CHANGES revision 1df2b7edfecd7cb7edc08ae9ec43d008cfbe7d34
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2878. [func] Incrementally write the master file after performing
1b5a34533410ff4eaff0e5b5b110221a97e29cfcAutomatic Updater a AXFR. [RT #21010]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2877. [bug] The validator failed to skip obviously mismatching
ec5347e2c775f027573ce5648b910361aa926c01Automatic Updater RRSIGs. [RT #21138]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2876. [bug] Named could return SERVFAIL for negative responses
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington from unsigned zones. [RT #21131]
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews2875. [bug] dns_time64_fromtext() could accept non digits.
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews2874. [bug] Cache lack of EDNS support only after the server
dafcb997e390efa4423883dafd100c975c4095d6Mark Andrews successfully responds to the query using plain DNS.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2873. [bug] Canceling a dynamic update via the dns/client module
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews could trigger an assertion failure. [RT #21133]
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein2872. [bug] Modify dns/client.c:dns_client_createx() to only
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington require one of IPv4 or IPv6 rather than both.
f4b4e7c16211137332e50bcad3fef0d15639a4f1Brian Wellington2871. [bug] Type mismatch in mem_api.c between the definition and
f4b4e7c16211137332e50bcad3fef0d15639a4f1Brian Wellington the header file, causing build failure with
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --enable-exportlib. [RT #21138]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2868. [cleanup] Run "make clean" at the end of configure to ensure
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington any changes made by configure are integrated.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Use --with-make-clean=no to disable. [RT #20994]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington don't like it. [RT #20986]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2866. [bug] Windows does not like the TSIG name being compressed.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2865. [bug] memset to zero event.data. [RT #20986]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2862. [bug] nsupdate didn't default to the parent zone when
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington updating DS records. [RT #20896]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2861. [doc] dnssec-settime man pages didn't correctly document the
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington inactivation time. [RT #21039]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2860. [bug] named-checkconf's usage was out of date. [RT #21039]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2859. [bug] When cancelling validation it was possible to leak
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington memory. [RT #20800]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2858. [bug] RTT estimates were not being adjusted on ICMP errors.
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2857. [bug] named-checkconf did not fail on a bad trusted key.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2856. [bug] The size of a memory allocation was not always properly
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington recorded. [RT #20927]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2855. [func] nsupdate will now preserve the entered case of domain
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington names in update requests it sends. [RT #20928]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2854. [func] dig: allow the final soa record in a axfr response to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington be suppressed, dig +onesoa. [RT #20929]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
229ce407c359b0b641759ba1fc4a5fa2054a44daBrian Wellington2851. [doc] nslookup.1, removed <informalexample> from the docbook
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington source as it produced bad nroff. [RT #21007]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2850. [bug] If isc_heap_insert() failed due to memory shortage
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington the heap would have corrupted entries. [RT #20951]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2849. [bug] Don't treat errors from the xml2 library as fatal.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington README.rfc5011 into the ARM. [RT #20899]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2846. [bug] EOF on unix domain sockets was not being handled
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington correctly. [RT #20731]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2844. [doc] notify-delay default in ARM was wrong. It should have
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington been five (5) seconds.
571688b02f955f6304649866e768b1f81739cbedBrian Wellington2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein creating key files if there is a chance that the new
571688b02f955f6304649866e768b1f81739cbedBrian Wellington key ID will collide with an existing one after
571688b02f955f6304649866e768b1f81739cbedBrian Wellington either of the keys has been revoked. (To override
571688b02f955f6304649866e768b1f81739cbedBrian Wellington this in the case of dnssec-keyfromlabel, use the -y
571688b02f955f6304649866e768b1f81739cbedBrian Wellington option. dnssec-keygen will simply create a
571688b02f955f6304649866e768b1f81739cbedBrian Wellington different, non-colliding key, so an override is
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington not necessary.) [RT #20838]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2842. [func] Added "smartsign" and improved "autosign" and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington "dnssec" regression tests. [RT #20865]
ab023a65562e62b85a824509d829b6fad87e00b1Rob Austein2841. [bug] Change 2836 was not complete. [RT #20883]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2840. [bug] Temporary fixed pkcs11-destroy usage check.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2839. [bug] A KSK revoked by named could not be deleted.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2838. [placeholder]
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2836. [bug] Keys that were scheduled to become active could
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington be delayed. [RT #20874]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2835. [bug] Key inactivity dates were inadvertently stored in
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington the private key file with the outdated tag
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington "Unpublish" rather than "Inactive". This has been
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington fixed; however, any existing keys that had Inactive
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington dates set will now need to have them reset, using
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington 'dnssec-settime -I'. [RT #20868]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2834. [bug] HMAC-SHA* keys that were longer than the algorithm
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington digest length were used incorrectly, leading to
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington interoperability problems with other DNS
557bcc2092642b2d4668c9b08872c9f2bb88bddbMark Andrews implementations. This has been corrected.
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington (Note: If an oversize key is in use, and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington compatibility is needed with an older release of
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington BIND, the new tool "isc-hmac-fixup" can convert
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington the key secret to a form that will work with all
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington versions.) [RT #20751]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington to avoid redefinition in some OSes [RT 20831]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2831. [security] Do not attempt to validate or cache
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington out-of-bailiwick data returned with a secure
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington answer; it must be re-fetched from its original
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington source and validated in that context. [RT #20819]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2830. [bug] Changing the OPTOUT setting could take multiple
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington passes. [RT #20813]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2829. [bug] Fixed potential node inconsistency in rbtdb.c.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2828. [security] Cached CNAME or DNAME RR could be returned to clients
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington without DNSSEC validation. [RT #20737]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington being released. [RT #20740]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington was in the process of being created was not properly
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington recorded in the zone. [RT #20786]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2824. [bug] "rndc sign" was not being run by the correct task.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2822. [bug] rbtdb.c:loadnode() could return the wrong result.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2821. [doc] Add note that named-checkconf doesn't automatically
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2820. [func] Handle read access failure of OpenSSL configuration
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington file more user friendly (PKCS#11 engine patch).
