CHANGES revision 5a8edcafd13fc63a066e8e42e0f95cdbf9606414
280a8a0544b4aeb52414d20e8c6e6c5b1108562eTinderbox User3847. [bug] 'configure --with-dlz-postgres' failed to fail when
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt there is not support available.
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User3846. [bug] "dig +notcp ixfr=<serial>" should result in a UDP
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User ixfr query. [RT #35980]
59663800d2ec04777dae2791dd92aa563faf94c8Evan Hunt3845. [placeholder]
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews3844. [bug] Use the x64 version of the Microsoft Visual C++
59663800d2ec04777dae2791dd92aa563faf94c8Evan Hunt Redistributable when built for 64 bit Windows.
1ca2cf024391992fe14b2df7d3ae0f575d074452Evan Hunt3843. [protocol] Check EDNS EXPIRE option in dns_rdata_fromwire.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3842. [bug] Adjust RRL log-only logging category. [RT #35945]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3841. [cleanup] Refactor zone.c:add_opt to use dns_message_buildopt.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3840. [port] Check for arc4random_addrandom() before using it;
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews it's been removed from OpenBSD 5.5. [RT #35907]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3839. [test] Use only posix-compatible shell in system tests.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3838. [protocol] EDNS EXPIRE as been assigned a code point of 9.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3837. [security] A NULL pointer is passed to query_prefetch resulting
415d630b6309922caee8469384a6fab75cf05032Mark Andrews a REQUIRE assertion failure when a fetch is actually
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews initiated (CVE-2014-3214). [RT #35899]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3836. [bug] Address C++ keyword usage in header file.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3835. [bug] Geoip ACL elements didn't work correctly when
415d630b6309922caee8469384a6fab75cf05032Mark Andrews referenced via named or nested ACLs. [RT #35879]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3834. [bug] The re-signing heaps were not being updated soon enough
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User leading to multiple re-generations of the same RRSIG
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews when a zone transfer was in progress. [RT #35273]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3833. [bug] Cross compiling was broken due to calling genrandom at
415d630b6309922caee8469384a6fab75cf05032Mark Andrews build time. [RT #35869]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3832. [func] "named -L <filename>" causes named to send log
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews messages to the specified file by default instead
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User of to the system log. (Thanks to Tony Finch.)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3831. [cleanup] Reduce logging noise when EDNS state changes occur.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3830. [func] When query logging is enabled, log query errors at
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the same level ('info') as the queries themselves.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3829. [func] "dig +ttlunits" causes dig to print TTL values
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews with time-unit suffixes: w, d, h, m, s for
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt weeks, days, hours, minutes, and seconds. (Thanks
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to Tony Finch.) [RT #35823]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3828. [func] "dnssec-signzone -N date" updates serial number
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to the current date in YYYYMMDDNN format.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3827. [placeholder]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3826. [bug] Corrected bad INSIST logic in isc_radix_remove().
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3825. [bug] Address sign extension bug in isc_regex_validate.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3824. [bug] A collision between two flag values could cause
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews problems with cache cleaning when SIT was enabled.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3823. [func] Log the rpz cname target when rewriting. [RT #35667]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3822. [bug] Log the correct type of static-stub zones when
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews removing them. [RT #35842]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3821. [contrib] Added a new "mysqldyn" DLZ module with dynamic
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews update and transaction support. Thanks to Marty
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews Lee for the contribution. [RT #35656]
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews3820. [func] The DLZ API doesn't pass the database version to
415d630b6309922caee8469384a6fab75cf05032Mark Andrews the lookup() function; this can cause DLZ modules
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt that allow dynamic updates to mishandle prerequisite
415d630b6309922caee8469384a6fab75cf05032Mark Andrews checks. This has been corrected by adding a
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews 'dbversion' field to the dns_clientinfo_t
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User structure. [RT #35656]
7cc0a5d21ef046bfd630c4769943d896a7d7472cTinderbox User3819. [bug] NSEC3 hashes need to be able to be entered and
e76dfff967cfbe00f4d1540434832e4499a9cd83Tinderbox User displayed without padding. This is not a issue for
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews currently defined algorithms but may be for future
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User hash algorithms. [RT #27925]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3818. [bug] Stop lying to the optimizer that 'void *arg' is a
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User constant in isc_event_allocate.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3817. [func] The "delve" command is now spelled "delv" to avoid
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User a namespace collision with the Xapian project.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3816. [func] "dig +qr" now reports query size. (Thanks to
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User Tony Finch.) [RT #35822]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3815. [doc] Clarify "nsupdate -y" usage in man page. [RT #35808]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3814. [func] The "masterfile-style" zone option controls the
415d630b6309922caee8469384a6fab75cf05032Mark Andrews formatting of dumped zone files. Options are
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews "relative" (multiline format) and "full" (one
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User record per line). The default is "relative".
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews3813. [func] "host" now recognizes the "timeout", "attempts" and
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews "debug" options when set in /etc/resolv.conf.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User (Thanks to Adam Tkac at RedHat.) [RT #21885]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3812. [func] Dig now supports sending arbitary EDNS options from
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson the command line (+ednsopt=code[:value]). [RT #35584]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3811. [func] "serial-update-method date;" sets serial number
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User on dynamic update to today's date in YYYYMMDDNN
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews format. (Thanks to Bradley Forschinger.) [RT #24903]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3810. [bug] Work around broken nameservers that fail to ignore
415d630b6309922caee8469384a6fab75cf05032Mark Andrews unknown EDNS options. [RT #35766]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3809. [doc] Fix SIT and NSID documentation.
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark Andrews3808. [doc] Clean up "prefetch" documentation. [RT #35751]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3807. [bug] Fix sign extention bug in dns_name_fromtext when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews lowercase is set. [RT #35743]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3806. [test] Improved system test portability. [RT #35625]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3805. [contrib] Added contrib/perftcpdns, a performance testing tool
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for DNS over TCP. [RT #35710]
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont --- 9.10.0rc1 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3804. [bug] Corrected a race condition in dispatch.c in which
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont portentry could be reset leading to an assertion
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews failure in socket_search(). (Change #3708
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews addressed the same issue but was incomplete.)
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3803. [bug] "named-checkconf -z" incorrectly rejected zones
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews using alternate data sources for not having a "file"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews option. [RT #35685]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3802. [bug] Various header files were not being installed.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3801. [port] Fix probing for gssapi support on FreeBSD. [RT #35615]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3800. [bug] A pending event on the route socket could cause an
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox User assertion failure when shutting down named. [RT #35674]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3799. [bug] Improve named's command line error reporting.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3798. [bug] 'rndc zonestatus' was reporting the wrong re-signing
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews time. [RT #35659]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3797. [port] netbsd: geoip support probing was broken. [RT #35642]
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater3796. [bug] Register dns and pkcs#11 error codes. [RT #35629]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3795. [bug] Make named-checkconf detect raw masterfiles for
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews hint zones and reject them. [RT #35268]
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater3794. [maint] Added AAAA for C.ROOT-SERVERS.NET.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3793. [bug] zone.c:save_nsec3param() could assert when out of
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User memory. [RT #35621]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3792. [func] Provide links to the alternate statistics views when
fa0326cc2cf428f67575b6ba3b97b528a31b0010Tinderbox User displaying in a browser. [RT #35605]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3791. [placeholder]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3790. [bug] Handle broken nameservers that send BADVERS in
415d630b6309922caee8469384a6fab75cf05032Mark Andrews response to unknown EDNS options. Maintain
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater statistics on BADVERS responses.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3789. [bug] Null pointer dereference on rbt creation failure.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3788. [bug] dns_peer_getrequestsit was returning request_nsid by
415d630b6309922caee8469384a6fab75cf05032Mark Andrews --- 9.10.0b2 released ---
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3787. [bug] The code that checks whether "auto-dnssec" is
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews allowed was ignoring "allow-update" ACLs set at
415d630b6309922caee8469384a6fab75cf05032Mark Andrews the options or view level. [RT #29536]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3786. [func] Provide more detailed error codes when using
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews native PKCS#11. "pkcs11-tokens" now fails robustly
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User rather than asserting when run against an HSM with
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews an incomplete PKCS#11 API implementation. [RT #35479]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater3785. [bug] Debugging code dumphex didn't accept arbitrarily long
415d630b6309922caee8469384a6fab75cf05032Mark Andrews input (only compiled with -DDEBUG). [RT #35544]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3784. [bug] Using "rrset-order fixed" when it had not been
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews enabled at compile time caused inconsistent
415d630b6309922caee8469384a6fab75cf05032Mark Andrews results. It now works as documented, defaulting
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson to cyclic mode. [RT #28104]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3783. [func] "tsig-keygen" is now available as an alternate
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User command name for "ddns-confgen". It generates
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews a TSIG key in named.conf format without comments.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3782. [func] Specifying "auto" as the salt when using
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews "rndc signing -nsec3param" causes named to
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User generate a 64-bit salt at random. [RT #35322]
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User3781. [tuning] Use adaptive mutex locks when available; this
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User has been found to improve performance under load
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User on many systems. "configure --with-locktype=standard"
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User restores conventional mutex locks. [RT #32576]
dc7e5458bbcb59ea310ed64ac7e77016e62e9c15Tinderbox User3780. [bug] $GENERATE handled negative numbers incorrectly.
fab54780409846f7c71f6026d665f18c77c649efTinderbox User3779. [cleanup] Clarify the error message when using an option
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews that was not enabled at compile time. [RT #35504]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3778. [bug] Log a warning when the wrong address family is
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User used in "listen-on" or "listen-on-v6". [RT #17848]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3777. [bug] EDNS EXPIRE code could dump core when processing
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User DLZ queries. [RT #35493]
8927a982bde7e4b665966b55f0fa57c5cf21b9d8Mark Andrews3776. [func] "rndc -q" suppresses output from successful
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User rndc commands. Errors are printed on stderr.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3775. [bug] dlz_dlopen driver could return the wrong error
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews code on API version mismatch, leading to a segfault.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3774. [func] When using "request-nsid", log the NSID value in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews printable form as well as hex. [RT #20864]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3773. [func] "host", "nslookup" and "nsupdate" now have
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User options to print the version number and exit.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3772. [contrib] Added sqlite3 dynamically-loadable DLZ module.
c317b09bf112121245fafe61f38b95dc6e96acabTinderbox User (Based in part on a contribution from Tim Tessier.)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3771. [cleanup] Adjusted log level for "using built-in key"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews messages. [RT #24383]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3770. [bug] "dig +trace" could fail with an assertion when it
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews needed to fall back to TCP due to a truncated
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews response. [RT #24660]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3769. [doc] Improved documentation of "rndc signing -list".
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3768. [bug] "dnssec-checkds" was missing the SHA-384 digest
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews algorithm. [RT #34000]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3767. [func] Log explicitly when using rndc.key to configure
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews command channel. [RT #35316]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3766. [cleanup] Fixed problems with building outside the source
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews tree when using native PKCS#11. [RT #35459]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3765. [bug] Fixed a bug in "rndc secroots" that could crash
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named when dumping an empty keynode. [RT #35469]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3764. [bug] The dnssec-keygen/settime -S and -i options
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User (to set up a successor key and set the prepublication
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews interval) were missing from dnssec-keyfromlabel.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3763. [bug] delve: Cache DNSSEC records to avoid the need to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews re-fetch them when restarting validation. [RT #35476]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3762. [bug] Address build problems with --pkcs11-native +
2ca9cf1582ae972f8edc2b03bd846973b05dee6bTinderbox User --with-openssl with ECDSA support. [RT #35467]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3761. [bug] Address dangling reference bug in dns_keytable_add.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3760. [bug] Improve SIT with native PKCS#11 and on Windows.
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User3759. [port] Enable delve on Windows. [RT #35441]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3758. [port] Enable export library APIs on Windows. [RT #35382]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3757. [port] Enable Python tools (dnssec-coverage,
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User dnssec-checkds) to run on Windows. [RT #34355]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3756. [bug] GSSAPI Kerberos realm checking was broken in
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User check_config leading to spurious messages being
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User logged. [RT #35443]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews --- 9.10.0b1 released ---
a2c370ca12bb0360ff7e969474ead3f788c65fffTinderbox User3755. [func] Add stats counters for known EDNS options + others.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3754. [cleanup] win32: Installer now places files in the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Program Files area rather than system services.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3753. [bug] allow-notify was ignoring keys. [RT #35425]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3752. [bug] Address potential REQUIRE failure if
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson DNS_STYLEFLAG_COMMENTDATA is set when printing out
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3751. [tuning] The default setting for the -U option (setting
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews the number of UDP listeners per interface) has
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User been adjusted to improve performance. [RT #35417]
8292deab031e7599cd7622aa7675fbe139ca6095Mark Andrews3750. [experimental] Partially implement EDNS EXPIRE option as described
c1e2310a3725eeed45e5e7c86750c64c5a02e993Francis Dupont in draft-andrews-dnsext-expire-00. Retrieval of
c1e2310a3725eeed45e5e7c86750c64c5a02e993Francis Dupont the remaining time until expiry for slave zones
4b61b671f5de767ec1d1b8e6cf7b849bddf08e98Tinderbox User is supported.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews EXPIRE uses an experimental option code (65002),
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont which is subject to change. [RT #35416]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3749. [func] "dig +subnet" sends an EDNS client subnet option
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews containing the specified address/prefix when
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont querying. (Thanks to Wilmer van der Gaast.)
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3748. [test] Use delve to test dns_client interfaces. [RT #35383]
f1a2709aad7baa4161fdb6f63edf99b0150af252Evan Hunt3747. [bug] A race condition could lead to a core dump when
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews destroying a resolver fetch object. [RT #35385]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3746. [func] New "max-zone-ttl" option enforces maximum
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews TTLs for zones. If loading a zone containing a
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews higher TTL, the load fails. DDNS updates with
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews higher TTLs are accepted but the TTL is truncated.
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater (Note: Currently supported for master zones only;
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews inline-signing slaves will be added.) [RT #38405]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3745. [func] "configure --with-tuning=large" adjusts various
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews compiled-in constants and default settings to
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews values suited to large servers with abundant
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater memory. [RT #29538]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3744. [experimental] SIT: send and process Source Identity Tokens
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User (similar to DNS Cookies by Donald Eastlake 3rd),
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews which are designed to help clients detect off-path
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews spoofed responses and for servers to identify
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater legitimate clients.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews SIT uses an experimental EDNS option code (65001),
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User which will be changed to an IANA-assigned value
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews if the experiment is deemed a success.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews SIT can be enabled via "configure --enable-sit" (or
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews --enable-developer). It is enabled by default in
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews Servers can be configured to send smaller responses
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews to clients that have not identified themselves via
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews SIT. RRL processing has also been updated;
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews legitimate clients are not subject to rate
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews limiting. [RT #35389]
168cf0ede1cf13a095e48af6749d88fbc432f096Evan Hunt3743. [bug] delegation-only flag wasn't working in forward zone
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews declarations despite being documented. This is
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews needed to support turning off forwarding and turning
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews on delegation only at the same name. [RT #35392]
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox User3742. [port] linux: libcap support: declare curval at start of
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews block. [RT #35387]
168cf0ede1cf13a095e48af6749d88fbc432f096Evan Hunt3741. [func] "delve" (domain entity lookup and validation engine):
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews A new tool with dig-like semantics for performing DNS
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews lookups, with internal DNSSEC validation, using the
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews same resolver and validator logic as named. This
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews allows easy validation of DNSSEC data in environments
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews with untrustworthy resolvers, and assists with
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews troubleshooting of DNSSEC problems. [RT #32406]
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews3740. [contrib] Minor fixes to configure --with-dlz-bdb,
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews --with-dlz-postgres and --with-dlz-odbc. [RT #35340]
8927a982bde7e4b665966b55f0fa57c5cf21b9d8Mark Andrews3739. [func] Added per-zone stats counters to track TCP and
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews UDP queries. [RT #35375]
4840ef4581a577a29a18d180b6bc2e7355378ed7Mark Andrews3738. [bug] --enable-openssl-hash failed to build. [RT #35343]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3737. [bug] 'rndc retransfer' could trigger a assertion failure
8927a982bde7e4b665966b55f0fa57c5cf21b9d8Mark Andrews with inline zones. [RT #35353]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3736. [bug] nsupdate: When specifying a server by name,
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews fall back to alternate addresses if the first
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews address for that name is not reachable. [RT #25784]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3735. [cleanup] Merged the libiscpk11 library into libisc
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews to simplify dependencies. [RT #35205]
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox User3734. [bug] Improve building with libtool. [RT #35314]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3733. [func] Improve interface scanning support. Interface
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews information will be automatically updated if the
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews OS supports routing sockets (MacOS, *BSD, Linux).
fab54780409846f7c71f6026d665f18c77c649efTinderbox User Use "automatic-interface-scan no;" to disable.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Add "rndc scan" to trigger a scan. [RT #23027]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3732. [contrib] Fixed a type mismatch causing the ODBC DLZ
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews driver to dump core on 64-bit systems. [RT #35324]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3731. [func] Added a "no-case-compress" ACL, which causes
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named to use case-insensitive compression
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews (disabling change #3645) for specified
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson clients. (This is useful when dealing
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews with broken client implementations that
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews use case-sensitive name comparisons,
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User rejecting responses that fail to match the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews capitalization of the query that was sent.)
