [RT #18323]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2430. [bug] win32: isc_interval_set() could round down to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync zero if the input was less than NS_INTERVAL
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync nanoseconds. Round up instead. [RT #18549]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2429. [doc] nsupdate should be in section 1 of the man pages.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18283]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2428. [bug] dns_iptable_merge() mishandled merges of negative
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync tables. [RT #18409]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync was set. [RT #18528]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2426. [bug] libbind: inet_net_pton() can sometimes return the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync wrong value if excessively large net masks are
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync supplied. [RT #18512]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2425. [bug] named didn't detect unavailable query source addresses
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync at load time. [RT #18536]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2424. [port] configure now probes for a working epoll
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync implementation. Allow the use of kqueue,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync epoll and /dev/poll to be selected at compile
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync time. [RT #18277]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2423. [security] Randomize server selection on queries, so as to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync make forgery a little more difficult. Instead of
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync always preferring the server with the lowest RTT,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync pick a server with RTT within the same 128
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync millisecond band. [RT #18441]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2422. [bug] Handle the special return value of a empty node as
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync if it was a NXRRSET in the validator. [RT #18447]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2421. [func] Add new command line option '-S' for named to specify
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the max number of sockets. [RT #18493]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Use caution: this option may not work for some
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync operating systems without rebuilding named.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2420. [bug] Windows socket handling cleanup. Let the io
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync completion event send out canceled read/write
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync done events, which keeps us from writing to memory
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync we no longer have ownership of. Add debugging
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync socket_log() function. Rework TCP socket handling
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to not leak sockets.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync should not be used for isc_sockettype_fdwatch sockets.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18521]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18430]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2417. [bug] Connecting UDP sockets for outgoing queries could
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync unexpectedly fail with an 'address already in use'
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync error. [RT #18411]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2416. [func] Log file descriptors that cause exceeding the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync internal maximum. [RT #18460]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2415. [bug] 'rndc dumpdb' could trigger various assertion failures
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in rbtdb.c. [RT #18455]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2414. [bug] A masterdump context held the database lock too long,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync causing various troubles such as dead lock and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync recursive lock acquisition. [RT #18311, #18456]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2412. [bug] win32: address a resource leak. [RT #18374]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync at compilation time. [RT #18433]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Note: with changes #2469 and #2421 above, there is no
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2410. [bug] Correctly delete m_versionInfo. [RT #18432]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2409. [bug] Only log that we disabled EDNS processing if we were
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync subsequently successful. [RT #18029]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2408. [bug] A duplicate TCP dispatch event could be sent, which
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync could then trigger an assertion failure in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync resquery_response(). [RT #18275]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2406. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2405. [cleanup] The default value for dnssec-validation was changed to
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync "yes" in 9.5.0-P1 and all subsequent releases; this
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync was inadvertently omitted from CHANGES at the time.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2404. [port] hpux: files unlimited support.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2403. [bug] TSIG context leak. [RT #18341]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2402. [port] Support Solaris 2.11 and over. [RT #18362]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2401. [bug] Expect to get E[MN]FILE errno internal_accept()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (from accept() or fcntl() system calls). [RT #18358]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18297]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2399. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2398. [bug] Improve file descriptor management. New,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync temporary, named.conf option reserved-sockets,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync default 512. [RT #18344]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2397. [bug] gssapi_functions had too many elements. [RT #18355]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2396. [bug] Don't set SO_REUSEADDR for randomized ports.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18336]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2395. [port] Avoid warning and no effect from "files unlimited"
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync on Linux when running as root. [RT #18335]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2394. [bug] Default configuration options set the limit for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync open files to 'unlimited' as described in the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync documentation. [RT #18331]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2393. [bug] nested acls containing keys could trigger an
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync assertion in acl.c. [RT #18166]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2392. [bug] remove 'grep -q' from acl test script, some platforms
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync don't support it. [RT #18253]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2391. [port] hpux: cover additional recvmsg() error codes.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18301]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2390. [bug] dispatch.c could make a false warning on 'odd socket'.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18301].
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2389. [bug] Move the "working directory writable" check to after
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the ns_os_changeuser() call. [RT #18326]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2388. [bug] Avoid using tables for layout purposes in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync statistics XSL [RT #18159].
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2387. [bug] Silence compiler warnings in lib/isc/radix.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18147] [RT #18258]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2386. [func] Add warning about too small 'open files' limit.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18269]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2385. [bug] A condition variable in socket.c could leak in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync rare error handling [RT #17968].
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2384. [security] Fully randomize UDP query ports to improve
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync forgery resilience. [RT #17949, #18098]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2383. [bug] named could double queries when they resulted in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync SERVFAIL due to overkilling EDNS0 failure detection.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18182]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2381. [port] dlz/mysql: support multiple install layouts for
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync mysql. <prefix>/include/{,mysql/}mysql.h and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync <prefix>/lib/{,mysql/}. [RT #18152]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync proofs which, in turn, caused validation failures
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for insecure zones immediately below a secure zone
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync the server was authoritative for. [RT #18112]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync TLDs and supported RRs with TTLs [RT #17972]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18169]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2376. [bug] Change #2144 was not complete.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2375. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2374. [bug] "blackhole" ACLs could cause named to segfault due
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to some uninitialized memory. [RT #18095]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2373. [bug] Default values of zone ACLs were re-parsed each time a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync new zone was configured, causing an overconsumption
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync of memory. [RT #18092]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2371. [doc] Add +nsid option to dig man page. [RT #18039]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2370. [bug] "rndc freeze" could trigger an assertion in named
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync when called on a nonexistent zone. [RT #18050]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2369. [bug] libbind: Array bounds overrun on read in bitncmp().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18054]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2368. [port] Linux: use libcap for capability management if
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync possible. [RT# 18026]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2367. [bug] Improve counting of dns_resstatscounter_retry
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #18030]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2366. [bug] Adb shutdown race. [RT #18021]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2365. [bug] Fix a bug that caused dns_acl_isany() to return
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync spurious results. [RT #18000]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2364. [bug] named could trigger a assertion when serving a
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync malformed signed zone. [RT #17828]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17513]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2362. [cleanup] Make "rrset-order fixed" a compile-time option.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync settable by "./configure --enable-fixed-rrset".