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2818. [cleanup] rndc could return an incorrect error code
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington when a zone was not found. [RT #20767]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2816. [bug] previous_closest_nsec() could fail to return
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington data for NSEC3 nodes [RT #29730]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2815. [bug] Exclusively lock the task when freezing a zone.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2814. [func] Provide a definitive error message when a master
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington zone is not loaded. [RT #20757]
75e1e12f48012505699f504cfa364260cb2bc1afBrian Wellington2813. [bug] Better handling of unreadable DNSSEC key files.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2812. [bug] Make sure updates can't result in a zone with
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington NSEC-only keys and NSEC3 records. [RT 20748]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington output. [RT #20733]
75e1e12f48012505699f504cfa364260cb2bc1afBrian Wellington2810. [doc] Clarified the process of transitioning an NSEC3 zone
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington to insecure. [RT #20746]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2809. [cleanup] Restored accidentally-deleted text in usage output
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington in dnssec-settime and dnssec-revoke [RT #20739]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2808. [bug] Remove the attempt to install atomic.h from lib/isc.
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington atomic.h is correctly installed by the architecture
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington specific subdirectories. [RT #20722]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2807. [bug] Fixed a possible ASSERT when reconfiguring zone
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington keys. [RT #20720]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington --- 9.7.0rc1 released ---
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews when it had changed. [RT #20703]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2805. [bug] Fixed namespace problems encountered when building
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington external programs using non-exported BIND9 libraries
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington (i.e., built without --enable-exportlib). [RT #20679]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2804. [bug] Send notifies when a zone is signed with "rndc sign"
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington or as a result of a scheduled key change. [RT #20700]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington and genrandom under windows. [RT #20670]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2801. [func] Detect and report records that are different according
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington to DNSSEC but are sematically equal according to plain
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington DNS. Apply plain DNS comparisons rather than DNSSEC
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington comparisons when processing UPDATE requests.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dnssec-signzone now removes such semantically duplicate
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington records prior to signing the RRset.
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington named-checkzone -r {ignore|warn|fail} (default warn)
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington named-compilezone -r {ignore|warn|fail} (default warn)
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington named.conf: check-dup-records {ignore|warn|fail};
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2800. [func] Reject zones which have NS records which refer to
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington CNAMEs, DNAMEs or don't have address record (class IN
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington only). Reject UPDATEs which would cause the zone
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington to fail the above checks if committed. [RT #20678]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2799. [cleanup] Changed the "secure-to-insecure" option to
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington "dnssec-secure-to-insecure", and "dnskey-ksk-only"
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2798. [bug] Addressed bugs in managed-keys initialization
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington and rollover. [RT #20683]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2797. [bug] Don't decrement the dispatch manager's maxbuffers.
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
d2aebe24c477c70e79dc33ea0507e8886eb7d626Brian Wellington dns_nsec3_delnsec3sx(). [RT #20681]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
d2aebe24c477c70e79dc33ea0507e8886eb7d626Brian Wellington log messages. [RT #18889]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2794. [bug] Install <isc/namespace.h>. [RT #20677]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2793. [func] Add "autosign" and "metadata" tests to the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington automatic tests. [RT #19946]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2792. [func] "filter-aaaa-on-v4" can now be set in view
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson options (if compiled in). [RT #20635]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2791. [bug] The installation of isc-config.sh was broken.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2790. [bug] Handle DS queries to stub zones. [RT #20440]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2788. [bug] dnssec-signzone could sign with keys that were
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington not requested [RT #20625]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2787. [bug] Spurious log message when zone keys were
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dynamically reconfigured. [RT #20659]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2786. [bug] Additional could be promoted to answer. [RT #20663]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --- 9.7.0b3 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2785. [bug] Revoked keys could fail to self-sign [RT #20652]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2784. [bug] TC was not always being set when required glue was
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dropped. [RT #20655]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington buffer size of 512 or less. [RT #20654]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2782. [port] win32: use getaddrinfo() for hostname lookups.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2781. [bug] Inactive keys could be used for signing. [RT #20649]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2780. [bug] dnssec-keygen -A none didn't properly unset the
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson activation date in all cases. [RT #20648]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2779. [bug] Dynamic key revokation could fail. [RT #20644]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2778. [bug] dnssec-signzone could fail when a key was revoked
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson without deleting the unrevoked version. [RT #20638]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2776. [bug] Change #2762 was not correct. [RT #20647]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson in dnssec-keyfromlabel. [RT #20643]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2774. [bug] Existing cache DB wasn't being reused after
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson reconfiguration. [RT #20629]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2773. [bug] In autosigned zones, the SOA could be signed
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson with the KSK. [RT #20628]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2772. [security] When validating, track whether pending data was from
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson the additional section or not and only return it if
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson validates as secure. [RT #20438]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2771. [bug] dnssec-signzone: DNSKEY records could be
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson corrupted when importing from key files [RT #20624]
daa73eae708d568d453e6082e0890d35886a9e0fMark Andrews2770. [cleanup] Add log messages to resolver.c to indicate events
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson causing FORMERR responses. [RT #20526]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2769. [cleanup] Change #2742 was incomplete. [RT #19589]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2767. [bug] named could crash on startup if a zone was
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson configured with auto-dnssec and there was no
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson key-directory. [RT #20615]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2766. [bug] isc_socket_fdwatchpoke() should only update the
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson socketmgr state if the socket is not pending on a
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson read or write. [RT #20603]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2765. [bug] Skip masters for which the TSIG key cannot be found.
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2762. [bug] DLV validation failed with a local slave DLV zone.