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3730. [cleanup] Added "never" as a synonym for "none" when
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User configuring key event dates in the dnssec tools.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3729. [bug] dnssec-keygen could set the publication date
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington incorrectly when only the activation date was
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User specified on the command line. [RT #35278]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3728. [doc] Expanded native-PKCS#11 documentation,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews specifically pkcs11: URI labels. [RT #35287]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3727. [func] The isc_bitstring API is no longer used and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews has been removed from libisc. [RT #35284]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3726. [cleanup] Clarified the error message when attempting
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews to configure more than 32 response-policy zones.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3725. [contrib] Updated zkt and nslint to newest versions,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews cleaned up and rearranged the contrib
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews directory, and added a README.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.10.0a2 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3724. [bug] win32: Fixed a bug that prevented dig and
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User host from exiting properly after completing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a UDP query. [RT #35288]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3723. [cleanup] Imported keys are now handled the same way
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington regardless of DNSSEC algorithm. [RT #35215]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3722. [bug] Using geoip ACLs in a blackhole statement
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington could cause a segfault. [RT #35272]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3721. [doc] Improved documentation of the EDNS processing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington enhancements introduced in change #3593. [RT #35275]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3720. [bug] Address compiler warnings. [RT #35261]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3719. [bug] Address memory leak in in peer.c. [RT #35255]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3718. [bug] A missing ISC_LINK_INIT in log.c. [RT #35260]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3717. [port] hpux: Treat EOPNOTSUPP as a expected error code when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington probing to see if it is possible to set dscp values
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington on a per packet basis. [RT #35252]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3716. [bug] The dns_request code was setting dcsp values when not
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington requested. [RT #35252]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3715. [bug] The region and city databases could fail to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington initialize when using some versions of libGeoIP,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington causing assertion failures when named was
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington configured to use them. [RT #35427]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3714. [test] System tests that need to test for cryptography
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington support before running can now use a common
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington "testcrypto.sh" script to do so. [RT #35213]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3713. [bug] Save memory by not storing "also-notify" addresses
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington in zone objects that are configured not to send
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington notify requests. [RT #35195]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3712. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3711. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3710. [bug] Address double dns_zone_detach when switching to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington using automatic empty zones from regular zones.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3709. [port] Use built-in versions of strptime() and timegm()
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington on all platforms to avoid portability issues.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3708. [bug] Address a portentry locking issue in dispatch.c.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3707. [bug] irs_resconf_load now returns ISC_R_FILENOTFOUND
415d630b6309922caee8469384a6fab75cf05032Mark Andrews on a missing resolv.conf file and initializes the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews structure as if it had been configured with:
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews nameserver ::1
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User nameserver 127.0.0.1
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Note: Callers will need to be updated to treat
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater ISC_R_FILENOTFOUND as a qualified success or else
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater they will leak memory. The following code fragment
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater will work with both old and new versions without
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater changing the behaviour of the existing code.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater resconf = NULL;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews result = irs_resconf_load(mctx, "/etc/resolv.conf",
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater if (result != ISC_SUCCESS) {
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater if (resconf != NULL)
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater irs_resconf_destroy(&resconf);
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User3706. [contrib] queryperf: Fixed a possible integer overflow when
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User printing results. [RT #35182]
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User3705. [func] "configure --enable-native-pkcs11" enables BIND
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User to use the PKCS#11 API for all cryptographic
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User functions, so that it can drive a hardware service
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User module directly without the need to use a modified
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User OpenSSL as intermediary (so long as the HSM's vendor
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User provides a complete-enough implementation of the
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User PKCS#11 interface). This has been tested successfully
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews with the Thales nShield HSM and with SoftHSMv2 from
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User the OpenDNSSEC project. [RT #29031]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3704. [protocol] Accept integer timestamps in RRSIG records. [RT #35185]
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User3703. [func] To improve recursive resolver performance, cache
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User records which are still being requested by clients
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User can now be automatically refreshed from the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews authoritative server before they expire, reducing
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews or eliminating the time window in which no answer
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews is available in the cache. See the "prefetch" option
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews for more details. [RT #35041]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3702. [func] 'dnssec-coverage -l' option specifies a length
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User of time to check for coverage; events further into
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews the future are ignored. 'dnssec-coverage -z'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews checks only ZSK events, and 'dnssec-coverage -k'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews checks only KSK events. (Thanks to Peter Palfrader.)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3701. [func] named-checkconf can now obscure shared secrets
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when printing by specifying '-x'. [RT #34465]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3700. [func] Allow access to subgroups of XML statistics via
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews special URLs http://<server>:<port>/xml/v3/server,
415d630b6309922caee8469384a6fab75cf05032Mark Andrews /zones, /net, /tasks, /mem, and /status. [RT #35115]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3699. [bug] Improvements to statistics channel XSL stylesheet:
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews the stylesheet can now be cached by the browser;
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User section headers are omitted from the stats display
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews when there is no data in those sections to be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews displayed; counters are now right-justified for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews easier readability. [RT #35117]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3698. [cleanup] Replaced all uses of memcpy() with memmove().
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3697. [bug] Handle "." as a search list element when IDN support
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews is enabled. [RT #35133]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3696. [bug] dig failed to handle AXFR style IXFR responses which
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington span multiple messages. [RT #35137]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3695. [bug] Address a possible race in dispatch.c. [RT #35107]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3694. [bug] Warn when a key-directory is configured for a zone,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington but does not exist or is not a directory. [RT #35108]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3693. [security] memcpy was incorrectly called with overlapping
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ranges resulting in malformed names being generated
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington on some platforms. This could cause INSIST failures
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington when serving NSEC3 signed zones (CVE-2014-0591).
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3692. [bug] Two calls to dns_db_getoriginnode were fatal if there
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington was no data at the node. [RT #35080]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3691. [contrib] Address null pointer dereference in LDAP and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington MySQL DLZ modules.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews3690. [bug] Iterative responses could be missed when the source
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington port for an upstream query was the same as the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington listener port (53). [RT #34925]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3689. [bug] Fixed a bug causing an insecure delegation from one
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews static-stub zone to another to fail with a broken
415d630b6309922caee8469384a6fab75cf05032Mark Andrews trust chain. [RT #35081]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3688. [bug] loadnode could return a freed node on out of memory.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3687. [bug] Address null pointer dereference in zone_xfrdone.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3686. [func] "dnssec-signzone -Q" drops signatures from keys
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews that are still published but no longer active.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3685. [bug] "rndc refresh" didn't work correctly with slave
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zones using inline-signing. [RT #35105]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3684. [bug] The list of included files would grow on reload.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews3683. [cleanup] Add a more detailed "not found" message to rndc
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews commands which specify a zone name. [RT #35059]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3682. [bug] Correct the behavior of rndc retransfer to allow
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington inline-signing slave zones to retain NSEC3 parameters
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington instead of reverting to NSEC. [RT #34745]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3681. [port] Update the Windows build system to support feature
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington selection and WIN64 builds. This is a work in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington progress. [RT #34160]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3680. [bug] Ensure buffer space is available in "rndc zonestatus".
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox User3679. [bug] dig could fail to clean up TCP sockets still
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews waiting on connect(). [RT #35074]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3678. [port] Update config.guess and config.sub. [RT #35060]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington times. [RT #35073]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3676. [bug] "named-checkconf -z" now checks zones of type
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews hint and redirect as well as master. [RT #35046]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3675. [misc] Provide a place for third parties to add version
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews information for their extensions in the version
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User file by setting the EXTENSIONS variable.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington --- 9.10.0a1 released ---
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3673. [func] New "in-view" zone option allows direct sharing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of zones between views. [RT #32968]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3672. [func] Local address can now be specified when using
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington dns_client API. [RT #34811]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3671. [bug] Don't allow dnssec-importkey overwrite a existing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews non-imported private key.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3670. [bug] Address read after free in server side of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews lwres_getrrsetbyname. [RT #29075]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3667. [test] dig: add support to keep the TCP socket open between
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User successive queries (+[no]keepopen). [RT #34918]
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User3666. [func] Add a tool, named-rrchecker, for checking the syntax
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User of individual resource records. This tool is intended
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User to be called by provisioning systems so that the front
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User end does not need to be upgraded to support new DNS
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User record types. [RT #34778]
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User3665. [bug] Failure to release lock on error in receive_secure_db.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews locking and other bugs. [RT #34855]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3663. [bug] Address bugs in dns_rdata_fromstruct and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3661. [bug] Address lock order reversal deadlock with inline zones.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3659. [port] solaris: don't add explict dependencies/rules for
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington python programs as make won't use the implicit rules.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3658. [port] linux: Address platform specific compilation issue
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington when libcap-devel is installed. [RT #34838]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3657. [port] Some readline clones don't accept NULL pointers when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington calling add_history. [RT #34842]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3656. [security] Treat an all zero netmask as invalid when generating
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the localnets acl. (The prior behavior could
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews allow unexpected matches when using some versions
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews of Winsock: CVE-2013-6320.) [RT #34687]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3655. [cleanup] Simplify TCP message processing when requesting a
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews zone transfer. [RT #34825]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3654. [bug] Address race condition with manual notify requests.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3653. [func] Create delegations for all "children" of empty zones
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User except "forward first". [RT #34826]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3652. [bug] Address bug with rpz-drop policy. [RT #34816]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3651. [tuning] Adjust when a master server is deemed unreachable.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3650. [tuning] Use separate rate limiting queues for refresh and
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User notify requests. [RT #30589]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3649. [cleanup] Include a comment in .nzf files, giving the name of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the associated view. [RT #34765]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3648. [test] Updated the ATF test framework to version 0.17.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3647. [bug] Address a race condition when shutting down a zone.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3646. [bug] Journal filename string could be set incorrectly,
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews causing garbage in log messages. [RT #34738]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3645. [protocol] Use case sensitive compression when responding to
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews queries. [RT #34737]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3644. [protocol] Check that EDNS subnet client options are well formed.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3643. [doc] Clarify RRL "slip" documentation.
620745a4c70077221fdeecaafd3252e9d3f944f3Tinderbox User3642. [func] Allow externally generated DNSKEY to be imported
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews into the DNSKEY management framework. A new tool
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-importkey is used to do this. [RT #34698]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3641. [bug] Handle changes to sig-validity-interval settings
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews better. [RT #34625]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3640. [bug] ndots was not being checked when searching. Only
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews continue searching on NXDOMAIN responses. Add the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ability to specify ndots to nslookup. [RT #34711]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User in a key zone. [RT #34238]
dde130e859339194eebd7184eaf440981838a7f0Mark Andrews3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews encountered. [RT #34668]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3637. [bug] 'allow-query-on' was checking the source address
34d1f3b65324f8fcf358fa2f47891441d4b1d2f0Tinderbox User rather than the destination address. [RT #34590]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3636. [bug] Automatic empty zones now behave better with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews forward only "zones" beneath them. [RT #34583]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3635. [bug] Signatures were not being removed from a zone with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews only KSK keys for a algorithm. [RT #34439]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3634. [func] Report build-id in rndc status. Report build-id
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User when building from a git repository. [RT #20422]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3633. [cleanup] Refactor OPT processing in named to make it easier
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to support new EDNS options. [RT #34414]
e8c17c74535be290abaaa160a434ed80bf0ad2feMark Andrews3632. [bug] Signature from newly inactive keys were not being
bf19cffa72b8335c632232c497b64574f44d1176Tinderbox User removed. [RT #32178]
6d6ac268afc251ebaaa98f22590334dccbe1f0bcTinderbox User3631. [bug] Remove spurious warning about missing signatures when
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox User qtype is SIG. [RT #34600]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3629. [func] Allow the printing of cryptographic fields in DNSSEC
662620c15ce856d8242e295228c54d1e0546d8c4Tinderbox User records by dig to be suppressed (dig +nocrypto).
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3628. [func] Report DNSKEY key id's when dumping the cache.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3626. [func] dig: NSID output now easier to read. [RT #21160]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3625. [bug] Don't send notify messages to machines outside of the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3624. [bug] Look for 'json_object_new_int64' when looking for a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the json library. [RT #34449]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3623. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3622. [tuning] Eliminate an unnecessary lock when incrementing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews cache statistics. [RT #34339]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3621. [security] Incorrect bounds checking on private type 'keydata'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews can lead to a remotely triggerable REQUIRE failure
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (CVE-2013-4854). [RT #34238]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3620. [func] Added "rpz-client-ip" policy triggers, enabling
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews RPZ responses to be configured on the basis of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the client IP address; this can be used, for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews example, to blacklist misbehaving recursive
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or stub resolvers. [RT #33605]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3618. [func] "rndc reload" now checks modification times of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews include files as well as master files to determine
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews whether to skip reloading a zone. [RT #33936]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3617. [bug] Named was failing to answer queries during
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "rndc reload" [RT #34098]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3616. [bug] Change #3613 was incomplete. [RT #34177]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3615. [cleanup] "configure" now finishes by printing a summary
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of optional BIND features and whether they are
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews active or inactive. ("configure --enable-full-report"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews increases the verbosity of the summary.) [RT #31777]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3614. [port] Check for <linux/types.h>. [RT #34162]
7f9e2fff07b9c17e0d7a0ea7abc9304ce9d01b61Tinderbox User3613. [bug] named could crash when deleting inline-signing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zones with "rndc delzone". [RT #34066]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews3611. [bug] Improved resistance to a theoretical authentication
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews attack based on differential timing. [RT #33939]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3610. [cleanup] win32: Some executables had been omitted from the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews installer. [RT #34116]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3609. [bug] Corrected a possible deadlock in applications using
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the export version of the isc_app API. [RT #33967]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3608. [port] win32: added todos.pl script to ensure all text files
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the win32 build depends on are converted to DOS
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews newline format. [RT #22067]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews message. [RT #34045]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3606. [func] "rndc flushtree" now flushes matching
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews records in the address database and bad cache
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews as well as the DNS cache. (Previously only the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews DNS cache was flushed.) [RT #33970]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3605. [port] win32: Addressed several compatibility issues
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews with newer versions of Visual Studio. [RT #33916]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3604. [bug] Fixed a compile-time error when building with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews JSON but not XML. [RT #33959]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3603. [bug] Install <isc/stat.h>. [RT #33956]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews integrate with named and serve DNS data.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (Contributed by John Eaglesham of Yahoo.)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3601. [bug] Added to PKCS#11 openssl patches a value len
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews attribute in DH derive key. [RT #33928]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3600. [cleanup] dig: Fixed a typo in the warning output when receiving
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews an oversized response. [RT #33910]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3599. [tuning] Check for pointer equivalence in name comparisons.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3598. [cleanup] Improved portability of map file code. [RT #33820]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3597. [bug] Ensure automatic-resigning heaps are reconstructed
7f9e2fff07b9c17e0d7a0ea7abc9304ce9d01b61Tinderbox User when loading zones in map format. [RT #33381]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3596. [port] Updated win32 build documentation, added
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-verify. [RT #22067]
73537e8418e0c030063dbd863cf57feec026030aTinderbox User3595. [port] win32: Fix build problems introduced by change #3550.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington3594. [maint] Update config.guess and config.sub. [RT #33816]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3593. [func] Update EDNS processing to better track remote server
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews capabilities. [RT #30655]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3592. [doc] Moved documentation of rndc command options to the
9160e27507ba636887f6352bee5cb3729108fc76Tinderbox User rndc man page. [RT #33506]
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews3591. [func] Use CRC-64 to detect map file corruption at load
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews time. [RT #33746]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3590. [bug] When using RRL on recursive servers, defer
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews rate-limiting until after recursion is complete;
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews also, use correct rcode for slipped NXDOMAIN
a03cb08d0c4f1ca5fbc121d2f02bdffa7eb52286Mark Andrews responses. [RT #33604]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3589. [func] Report serial numbers in when starting zone transfers.
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt Report accepted NOTIFY requests including serial.
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User3588. [bug] dig: addressed a memory leak in the sigchase code
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User that could cause a shutdown crash. [RT #33733]
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt3587. [func] 'named -g' now checks the logging configuration but
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt does not use it. [RT #33473]
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt3585. [func] "rndc delzone -clean" option removes zone files
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt when deleting a zone. [RT #33570]
efdfbc256c997060cfa0c2306c4fdd9dbc31342cTinderbox User3584. [security] Caching data from an incompletely signed zone could
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt trigger an assertion failure in resolver.c
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt (CVE-2013-3919). [RT #33690]
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt3583. [bug] Address memory leak in GSS-API processing [RT #33574]
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt3582. [bug] Silence false positive warning regarding missing file
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt directive for inline slave zones. [RT #33662]
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt3580. [bug] Addressed a possible race in acache.c [RT #33602]
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt3579. [maint] Updates to PKCS#11 openssl patches, supporting
d786bb0f8beee4425dc5ba21ea19f8f353c85a65Evan Hunt versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3577. [bug] Handle zero TTL values better. [RT #33411]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3576. [bug] Address a shutdown race when validating. [RT #33573]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3575. [func] Changed the logging category for RRL events from
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User 'queries' to 'query-errors'. [RT #33540]
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User3574. [doc] The 'hostname' keyword was missing from server-id
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User description in the named.conf man page. [RT #33476]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zone names containing punctuation marks and other
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews nonstandard characters. [RT #33419]
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews3572. [func] Threads are now enabled by default on most
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews operating systems. [RT #25483]
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews3571. [bug] Address race condition in dns_client_startresolve().