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Disabled by default. [RT #17977]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2361. [bug] "recursion" statistics counter could be counted
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync multiple times for a single query. [RT #17990]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2360. [bug] Fix a condition where we release a database version
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync (which may acquire a lock) while holding the lock.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2359. [bug] Fix NSID bug. [RT #17942]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2358. [doc] Update host's default query description. [RT #17934]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2357. [port] Don't use OpenSSL's engine support in versions before
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync OpenSSL 0.9.7f. [RT #17922]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2356. [bug] Built in mutex profiler was not scalable enough.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17436]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2355. [func] Extend the number statistics counters available.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17590]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2354. [bug] Failed to initialize some rdatasetheader_t elements.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17927]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2353. [func] Add support for Name Server ID (RFC 5001).
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 'dig +nsid' requests NSID from server.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 'request-nsid yes;' causes recursive server to send
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync NSID requests to upstream servers. Server responds
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync to NSID requests with the string configured by
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync 'server-id' option. [RT #17091]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2352. [bug] Various GSS_API fixups. [RT #17729]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2350. [port] win32: IPv6 support. [RT #17797]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2349. [func] Provide incremental re-signing support for secure
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync dynamic zones. [RT #1091]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync Documentation is in the new README.pkcs11 file.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync New tool, dnssec-keyfromlabel, which takes the
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync label of a key pair in a HSM and constructs a DNS
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync key pair for use by named and dnssec-signzone.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #16844]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2347. [bug] Delete now traverses the RB tree in the canonical
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync order. [RT #17451]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2346. [func] Memory statistics now cover all active memory contexts
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync in increased detail. [RT #17580]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2345. [bug] named-checkconf failed to detect when forwarders
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync were set at both the options/view level and in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync a root zone. [RT #17671]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2344. [bug] Improve "logging{ file ...; };" documentation.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17888]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2343. [bug] (Seemingly) duplicate IPv6 entries could be
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync created in ADB. [RT #17837]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2341. [bug] libbind: add missing -I../include for off source
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync tree builds. [RT #17606]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2340. [port] openbsd: interface configuration. [RT #17700]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2339. [port] tru64: support for libbind. [RT #17589]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2338. [bug] check_ds() could be called with a non DS rdataset.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17598]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2336. [func] If "named -6" is specified then listen on all IPv6
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync interfaces if there are not listen-on-v6 clauses in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2335. [port] sunos: libbind and *printf() support for long long.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17513]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync bug in fromstruct_txt(). [RT #17609]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2333. [bug] Fix off by one error in isc_time_nowplusinterval().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17608]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2332. [contrib] query-loc-0.4.0. [RT #17602]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2331. [bug] Failure to regenerate any signatures was not being
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync reported nor being past back to the UPDATE client.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17570]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2330. [bug] Remove potential race condition when handling
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync over memory events. [RT #17572]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync WARNING: API CHANGE: over memory callback
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync function now needs to call isc_mem_waterack().
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync See <isc/mem.h> for details.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2329. [bug] Clearer help text for dig's '-x' and '-i' options.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2327. [bug] It was possible to dereference a NULL pointer in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync rbtdb.c. Implement dead node processing in zones as
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync we do for caches. [RT #17312]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2326. [bug] It was possible to trigger a INSIST in the acache
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync processing.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2325. [port] Linux: use capset() function if available. [RT #17557]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2323. [port] tru64: namespace clash. [RT #17547]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2322. [port] MacOS: work around the limitation of setrlimit()
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync for RLIMIT_NOFILE. [RT #17526]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2321. [placeholder]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2320. [func] Make statistics counters thread-safe for platforms
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync that support certain atomic operations. [RT #17466]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2319. [bug] Silence Coverity warnings in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2318. [port] sunos fixes for libbind. [RT #17514]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17513]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2315. [bug] Used incorrect address family for mapped IPv4
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync addresses in acl.c. [RT #17519]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2314. [bug] Uninitialized memory use on error path in
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2313. [cleanup] Silence Coverity warnings. Handle private stacks.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17447] [RT #17478]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17458]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2311. [bug] IPv6 addresses could match IPv4 ACL entries and
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync vice versa. [RT #17462]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2310. [bug] dig, host, nslookup: flush stdout before emitting
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync debug/fatal messages. [RT #17501]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17455]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17495]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2306. [bug] Remove potential race from lib/dns/resolver.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17470]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2305. [security] inet_network() buffer overflow. CVE-2008-0122.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2304. [bug] Check returns from all dns_rdata_tostruct() calls.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17460]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync [RT #17471]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
e0e0c19eefceaf5d4ec40f9466b58a771f50e799vboxsync2301. [bug] Remove resource leak and fix error messages in
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which