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington2761. [cleanup] Enable internal symbol table for backtrace only for
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington systems that are known to work. Currently, BSD
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington variants, Linux and Solaris are supported. [RT# 20202]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2759. [doc] Add information about .jbk/.jnw files to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington the ARM. [RT #20303]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2758. [bug] win32: Added a workaround for a windows 2008 bug
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson that could cause the UDP client handler to shut
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson down. [RT #19176]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2757. [bug] dig: assertion failure could occur in connect
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington timeout. [RT #20599]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews2755. [placeholder]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2754. [bug] Secure-to-insecure transitions failed when zone
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson was signed with NSEC3. [RT #20587]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2753. [bug] Removed an unnecessary warning that could appear when
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson building an NSEC chain. [RT #20589]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2752. [bug] Locking violation. [RT #20587]
2047977ce2dfcfe3a0fa2d638c3242841310fad3Mark Andrews2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
229ce407c359b0b641759ba1fc4a5fa2054a44daBrian Wellington2750. [bug] dig: assertion failure could occur when a server
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson didn't have an address. [RT #20579]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2749. [bug] ixfr-from-differences generated a non-minimal ixfr
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews for NSEC3 signed zones. [RT #20452]
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
6b79e960e6ba2991aeb02a6c39af255ab7f06d99Mark Andrews as referrals. [RT #18884]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2747. [bug] Journal roll forwards failed to set the re-signing
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson time of RRSIGs correctly. [RT #20541]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2746. [port] hpux: address signed/unsigned expansion mismatch of
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2745. [bug] configure script didn't probe the return type of
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington gai_strerror(3) correctly. [RT #20573]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2744. [func] Log if a query was over TCP. [RT #19961]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson for a insecure delegation.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --- 9.7.0b2 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2742. [cleanup] Clarify some DNSSEC-related log messages in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2741. [func] Allow the dnssec-keygen progress messages to be
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson suppressed (dnssec-keygen -q). Automatically
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson suppress the progress messages when stdin is not
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington a tty. [RT #20474]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2740. [placeholder]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2739. [cleanup] Clean up API for initializing and clearing trust
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington anchors for a view. [RT #20211]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington test. [RT #20453]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2737. [func] UPDATE requests can leak existance information.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2736. [func] Improve the performance of NSEC signed zones with
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington more than a normal amount of glue below a delegation.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2735. [bug] dnssec-signzone could fail to read keys
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington that were specified on the command line with
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington full paths, but weren't in the current
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington directory. [RT #20421]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2734. [port] cygwin: arpaname did not compile. [RT #20473]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2732. [func] Add optional filter-aaaa-on-v4 option, available
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington if built with './configure --enable-filter-aaaa'.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington Filters out AAAA answers to clients connecting
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington via IPv4. (This is NOT recommended for general
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington use.) [RT #20339]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2731. [func] Additional work on change 2709. The key parser
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington will now ignore unrecognized fields when the
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington minor version number of the private key format
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington has been increased. It will reject any key with
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington the major version number increased. [RT #20310]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2730. [func] Have dnssec-keygen display a progress indication
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington a la 'openssl genrsa' on standard error. Note
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington when the first '.' is followed by a long stop
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington one has the choice between slow generation vs.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington poor random quality, i.e., '-r /dev/urandom'.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2729. [func] When constructing a CNAME from a DNAME use the DNAME
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington TTL. [RT #20451]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington dnssec-signzone now warn immediately if asked to
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington write into a nonexistent directory. [RT #20278]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2727. [func] The 'key-directory' option can now specify a relative
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson path. [RT #20154]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2726. [func] Added support for SHA-2 DNSSEC algorithms,
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson RSASHA256 and RSASHA512. [RT #20023]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2725. [doc] Added information about the file "managed-keys.bind"
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson to the ARM. [RT #20235]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2724. [bug] Updates to a existing node in secure zone using NSEC
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson were failing. [RT #20448]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington isc_base64_totext(), didn't always mark regions of
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson memory as fully consumed after conversion. [RT #20445]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2722. [bug] Ensure that the memory associated with the name of
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson a node in a rbt tree is not altered during the life
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson of the node. [RT #20431]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2721. [port] Have dst__entropy_status() prime the random number
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson generator. [RT #20369]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2720. [bug] RFC 5011 trust anchor updates could trigger an
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson assert if the DNSKEY record was unsigned. [RT #20406]
307ba34fa07db768c3a899844f248a2c1d7dcc7fAndreas Gustafsson2719. [func] Skip trusted/managed keys for unsupported algorithms.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2718. [bug] The space calculations in opensslrsa_todns() were
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington incorrect. [RT #20394]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2717. [bug] named failed to update the NSEC/NSEC3 record when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington the last private type record was removed as a result
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington of completing the signing the zone with a key.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
f3ca27e9fe307b55e35ea8d7b37351650630e5a3Andreas Gustafsson --- 9.7.0b1 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2715. [bug] Require OpenSSL support to be explicitly disabled.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2713. [bug] powerpc: atomic operations missing asm("ics") /
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington __isync() calls.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2712. [func] New 'auto-dnssec' zone option allows zone signing
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington to be fully automated in zones configured for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dynamic DNS. 'auto-dnssec allow;' permits a zone
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington to be signed by creating keys for it in the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington key-directory and using 'rndc sign <zone>'.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington 'auto-dnssec maintain;' allows that too, plus it
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington also keeps the zone's DNSSEC keys up to date
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington according to their timing metadata. [RT #19943]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2711. [port] win32: Add the bin/pkcs11 tools into the full
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington build. [RT #20372]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington zone option cause a zone to be signed with only KSKs
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington signing the DNSKEY RRset, not ZSKs. This reduces
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington the size of a DNSKEY answer. [RT #20340]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2709. [func] Added some data fields, currently unused, to the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington private key file format, to allow implementation
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington of explicit key rollover in a future release
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington without impairing backward or forward compatibility.