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews3570. [bug] Check internal pointers are valid when loading map
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews files. [RT #33403]
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews module, and added multithread support. [RT #33394]
4c3d55cb2d2db8a4c52c99b0a76109fb3fe32151Mark Andrews3568. [cleanup] Add a product description line to the version file,
4b568c8873e83be023f2995e0a30de804499842dTinderbox User to be reported by named -v/-V. [RT #33366]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3567. [bug] Silence clang static analyzer warnings. [RT #33365]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3566. [func] Log when forwarding updates to master. [RT #33240]
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User3565. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3564. [bug] Improved handling of corrupted map files. [RT #33380]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3562. [func] Update map file header format to include a SHA-1 hash
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of the database content, so that corrupted map files
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews can be rejected at load time. [RT #32459]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or NOTIMP. Adjust usage message. [RT #33363]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3560. [bug] isc-config.sh did not honor includedir and libdir
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when set via configure. [RT #33345]
7692464e78fc43578c394b8d1d30e81fec1d8523Tinderbox User3559. [func] Check that both forms of Sender Policy Framework
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews records exist or do not exist. [RT #33355]
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User3557. [bug] Reloading redirect zones was broken. [RT #33292]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3555. [bug] Address theoretical race conditions in acache.c
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (change #3553 was incomplete). [RT #33252]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3554. [bug] RRL failed to correctly rate-limit upward
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews referrals and failed to count dropped error
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews responses in the statistics. [RT #33225]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3553. [bug] Address suspected double free in acache. [RT #33252]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3552. [bug] Wrong getopt option string for 'nsupdate -r'.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews3550. [func] Unified the internal and export versions of the
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews BIND libraries, allowing external clients to use
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews the same libraries as BIND. [RT #33131]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3549. [doc] Documentation for "request-nsid" was missing.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3548. [bug] The NSID request code in resolver.c was broken
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews resulting in invalid EDNS options being sent.
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt3547. [bug] Some malformed unknown rdata records were not properly
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt detected and rejected. [RT #33129]
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt3546. [func] Add EUI48 and EUI64 types. [RT #33082]
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt3545. [bug] RRL slip behavior was incorrect when set to 1.
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3544. [contrib] check5011.pl: Script to report the status of
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt managed keys as recorded in managed-keys.bind.
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt Contributed by Tony Finch <dot@dotat.at>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3543. [bug] Update socket structure before attaching to socket
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews manager after accept. [RT #33084]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3542. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3541. [bug] Parts of libdns were not properly initialized when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews built in libexport mode. [RT #33028]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3540. [test] libt_api: t_info and t_assert were not thread safe.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3539. [port] win32: timestamp format didn't match other platforms.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3538. [test] Running "make test" now requires loopback interfaces
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to be set up. [RT #32452]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3537. [tuning] Slave zones, when updated, now send NOTIFY messages
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to peers before being dumped to disk rather than
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User after. [RT #27242]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3536. [func] Add support for setting Differentiated Services Code
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User Point (DSCP) values in named. Most configuration
8f3657636521817d2971ae29aa3fb66e33709753Mark Andrews options which take a "port" option (e.g.,
8f3657636521817d2971ae29aa3fb66e33709753Mark Andrews listen-on, forwarders, also-notify, masters,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews notify-source, etc) can now also take a "dscp"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews option specifying a code point for use with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews outgoing traffic, if supported by the underlying
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews OS. [RT #27596]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3535. [bug] Minor win32 cleanups. [RT #32962]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3534. [bug] Extra text after an embedded NULL was ignored when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews parsing zone files. [RT #32699]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
06ea55a43397bc38c34a6d7e5c6219fe483edbb2Tinderbox User3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3531. [bug] win32: A uninitialized value could be returned on out
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of memory. [RT #32960]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3529. [func] Named now listens on both IPv4 and IPv6 interfaces
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews by default. Named previously only listened on IPv4
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User interfaces by default unless named was running in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews IPv6 only mode. [RT #32945]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3528. [func] New "dnssec-coverage" command scans the timing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews metadata for a set of DNSSEC keys and reports if a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews lapse in signing coverage has been scheduled
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inadvertently. (Note: This tool depends on python;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews it will not be built or installed on systems that
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews do not have a python interpreter.) [RT #28098]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3527. [compat] Add a URI to allow applications to explicitly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews request a particular XML schema from the statistics
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews channel, returning 404 if not supported. [RT #32481]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3526. [cleanup] Set up dependencies for unit tests correctly during
ecbc7ebb243a1f8a5dc6f28185ffe9e61d3b2102Mark Andrews build. [RT #32803]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3525. [func] Support for additional signing algorithms in rndc:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews The -A option to rndc-confgen can be used to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews select the algorithm for the generated key.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (The default is still hmac-md5; this may
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews change in a future release.) [RT #20363]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3524. [func] Added an alternate statistics channel in JSON format,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when the server is built with the json-c library:
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User http://[address]:[port]/json. [RT #32630]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3523. [contrib] Ported filesystem and ldap DLZ drivers to
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews dynamically-loadable modules, and added the
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews "wildcard" module based on a contribution from
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3522. [bug] DLZ lookups could fail to return SERVFAIL when
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews they ought to. [RT #32685]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3520. [bug] 'mctx' was not being referenced counted in some places
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews where it should have been. [RT #32794]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3519. [func] Full replay protection via four-way handshake is
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews now mandatory for rndc clients. Very old versions
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews of rndc will no longer work. [RT #32798]
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews so that all dns_rrl_rtype_t enum values fit regardless
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews of whether it is teated as signed or unsigned by
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews the compiler. [RT #32792]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3516. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3515. [port] '%T' is not portable in strftime(). [RT #32763]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3514. [bug] The ranges for valid key sizes in ddns-confgen and
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User rndc-confgen were too constrained. Keys up to 512
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt bits are now allowed for most algorithms, and up
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt to 1024 bits for hmac-sha384 and hmac-sha512.
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3513. [func] "dig -u" prints times in microseconds rather than
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt milliseconds. [RT #32704]
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3512. [func] "rndc validation check" reports the current status
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt of DNSSEC validation. [RT #21397]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3511. [doc] Improve documentation of redirect zones. [RT #32756]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3510. [func] "rndc status" and XML statistics channel now report
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews server start and reconfiguration times. [RT #21048]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3509. [cleanup] Added a product line to version file to allow for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews easy naming of different products (BIND
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User vs BIND ESV, for example). [RT #32755]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3508. [contrib] queryperf was incorrectly rejecting the -T option.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3507. [bug] Statistics channel XSL had a glitch when attempting
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to chart query data before any queries had been
4cd01ec68f8e73c59231598c3dde863df0c0554dTinderbox User received. [RT #32620]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3506. [func] When setting "max-cache-size" and "max-acache-size",
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the keyword "unlimited" is no longer defined as equal
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to 4 gigabytes (except on 32-bit platforms); it
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews means literally unlimited. [RT #32358]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3505. [bug] When setting "max-cache-size" and "max-acache-size",
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews larger values than 4 gigabytes could not be set
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews explicitly, though larger sizes were available
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when setting cache size to 0. This has been
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews corrected; the full range is now available.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3504. [func] Add support for ACLs based on geographic location,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews using MaxMind GeoIP databases. Based on code
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews contributed by Ken Brownfield <kb@slide.com>.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3503. [doc] Clarify size_spec syntax. [RT #32449]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3502. [func] zone-statistics: "no" is now a synonym for "none",
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews instead of "terse". [RT #29165]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3501. [func] zone-statistics now takes three options: full,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews terse, and none. "yes" and "no" are retained as
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews synonyms for full and terse, respectively. [RT #29165]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3500. [security] Support NAPTR regular expression validation on
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews all platforms without using libregex, which
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User can be vulnerable to memory exhaustion attack
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (CVE-2013-2266). [RT #32688]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3499. [doc] Corrected ARM documentation of built-in zones.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3498. [bug] zone statistics for zones which matched a potential
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews empty zone could have their zone-statistics setting
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User3497. [func] When deleting a slave/stub zone using 'rndc delzone'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews report the files that were being used so they can
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews be cleaned up if desired. [RT #27899]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3496. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3495. [func] Support multiple response-policy zones (up to 32),
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews while improving RPZ performance. "response-policy"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews syntax now includes a "min-ns-dots" clause, with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews default 1, to exclude top-level domains from
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews NSIP and NSDNAME checking. --enable-rpz-nsip and
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User --enable-rpz-nsdname are now the default. [RT #32251]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3494. [func] DNS RRL: Blunt the impact of DNS reflection and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews amplification attacks by rate-limiting substantially-
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews identical responses. [RT #28130]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews contributed by Mark Goldfinch. [RT #32549]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3492. [bug] Fixed a regression in zone loading performance
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User due to lock contention. [RT #30399]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3491. [bug] Slave zones using inline-signing must specify a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews file name. [RT #31946]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3490. [bug] When logging RDATA during update, truncate if it's
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews too long. [RT #32365]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dns_dlzcreate() failed to properly initialize
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dlzdb.link. When cloning a rdataset do not copy
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the link contents. [RT #32651]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3488. [bug] Use after free error with DH generated keys. [RT #32649]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3487. [bug] Change 3444 was not complete. There was a additional
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews place where the NOQNAME proof needed to be saved.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3486. [bug] named could crash when using TKEY-negotiated keys
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews that had been deleted and then recreated. [RT #32506]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3484. [bug] Some statistics were incorrectly rendered in XML.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3483. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3482. [func] dig +nssearch now prints name servers that don't
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews have address records (missing AAAA or A, or the name
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews doesn't exist). [RT #29348]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3481. [cleanup] Removed use of const const in atf.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3480. [bug] Silence logging noise when setting up zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statistics. [RT #32525]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3479. [bug] Address potential memory leaks in gssapi support
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews code. [RT #32405]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3478. [port] Fix a build failure in strict C99 environments
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3477. [func] Expand logging when adding records via DDNS update
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3476. [bug] "rndc zonestatus" could report a spurious "not
2da2220fe7af2c45724b50b0187523b1fab0cf08Rob Austein found" error on inline-signing zones. [RT #29226]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3475. [cleanup] Changed name of 'map' zone file format (previously
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews 'fast'). [RT #32458]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3474. [bug] nsupdate could assert when the local and remote
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews address families didn't match. [RT #22897]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3473. [bug] dnssec-signzone/verify could incorrectly report
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews an error condition due to an empty node above an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews opt-out delegation lacking an NSEC3. [RT #32072]
4bc4740495aca028379fecd2afac26b1d53a4e25Tinderbox User3472. [bug] The active-connections counter in the socket
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statistics could underflow. [RT #31747]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3471. [bug] The number of UDP dispatches now defaults to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the number of CPUs even if -n has been set to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a higher value. [RT #30964]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3470. [bug] Slave zones could fail to dump when successfully
e1a389f7478d094ffbe592df28328a10d484cb38Tinderbox User refreshing after an initial failure. [RT #31276]
e1a389f7478d094ffbe592df28328a10d484cb38Tinderbox User3469. [bug] Handle DLZ lookup failures more gracefully. Improve
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews backward compatibility between versions of DLZ dlopen
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews API. [RT #32275]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3468. [security] RPZ rules to generate A records (but not AAAA records)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews could trigger an assertion failure when used in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews conjunction with DNS64 (CVE-2012-5689). [RT #32141]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3467. [bug] Added checks in dnssec-keygen and dnssec-settime
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to check for delete date < inactive date. [RT #31719]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in DLZ example driver. [RT #32275]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3465. [bug] Handle isolated reserved ports. [RT #31778]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3464. [maint] Updates to PKCS#11 openssl patches, supporting
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3462. [doc] Clarify server selection behavior of dig when using
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews -4 or -6 options. [RT #32181]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3461. [bug] Negative responses could incorrectly have AD=1
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews set. [RT #32237]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3460. [bug] Only link against readline where needed. [RT #29810]
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews3459. [func] Added -J option to named-checkzone/named-compilezone
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews to specify the path to the journal file. [RT #30958]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3458. [bug] Return FORMERR when presented with a overly long
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews domain named in a request. [RT #29682]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3456. [port] g++47: ATF failed to compile. [RT #32012]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3455. [contrib] queryperf: fix getopt option list. [RT #32338]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3454. [port] sparc64: improve atomic support. [RT #25182]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews failed. [RT #31960]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3452. [bug] Accept duplicate singleton records. [RT #32329]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3451. [port] Increase per thread stack size from 64K to 1M.
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User3450. [bug] Stop logfileconfig system test spam system logs.
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews3449. [bug] gen.c: use the pre-processor to construct format
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews strings so that compiler can perform sanity checks;
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews check the snprintf results. [RT #17576]
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews3448. [bug] The allow-query-on ACL was not processed correctly.
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews3447. [port] Add support for libxml2-2.9.x [RT #32231]
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews3446. [port] win32: Add source ID (see change #3400) to build.
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews3445. [bug] Warn about zone files with blank owner names
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews immediately after $ORIGIN directives. [RT #31848]
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews3444. [bug] The NOQNAME proof was not being returned from cached
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews insecure responses. [RT #21409]
7204d08a319cf590ae4280b8cc20999320398574Mark Andrews3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews rejected when generating keys. [RT #31927]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3442. [port] Net::DNS 0.69 introduced a non backwards compatible
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews change. [RT #32216]
052969f1f134d31c7f0fd0d55a89bfd53d538e77Tinderbox User3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews3440. [bug] Reorder get_key_struct to not trigger a assertion when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews cleaning up due to out of memory error. [RT #32131]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3439. [placeholder]
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews buffers with constant data. [RT #32064]
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews3436. [bug] Check malloc/calloc return values. [RT #32088]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3435. [bug] Cross compilation support in configure was broken.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3434. [bug] Pass client info to the DLZ findzone() entry
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews point in addition to lookup(). This makes it
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews possible for a database to answer differently
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews whether it's authoritative for a name depending
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews on the address of the client. [RT #31775]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3433. [bug] dlz_findzone() did not correctly handle
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ISC_R_NOMORE. [RT #31172]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3432. [func] Multiple DLZ databases can now be configured.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews DLZ databases are searched in the order configured,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews unless set to "search no", in which case a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zone can be configured to be retrieved from a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews particular DLZ database by using a "dlz <name>"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews option in the zone statement. DLZ databases can
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews support type "master" and "redirect" zones.
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3431. [bug] ddns-confgen: Some valid key algorithms were
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews not accepted. [RT #31927]
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews3430. [bug] win32: isc_time_formatISO8601 was missing the
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews 'T' between the date and time. [RT #32044]
f4f4b97a35429a21480a3858f96b8020f2a9f45dTinderbox User3429. [bug] dns_zone_getserial2 could a return success without
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews returning a valid serial. [RT #32007]
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews3428. [cleanup] dig: Add timezone to date output. [RT #2269]
903fcd6a60c6420f5dbd753ab068ba5ca2af8e62Tinderbox User3427. [bug] dig +trace incorrectly displayed name server
903fcd6a60c6420f5dbd753ab068ba5ca2af8e62Tinderbox User addresses instead of names. [RT #31641]
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews3426. [bug] dnssec-checkds: Clearer output when records are not
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews found. [RT #31968]
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews3425. [bug] "acacheentry" reference counting was broken resulting
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews in use after free. [RT #31908]
ac2e2800b4ac9cbe4cb756d967f4583c611eb75eMark Andrews3424. [func] dnssec-dsfromkey now emits the hash without spaces.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3423. [bug] "rndc signing -nsec3param" didn't accept the full
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User range of possible values. Address portability issues.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3422. [bug] Added a clear error message for when the SOA does not
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews match the referral. [RT #31281]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3421. [bug] Named loops when re-signing if all keys are offline.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3420. [bug] Address VPATH compilation issues. [RT #31879]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3419. [bug] Memory leak on validation cancel. [RT #31869]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3418. [func] New XML schema (version 3.0) for the statistics channel
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews adds query type statistics at the zone level, and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews flattens the XML tree and uses compressed format to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews optimize parsing. Includes new XSL that permits
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews charting via the Google Charts API on browsers that
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews support javascript in XSL. The old XML schema has been
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews deprecated. [RT #30023]
620745a4c70077221fdeecaafd3252e9d3f944f3Tinderbox User3417. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3416. [bug] Named could die on shutdown if running with 128 UDP
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dispatches per interface. [RT #31743]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3415. [bug] named could die with a REQUIRE failure if a validation
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews was canceled. [RT #31804]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3414. [bug] Address locking issues found by Coverity. [RT #31626]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3413. [func] Record the number of DNS64 AAAA RRsets that have been
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews synthesized. [RT #27636]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3412. [bug] Copy timeval structure from control message data.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to UDP. [RT #31690]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3410. [bug] Addressed Coverity warnings. [RT #31626]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews from X.509 certificates, for use with DANE
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (DNS-based Authentication of Named Entities).