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2708. [func] Insecure to secure and NSEC3 parameter changes via
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington update are now fully supported and no longer require
75e1e12f48012505699f504cfa364260cb2bc1afBrian Wellington defines to enable. We now no longer overload the
75e1e12f48012505699f504cfa364260cb2bc1afBrian Wellington NSEC3PARAM flag field, nor the NSEC OPT bit at the
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington apex. Secure to insecure changes are controlled by
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington by the named.conf option 'secure-to-insecure'.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Warning: If you had previously enabled support by
5e387b9ce6bafdfadedb5b34e4c33a4404e5d589Brian Wellington adding defines at compile time to BIND 9.6 you should
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington ensure that all changes that are in progress have
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington completed prior to upgrading to BIND 9.7. BIND 9.7
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington is not backwards compatible.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2707. [func] dnssec-keyfromlabel no longer require engine name
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington to be specified in the label if there is a default
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington engine or the -E option has been used. Also, it
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington now uses default algorithms as dnssec-keygen does
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2706. [bug] Loading a zone with a very large NSEC3 salt could
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington trigger an assert. [RT #20368]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2705. [placeholder]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2704. [bug] Serial of dynamic and stub zones could be inconsistent
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington with their SOA serial. [RT #19387]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2703. [func] Introduce an OpenSSL "engine" argument with -E
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington for all binaries which can take benefit of
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington crypto hardware. [RT #20230]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2701. [doc] Correction to ARM: hmac-md5 is no longer the only
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington supported TSIG key algorithm. [RT #18046]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2700. [doc] The match-mapped-addresses option is discouraged.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2699. [bug] Missing lock in rbtdb.c. [RT #20037]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2698. [placeholder]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington S_IFREG are defined after including <isc/stat.h>.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2696. [bug] named failed to successfully process some valid
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington acl constructs. [RT #20308]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2695. [func] DHCP/DDNS - update fdwatch code for use by
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington DHCP. Modify the api to isc_sockfdwatch_t (the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington callback funciton for isc_socket_fdwatchcreate)
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews to include information about the direction (read
a903095bf4512dae561c7f6fc7854a51bebf334aMark Andrews or write) and add isc_socket_fdwatchpoke.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2693. [port] Add some noreturn attributes. [RT #20257]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2692. [port] win32: 32/64 bit cleanups. [RT #20335]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington chain when re-signing a previously-signed zone.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Use -u to modify NSEC3 parameters or switch
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington between NSEC and NSEC3. [RT #20304]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2689. [bug] Correctly handle snprintf result. [RT #20306]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington to decide to fetch the destination address. [RT #20305]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Also, added warnings when revoking a ZSK, as this is
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington not defined by protocol (but is legal). [RT #19943]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2686. [bug] dnssec-signzone should clean the old NSEC chain when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington signing with NSEC3 and vice versa. [RT #20301]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2684. [cleanup] dig: formalize +ad and +cd as synonyms for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington +adflag and +cdflag. [RT #19305]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington the NSEC3 parameters used to sign the zone change.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2682. [bug] "configure --enable-symtable=all" failed to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington build. [RT #20282]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington decoded. [RT #20269]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2679. [func] dig -k can now accept TSIG keys in named.conf
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington format. [RT #20031]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2678. [func] Treat DS queries as if "minimal-response yes;"
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington was set. [RT #20258]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2677. [func] Changes to key metadata behavior:
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - Keys without "publish" or "active" dates set will
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington no longer be used for smart signing. However,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington those dates will be set to "now" by default when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington a key is created; to generate a key but not use
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington it yet, use dnssec-keygen -G.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - New "inactive" date (dnssec-keygen/settime -I)
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington sets the time when a key is no longer used for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington signing but is still published.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington - The "unpublished" date (-U) is deprecated in
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington favor of "deleted" (-D).
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2676. [bug] --with-export-installdir should have been
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews --with-export-includedir. [RT #20252]
229ce407c359b0b641759ba1fc4a5fa2054a44daBrian Wellington2675. [bug] dnssec-signzone could crash if the key directory
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington did not exist. [RT #20232]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --- 9.7.0a3 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2674. [bug] "dnssec-lookaside auto;" crashed if named was built
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington without openssl. [RT #20231]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2673. [bug] The managed-keys.bind zone file could fail to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington load due to a spurious result from sync_keyzone()
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2672. [bug] Don't enable searching in 'host' when doing reverse
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington lookups. [RT #20218]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2671. [bug] Add support for PKCS#11 providers not returning
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington the public exponent in RSA private keys
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington (OpenCryptoki for instance) in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dnssec-keyfromlabel. [RT #19294]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2670. [bug] Unexpected connect failures failed to log enough
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington information to be useful. [RT #20205]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2669. [func] Update PKCS#11 support to support Keyper HSM.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington Update PKCS#11 patch to be against openssl-0.9.8i.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2668. [func] Several improvements to dnssec-* tools, including:
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington - dnssec-keygen and dnssec-settime can now set key
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington metadata fields 0 (to unset a value, use "none")
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - dnssec-revoke sets the revocation date in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington addition to the revoke bit
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - dnssec-settime can now print individual metadata
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington fields instead of always printing all of them,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington and can print them in unix epoch time format for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington use by scripts
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2667. [func] Add support for logging stack backtrace on assertion
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington failure (not available for all platforms). [RT #19780]
5e387b9ce6bafdfadedb5b34e4c33a4404e5d589Brian Wellington2666. [func] Added an 'options' argument to dns_name_fromstring()
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington (API change from 9.7.0a2). [RT #20196]
daa73eae708d568d453e6082e0890d35886a9e0fMark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington ARM documentation about RFC 5011 support. [RT #19874]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2664. [bug] create_keydata() and minimal_update() in zone.c
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington didn't properly check return values for some
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington functions. [RT #19956]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2663. [func] win32: allow named to run as a service using
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington "NT AUTHORITY\LocalService" as the account. [RT #19977]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington returned a misleading error code when lwresd was
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington down. [RT #20028]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington creating lwres context. [RT #20029]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2660. [func] Add a new set of DNS libraries for non-BIND9
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington applications. See README.libdns. [RT #19369]
7a6f285bc933d08353d2f18290c85def575b6e57Andreas Gustafsson2659. [doc] Clarify dnssec-keygen doc: key name must match zone
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington name for DNSSEC keys. [RT #19938]
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington2658. [bug] dnssec-settime and dnssec-revoke didn't process
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington key file paths correctly. [RT #20078]
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington2657. [cleanup] Lower "journal file <path> does not exist, creating it"
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington log level to debug 1. [RT #20058]
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington2656. [func] win32: add a "tools only" check box to the installer
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington which causes it to only install dig, host, nslookup,
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington nsupdate and relevant DLLs. [RT #19998]
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington2655. [doc] Document that key-directory does not affect
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington bind.keys, rndc.key or session.key. [RT #20155]
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington2654. [bug] Improve error reporting on duplicated names for
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington deny-answer-xxx. [RT #20164]
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington2653. [bug] Treat ENGINE_load_private_key() failures as key
a4c351fcef77fb332e3cb20253fb96556a414a17Brian Wellington not found rather than out of memory. [RT #18033]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2652. [func] Provide more detail about what record is being
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington deleted. [RT #20061]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2651. [bug] Dates could print incorrectly in K*.key files on
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington 64-bit systems. [RT #20076]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2650. [bug] Assertion failure in dnssec-signzone when trying
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington to read keyset-* files. [RT #20075]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington2649. [bug] Set the domain for forward only zones. [RT #19944]
6e93e6ea4557291e847aced6a88adcdf39f06843Andreas Gustafsson2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
6e93e6ea4557291e847aced6a88adcdf39f06843Andreas Gustafsson2647. [bug] Remove unnecessary SOA updates when a new KSK is
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington added. [RT #19913]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
75e1e12f48012505699f504cfa364260cb2bc1afBrian Wellington2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington which default to 64 bits. [RT #19927]
23f64ea0dcd7f5b7094ae6ade2a002fb7dde1466Brian Wellington --- 9.7.0a2 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2644. [bug] Change #2628 caused a regression on some systems;
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington named was unable to write the PID file and would
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington fail on startup. [RT #20001]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2643. [bug] Stub zones interacted badly with NSEC3 support.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2642. [bug] nsupdate could dump core on solaris when reading
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington improperly formatted key files. [RT #20015]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2641. [bug] Fixed an error in parsing update-policy syntax,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington added a regression test to check it. [RT #20007]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2640. [security] A specially crafted update packet will cause named
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington to exit. [RT #20000]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2638. [bug] Install arpaname. [RT #19957]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2636. [func] Simplify zone signing and key maintenance with the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dnssec-* tools. Major changes:
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - all dnssec-* tools now take a -K option to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington specify a directory in which key files will be
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - DNSSEC can now store metadata indicating when
7a6f285bc933d08353d2f18290c85def575b6e57Andreas Gustafsson they are scheduled to be published, activated,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington revoked or removed; these values can be set by
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dnssec-keygen or overwritten by the new
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dnssec-settime command
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - dnssec-signzone -S (for "smart") option reads key
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington metadata and uses it to determine automatically
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington which keys to publish to the zone, use for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington signing, revoke, or remove from the zone
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2634. [port] win32: Add support for libxml2, enable
fefe1106d96d3a89b21315f665b36a67cdea3840Mark Andrews statschannel. [RT #19773]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2633. [bug] Handle 15 bit rand() functions. [RT #19783]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2632. [func] util/kit.sh: warn if documentation appears to be out of
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington date. [RT #19922]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2630. [func] Improved syntax for DDNS autoconfiguration: use
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington "update-policy local;" to switch on local DDNS in a
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington zone. (The "ddns-autoconf" option has been removed.)
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2629. [port] Check for seteuid()/setegid(), use setresuid()/
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington setresgid() if not present. [RT #19932]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2628. [port] linux: Allow /var/run/named/named.pid to be opened
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington at startup with reduced capabilities in operation.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2627. [bug] Named aborted if the same key was included in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington trusted-keys more than once. [RT #19918]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2626. [bug] Multiple trusted-keys could trigger an assertion
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington failure. [RT #19914]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2624. [func] 'named-checkconf -p' will print out the parsed
c302b021cc65cc9a358a9a1cbe48de12364f4cb6Brian Wellington configuration. [RT #18871]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2623. [bug] Named started seaches for DS non-optimally. [RT #19915]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2621. [doc] Made copyright boilterplate consistent. [RT #19833]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2620. [bug] Delay thawing the zone until the reload of it has
0a45f098e446a7f41c2a71d9dd0fd8f459b49c34Brian Wellington completed successfully. [RT #19750]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2619. [func] Add support for RFC 5011, automatic trust anchor
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington maintenance. The new "managed-keys" statement can
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington be used in place of "trusted-keys" for zones which
c302b021cc65cc9a358a9a1cbe48de12364f4cb6Brian Wellington support this protocol. (Note: this syntax is
c302b021cc65cc9a358a9a1cbe48de12364f4cb6Brian Wellington expected to change prior to 9.7.0 final.) [RT #19248]
c302b021cc65cc9a358a9a1cbe48de12364f4cb6Brian Wellington2618. [bug] The sdb and sdlz db_interator_seek() methods could
c302b021cc65cc9a358a9a1cbe48de12364f4cb6Brian Wellington loop infinitely. [RT #19847]
c302b021cc65cc9a358a9a1cbe48de12364f4cb6Brian Wellington2617. [bug] ifconfig.sh failed to emit an error message when
c302b021cc65cc9a358a9a1cbe48de12364f4cb6Brian Wellington run from the wrong location. [RT #19375]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2616. [bug] 'host' used the nameservers from resolv.conf even
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington when a explicit nameserver was specified. [RT #19852]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2615. [bug] "__attribute__((unused))" was in the wrong place
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington for ia64 gcc builds. [RT #19854]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2614. [port] win32: 'named -v' should automatically be executed
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington in the foreground. [RT #19844]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2613. [placeholder]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --- 9.7.0a1 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2612. [func] Add default values for the arguments to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dnssec-keygen. Without arguments, it will now
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington generate a 1024-bit RSASHA1 zone-signing key,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington or with the -f KSK option, a 2048-bit RSASHA1
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington key-signing key. [RT #19300]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2611. [func] Add -l option to dnssec-dsfromkey to generate
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington DLV records instead of DS records. [RT #19300]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2610. [port] sunos: Change #2363 was not complete. [RT #19796]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2609. [func] Simplify the configuration of dynamic zones:
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - add ddns-confgen command to generate
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington configuration text for named.conf
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - add zone option "ddns-autoconf yes;", which
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington causes named to generate a TSIG session key
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington and allow updates to the zone using that key
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington - add '-l' (localhost) option to nsupdate, which
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington causes nsupdate to connect to a locally-running
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington named process using the session key generated
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2608. [func] Perform post signing verification checks in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dnssec-signzone. These can be disabled with -P.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington The post sign verification test ensures that for each
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington algorithm in use there is at least one non revoked
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington self signed KSK key. That all revoked KSK keys are
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington self signed. That all records in the zone are signed
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington by the algorithm. [RT #19653]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2607. [bug] named could incorrectly delete NSEC3 records for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington empty nodes when processing a update request.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2606. [bug] "delegation-only" was not being accepted in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington delegation-only type zones. [RT #19717]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2605. [bug] Accept DS responses from delegation only zones.