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3408. [bug] Some DNSSEC-related options (update-check-ksk,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews are now legal in slave zones as long as
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inline-signing is in use. [RT #31078]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3407. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3406. [bug] mem.c: Fix compilation errors when building with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
f09f1bf18e3ad40a0e8a6cc3dabf1c11f04992cbMark Andrews Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3405. [bug] Handle time going backwards in acache. [RT #31253]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3404. [bug] dnssec-signzone: When re-signing a zone, remove
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews RRSIG and NSEC records from nodes that used to be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in-zone but are now below a zone cut. [RT #31556]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3402. [test] The IPv6 interface numbers used for system
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews tests were incorrect on some platforms. [RT #25085]
f09f1bf18e3ad40a0e8a6cc3dabf1c11f04992cbMark Andrews3401. [bug] Addressed Coverity warnings. [RT #31484]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3400. [cleanup] "named -V" can now report a source ID string, defined
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in the "srcid" file in the build tree and normally set
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User to the most recent git hash. [RT #31494]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3399. [port] netbsd: rename 'bool' parameter to avoid namespace
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews clash. [RT #31515]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3398. [bug] SOA parameters were not being updated with inline
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews signed zones if the zone was modified while the
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User server was offline. [RT #29272]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3396. [bug] OPT records were incorrectly removed from signed,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews truncated responses. [RT #31439]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3394. [bug] Adjust 'successfully validated after lower casing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews signer' log level and category. [RT #31414]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3393. [bug] 'host -C' could core dump if REFUSED was received.
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark Andrews3392. [func] Keep statistics on REFUSED responses. [RT #31412]
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark Andrews3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
1a63fb1d1448ed3f8fd7227ae57be67c2e71279eMark Andrews3390. [bug] Silence clang compiler warnings. [RT #30417]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews3388. [bug] Fixed several Coverity warnings.
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews Note: This change includes a fix for a bug that
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews was subsequently determined to be an exploitable
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews security vulnerability, CVE-2012-5688: named could
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews die on specific queries with dns64 enabled.
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews3387. [func] DS digest can be disabled at runtime with
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews disable-ds-digests. [RT #21581]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews3386. [bug] Address locking violation when generating new NSEC /
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews NSEC3 chains. [RT #31224]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews3385. [bug] named-checkconf didn't detect missing master lists
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews in also-notify clauses. [RT #30810]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews3384. [bug] Improved logging of crypto errors. [RT #30963]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3383. [security] A certain combination of records in the RBT could
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews cause named to hang while populating the additional
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews section of a response. [RT #31090]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3382. [bug] SOA query from slave used use-v6-udp-ports range,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews if set, regardless of the address family in use.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3381. [contrib] Update queryperf to support more RR types.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3380. [bug] named could die if a nonexistent master list was
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews referenced in a also-notify. [RT #31004]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3379. [bug] isc_interval_zero and isc_time_epoch should be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "const (type)* const". [RT #31069]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3378. [bug] Handle missing 'managed-keys-directory' better.
267e57d39b06f65eecb8f92e476dcf0c8cd90fabTinderbox User3377. [bug] Removed spurious newline from NSEC3 multiline
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews output. [RT #31044]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3376. [bug] Lack of EDNS support was being recorded without a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews successful response. [RT #30811]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3374. [bug] isc_parse_uint32 failed to return a range error on
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews systems with 64 bit longs. [RT #30232]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3373. [bug] win32: open raw files in binary mode. [RT #30944]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews3372. [bug] Silence spurious "deleted from unreachable cache"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews messages. [RT #30501]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3371. [bug] AD=1 should behave like DO=1 when deciding whether to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews add NS RRsets to the additional section or not.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3370. [bug] Address use after free while shutting down. [RT #30241]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3369. [bug] nsupdate terminated unexpectedly in interactive mode
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews if built with readline support. [RT #29550]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews were not C++ safe.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3367. [bug] dns_dnsseckey_create() result was not being checked.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3366. [bug] Fixed Read-After-Write dependency violation for IA64
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews atomic operations. [RT #25181]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3365. [bug] Removed spurious newlines from log messages in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3364. [security] Named could die on specially crafted record.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3363. [bug] Need to allow "forward" and "fowarders" options
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in static-stub zones; this had been overlooked.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3362. [bug] Setting some option values to 0 in named.conf
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User could trigger an assertion failure on startup.
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User3361. [bug] "rndc signing -nsec3param" didn't work correctly
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User when salt was set to '-' (no salt). [RT #30099]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3360. [bug] 'host -w' could die. [RT #18723]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3359. [bug] An improperly-formed TSIG secret could cause a
e135e3c4b1f4f986f00997f5ad5866effb203139Tinderbox User memory leak. [RT #30607]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3358. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3357. [port] Add support for libxml2-2.8.x [RT #30440]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews approaching their expiry, so they don't remain
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in caches after expiry. [RT #26429]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3355. [port] Use more portable awk in verify system test.
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3354. [func] Improve OpenSSL error logging. [RT #29932]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3353. [bug] Use a single task for task exclusive operations.
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3352. [bug] Ensure that learned server attributes timeout of the
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews adb cache. [RT #29856]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews memory debugging flags are set. [RT #30243]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3350. [bug] Memory read overrun in isc___mem_reallocate if
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews ISC_MEM_DEBUGCTX memory debugging flag is set.
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3349. [bug] Change #3345 was incomplete. [RT #30233]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3348. [bug] Prevent RRSIG data from being cached if a negative
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews record matching the covering type exists at a higher
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews trust level. Such data already can't be retrieved from
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews the cache since change 3218 -- this prevents it
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews being inserted into the cache as well. [RT #26809]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3347. [bug] dnssec-settime: Issue a warning when writing a new
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews private key file would cause a change in the
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews permissions of the existing file. [RT #27724]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3346. [security] Bad-cache data could be used before it was
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews initialized, causing an assert. [RT #30025]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews3345. [bug] Addressed race condition when removing the last item
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews or inserting the first item in an ISC_QUEUE.
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3344. [func] New "dnssec-checkds" command checks a zone to
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews determine which DS records should be published
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews in the parent zone, or which DLV records should be
7614afdab2abb26b34531409d2f28dcc56c52c6eEvan Hunt published in a DLV zone, and queries the DNS to
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews ensure that it exists. (Note: This tool depends
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews on python; it will not be built or installed on
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews systems that do not have a python interpreter.)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3343. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3342. [bug] Change #3314 broke saving of stub zones to disk
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews resulting in excessive cpu usage in some cases.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3341. [func] New "dnssec-verify" command checks a signed zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to ensure correctness of signatures and of NSEC/NSEC3
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User chains. [RT #23673]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3340. [func] Added new 'map' zone file format, which is an image
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User of a zone database that can be loaded directly into
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User memory via mmap(), allowing much faster zone loading.
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User (Note: Because of pointer sizes and other
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews considerations, this file format is platform-dependent;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews 'map' zone files cannot always be transferred from one
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User server to another.) [RT #25419]
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User3339. [func] Allow the maximum supported rsa exponent size to be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews specified: "max-rsa-exponent-size <value>;" [RT #29228]
fdd0516065be2316409d0cc7dfb4e4f54eadc5afMark Andrews3338. [bug] Address race condition in units tests: asyncload_zone
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User and asyncload_zt. [RT #26100]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3337. [bug] Change #3294 broke support for the multiple keys
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in controls. [RT #29694]
c849f7acb025c73f56a8e28902a473f2aeaba39fTinderbox User3336. [func] Maintain statistics for RRsets tagged as "stale".
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3335. [func] nslookup: return a nonzero exit code when unable
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to get an answer. [RT #29492]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3334. [bug] Hold a zone table reference while performing a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington asynchronous load of a zone. [RT #28326]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3333. [bug] Setting resolver-query-timeout too low can cause
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington named to not recover if it loses connectivity.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3331. [security] dns_rdataslab_fromrdataset could produce bad
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews rdataslabs. [RT #29644]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3330. [func] Fix missing signatures on NOERROR results despite
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews RPZ rewriting. Also
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - add optional "recursive-only yes|no" to the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews response-policy statement
0d22fc8758297da217ac71ffdd6e47643bd506a2Mark Andrews - add optional "max-policy-ttl" to the response-policy
74d98566ed6a2280ea84d146e7c81275f1c5649dMark Andrews statement to limit the false data that
127d2b350ec0e5759e9fdc675ae63502208009bfTinderbox User "recursive-only no" can introduce into
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews resolvers' caches
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - add a RPZ performance test to bin/tests/system/rpz
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User when queryperf is available.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - the encoding of PASSTHRU action to "rpz-passthru".
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (The old encoding is still accepted.)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3329. [bug] Handle RRSIG signer-name case consistently: We
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews generate RRSIG records with the signer-name in
e062b72f783cdb436a1a57a630bdff471dbb3038Mark Andrews lower case. We accept them with any case, but if
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews they fail to validate, we try again in lower case.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3328. [bug] Fixed inconsistent data checking in dst_parse.c.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User to 'filter-aaaa-on-v4' but applies to IPv6
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews connections. (Use "configure --enable-filter-aaaa"
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews to enable this option.) [RT #27308]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3326. [func] Added task list statistics: task model, worker
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews threads, quantum, tasks running, tasks ready.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3325. [func] Report cache statistics: memory use, number of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews nodes, number of hash buckets, hit and miss counts.
c855e7170a7ddb5d4ebab69a771f35dc93e95e43Mark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3323. [func] Report the number of buckets the resolver is using.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3322. [func] Monitor the number of active TCP and UDP dispatches.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3321. [func] Monitor the number of recursive fetches and the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews number of open sockets, and report these values in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the statistics channel. [RT #27054]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3320. [func] Added support for monitoring of recursing client
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User count. [RT #27009]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3319. [func] Added support for monitoring of ADB entry count and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews hash size. [RT #27057]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3318. [tuning] Reduce the amount of work performed while holding a
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User bucket lock when finished with a fetch context.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3316. [tuning] Improved locking performance when recursing.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
c42fe4bf07216f2d2d058190f59e74cecdfe0f5aTinderbox User queries; this can improve performance on busy
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews multiprocessor systems by reducing lock contention.
0c9af52e8ff870126d837c52f1d30d8ad0608733Tinderbox User3314. [bug] The masters list could be updated while stub_callback
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or refresh_callback were using it. [RT #26732]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3313. [protocol] Add TLSA record type. [RT #28989]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3311. [bug] Abort the zone dump if zone->db is NULL in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zone.c:zone_gotwritehandle. [RT #29028]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3310. [test] Increase table size for mutex profiling. [RT #28809]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3309. [bug] resolver.c:fctx_finddone() was not thread safe.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3308. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
bd89a8c38d51f0a3035f6aa411e55e34a4b6f470Tinderbox User3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3305. [func] Add wire format lookup method to sdb. [RT #28563]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
12ee3c02ab36d7e7430bd705cc289db1a69a5733Mark Andrews3303. [bug] named could die when reloading. [RT #28606]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater keys if the zone name contained character that
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews required special mappings. [RT #28600]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for non-recursive queries. [RT #28565]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3300. [bug] Named could die if gssapi was enabled in named.conf
edfc6f05eaff086af661b2535a766373dc1e8345Tinderbox User but was not compiled in. [RT #28338]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3299. [bug] Make SDB handle errors from database drivers better.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3298. [bug] Named could dereference a NULL pointer in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3296. [bug] Named could die with a INSIST failure in
d642d3857129678797a01adee14fbd70335b05a9Mark Andrews client.c:exit_check. [RT #28346]
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3295. [bug] Adjust isc_time_secondsastimet range check to be more
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt portable. [RT # 26542]
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt error. [RT #28265]
fd8fb4df8499e292daeac765f599ac7c507d9ca3Mark Andrews3293. [func] nsupdate: list supported type. [RT #28261]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3292. [func] Log messages in the axfr stream at debug 10.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3288. [bug] dlz_destroy() function wasn't correctly registered
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews by the DLZ dlopen driver. [RT #28056]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3286. [bug] Managed key maintenance timer could fail to start
7c8e44a2dc1121dbe3b615c9c934f37fb1741bb9Tinderbox User after 'rndc reconfig'. [RT #26786]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
bac4435d473c9a0281507524f084480c34aa942aTinderbox User proveunsecure after calling startfinddlvsep.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3284. [bug] Address race conditions with the handling of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3283. [bug] Raw zones with with more than 512 records in a RRset
bac4435d473c9a0281507524f084480c34aa942aTinderbox User failed to load. [RT #27863]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3282. [bug] Restrict the TTL of NS RRset to no more than that
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of the old NS RRset when replacing it.
bac4435d473c9a0281507524f084480c34aa942aTinderbox User [RT #27792] [RT #27884]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User despite succeeding over the loopback interface.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3280. [bug] Potential double free of a rdataset on out of memory
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews with DNS64. [RT #27762]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3279. [bug] Hold a internal reference to the zone while performing
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews a asynchronous load. Address potential memory leak
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews if the asynchronous is cancelled. [RT #27750]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3278. [bug] Make sure automatic key maintenance is started
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when "auto-dnssec maintain" is turned on during
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "rndc reconfig". [RT #26805]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews safe_open failure. [RT #27696]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews option had been misspelled as '-clear'. (To avoid
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews future confusion, both options now work.) [RT #27173]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3274. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3273. [bug] AAAA responses could be returned in the additional
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews section even when filter-aaaa-on-v4 was in use.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3272. [func] New "rndc zonestatus" command prints information
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User about the specified zone. [RT #21671]
4898d4ae6072702caa8a39a702f810212bca0473Tinderbox User3271. [port] darwin: mksymtbl is not always stable, loop several
4898d4ae6072702caa8a39a702f810212bca0473Tinderbox User times before giving up. mksymtbl was using non
4898d4ae6072702caa8a39a702f810212bca0473Tinderbox User portable perl to covert 64 bit hex strings. [RT #27653]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.9.0rc2 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when inline-signing was in use. [RT #27650]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3269. [port] darwin 11 and later now built threaded by default.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews out the earliest expiry time. [RT #23311]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3267. [bug] Memory allocation failures could be mis-reported as
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews unexpected error. New ISC_R_UNSET result code.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews DNSKEY RRset was not being properly computed.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3265. [bug] Corrected a problem with lock ordering in the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inline-signing code. [RT #27557]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3264. [bug] Automatic regeneration of signatures in an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inline-signing zone could stall when the server
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews was restarted. [RT #27344]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3263. [bug] "rndc sync" did not affect the unsigned side of an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inline-signing zone. [RT #27337]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3261. [func] RRset ordering now defaults to random. [RT #27174]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3260. [bug] "rrset-order cyclic" could appear not to rotate
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for some query patterns. [RT #27170/27185]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.9.0rc1 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews message when writing to stdout. [RT #27109]
6b9225c4be71da5d6c426072c231a611b86459a7Tinderbox User3258. [test] Add "forcing full sign with unreadable keys" test.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3257. [bug] Do not generate a error message when calling fsync()
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in a pipe or socket. [RT #27109]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3255. [func] No longer require that a empty zones be explicitly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews enabled or that a empty zone is disabled for
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews RFC 1918 empty zones to be configured. [RT #27139]
1dbe80aade5bed39893d903cf9d7318a5265813aTinderbox User3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews too long. [RT #26956]
7c112f7d8f632412901d9f3c4445eb0db6db95feTinderbox User3252. [bug] When master zones using inline-signing were
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews updated while the server was offline, the source
9ff905d267731a305a37c85ca7feaf74a997f213Tinderbox User zone could fall out of sync with the signed
de5440dafc70b840bbc21bf81815bab68e4398bfTinderbox User copy. They can now resynchronize. [RT #26676]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews memory dns_sdlz_putrr() can allocate per record to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews prevent run away memory consumption on ISC_R_NOSPACE.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3250. [func] 'configure --enable-developer'; turn on various
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User configure options, normally off by default, that
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User we want developers to build and test with. [RT #27103]
3718b6ecfc40479988a9182701a4af5b3f8233f4Tinderbox User3249. [bug] Update log message when saving slave zones files for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews analysis after load failures. [RT #27087]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3248. [bug] Configure options --enable-fixed-rrset and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --enable-exportlib were incompatible with each
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews other. [RT #27087]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3247. [bug] 'raw' format zones failed to preserve load order
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews breaking 'fixed' sort order. [RT #27087]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3246. [bug] Named failed to start with a empty also-notify list.
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews3245. [bug] Don't report a error unchanged serials unless there
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews were other changes when thawing a zone with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ixfr-fromdifferences. [RT #26845]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3244. [func] Added readline support to nslookup and nsupdate.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Also simplified nsupdate syntax to make "update"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and "prereq" optional. [RT #24659]
ae454ec746d1d4db8d04e107d4d25ff13158c37fMark Andrews3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews being properly set.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3242. [func] Extended the header of raw-format master files to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews include the serial number of the zone from which
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews they were generated, if different (as in the case
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of inline-signing zones). This is to be used in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inline-signing zones, to track changes between the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews unsigned and signed versions of the zone, which may
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews have different serial numbers.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (Note: raw zonefiles generated by this version of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews BIND are no longer compatible with prior versions.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews To generate a backward-compatible raw zonefile
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews using dnssec-signzone or named-compilezone, specify
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews output format "raw=0" instead of simply "raw".)
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrews3241. [bug] Address race conditions in the resolver code.
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User3240. [bug] DNSKEY state change events could be missed. [RT #26874]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews timestamp. [RT #26883]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3238. [bug] keyrdata was not being reinitialized in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews lib/dns/rbtdb.c:iszonesecure. [RT#26913]
d56349eff4a1ebb8f4370df5a8a507f1a8ecd0dfMark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3236. [bug] Backed out changes #3182 and #3202, related to
f4e993861df6317cf0dea2ad72f315e3c96d942aMark Andrews EDNS(0) fallback behavior. [RT #26416]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3235. [func] dns_db_diffx, a extended dns_db_diff which returns
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the generated diff and optionally writes it to a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews journal. [RT #26386]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3232. [bug] Zero zone->curmaster before return in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3231. [bug] named could fail to send a incompressible zone.