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews2604. [func] Add support for DNS rebinding attack prevention through
cfcb0881d12db2b7cb33475b7d20ac6c9015203bMark Andrews new options, deny-answer-addresses and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington deny-answer-aliases. Based on contributed code from
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington JD Nurmi, Google. [RT #18192]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2603. [port] win32: handle .exe extension of named-checkzone and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington named-comilezone argv[0] names under windows.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2602. [port] win32: fix debugging command line build of libisccfg.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2601. [doc] Mention file creation mode mask in the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington named manual page.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2600. [doc] ARM: miscellaneous reformatting for different
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington page widths. [RT #19574]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2599. [bug] Address rapid memory growth when validation fails.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2598. [func] Reserve the -F flag. [RT #19657]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2597. [bug] Handle a validation failure with a insecure delegation
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington from a NSEC3 signed master/slave zone. [RT #19464]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington long, leading to inefficient memory usage or rejecting
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington newer cache entries in the worst case. [RT #19563]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2594. [func] Have rndc warn if using its default configuration
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington file when the key file also exists. [RT #19424]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
7a6f285bc933d08353d2f18290c85def575b6e57Andreas Gustafsson2591. [bug] named could die when processing a update in
7a6f285bc933d08353d2f18290c85def575b6e57Andreas Gustafsson removed_orphaned_ds(). [RT #19507]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2590. [func] Report zone/class of "update with no effect".
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2588. [bug] SO_REUSEADDR could be set unconditionally after failure
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington of bind(2) call. This should be rare and mostly
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington harmless, but may cause interference with other
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington processes that happen to use the same port. [RT #19642]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2587. [func] Improve logging by reporting serial numbers for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington when zone serial has gone backwards or unchanged.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington or SDB. [RT #19577]
7a6f285bc933d08353d2f18290c85def575b6e57Andreas Gustafsson2585. [bug] Uninitialized socket name could be referenced via a
7a6f285bc933d08353d2f18290c85def575b6e57Andreas Gustafsson statistics channel, triggering an assertion failure in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington XML rendering. [RT #19427]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2584. [bug] alpha: gcc optimization could break atomic operations.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2583. [port] netbsd: provide a control to not add the compile
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington date to the version string, -DNO_VERSION_DATE.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2582. [bug] Don't emit warning log message when we attempt to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington remove non-existent journal. [RT #19516]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Requires MySQL 5.0.19 or later. [RT #19084]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2580. [bug] UpdateRej statistics counter could be incremented twice
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington for one rejection. [RT #19476]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2579. [bug] DNSSEC lookaside validation failed to handle unknown
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington algorithms. [RT #19479]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2578. [bug] Changed default sig-signing-type to 65534, because
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington 65535 turns out to be reserved. [RT #19477]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2577. [doc] Clarified some statistics counters. [RT #19454]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2576. [bug] NSEC record were not being correctly signed when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington a zone transitions from insecure to secure.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Handle such incorrectly signed zones. [RT #19114]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2575. [func] New functions dns_name_fromstring() and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dns_name_tostring(), to simplify conversion
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington of a string to a dns_name structure and vice
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington versa. [RT #19451]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2574. [doc] Document nsupdate -g and -o. [RT #19351]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2573. [bug] Replacing a non-CNAME record with a CNAME record in a
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington single transaction in a signed zone failed. [RT #19397]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2572. [func] Simplify DLV configuration, with a new option
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington "dnssec-lookaside auto;" This is the equivalent
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington of "dnssec-lookaside . trust-anchor dlv.isc.org;"
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington plus setting a trusted-key for dlv.isc.org.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington Note: The trusted key is hard-coded into named,
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington but is also stored in (and can be overridden
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington by) $sysconfdir/bind.keys. As the ISC DLV key
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington rolls over it can be kept up to date by replacing
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington the bind.keys file with a key downloaded from
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington https://www.isc.org/solutions/dlv. [RT #18685]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2571. [func] Add a new tool "arpaname" which translates IP addresses
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2570. [func] Log the destination address the query was sent to.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2569. [func] Move journalprint, nsec3hash, and genrandom
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington "make install" will put them in $sbindir. [RT #19301]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2568. [bug] Report when the write to indicate a otherwise
daa73eae708d568d453e6082e0890d35886a9e0fMark Andrews successful start fails. [RT #19360]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2567. [bug] dst__privstruct_writefile() could miss write errors.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington write_public_key() could miss write errors.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington dnssec-dsfromkey could miss write errors.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2566. [cleanup] Clarify logged message when an insecure DNSSEC
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington response arrives from a zone thought to be secure:
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington "insecurity proof failed" instead of "not
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington insecure". [RT #19400]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2565. [func] Add support for HIP record. Includes new functions
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington dns_rdata_hip_first(), dns_rdata_hip_next()
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington and dns_rdata_hip_current(). [RT #19384]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2564. [bug] Only take EDNS fallback steps when processing timeouts.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2563. [bug] Dig could leak a socket causing it to wait forever
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington to exit. [RT #19359]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2562. [doc] ARM: miscellaneous improvements, reorganization,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington and some new content.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2559. [bug] dnssec-dsfromkey could compute bad DS records when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington reading from a K* files. [RT #19357]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2558. [func] Set the ownership of missing directories created
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington for pid-file if -u has been specified on the command
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington line. [RT #19328]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2557. [cleanup] PCI compliance:
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington * new libisc log module file
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington * isc_dir_chroot() now also changes the working
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington directory to "/".
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington * additional INSISTs
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington * additional logging when files can't be removed.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington error checks in the correct order resulting in the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington wrong error code sometimes being returned. [RT #19249]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2555. [func] dig: when emitting a hex dump also display the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington corresponding characters. [RT #19258]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2554. [bug] Validation of uppercase queries from NSEC3 zones could
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington fail. [RT #19297]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2552. [bug] zero-no-soa-ttl-cache was not being honoured.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2551. [bug] Potential Reference leak on return. [RT #19341]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2549. [port] linux: define NR_OPEN if not currently defined.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2548. [bug] Install iterated_hash.h. [RT #19335]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2547. [bug] openssl_link.c:mem_realloc() could reference an
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington out-of-range area of the source buffer. New public
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington function isc_mem_reallocate() was introduced to address
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington this bug. [RT #19313]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2546. [func] Add --enable-openssl-hash configure flag to use
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington OpenSSL (in place of internal routine) for hash
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington functions (MD5, SHA[12] and HMAC). [RT #18815]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2545. [doc] ARM: Legal hostname checking (check-names) is
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington for SRV RDATA too. [RT #19304]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2542. [doc] Update the description of dig +adflag. [RT #19290]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2541. [bug] Conditionally update dispatch manager statistics.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2539. [security] Update the interaction between recursion, allow-query,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington allow-query-cache and allow-recursion. [RT #19198]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
b55c30f2de6e1baaa3a9ba69b92f428f2c255ac3Mark Andrews especially with threads and smaller max-cache-size
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington values. [RT #19240]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2537. [func] Added more statistics counters including those on socket
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington I/O events and query RTT histograms. [RT #18802]
f8abaa0fae7f75d9601c10b6a4af8dd907494d45Mark Andrews2536. [cleanup] Silence some warnings when -Werror=format-security is
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington specified. [RT #19083]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2534. [func] Check NAPTR records regular expressions and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington replacement strings to ensure they are syntactically
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington valid and consistant. [RT #18168]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2533. [doc] ARM: document @ (at-sign). [RT #17144]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2532. [bug] dig: check the question section of the response to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington see if it matches the asked question. [RT #18495]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2531. [bug] Change #2207 was incomplete. [RT #19098]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2530. [bug] named failed to reject insecure to secure transitions
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington via UPDATE. [RT #19101]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2529. [cleanup] Upgrade libtool to silence complaints from recent
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington version of autoconf. [RT #18657]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2528. [cleanup] Silence spurious configure warning about
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --datarootdir [RT #19096]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2527. [placeholder]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2526. [func] New named option "attach-cache" that allows multiple
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington views to share a single cache to save memory and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington improve lookup efficiency. Based on contributed code
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington from Barclay Osborn, Google. [RT #18905]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2525. [func] New logging category "query-errors" to provide detailed
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington internal information about query failures, especially
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington about server failures. [RT #19027]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2523. [bug] Random type rdata freed by dns_nsec_typepresent().
4a30ede93d59137009db734661cde17612e8ffbeMark Andrews2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
4a30ede93d59137009db734661cde17612e8ffbeMark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews #2388 made the schema incompatible to the previous
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews version. [RT #19080]
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews nameserver addresses of the excluded address family
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington preceded in resolv.conf. [RT #19081]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2518. [func] Add support for the new CERT types from RFC 4398.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2517. [bug] dig +trace with -4 or -6 failed when it chose a
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington nameserver address of the excluded address type.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2516. [bug] glue sort for responses was performed even when not
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington needed. [RT #19039]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington a nameserver of the excluded address family.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2513. [bug] Fix windows cli build. [RT #19062]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2512. [func] Print a summary of the cached records which make up
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington the negative response. [RT #18885]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
a03848252fa85734ca75beae3d0b01bb503c0a8bMark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2509. [bug] Specifying a fixed query source port was broken.
6fd4ab217ef8e37703b029eac5ab7ae4f7a663c9Brian Wellington2508. [placeholder]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2507. [func] Log the recursion quota values when killing the
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington oldest query or refusing to recurse due to quota.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2506. [port] solaris: Check at configure time if
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington hack_shutup_pthreadonceinit is needed. [RT #19037]
77ac297199fc44809d9628558223627c10ae3f31Brian Wellington2505. [port] Treat amd64 similarly to x86_64 when determining
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington atomic operation support. [RT #19031]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2504. [bug] Address race condition in the socket code. [RT #18899]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2503. [port] linux: improve compatibility with Linux Standard
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Base. [RT #18793]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2502. [cleanup] isc_radix: Improve compliance with coding style,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington document function in <isc/radix.h>. [RT #18534]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2501. [func] $GENERATE now supports all rdata types. Multi-field
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington rdata types need to be quoted. See the ARM for
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington details. [RT #18368]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington function. [RT #18582]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --- 9.6.0rc1 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2498. [bug] Removed a bogus function argument used with
18d0b5e54be891a1aa938c165b6d439859121ec8Mark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington warning or crash named with the debug 1 level
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington of logging. [RT #18917]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2496. [bug] Add sanity length checks to NSID option. [RT #18813]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2495. [bug] Tighten RRSIG checks. [RT #18795]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington installed. [RT #18826]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2493. [bug] The linux capabilities code was not correctly cleaning
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington up after itself. [RT #18767]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2492. [func] Rndc status now reports the number of cpus discovered
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington and the number of worker threads when running
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington multi-threaded. [RT #18273]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2491. [func] Attempt to re-use a local port if we are already using
34f991028382079af7c2b53bac6768803ff28f8cBrian Wellington the port. [RT #18548]
e2fd12f3a020ca8c5de168a44fb72e339cdaa3e9Brian Wellington2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington is cleared when IPV6_V6ONLY is set. [RT #18785]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2489. [port] solaris: Workaround Solaris's kernel bug about
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington Define ISC_SOCKET_USE_POLLWATCH at build time to enable
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington this workaround. [RT #18870]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington from keyset and .key files. [RT #18694]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2487. [bug] Give TCP connections longer to complete. [RT #18675]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2486. [func] The default locations for named.pid and lwresd.pid
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington This allows the owner of the containing directory
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington to be set, for "named -u" support, and allows there
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington to be a permanent symbolic link in the path, for
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington "named -t" support. [RT #18306]
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington2485. [bug] Change update's the handling of obscured RRSIG
f24c135e09214c3843a49fd32ebef2f6a436ba8eBrian Wellington records. Not all orphaned DS records were being
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington removed. [RT #18828]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2484. [bug] It was possible to trigger a REQUIRE failure when
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington adding NSEC3 proofs to the response in
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington query_addwildcardproof(). [RT #18828]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2483. [port] win32: chroot() is not supported. [RT #18805]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2482. [port] libxml2: support versions 2.7.* in addition
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington to 2.6.*. [RT #18806]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington --- 9.6.0b1 released ---
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington collisions. [RT #18812]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2480. [bug] named could fail to emit all the required NSEC3
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington records. [RT #18812]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2478. [bug] 'addresses' could be used uninitialized in
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington configure_forward(). [RT #18800]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2477. [bug] dig: the global option to print the command line is
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington +cmd not print_cmd. Update the output to reflect
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington this. [RT #17008]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2476. [doc] ARM: improve documentation for max-journal-size and
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington ixfr-from-differences. [RT #15909] [RT #18541]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2475. [bug] LRU cache cleanup under overmem condition could purge
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington particular entries more aggressively. [RT #17628]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2474. [bug] ACL structures could be allocated with insufficient
35541328a8c18ba1f984300dfe30ec8713c90031Mark Andrews space, causing an array overrun. [RT #18765]
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉2473. [port] linux: raise the limit on open files to the possible
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 maximum value before spawning threads; 'files'
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 specified in named.conf doesn't seem to work with
d0eb2cc33c5db3366a16b1cb0abcca6ec7c8ee3cTatuya JINMEI 神明達哉 threads as expected. [RT #18784]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2472. [port] linux: check the number of available cpu's before
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington calling chroot as it depends on "/proc". [RT #16923]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2471. [bug] named-checkzone was not reporting missing mandatory
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington glue when sibling checks were disabled. [RT #18768]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2470. [bug] Elements of the isc_radix_node_t could be incorrectly
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington overwritten. [RT# 18719]
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2469. [port] solaris: Work around Solaris's select() limitations.