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User3230. [bug] 'dig axfr' failed to properly handle a multi-message
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User axfr with a serial of 0. [RT #26796]
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User3229. [bug] Fix local variable to struct var assignment
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User found by CLANG warning.
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User3228. [tuning] Dynamically grow symbol table to improve zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews loading performance. [RT #26523]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3227. [bug] Interim fix to make WKS's use of getprotobyname()
0c9af52e8ff870126d837c52f1d30d8ad0608733Tinderbox User and getservbyname() self thread safe. [RT #26232]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox User messages. [RT #26507]
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt3221. [bug] Fixed a potential core dump on shutdown due to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews referencing fetch context after it's been freed.
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt --- 9.9.0b2 released ---
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews could fail to set the database version correctly,
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews causing an assertion failure. [RT #26180]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews nonexistent records, leading to an assertion
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews failure. [RT #26590]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3214. [func] Add 'named -U' option to set the number of UDP
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews listener threads per interface. [RT #26485]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews list prior to adding a reference to it leading a
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews possible assertion failure. [RT #23219]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews option prints in single-line-per-record format.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3210. [bug] Canceling the oldest query due to recursive-client
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews overload could trigger an assertion failure. [RT #26463]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3208. [bug] 'dig -y' handle unknown tsig algorithm better.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews nameserver behavior. Enable "dig +adflag" and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "dig +edns=0" by default. Enable "+dnssec" when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews running "dig +trace". [RT #23497]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews3204. [bug] When a master server that has been marked as
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews unreachable sends a NOTIFY, mark it reachable
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews again. [RT #25960]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews3203. [bug] Increase log level to 'info' for validation failures
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3202. [bug] NOEDNS caching on timeout was too aggressive.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews instead of only being used as a toggle. [RT #18351]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3200. [doc] Some rndc functions were undocumented or were
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews missing from 'rndc -h' output. [RT #25555]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3199. [func] When logging client information, include the name
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews being queried. [RT #25944]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews permissions. [RT #24866]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3197. [bug] Don't try to log the filename and line number when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the config parser can't open a file. [RT #22263]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews doesn't exist. [RT #25783]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3195. [cleanup] Silence "file not found" warnings when loading
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews managed-keys zone. [RT #26340]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3194. [doc] Updated RFC references in the 'empty-zones-enable'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews documentation. [RT #25203]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3192. [bug] A query structure could be used after being freed.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3191. [bug] Print NULL records using "unknown" format. [RT #26392]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3190. [bug] Underflow in error handling in isc_mutexblock_init.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3189. [test] Added a summary report after system tests. [RT #25517]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3188. [bug] zone.c:zone_refreshkeys() could fail to detach
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User references correctly when errors occurred, causing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a hang on shutdown. [RT #26372]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3187. [port] win32: support for Visual Studio 2008. [RT #26356]
efdfbc256c997060cfa0c2306c4fdd9dbc31342cTinderbox User --- 9.9.0b1 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3186. [bug] Version/db mis-match in rpz code. [RT #26180]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - 'rndc signing -list' displays the current
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews state of signing operations
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - 'rndc signing -clear' clears the signing state
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews records for keys that have fully signed the zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - 'rndc signing -nsec3param' sets the NSEC3
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews parameters for the zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews The 'rndc keydone' syntax is removed. [RT #23729]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3184. [bug] named had excessive cpu usage when a redirect zone was
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews configured. [RT #26013]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3182. [bug] Auth servers behind firewalls which block packets
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews greater than 512 bytes may cause other servers to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews perform poorly. Now, adb retains edns information
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and caches noedns servers. [RT #23392/24964]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3181. [func] Inline-signing is now supported for master zones.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3180. [func] Local copies of slave zones are now saved in raw
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews format by default, to improve startup performance.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews 'masterfile-format text;' can be used to override
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the default, if desired. [RT #25867]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3179. [port] kfreebsd: build issues. [RT #26273]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3178. [bug] A race condition introduced by change #3163 could
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews cause an assertion failure on shutdown. [RT #26271]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3177. [func] 'rndc keydone', remove the indicator record that
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named has finished signing the zone with the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews corresponding key. [RT #26206]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3176. [doc] Corrected example code and added a README to the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews sample external DLZ module in contrib/dlz/example.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3175. [bug] Fix how DNSSEC positive wildcard responses from a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews NSEC3 signed zone are validated. Stop sending a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews unnecessary NSEC3 record when generating such
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews responses. [RT #26200]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3174. [bug] Always compute to revoked key tag from scratch.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3173. [port] Correctly validate root DS responses. [RT #25726]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3172. [port] darwin 10.* and freebsd [89] are now built threaded by
8fabea916f73d0b7c7371998dd041b41d1ad5296Tinderbox User3171. [bug] Exclusively lock the task when adding a zone using
20648865f1f76c4c34cbe33c18b62cfa0cfe0fc8Tinderbox User 'rndc addzone'. [RT #25600]
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt --- 9.9.0a3 released ---
70d987def5a58ebeb8243017c0ec2e9b2c326cf4Evan Hunt3170. [func] RPZ update:
2706fce75f04398595d9648122c6b67164e94fccTinderbox User - fix precedence among competing rules
2706fce75f04398595d9648122c6b67164e94fccTinderbox User - improve ARM text including documenting rule precedence
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - try to rewrite CNAME chains until first hit
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - new "rpz" logging channel
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - RDATA for CNAME rules can include wildcards
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - replace "NO-OP" named.conf policy override with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews is still recognized)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3169. [func] Catch db/version mis-matches when calling dns_db_*().
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3168. [bug] Nxdomain redirection could trigger an assert with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a ANY query. [RT #26017]
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews3167. [bug] Negative answers from forwarders were not being
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews correctly tagged making them appear to not be cached.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3165. [bug] dnssec-signzone could generate new signatures when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews resigning, even when valid signatures were already
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews present. [RT #26025]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3164. [func] Enable DLZ modules to retrieve client information,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews so that responses can be changed depending on the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews source address of the query. [RT #25768]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3163. [bug] Use finer-grained locking in client.c to address
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews concurrency problems with large numbers of threads.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3162. [test] start.pl: modified to allow for "named.args" in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ns*/ subdirectory to override stock arguments to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named. Largely from RT#26044, but no separate ticket.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3161. [bug] zone.c:del_sigs failed to always reset rdata leading
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews assertion failures. [RT #25880]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3160. [bug] When printing out a NSEC3 record in multiline form
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the newline was not being printed causing type codes
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User to be run together. [RT #25873]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3159. [bug] On some platforms, named could assert on startup
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when running in a chrooted environment without
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User /proc. [RT #25863]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3158. [bug] Recursive servers would prefer a particular UDP
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews socket instead of using all available sockets.
8f536463f9fdfa7da6a8310e4f4895373beb2961Mark Andrews3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the config file before pausing the server. [RT #21373]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3156. [placeholder]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User --- 9.9.0a2 released ---
dcd42a39d311b44877161ffd1e27fa62700c0171Mark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews an assert. [RT #25452]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3153. [func] Extend request-ixfr to zone level and remove the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews side effect of forcing an AXFR. [RT #25156]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews incorrect use of __builtin_expect. [RT #25183]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3151. [bug] Queries for type RRSIG or SIG could be handled
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews incorrectly. [RT #21050]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3150. [func] Improved startup and reconfiguration time by
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User enabling zones to load in multiple threads. [RT #25333]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3149. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3148. [bug] Processing of normal queries could be stalled when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington forwarding a UPDATE message. [RT #24711]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3147. [func] Initial inline signing support. [RT #23657]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.9.0a1 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3145. [test] Capture output of ATF unit tests in "./atf.out" if
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews there were any errors while running them. [RT #25527]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3144. [bug] dns_dbiterator_seek() could trigger an assert when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews used with a nonexistent database node. [RT #25358]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3143. [bug] Silence clang compiler warnings. [RT #25174]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3142. [bug] NAPTR is class agnostic. [RT #25429]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User associated with empty zones. [RT #25079]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3140. [func] New command "rndc flushtree <name>" clears the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews specified name from the server cache along with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews all names under it. [RT #19970]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for the hashing algorithms (md5, sha1 - sha512, and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews their hmac counterparts). [RT #25067]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3138. [bug] Address memory leaks and out-of-order operations when
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User shutting named down. [RT #25210]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3137. [func] Improve hardware scalability by allowing multiple
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews worker threads to process incoming UDP packets.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews This can significantly increase query throughput
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews on some systems. [RT #22992]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3136. [func] Add RFC 1918 reverse zones to the list of built-in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews empty zones switched on by the 'empty-zones-enable'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews option. [RT #24990]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statistics. [RT #16030]
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User3133. [bug] Change #3114 was incomplete. [RT #24577]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3132. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3131. [tuning] Improve scalability by allocating one zone task
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews per 100 zones at startup time, rather than using a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews fixed-size task table. [RT #24406]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3130. [func] Support alternate methods for managing a dynamic
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zone's serial number. Two methods are currently
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews defined using serial-update-method, "increment"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (default) and "unixtime". [RT #23849]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews allow-new-zones was set to yes and named ACLs
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews were used. [RT #22739]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews auto-dnssec zone that has not been signed yet
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User will cause it to be signed with the specified NSEC3
415d630b6309922caee8469384a6fab75cf05032Mark Andrews parameters when keys are activated. The
415d630b6309922caee8469384a6fab75cf05032Mark Andrews NSEC3PARAM record will not appear in the zone until
415d630b6309922caee8469384a6fab75cf05032Mark Andrews it is signed, but the parameters will be stored.
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3127. [bug] 'rndc thaw' will now remove a zone's journal file
620745a4c70077221fdeecaafd3252e9d3f944f3Tinderbox User if the zone serial number has been changed and
620745a4c70077221fdeecaafd3252e9d3f944f3Tinderbox User ixfr-from-differences is not in use. [RT #24687]
620745a4c70077221fdeecaafd3252e9d3f944f3Tinderbox User3126. [security] Using DNAME record to generate replacements caused
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User RPZ to exit with a assertion failure. [RT #24766]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3125. [security] Using wildcard CNAME records as a replacement with
415d630b6309922caee8469384a6fab75cf05032Mark Andrews RPZ caused named to exit with a assertion failure.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3124. [bug] Use an rdataset attribute flag to indicate
415d630b6309922caee8469384a6fab75cf05032Mark Andrews negative-cache records rather than using rrtype 0;
415d630b6309922caee8469384a6fab75cf05032Mark Andrews this will prevent problems when that rrtype is
415d630b6309922caee8469384a6fab75cf05032Mark Andrews used in actual DNS packets. [RT #24777]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3123. [security] Change #2912 exposed a latent flaw in
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User dns_rdataset_totext() that could cause named to
415d630b6309922caee8469384a6fab75cf05032Mark Andrews crash with an assertion failure. [RT #24777]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3121. [security] An authoritative name server sending a negative
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User response containing a very large RRset could
415d630b6309922caee8469384a6fab75cf05032Mark Andrews trigger an off-by-one error in the ncache code
415d630b6309922caee8469384a6fab75cf05032Mark Andrews and crash named. [RT #24650]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
415d630b6309922caee8469384a6fab75cf05032Mark Andrews that validated insecure without using DLV and had
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User DS records in the parent zone. [RT #24631]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
415d630b6309922caee8469384a6fab75cf05032Mark Andrews record could be created and never marked complete.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3118. [bug] nsupdate could dump core on shutdown when using
415d630b6309922caee8469384a6fab75cf05032Mark Andrews SIG(0) keys. [RT #24604]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3117. [cleanup] Remove doc and parser references to the
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater never-implemented 'auto-dnssec create' option.
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater3116. [func] New 'dnssec-update-mode' option controls updates
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark Andrews of DNSSEC records in signed dynamic zones. Set to
1ddabe157ced6d2d2ce6e9ddc1a29db588dd6908Tinderbox User 'no-resign' to disable automatic RRSIG regeneration
1ddabe157ced6d2d2ce6e9ddc1a29db588dd6908Tinderbox User while retaining the ability to sign new or changed
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark Andrews data. [RT #24533]
5382b244c33da2a91116127313d6e8ad47175b41Tinderbox User3115. [bug] Named could fail to return requested data when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews following a CNAME that points into the same zone.
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews inactive and there is no replacement key. [RT #23136]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3113. [doc] Document the relationship between serial-query-rate
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and NOTIFY messages.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3112. [doc] Add missing descriptions of the update policy name
50cfe402e61ba8d816d845a9f297e3de18f4fc15Tinderbox User types "ms-self", "ms-subdomain", "krb5-self" and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "krb5-subdomain", which allow machines to update
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews their own records, to the BIND 9 ARM.
7f514657e26e5eb066c2be710fd64ec6bfee1475Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox User dnssec-validation, added test cases to the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews checkconf system test. [RT #24398]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when attempting to sign with no KSK. [RT #24369]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3109. [func] The also-notify option now uses the same syntax
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews as a zone's masters clause. This means it is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews now possible to specify a TSIG key to use when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews sending notifies to a given server, or to include
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User an explicit named masters list in an also-notify
06ea55a43397bc38c34a6d7e5c6219fe483edbb2Tinderbox User statement. [RT #23508]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
06ea55a43397bc38c34a6d7e5c6219fe483edbb2Tinderbox User warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User code (use -P instead). [RT #20852]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3107. [bug] dnssec-signzone: Report the correct number of ZSKs
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when using -x. [RT #20852]
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User3106. [func] When logging client requests, include the name of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the TSIG key if any. [RT #23619]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3105. [bug] GOST support can be suppressed by "configure
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --without-gost" [RT #24367]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3104. [bug] Better support for cross-compiling. [RT #24367]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3103. [bug] Configuring 'dnssec-validation auto' in a view
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews instead of in the options statement could trigger
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews an assertion failure in named-checkconf. [RT #24382]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3102. [func] New 'dnssec-loadkeys-interval' option configures
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews how often, in minutes, to check the key repository
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for updates when using automatic key maintenance.
dda78c0f84895c174ef7206dca6082939c030792Tinderbox User Default is every 60 minutes (formerly hard-coded
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to 12 hours). [RT #23744]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3101. [bug] Zones using automatic key maintenance could fail
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to check the key repository for updates. [RT #23744]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3100. [security] Certain response policy zone configurations could
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews trigger an INSIST when receiving a query of type
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews RRSIG. [RT #24280]
3759f10fc543747668b1ca4b4671f35b0dea8445Francis Dupont3099. [test] "dlz" system test now runs but gives R:SKIPPED if
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews not compiled with --with-dlz-filesystem. [RT #24146]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3098. [bug] DLZ zones were answering without setting the AA bit.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3097. [test] Add a tool to test handling of malformed packets.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3096. [bug] Set KRB5_KTNAME before calling log_cred() in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dst_gssapi_acceptctx(). [RT #24004]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3095. [bug] Handle isolated reserved ports in the port range.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3094. [doc] Expand dns64 documentation.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3092. [bug] Signatures for records at the zone apex could go
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews stale due to an incorrect timer setting. [RT #23769]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3091. [bug] Fixed a bug in which zone keys that were published
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and then subsequently activated could fail to trigger
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews automatic signing. [RT #22911]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3090. [func] Make --with-gssapi default [RT #23738]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3089. [func] dnssec-dsfromkey now supports reading keys from
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews standard input "dnssec-dsfromkey -f -". [RT# 20662]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and add setup.sh in order to resolve changing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named.conf issue. [RT #23687]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3087. [bug] DDNS updates using SIG(0) with update-policy match
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews type "external" could cause a crash. [RT #23735]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3086. [bug] Running dnssec-settime -f on an old-style key will
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews now force an update to the new key format even if no
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews other change has been specified, using "-P now -A now"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews as default values. [RT #22474]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3085. [func] New '-R' option in dnssec-signzone forces removal
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of signatures which have not yet expired but
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews were generated by a key that no longer exists.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3084. [func] A new command "rndc sync" dumps pending changes in
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews a dynamic zone to disk; "rndc sync -clean" also
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews removes the journal file after syncing. Also,
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews "rndc freeze" no longer removes journal files.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3083. [bug] NOTIFY messages were not being sent when generating
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews a NSEC3 chain incrementally. [RT #23702]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3082. [port] strtok_r is threads only. [RT #23747]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3081. [bug] Failure of DNAME substitution did not return
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews YXDOMAIN. [RT #23591]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3079. [bug] Handle isc_event_allocate failures in t_tasks.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3078. [func] Added a new include file with function typedefs
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews for the DLZ "dlopen" driver. [RT #23629]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3077. [bug] zone.c:zone_refreshkeys() incorrectly called
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews dnssec-keyfromlabel sets the default TTL of the
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews key. When possible, automatic signing will use that
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User TTL when the key is published. [RT #23304]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews timestamp when determining which keys are active.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3074. [bug] Make the adb cache read through for zone data and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews glue learn for zone named is authoritative for.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3073. [bug] managed-keys changes were not properly being recorded.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3071. [bug] has_nsec could be used uninitialized in
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews update.c:next_active. [RT #20256]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3069. [cleanup] Silence warnings messages from clang static analysis.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3068. [bug] Named failed to build with a OpenSSL without engine
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt support. [RT #23473]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews select the master/slave zones. [RT #23580]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3066. [func] The DLZ "dlopen" driver is now built by default,
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews no longer requiring a configure option. To
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews disable it, use "configure --without-dlopen".
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Driver also supported on win32. [RT #23467]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews operations. [RT #23469]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis Dupont3062. [func] Made several changes to enhance human readability
abe52cd9882c2c27482a2781f30a34d67501fdf8Tinderbox User of DNSSEC data in dig output and in generated
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis Dupont - DNSKEY record comments are more verbose, no
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews longer used in multiline mode only
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - multiline RRSIG records reformatted
32eb4cec6f191d30c40b63e4f22647650b3bc9d4Tinderbox User - multiline output mode for NSEC3PARAM records
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews - "dig +norrcomments" suppresses DNSKEY comments
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt - "dig +split=X" breaks hex/base64 records into
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt fields of width X; "dig +nosplit" disables this.
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews3061. [func] New option "dnssec-signzone -D", only write out
3915dc3dae1955e9f96696ca932efbd18c108d1dTinderbox User generated DNSSEC records. [RT #22896]
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews3060. [func] New option "dnssec-signzone -X <date>" allows
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews specification of a separate expiration date
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3059. [test] Added a regression test for change #3023.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3058. [bug] Cause named to terminate at startup or rndc reconfig/
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews reload to fail, if a log file specified in the conf
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews file isn't a plain file. [RT #22771]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3057. [bug] "rndc secroots" would abort after the first error
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews and so could miss some views. [RT #23488]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3056. [func] Added support for URI resource record. [RT #23386]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3055. [placeholder]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3054. [bug] Added elliptic curve support check in
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt GOST OpenSSL engine detection. [RT #23485]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3053. [bug] Under a sustained high query load with a finite
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User max-cache-size, it was possible for cache memory
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews to be exhausted and not recovered. [RT #23371]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater3052. [test] Fixed last autosign test report. [RT #23256]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3051. [bug] NS records obscure DNAME records at the bottom of the
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User zone if both are present. [RT #23035]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews3050. [bug] The autosign system test was timing dependent.
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis Dupont Wait for the initial autosigning to complete
415d630b6309922caee8469384a6fab75cf05032Mark Andrews before running the rest of the test. [RT #23035]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3049. [bug] Save and restore the gid when creating creating
088a5ec3df14e7af67b4602b143869a09f7eefb3Francis Dupont named.pid at startup. [RT #23290]
c7f686829f05e44169d46746cfb25cadcf078585Tinderbox User3048. [bug] Fully separate view key management. [RT #23419]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews3047. [bug] DNSKEY NODATA responses not cached fixed in
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User validator.c. Tests added to dnssec system test.
51901858be9d4632c1d0bed28cfa8f29932c1967Tinderbox User3046. [bug] Use RRSIG original TTL to compute validated RRset
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews and RRSIG TTL. [RT #23332]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User3045. [removed] Replaced by change #3050.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson version 0.12) for development of future unit tests.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Use configure --with-atf to build ATF internally
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews or configure --with-atf=prefix to use an external
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox User copy. [RT #23209]
30370d905e9be3be7d9b947fd432bacecbb13bb9Evan Hunt3042. [bug] dig +trace could fail attempting to use IPv6
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews addresses on systems with only IPv4 connectivity.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3041. [bug] dnssec-signzone failed to generate new signatures on
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ttl changes. [RT #23330]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3040. [bug] Named failed to validate insecure zones where a node
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox User with a CNAME existed between the trust anchor and the
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson top of the zone. [RT #23338]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3039. [func] Redirect on NXDOMAIN support. [RT #23146]
edd791fb53fab504d52ccdda41e6acbf543ac0d0Tinderbox User3038. [bug] Install <dns/rpz.h>. [RT #23342]
8bc3d252395842452a6d2c775cf8445f6349e331Tinderbox User3037. [doc] Update COPYRIGHT to contain all the individual
c317b09bf112121245fafe61f38b95dc6e96acabTinderbox User copyright notices that cover various parts.
8bc3d252395842452a6d2c775cf8445f6349e331Tinderbox User3036. [bug] Check built-in zone arguments to see if the zone
de7b9a1dac0c293b39994c91d4376883da25554fTinderbox User is re-usable or not. [RT #21914]
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User3035. [cleanup] Simplify by using strlcpy. [RT #22521]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
467a823e57af687ebd486dfd73ea32f9d2a145beTinderbox User3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3029. [bug] isc_netaddr_format() handle a zero sized buffer.
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt catch NULL pointer dereferences before they happen.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews after calling grow_headerspace() and if not
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater re-call grow_headerspace() until we do. [RT #22521]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews3024. [func] RTT Banding removed due to minor security increase
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews but major impact on resolver latency. [RT #23310]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews3023. [bug] Named could be left in an inconsistent state when
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater receiving multiple AXFR response messages that were
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt not all TSIG-signed. [RT #23254]
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3021. [bug] Change #3010 was incomplete. [RT #22296]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3020. [bug] auto-dnssec failed to correctly update the zone when
261ef37955c3468cbcb55d54b83c9a3b14e114dfTinderbox User changing the DNSKEY RRset. [RT #23232]
22870a9f8df95488abe2b17ab92b7cb6a9fe6f14Tinderbox User3019. [test] Test: check apex NSEC3 records after adding DNSKEY
22870a9f8df95488abe2b17ab92b7cb6a9fe6f14Tinderbox User record via UPDATE. [RT #23229]
22870a9f8df95488abe2b17ab92b7cb6a9fe6f14Tinderbox User3018. [bug] Named failed to check for the "none;" acl when deciding
22870a9f8df95488abe2b17ab92b7cb6a9fe6f14Tinderbox User if a zone may need to be re-signed. [RT #23120]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User3017. [doc] dnssec-keyfromlabel -I was not properly documented.
3bd8b5a8fb126e45c67ff53b68183c889cc27918Tinderbox User3016. [bug] rndc usage missing '-b'. [RT #22937]
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User3014. [placeholder]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User3013. [bug] The DNS64 ttl was not always being set as expected.
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User3012. [bug] Remove DNSKEY TTL change pairs before generating
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User signing records for any remaining DNSKEY changes.
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User3011. [func] Change the default query timeout from 30 seconds
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User to 10. Allow setting this in named.conf using the new
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User 'resolver-query-timeout' option, which specifies a max
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User time in seconds. 0 means 'default' and anything longer
6d114a4c5cddb176ae5199eee154c0273d652ba4Tinderbox User than 30 will be silently set to 30. [RT #22852]
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User for refreshing managed-keys. [RT #22296]
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User3009. [bug] clients-per-query code didn't work as expected with
955ee8b865d70d02ad1fdc959382e6f8a07c1d14Tinderbox User particular query patterns. [RT #22972]
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User --- 9.8.0b1 released ---
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User3008. [func] Response policy zones (RPZ) support. [RT #21726]
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User3007. [bug] Named failed to preserve the case of domain names in
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User rdata which is not compressible when writing master
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User files. [RT #22863]
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User3006. [func] Allow dynamically generated TSIG keys to be preserved
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User across restarts of named. Initially this is for
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User TSIG keys generated using GSSAPI. [RT #22639]
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User3005. [port] Solaris: Work around the lack of
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User gsskrb5_register_acceptor_identity() by setting
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User the KRB5_KTNAME environment variable to the
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt contents of tkey-gssapi-keytab. Also fixed
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User test errors on MacOSX. [RT #22853]
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User3004. [func] DNS64 reverse support. [RT #22769]
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User3003. [experimental] Added update-policy match type "external",
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User enabling named to defer the decision of whether to
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User allow a dynamic update to an external daemon.
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User (Contributed by Andrew Tridgell.) [RT #22758]
dc7e5458bbcb59ea310ed64ac7e77016e62e9c15Tinderbox User3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User3001. [func] Added a default trust anchor for the root zone, which
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User can be switched on by setting "dnssec-validation auto;"
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User in the named.conf options. [RT #21727]
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User3000. [bug] More TKEY/GSS fixes:
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User - nsupdate can now get the default realm from
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User the user's Kerberos principal
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User - corrected gsstest compilation flags
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User - improved documentation
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User - fixed some NULL dereferences
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User2999. [func] Add GOST support (RFC 5933). [RT #20639]
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User to the task api. [RT #22776]
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User2997. [func] named -V now reports the OpenSSL and libxml2 verions
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User it was compiled against. [RT #22687]
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User2996. [security] Temporarily disable SO_ACCEPTFILTER support.
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User2995. [bug] The Kerberos realm was not being correctly extracted
391130fffd3f517aa72c5e6bd35dc7894d7730f4Tinderbox User from the signer's identity. [RT #22770]
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews do not use threads on earlier versions. Also kill
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the unproven-pthreads, mit-pthreads, and ptl2 support.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2993. [func] Dynamically grow adb hash tables. [RT #21186]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews for looking at a secure delegation. [RT #22059]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dynamic zones. [RT #22365]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2990. [bug] 'dnssec-settime -S' no longer tests prepublication
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews interval validity when the interval is set to 0.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2989. [func] Added support for writable DLZ zones. (Contributed
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews by Andrew Tridgell of the Samba project.) [RT #22629]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of external DLZ drivers that can be loaded as
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews shared objects at runtime rather than linked with
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews named. Currently this is switched on via a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews compile-time option, "configure --with-dlz-dlopen".
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Note: the syntax for configuring DLZ zones
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews is likely to be refined in future releases.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews (Contributed by Andrew Tridgell of the Samba
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews project.) [RT #22629]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews adding a "tkey-gssapi-keytab" option. If set,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews updates will be allowed with any key matching
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews a principal in the specified keytab file.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews "tkey-gssapi-credential" is no longer required
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews and is expected to be deprecated. (Contributed
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews by Andrew Tridgell of the Samba project.)
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews zone, but the nameserver names and/or their IP
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews addresses are statically configured. [RT #21474]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2984. [bug] Don't run MX checks when the target of the MX record
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews is ".". [RT #22645]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews --- 9.8.0a1 released ---
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews increment the reference count.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Note: dns_tsigkey_createfromkey() callers should now
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews always call dst_key_free() rather than setting it
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to NULL on success. [RT #22672]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2980. [bug] named didn't properly handle UPDATES that changed the
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2979. [bug] named could deadlock during shutdown if two
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews "rndc stop" commands were issued at the same
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews time. [RT #22108]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2978. [port] hpux: look for <devpoll.h> [RT #21919]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews key. [RT #22573]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews wrong lock which could lead to server deadlock.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews consistency check examining the existing version
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of the zone rather than the new version resulting
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews from the UPDATE. [RT #22413]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews at the end of configure resulting in build failures
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews where there is very old version of perl installed.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews Move it to "make maintainer-clean". [RT #22230]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2971. [bug] Fixed a bug that caused journal files not to be
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews compacted on Windows systems as a result of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews any matching RRSIG records. A subsequent lookup of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of NO DATA cache entry could trigger a INSIST when the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews unexpected RRSIG was also returned with the NO DATA
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews cache entry.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews CVE-2010-3613, VU#706148. [RT #22288]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2969. [security] Fix acl type processing so that allow-query works
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews in options and view statements. Also add a new
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews set of tests to verify proper functioning.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews CVE-2010-3615, VU#510208. [RT #22418]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2968. [security] Named could fail to prove a data set was insecure
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews before marking it as insecure. One set of conditions
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews that can trigger this occurs naturally when rolling
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews DNSKEY algorithms.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews CVE-2010-3614, VU#837744. [RT #22309]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2967. [bug] 'host -D' now turns on debugging messages earlier.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews space available in the buffer when adding a left
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews justified character with a non zero width,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews (e.g. "%-1c"). [RT #22270]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews RFC 4634. [RT #21702]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2964. [placeholder]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2963. [security] The allow-query acl was being applied instead of the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2962. [port] win32: add more dependencies to BINDBuild.dsw.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2961. [bug] Be still more selective about the non-authoritative
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews answers we apply change 2748 to. [RT #22074]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2960. [func] Check that named accepts non-authoritative answers.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2959. [func] Check that named starts with a missing masterfile.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2958. [bug] named failed to start with a missing master file.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews respectively. [RT #21962]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews build_sqldbinstance failure. [RT #21623]
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User2953. [bug] Silence spurious "expected covering NSEC3, got an
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews exact match" message when returning a wildcard
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews no data response. [RT #21744]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to initialize winsock. [RT #21932]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2951. [bug] named failed to generate a correct signed response
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews in a optout, delegation only zone with no secure
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews delegations. [RT #22007]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews falling back to TCP on UDP timeouts when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews ixfr-from-differences was set. [RT #21595]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews it was called multiple times. [RT #21942]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2948. [port] MacOS: provide a mechanism to configure the test
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews interfaces at reboot. See bin/tests/system/README
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews for details.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2947. [placeholder]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2946. [doc] Document the default values for the minimum and maximum
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews zone refresh and retry values in the ARM. [RT #21886]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2943. [func] Add support to load new keys into managed zones
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews without signing immediately with "rndc loadkeys".
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews Add support to link keys with "dnssec-keygen -S"
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews and "dnssec-settime -S". [RT #21351]
ab833877278ad5535eef57e4f62291becaea5bc5Mark Andrews2942. [contrib] zone2sqlite failed to setup the entropy sources.
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2941. [bug] sdb and sdlz (dlz's zone database) failed to support
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt DNAME at the zone apex. [RT #21610]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2940. [port] Remove connection aborted error message on
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt Windows. [RT #21549]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2939. [func] Check that named successfully skips NSEC3 records
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt that fail to match the NSEC3PARAM record currently
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt in use. [RT# 21868]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2938. [bug] When generating signed responses, from a signed zone
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt that uses NSEC3, named would use a uninitialized
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt pointer if it needed to skip a NSEC3 record because
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt it didn't match the selected NSEC3PARAM record for
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt zone. [RT# 21868]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2937. [bug] Worked around an apparent race condition in over
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt memory conditions. Without this fix a DNS cache DB or
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User ADB could incorrectly stay in an over memory state,
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User effectively refusing further caching, which
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews subsequently made a BIND 9 caching server unworkable.
214af784e91553d387246fd9ce46cb1291697b9aTinderbox User This fix prevents this problem from happening by
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews polling the state of the memory context, rather than
72a6417eb3792914417031300a8589be63ab1102Tinderbox User making a copy of the state, which appeared to cause
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater a race. This is a "workaround" in that it doesn't
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater solve the possible race per se, but several experiments
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater proved this change solves the symptom. Also, the
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater polling overhead hasn't been reported to be an issue.
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater This bug should only affect a caching server that
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater specifies a finite max-cache-size. It's also quite
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User likely that the bug happens only when enabling threads,
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User but it's not confirmed yet. [RT #21818]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2936. [func] Improved configuration syntax and multiple-view
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User support for addzone/delzone feature (see change
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User #2930). Removed "new-zone-file" option, replaced
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt with "allow-new-zones (yes|no)". The new-zone-file
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater for each view is now created automatically, with
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater a filename generated from a hash of the view name.
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater It is no longer necessary to "include" the
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User new-zone-file in named.conf; this happens
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews automatically. Zones that were not added via
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson "rndc addzone" can no longer be removed with
309b912841e8b97bf0b0df0d96c3eaf16990c080Automatic Updater "rndc delzone". [RT #19447]
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox User2935. [bug] nsupdate: improve 'file not found' error message.
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2933. [bug] 'dig +nsid' used stack memory after it went out of
dfc3a0fffd5d0b9f174ebca77860ae9ffa616314Tinderbox User scope. This could potentially result in a unknown,
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User potentially malformed, EDNS option being sent instead
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of the desired NSID option. [RT #21781]
089d5091b781af7dfef225fbc828eb4e6d04bf4fTinderbox User2932. [cleanup] Corrected a numbering error in the "dnssec" test.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2931. [bug] Temporarily and partially disable change 2864
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews because it would cause infinite attempts of RRSIG
9a9ca3c4f120971b7091b28a5530e5eaf362f7e6Tinderbox User queries. This is an urgent care fix; we'll
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews revisit the issue and complete the fix later.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2930. [experimental] New "rndc addzone" and "rndc delzone" commands
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews allow dynamic addition and deletion of zones.
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews To enable this feature, specify a "new-zone-file"
9e295ad801d5c986eb6c7745637b5dc0efb28711Tinderbox User option at the view or options level in named.conf.
9a9ca3c4f120971b7091b28a5530e5eaf362f7e6Tinderbox User Zone configuration information for the new zones
da93950363b307b718d156514b95b9df93a63776Mark Andrews will be written into that file. To make the new
da93950363b307b718d156514b95b9df93a63776Mark Andrews zones persist after a restart, "include" the file
06ea55a43397bc38c34a6d7e5c6219fe483edbb2Tinderbox User into named.conf in the appropriate view. (Note:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews This feature is not yet documented, and its syntax
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews is expected to change.) [RT #19447]
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic Updater2929. [bug] Improved handling of GSS security contexts:
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt - added LRU expiration for generated TSIGs
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt - added the ability to use a non-default realm
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt - added new "realm" keyword in nsupdate
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - limited lifetime of generated keys to 1 hour
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or the lifetime of the context (whichever is
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2928. [bug] Be more selective about the non-authoritative
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User answer we apply change 2748 to. [RT #21594]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2927. [placeholder]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2926. [placeholder]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2925. [bug] Named failed to accept uncachable negative responses
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User from insecure zones. [RT# 21555]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2924. [func] 'rndc secroots' dump a combined summary of the
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User current managed keys combined with trusted keys.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2923. [bug] 'dig +trace' could drop core after "connection
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User timeout". [RT #21514]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2922. [contrib] Update zkt to version 1.0.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2921. [bug] The resolver could attempt to destroy a fetch context
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User too soon. [RT #19878]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User to IPv4 clients. New acl 'filter-aaaa' (default any).