a012d6dbfb100390efa7d0d4be64ada0210b09ddBrian Wellington2468. [bug] Resolver could try unreachable servers multiple times.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2465. [bug] Adb's handling of lame addresses was different
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington for IPv4 and IPv6. [RT #18738]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2464. [port] linux: check that a capability is present before
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington trying to set it. [RT #18135]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington API and glibc hides parts of the IPv6 Advanced Socket
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington API as a result. This is stupid as it breaks how the
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington two halves (Basic and Advanced) of the IPv6 Socket API
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington were designed to be used but we have to live with it.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington API. [RT #18388]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2462. [doc] Document -m (enable memory usage debugging)
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington option for dig. [RT #18757]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2461. [port] sunos: Change #2363 was not complete. [RT #17513]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington --- 9.6.0a1 released ---
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2458. [doc] ARM: update and correction for max-cache-size.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2457. [tuning] max-cache-size is reverted to 0, the previous
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington default. It should be safe because expired cache
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington entries are also purged. [RT #18684]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington address, regardless of family. They now correctly
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington distinguish IPv4 from IPv6. [RT #18559]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2455. [bug] Stop metadata being transferred via axfr/ixfr.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2453. [bug] Remove NULL pointer dereference in dns_journal_print().
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2452. [func] Improve bin/test/journalprint. [RT #18316]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2451. [port] solaris: handle runtime linking better. [RT #18356]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2450. [doc] Fix lwresd docbook problem for manual page.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2449. [placeholder]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2448. [func] Add NSEC3 support. [RT #15452]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2447. [cleanup] libbind has been split out as a separate product.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2446. [func] Add a new log message about build options on startup.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington A new command-line option '-V' for named is also
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington provided to show this information. [RT# 18645]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2445. [doc] ARM out-of-date on empty reverse zones (list includes
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington RFC1918 address, but these are not yet compiled in).
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington (clear DF) for UDP responses and requests.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2443. [bug] win32: UDP connect() would not generate an event,
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington and so connected UDP sockets would never clean up.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington Fix this by doing an immediate WSAConnect() rather
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington than an io completion port type for UDP.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2442. [bug] A lock could be destroyed twice. [RT# 18626]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2441. [bug] isc_radix_insert() could copy radix tree nodes
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington incompletely. [RT #18573]
78838d3e0cd62423c23de5503910e01884d2104bBrian Wellington2440. [bug] named-checkconf used an incorrect test to determine
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington if an ACL was set to none.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
b7cd261f2fca2c7138cdc6ae8ee434e9c0031303Brian Wellington2438. [bug] Timeouts could be logged incorrectly under win32.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2437. [bug] Sockets could be closed too early, leading to
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington inconsistent states in the socket module. [RT #18298]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2435. [bug] Fixed an ACL memory leak affecting win32.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2434. [bug] Fixed a minor error-reporting bug in
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2433. [tuning] Set initial timeout to 800ms.
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington2432. [bug] More Windows socket handling improvements. Stop
60b90a37f41ab7607762d0e9791e79bd19eae4f4Brian Wellington using I/O events and use IO Completion Ports
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington throughout. Rewrite the receive path logic to make
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington it easier to support multiple simultaneous
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington requesters in the future. Add stricter consistency
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington checking as a compile-time option (define
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2431. [bug] Acl processing could leak memory. [RT #18323]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2430. [bug] win32: isc_interval_set() could round down to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington zero if the input was less than NS_INTERVAL
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington nanoseconds. Round up instead. [RT #18549]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2429. [doc] nsupdate should be in section 1 of the man pages.
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2428. [bug] dns_iptable_merge() mishandled merges of negative
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington tables. [RT #18409]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington was set. [RT #18528]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2426. [bug] libbind: inet_net_pton() can sometimes return the
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington wrong value if excessively large net masks are
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington supplied. [RT #18512]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2425. [bug] named didn't detect unavailable query source addresses
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington at load time. [RT #18536]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2424. [port] configure now probes for a working epoll
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington implementation. Allow the use of kqueue,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington epoll and /dev/poll to be selected at compile
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington time. [RT #18277]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2423. [security] Randomize server selection on queries, so as to
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington make forgery a little more difficult. Instead of
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington always preferring the server with the lowest RTT,
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington pick a server with RTT within the same 128
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington millisecond band. [RT #18441]
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington2422. [bug] Handle the special return value of a empty node as
033ba09d6df0ac92a736a480b9c3b164b61dccb2Brian Wellington if it was a NXRRSET in the validator. [RT #18447]
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which