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2917. [func] Virtual time test framework. [RT #20801]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2916. [func] Add framework to use IPv6 in tests.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2915. [cleanup] Be smarter about which objects we attempt to compile
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User based on configure options. [RT #21444]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2914. [bug] Make the "autosign" system test more portable.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2913. [func] Add pkcs#11 system tests. [RT #20784]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2912. [func] Windows clients don't like UPDATE responses that clear
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User the zone section. [RT #20986]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2911. [bug] dnssec-signzone didn't handle out of zone records well.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2910. [func] Sanity check Kerberos credentials. [RT #20986]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2909. [bug] named-checkconf -p could die if "update-policy local;"
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User was specified in named.conf. [RT #21416]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2908. [bug] It was possible for re-signing to stop after removing
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User a DNSKEY. [RT #21384]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2907. [bug] The export version of libdns had undefined references.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2905. [port] aix: set use_atomic=yes with native compiler.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2904. [bug] When using DLV, sub-zones of the zones in the DLV,
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User could be incorrectly marked as insecure instead of
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User secure leading to negative proofs failing. This was
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User a unintended outcome from change 2890. [RT# 21392]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2903. [bug] managed-keys-directory missing from namedconf.c.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2902. [func] Add regression test for change 2897. [RT #21040]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2900. [bug] The placeholder negative caching element was not
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User properly constructed triggering a INSIST in
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User dns_ncache_towire(). [RT #21346]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2899. [port] win32: Support linking against OpenSSL 1.0.0.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2898. [bug] nslookup leaked memory when -domain=value was
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User specified. [RT #21301]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2897. [bug] NSEC3 chains could be left behind when transitioning
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User to insecure. [RT #21040]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2896. [bug] "rndc sign" failed to properly update the zone
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User when adding a DNSKEY for publication only. [RT #21045]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2895. [func] genrandom: add support for the generation of multiple
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User files. [RT #20917]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2893. [bug] Improve managed keys support. New named.conf option
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User managed-keys-directory. [RT #20924]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2892. [bug] Handle REVOKED keys better. [RT #20961]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2891. [maint] Update empty-zones list to match
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2890. [bug] Handle the introduction of new trusted-keys and
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User DS, DLV RRsets better. [RT #21097]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2889. [bug] Elements of the grammar where not properly reported.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2888. [bug] Only the first EDNS option was displayed. [RT #21273]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2887. [bug] Report the keytag times in UTC in the .key file,
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User local time is presented as a comment within the
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User comment. [RT #21223]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2886. [bug] ctime() is not thread safe. [RT #21223]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2885. [bug] Improve -fno-strict-aliasing support probing in
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User configure. [RT #21080]
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2884. [bug] Insufficient validation in dns_name_getlabelsequence().
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2883. [bug] 'dig +short' failed to handle really large datasets.
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User2882. [bug] Remove memory context from list of active contexts
05c0db3923b93c36afa488bffc7862e0ae554698Tinderbox User before clearing 'magic'. [RT #21274]
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews2881. [bug] Reduce the amount of time the rbtdb write lock
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User is held when closing a version. [RT #21198]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User consistent. [RT #21078]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2878. [func] Incrementally write the master file after performing
08b7d0694645b474e8a57b663662c8162e7d8b8eTinderbox User a AXFR. [RT #21010]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2877. [bug] The validator failed to skip obviously mismatching
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User RRSIGs. [RT #21138]
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User from unsigned zones. [RT #21131]
a42655602677933f768df30059ac23cc98d71958Tinderbox User2875. [bug] dns_time64_fromtext() could accept non digits.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2874. [bug] Cache lack of EDNS support only after the server
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews successfully responds to the query using plain DNS.
644973f327e9db74779e7c0426db90909173b284Automatic Updater2873. [bug] Canceling a dynamic update via the dns/client module
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews could trigger an assertion failure. [RT #21133]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2872. [bug] Modify dns/client.c:dns_client_createx() to only
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User require one of IPv4 or IPv6 rather than both.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2871. [bug] Type mismatch in mem_api.c between the definition and
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User the header file, causing build failure with
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User --enable-exportlib. [RT #21138]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2868. [cleanup] Run "make clean" at the end of configure to ensure
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User any changes made by configure are integrated.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User Use --with-make-clean=no to disable. [RT #20994]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User don't like it. [RT #20986]
1520c6474f783fe67fc23ff8a78b1cde2ddcc01dTinderbox User2866. [bug] Windows does not like the TSIG name being compressed.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2865. [bug] memset to zero event.data. [RT #20986]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2862. [bug] nsupdate didn't default to the parent zone when
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User updating DS records. [RT #20896]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2861. [doc] dnssec-settime man pages didn't correctly document the
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User inactivation time. [RT #21039]
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User2860. [bug] named-checkconf's usage was out of date. [RT #21039]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2859. [bug] When canceling validation it was possible to leak
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews memory. [RT #20800]
0726d872f6f36901ea09321df57084614e5bb6faTinderbox User2858. [bug] RTT estimates were not being adjusted on ICMP errors.
549c517e2ecad52bb1d32f08920e29d4e8cda71eTinderbox User2857. [bug] named-checkconf did not fail on a bad trusted key.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2856. [bug] The size of a memory allocation was not always properly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews recorded. [RT #20927]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2855. [func] nsupdate will now preserve the entered case of domain
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews names in update requests it sends. [RT #20928]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2854. [func] dig: allow the final soa record in a axfr response to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews be suppressed, dig +onesoa. [RT #20929]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2851. [doc] nslookup.1, removed <informalexample> from the docbook
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews source as it produced bad nroff. [RT #21007]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the heap would have corrupted entries. [RT #20951]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews README.rfc5011 into the ARM. [RT #20899]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2846. [bug] EOF on unix domain sockets was not being handled
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews correctly. [RT #20731]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews been five (5) seconds.
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews creating key files if there is a chance that the new
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews key ID will collide with an existing one after
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews either of the keys has been revoked. (To override
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews this in the case of dnssec-keyfromlabel, use the -y
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews option. dnssec-keygen will simply create a
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews different, non-colliding key, so an override is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews not necessary.) [RT #20838]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2842. [func] Added "smartsign" and improved "autosign" and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "dnssec" regression tests. [RT #20865]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
77f9b64584056d769b3056980b4bf1a2bd1f484fTinderbox User2840. [bug] Temporary fixed pkcs11-destroy usage check.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2839. [bug] A KSK revoked by named could not be deleted.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2838. [placeholder]
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2836. [bug] Keys that were scheduled to become active could
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews be delayed. [RT #20874]
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews the private key file with the outdated tag
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews "Unpublish" rather than "Inactive". This has been
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews fixed; however, any existing keys that had Inactive
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews dates set will now need to have them reset, using
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews 'dnssec-settime -I'. [RT #20868]
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
827f8cccb5280f4da66c46186e792d1cb9d73503Mark Andrews digest length were used incorrectly, leading to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews interoperability problems with other DNS
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews implementations. This has been corrected.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (Note: If an oversize key is in use, and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews compatibility is needed with an older release of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews BIND, the new tool "isc-hmac-fixup" can convert
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the key secret to a form that will work with all
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews versions.) [RT #20751]
2fee8782a6fd57d86a67949092ab9197111af390Evan Hunt2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
15ae68f3db8261770fc33b8e0f83f5d8c7021e84Mark Andrews2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews to avoid redefinition in some OSs [RT 20831]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2831. [security] Do not attempt to validate or cache
fec6e13f2d1e69fe1c2b8fac36f732f124cf5398Mark Andrews out-of-bailiwick data returned with a secure
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews answer; it must be re-fetched from its original
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User source and validated in that context. [RT #20819]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2830. [bug] Changing the OPTOUT setting could take multiple
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews passes. [RT #20813]
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User2829. [bug] Fixed potential node inconsistency in rbtdb.c.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2828. [security] Cached CNAME or DNAME RR could be returned to clients
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews without DNSSEC validation. [RT #20737]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas Gustafsson being released. [RT #20740]
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas Gustafsson2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
a05244bb01d5a5f71b2ac9abe1601589cde79570Tinderbox User was in the process of being created was not properly
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User recorded in the zone. [RT #20786]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2822. [bug] rbtdb.c:loadnode() could return the wrong result.
0726d872f6f36901ea09321df57084614e5bb6faTinderbox User2821. [doc] Add note that named-checkconf doesn't automatically
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User2820. [func] Handle read access failure of OpenSSL configuration
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews file more user friendly (PKCS#11 engine patch).
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2818. [cleanup] rndc could return an incorrect error code
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when a zone was not found. [RT #20767]
a778b94bdb66d9e0b9a497d55a401dad0bcf3a0cTinderbox User2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User2816. [bug] previous_closest_nsec() could fail to return
dc7e5458bbcb59ea310ed64ac7e77016e62e9c15Tinderbox User data for NSEC3 nodes [RT #29730]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2815. [bug] Exclusively lock the task when freezing a zone.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2814. [func] Provide a definitive error message when a master
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zone is not loaded. [RT #20757]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2812. [bug] Make sure updates can't result in a zone with
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User NSEC-only keys and NSEC3 records. [RT #20748]
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews output. [RT #20733]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to insecure. [RT #20746]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
9160e27507ba636887f6352bee5cb3729108fc76Tinderbox User2808. [bug] Remove the attempt to install atomic.h from lib/isc.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews atomic.h is correctly installed by the architecture
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews specific subdirectories. [RT #20722]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews keys. [RT #20720]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.7.0rc1 released ---
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when it had changed. [RT #20703]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2805. [bug] Fixed namespace problems encountered when building
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews external programs using non-exported BIND9 libraries
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt (i.e., built without --enable-exportlib). [RT #20679]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or as a result of a scheduled key change. [RT #20700]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and genrandom under windows. [RT #20670]
ace87434ed3dc7b9d8b36835fd2ce497d29d8191Tinderbox User2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2801. [func] Detect and report records that are different according
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to DNSSEC but are semantically equal according to plain
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User DNS. Apply plain DNS comparisons rather than DNSSEC
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews comparisons when processing UPDATE requests.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-signzone now removes such semantically duplicate
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt records prior to signing the RRset.
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt named-checkzone -r {ignore|warn|fail} (default warn)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named-compilezone -r {ignore|warn|fail} (default warn)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named.conf: check-dup-records {ignore|warn|fail};
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2800. [func] Reject zones which have NS records which refer to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews CNAMEs, DNAMEs or don't have address record (class IN
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews only). Reject UPDATEs which would cause the zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to fail the above checks if committed. [RT #20678]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2799. [cleanup] Changed the "secure-to-insecure" option to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "dnssec-secure-to-insecure", and "dnskey-ksk-only"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
e1a389f7478d094ffbe592df28328a10d484cb38Tinderbox User2798. [bug] Addressed bugs in managed-keys initialization
93ca5ee4c4c77aca8d3bcffd70216f30ef398387Mark Andrews and rollover. [RT #20683]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2797. [bug] Don't decrement the dispatch manager's maxbuffers.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2796. [bug] Missing dns_rdataset_disassociate() call in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dns_nsec3_delnsec3sx(). [RT #20681]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews log messages. [RT #18889]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews2793. [func] Add "autosign" and "metadata" tests to the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews automatic tests. [RT #19946]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2792. [func] "filter-aaaa-on-v4" can now be set in view
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews options (if compiled in). [RT #20635]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2791. [bug] The installation of isc-config.sh was broken.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2790. [bug] Handle DS queries to stub zones. [RT #20440]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2788. [bug] dnssec-signzone could sign with keys that were
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews not requested [RT #20625]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2787. [bug] Spurious log message when zone keys were
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dynamically reconfigured. [RT #20659]
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User2786. [bug] Additional could be promoted to answer. [RT #20663]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.7.0b3 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2784. [bug] TC was not always being set when required glue was
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dropped. [RT #20655]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews buffer size of 512 or less. [RT #20654]
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User2782. [port] win32: use getaddrinfo() for hostname lookups.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2781. [bug] Inactive keys could be used for signing. [RT #20649]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2780. [bug] dnssec-keygen -A none didn't properly unset the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews activation date in all cases. [RT #20648]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2779. [bug] Dynamic key revocation could fail. [RT #20644]
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt2778. [bug] dnssec-signzone could fail when a key was revoked
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews without deleting the unrevoked version. [RT #20638]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2776. [bug] Change #2762 was not correct. [RT #20647]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in dnssec-keyfromlabel. [RT #20643]
2706fce75f04398595d9648122c6b67164e94fccTinderbox User2774. [bug] Existing cache DB wasn't being reused after
4c721f0e4530612d3c6aa8d9dd02b5e316b4a959Tinderbox User reconfiguration. [RT #20629]
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox User2773. [bug] In autosigned zones, the SOA could be signed
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews with the KSK. [RT #20628]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2772. [security] When validating, track whether pending data was from
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the additional section or not and only return it if
abe52cd9882c2c27482a2781f30a34d67501fdf8Tinderbox User validates as secure. [RT #20438]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews corrupted when importing from key files [RT #20624]
08b7d0694645b474e8a57b663662c8162e7d8b8eTinderbox User2770. [cleanup] Add log messages to resolver.c to indicate events
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews causing FORMERR responses. [RT #20526]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2769. [cleanup] Change #2742 was incomplete. [RT #19589]
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User2767. [bug] named could crash on startup if a zone was
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User configured with auto-dnssec and there was no
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews key-directory. [RT #20615]
aef6cf0f147a5014d4891c9689b9f463399e16e7Tinderbox User2766. [bug] isc_socket_fdwatchpoke() should only update the
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User socketmgr state if the socket is not pending on a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews read or write. [RT #20603]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2765. [bug] Skip masters for which the TSIG key cannot be found.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2762. [bug] DLV validation failed with a local slave DLV zone.
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox User2761. [cleanup] Enable internal symbol table for backtrace only for
fc57adef42982f7a8cc4a5ad81bcebacec10b5feTinderbox User systems that are known to work. Currently, BSD
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews variants, Linux and Solaris are supported. [RT# 20202]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2759. [doc] Add information about .jbk/.jnw files to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the ARM. [RT #20303]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2758. [bug] win32: Added a workaround for a windows 2008 bug
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews that could cause the UDP client handler to shut
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews down. [RT #19176]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2757. [bug] dig: assertion failure could occur in connect
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews timeout. [RT #20599]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2755. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews was signed with NSEC3. [RT #20587]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2753. [bug] Removed an unnecessary warning that could appear when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews building an NSEC chain. [RT #20589]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2752. [bug] Locking violation. [RT #20587]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2750. [bug] dig: assertion failure could occur when a server
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews didn't have an address. [RT #20579]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for NSEC3 signed zones. [RT #20452]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews as referrals. [RT #18884]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews time of RRSIGs correctly. [RT #20541]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2745. [bug] configure script didn't probe the return type of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews gai_strerror(3) correctly. [RT #20573]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for a insecure delegation.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.7.0b2 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2742. [cleanup] Clarify some DNSSEC-related log messages in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2741. [func] Allow the dnssec-keygen progress messages to be
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews suppressed (dnssec-keygen -q). Automatically
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews suppress the progress messages when stdin is not
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a tty. [RT #20474]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2740. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2739. [cleanup] Clean up API for initializing and clearing trust
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews anchors for a view. [RT #20211]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews test. [RT #20453]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2737. [func] UPDATE requests can leak existence information.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2736. [func] Improve the performance of NSEC signed zones with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews more than a normal amount of glue below a delegation.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2735. [bug] dnssec-signzone could fail to read keys
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews that were specified on the command line with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews full paths, but weren't in the current
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User directory. [RT #20421]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews if built with './configure --enable-filter-aaaa'.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Filters out AAAA answers to clients connecting
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews via IPv4. (This is NOT recommended for general
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews use.) [RT #20339]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2731. [func] Additional work on change 2709. The key parser
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews will now ignore unrecognized fields when the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews minor version number of the private key format
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews has been increased. It will reject any key with
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the major version number increased. [RT #20310]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2730. [func] Have dnssec-keygen display a progress indication
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a la 'openssl genrsa' on standard error. Note
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when the first '.' is followed by a long stop
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews one has the choice between slow generation vs.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews TTL. [RT #20451]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-signzone now warn immediately if asked to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews write into a nonexistent directory. [RT #20278]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2727. [func] The 'key-directory' option can now specify a relative
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews path. [RT #20154]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews RSASHA256 and RSASHA512. [RT #20023]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2725. [doc] Added information about the file "managed-keys.bind"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to the ARM. [RT #20235]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews were failing. [RT #20448]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews isc_base64_totext(), didn't always mark regions of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews memory as fully consumed after conversion. [RT #20445]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2722. [bug] Ensure that the memory associated with the name of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews a node in a rbt tree is not altered during the life
fda4ac481c16bb138e9d32e650264c89c12005faTinderbox User of the node. [RT #20431]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2721. [port] Have dst__entropy_status() prime the random number
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews generator. [RT #20369]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews incorrect. [RT #20394]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the last private type record was removed as a result
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of completing the signing the zone with a key.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.7.0b1 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
bd4b86327dc2825e7bf256c9f5fed2586c2fd61aTinderbox User2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2713. [bug] powerpc: atomic operations missing asm("ics") /
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews __isync() calls.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
0d3490f93bb980fde704055e74c1b508987a5fe4Mark Andrews to be fully automated in zones configured for
f549a65f4cbc84f2a4e5ce4ff78c30bb8f3a32d4Tinderbox User dynamic DNS. 'auto-dnssec allow;' permits a zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to be signed by creating keys for it in the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews key-directory and using 'rndc sign <zone>'.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews 'auto-dnssec maintain;' allows that too, plus it
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews also keeps the zone's DNSSEC keys up to date
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews according to their timing metadata. [RT #19943]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater build. [RT #20372]
a8cfd15880d65b9387dc7e094a2a7ba63ea65241Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zone option cause a zone to be signed with only KSKs
5382b244c33da2a91116127313d6e8ad47175b41Tinderbox User signing the DNSKEY RRset, not ZSKs. This reduces
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the size of a DNSKEY answer. [RT #20340]
9160e27507ba636887f6352bee5cb3729108fc76Tinderbox User2709. [func] Added some data fields, currently unused, to the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews private key file format, to allow implementation
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of explicit key rollover in a future release
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews without impairing backward or forward compatibility.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews update are now fully supported and no longer require
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews defines to enable. We now no longer overload the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews apex. Secure to insecure changes are controlled by
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews by the named.conf option 'secure-to-insecure'.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Warning: If you had previously enabled support by
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews adding defines at compile time to BIND 9.6 you should
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ensure that all changes that are in progress have
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox User is not backwards compatible.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to be specified in the label if there is a default
a8cfd15880d65b9387dc7e094a2a7ba63ea65241Mark Andrews engine or the -E option has been used. Also, it
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews now uses default algorithms as dnssec-keygen does
42c81cf2de732ec6d00e73fc755a399ca037e543Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
dc7e5458bbcb59ea310ed64ac7e77016e62e9c15Tinderbox User trigger an assert. [RT #20368]
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt2705. [placeholder]
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt2704. [bug] Serial of dynamic and stub zones could be inconsistent
1921b850640ae984448e8b87870c8527fa9cddb6Evan Hunt with their SOA serial. [RT #19387]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2703. [func] Introduce an OpenSSL "engine" argument with -E
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater for all binaries which can take benefit of
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater crypto hardware. [RT #20230]
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
7d704e522860496310bb29c28e76064868401a9cMark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
7d704e522860496310bb29c28e76064868401a9cMark Andrews supported TSIG key algorithm. [RT #18046]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2700. [doc] The match-mapped-addresses option is discouraged.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2699. [bug] Missing lock in rbtdb.c. [RT #20037]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2698. [placeholder]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews S_IFREG are defined after including <isc/stat.h>.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2696. [bug] named failed to successfully process some valid
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews acl constructs. [RT #20308]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews callback function for isc_socket_fdwatchcreate)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to include information about the direction (read
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or write) and add isc_socket_fdwatchpoke.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews chain when re-signing a previously-signed zone.
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson Use -u to modify NSEC3 parameters or switch
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews between NSEC and NSEC3. [RT #20304]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User2689. [bug] Correctly handle snprintf result. [RT #20306]
e47101a2fb5cce3913ddfc38a004fe3c60bf9483Tinderbox User2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User to decide to fetch the destination address. [RT #20305]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Also, added warnings when revoking a ZSK, as this is
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt not defined by protocol (but is legal). [RT #19943]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt signing with NSEC3 and vice versa. [RT #20301]
20648865f1f76c4c34cbe33c18b62cfa0cfe0fc8Tinderbox User2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews +adflag and +cdflag. [RT #19305]
35eb1a5f072b9f1b7d7cbcc0c25e38611f373f6fTinderbox User2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the NSEC3 parameters used to sign the zone change.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2682. [bug] "configure --enable-symtable=all" failed to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews build. [RT #20282]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews decoded. [RT #20269]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
5aebd7e7af8096a013fad2019ea819af0acde08cTinderbox User format. [RT #20031]
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews was set. [RT #20258]
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews2677. [func] Changes to key metadata behavior:
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews - Keys without "publish" or "active" dates set will
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews no longer be used for smart signing. However,
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews those dates will be set to "now" by default when
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews a key is created; to generate a key but not use
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews it yet, use dnssec-keygen -G.
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews sets the time when a key is no longer used for
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews signing but is still published.
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews - The "unpublished" date (-U) is deprecated in
c29c3e51b1d7502c8d9978633df43e6a267bc427Mark Andrews favor of "deleted" (-D).
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2676. [bug] --with-export-installdir should have been
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --with-export-includedir. [RT #20252]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2675. [bug] dnssec-signzone could crash if the key directory
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews did not exist. [RT #20232]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt --- 9.7.0a3 released ---
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2674. [bug] "dnssec-lookaside auto;" crashed if named was built
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt without openssl. [RT #20231]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User2673. [bug] The managed-keys.bind zone file could fail to
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt load due to a spurious result from sync_keyzone()
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
20648865f1f76c4c34cbe33c18b62cfa0cfe0fc8Tinderbox User lookups. [RT #20218]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2671. [bug] Add support for PKCS#11 providers not returning
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the public exponent in RSA private keys
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (OpenCryptoki for instance) in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-keyfromlabel. [RT #19294]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2670. [bug] Unexpected connect failures failed to log enough
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews information to be useful. [RT #20205]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2668. [func] Several improvements to dnssec-* tools, including:
edd791fb53fab504d52ccdda41e6acbf543ac0d0Tinderbox User - dnssec-keygen and dnssec-settime can now set key
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews metadata fields 0 (to unset a value, use "none")
7711228a135a2fe85765ba13a67b8e397ed73489Mark Andrews - dnssec-revoke sets the revocation date in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews addition to the revoke bit
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - dnssec-settime can now print individual metadata
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews fields instead of always printing all of them,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and can print them in unix epoch time format for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews use by scripts
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox User2667. [func] Add support for logging stack backtrace on assertion
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews failure (not available for all platforms). [RT #19780]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews (API change from 9.7.0a2). [RT #20196]
8fabea916f73d0b7c7371998dd041b41d1ad5296Tinderbox User2665. [func] Clarify syntax for managed-keys {} statement, add
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews ARM documentation about RFC 5011 support. [RT #19874]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2664. [bug] create_keydata() and minimal_update() in zone.c
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews didn't properly check return values for some
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews functions. [RT #19956]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2663. [func] win32: allow named to run as a service using
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews returned a misleading error code when lwresd was
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews down. [RT #20028]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
edd791fb53fab504d52ccdda41e6acbf543ac0d0Tinderbox User creating lwres context. [RT #20029]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews applications. See README.libdns. [RT #19369]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
903fcd6a60c6420f5dbd753ab068ba5ca2af8e62Tinderbox User name for DNSSEC keys. [RT #19938]
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User2658. [bug] dnssec-settime and dnssec-revoke didn't process
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews key file paths correctly. [RT #20078]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews log level to debug 1. [RT #20058]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2656. [func] win32: add a "tools only" check box to the installer
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews which causes it to only install dig, host, nslookup,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews nsupdate and relevant DLLs. [RT #19998]
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt2655. [doc] Document that key-directory does not affect
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User bind.keys, rndc.key or session.key. [RT #20155]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2654. [bug] Improve error reporting on duplicated names for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews deny-answer-xxx. [RT #20164]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
3718b6ecfc40479988a9182701a4af5b3f8233f4Tinderbox User not found rather than out of memory. [RT #18033]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2652. [func] Provide more detail about what record is being
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews deleted. [RT #20061]
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox User2651. [bug] Dates could print incorrectly in K*.key files on
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews 64-bit systems. [RT #20076]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2650. [bug] Assertion failure in dnssec-signzone when trying
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to read keyset-* files. [RT #20075]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2647. [bug] Remove unnecessary SOA updates when a new KSK is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews added. [RT #19913]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews which default to 64 bits. [RT #19927]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.7.0a2 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2644. [bug] Change #2628 caused a regression on some systems;
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named was unable to write the PID file and would
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews fail on startup. [RT #20001]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User2642. [bug] nsupdate could dump core on solaris when reading
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews improperly formatted key files. [RT #20015]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews added a regression test to check it. [RT #20007]
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User2640. [security] A specially crafted update packet will cause named
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to exit. [RT #20000]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2638. [bug] Install arpaname. [RT #19957]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2636. [func] Simplify zone signing and key maintenance with the
f4ee48be3994797a8332b86c101db4d7b54799ceTinderbox User dnssec-* tools. Major changes:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - all dnssec-* tools now take a -K option to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews specify a directory in which key files will be
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User - DNSSEC can now store metadata indicating when
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews they are scheduled to be published, activated,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews revoked or removed; these values can be set by
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-keygen or overwritten by the new
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-settime command
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User - dnssec-signzone -S (for "smart") option reads key
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews metadata and uses it to determine automatically
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User which keys to publish to the zone, use for
872e1437295dce8162ac7374317d593320ac2dd6Tinderbox User signing, revoke, or remove from the zone
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
3718b6ecfc40479988a9182701a4af5b3f8233f4Tinderbox User2634. [port] win32: Add support for libxml2, enable
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statschannel. [RT #19773]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
34348322c7016b6b5d1bceee5b1cf42e2d2216b4Tinderbox User2632. [func] util/kit.sh: warn if documentation appears to be out of
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews date. [RT #19922]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews [RT #19926 ]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "update-policy local;" to switch on local DDNS in a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews zone. (The "ddns-autoconf" option has been removed.)
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews setresgid() if not present. [RT #19932]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews at startup with reduced capabilities in operation.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2627. [bug] Named aborted if the same key was included in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews trusted-keys more than once. [RT #19918]
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews2626. [bug] Multiple trusted-keys could trigger an assertion
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews failure. [RT #19914]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
c7fd128f8ea8a527fe27c1b95ab46df7155bc8e4Tinderbox User2624. [func] 'named-checkconf -p' will print out the parsed
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews configuration. [RT #18871]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2620. [bug] Delay thawing the zone until the reload of it has
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews completed successfully. [RT #19750]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews maintenance. The new "managed-keys" statement can
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews be used in place of "trusted-keys" for zones which
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews support this protocol. (Note: this syntax is
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews expected to change prior to 9.7.0 final.) [RT #19248]
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews2618. [bug] The sdb and sdlz db_interator_seek() methods could
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews loop infinitely. [RT #19847]
cdf1c3d486ec082ef6c92297d22d54a67cca0c90Tinderbox User2617. [bug] ifconfig.sh failed to emit an error message when
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User run from the wrong location. [RT #19375]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2616. [bug] 'host' used the nameservers from resolv.conf even
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when a explicit nameserver was specified. [RT #19852]
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User2615. [bug] "__attribute__((unused))" was in the wrong place
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for ia64 gcc builds. [RT #19854]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2614. [port] win32: 'named -v' should automatically be executed
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews in the foreground. [RT #19844]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2613. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --- 9.7.0a1 released ---
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2612. [func] Add default values for the arguments to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-keygen. Without arguments, it will now
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews generate a 1024-bit RSASHA1 zone-signing key,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or with the -f KSK option, a 2048-bit RSASHA1
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews key-signing key. [RT #19300]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2611. [func] Add -l option to dnssec-dsfromkey to generate
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews DLV records instead of DS records. [RT #19300]
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt2610. [port] sunos: Change #2363 was not complete. [RT #19796]
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt2609. [func] Simplify the configuration of dynamic zones:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - add ddns-confgen command to generate
903fcd6a60c6420f5dbd753ab068ba5ca2af8e62Tinderbox User configuration text for named.conf
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews - add zone option "ddns-autoconf yes;", which
b91d11bfcc30b96f2c80f3a76d12e3dcc8597a68Mark Andrews causes named to generate a TSIG session key
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt and allow updates to the zone using that key
39c56dd2b86e306f1416c352645920855f65648fTinderbox User - add '-l' (localhost) option to nsupdate, which
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews causes nsupdate to connect to a locally-running
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named process using the session key generated
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2608. [func] Perform post signing verification checks in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-signzone. These can be disabled with -P.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews The post sign verification test ensures that for each
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews algorithm in use there is at least one non revoked
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews self signed KSK key. That all revoked KSK keys are
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews self signed. That all records in the zone are signed
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews by the algorithm. [RT #19653]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2607. [bug] named could incorrectly delete NSEC3 records for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews empty nodes when processing a update request.
5ee9f7f23852d92772c08ca6e4b46c549beaf660Mark Andrews2606. [bug] "delegation-only" was not being accepted in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews delegation-only type zones. [RT #19717]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2605. [bug] Accept DS responses from delegation only zones.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews [RT # 19296]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2604. [func] Add support for DNS rebinding attack prevention through
4e40289129b2a87cea5ec403620b3bb9a6182f9fTinderbox User new options, deny-answer-addresses and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews deny-answer-aliases. Based on contributed code from
903fcd6a60c6420f5dbd753ab068ba5ca2af8e62Tinderbox User JD Nurmi, Google. [RT #18192]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
361967ea970ea8f0ef8875e769505ecdac74bfb0Tinderbox User named-comilezone argv[0] names under windows.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2602. [port] win32: fix debugging command line build of libisccfg.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2601. [doc] Mention file creation mode mask in the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews named manual page.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2600. [doc] ARM: miscellaneous reformatting for different
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews page widths. [RT #19574]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2599. [bug] Address rapid memory growth when validation fails.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2598. [func] Reserve the -F flag. [RT #19657]
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt2597. [bug] Handle a validation failure with a insecure delegation
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews from a NSEC3 signed master/slave zone. [RT #19464]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews long, leading to inefficient memory usage or rejecting
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews newer cache entries in the worst case. [RT #19563]
f549a65f4cbc84f2a4e5ce4ff78c30bb8f3a32d4Tinderbox User2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2594. [func] Have rndc warn if using its default configuration
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews file when the key file also exists. [RT #19424]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2591. [bug] named could die when processing a update in
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt removed_orphaned_ds(). [RT #19507]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2590. [func] Report zone/class of "update with no effect".
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
903fcd6a60c6420f5dbd753ab068ba5ca2af8e62Tinderbox User2588. [bug] SO_REUSEADDR could be set unconditionally after failure
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of bind(2) call. This should be rare and mostly
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews harmless, but may cause interference with other
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews processes that happen to use the same port. [RT #19642]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2587. [func] Improve logging by reporting serial numbers for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews when zone serial has gone backwards or unchanged.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews or SDB. [RT #19577]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2585. [bug] Uninitialized socket name could be referenced via a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statistics channel, triggering an assertion failure in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews XML rendering. [RT #19427]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2584. [bug] alpha: gcc optimization could break atomic operations.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2583. [port] netbsd: provide a control to not add the compile
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews date to the version string, -DNO_VERSION_DATE.
689fb19ba11ed40363cbc031d0396befdb409b89Tinderbox User2582. [bug] Don't emit warning log message when we attempt to
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews remove non-existent journal. [RT #19516]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Requires MySQL 5.0.19 or later. [RT #19084]
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt2580. [bug] UpdateRej statistics counter could be incremented twice
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for one rejection. [RT #19476]
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt2579. [bug] DNSSEC lookaside validation failed to handle unknown
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews algorithms. [RT #19479]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews 65535 turns out to be reserved. [RT #19477]
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews2577. [doc] Clarified some statistics counters. [RT #19454]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson2576. [bug] NSEC record were not being correctly signed when
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User a zone transitions from insecure to secure.
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User Handle such incorrectly signed zones. [RT #19114]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2575. [func] New functions dns_name_fromstring() and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dns_name_tostring(), to simplify conversion
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of a string to a dns_name structure and vice
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews versa. [RT #19451]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2574. [doc] Document nsupdate -g and -o. [RT #19351]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2573. [bug] Replacing a non-CNAME record with a CNAME record in a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews single transaction in a signed zone failed. [RT #19397]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2572. [func] Simplify DLV configuration, with a new option
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "dnssec-lookaside auto;" This is the equivalent
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews plus setting a trusted-key for dlv.isc.org.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Note: The trusted key is hard-coded into named,
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews but is also stored in (and can be overridden
b7f4a6fd8ac70ebf889179ee84c1dd35647bfc73Evan Hunt by) $sysconfdir/bind.keys. As the ISC DLV key
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews rolls over it can be kept up to date by replacing
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the bind.keys file with a key downloaded from
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2570. [func] Log the destination address the query was sent to.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
c75bf330fc68e1c07cfb14631e7d3de7e2786ee7Mark Andrews "make install" will put them in $sbindir. [RT #19301]
fab54780409846f7c71f6026d665f18c77c649efTinderbox User2568. [bug] Report when the write to indicate a otherwise
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews successful start fails. [RT #19360]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews write_public_key() could miss write errors.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dnssec-dsfromkey could miss write errors.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2566. [cleanup] Clarify logged message when an insecure DNSSEC
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews response arrives from a zone thought to be secure:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews "insecurity proof failed" instead of "not
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews insecure". [RT #19400]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2565. [func] Add support for HIP record. Includes new functions
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and dns_rdata_hip_current(). [RT #19384]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2564. [bug] Only take EDNS fallback steps when processing timeouts.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews to exit. [RT #19359]
cb5446c26093277f40e4c02c9eafcd9e50535994Tinderbox User2562. [doc] ARM: miscellaneous improvements, reorganization,
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User and some new content.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2559. [bug] dnssec-dsfromkey could compute bad DS records when
bd7a552249814fa4b03c69418c8d6828fc013f6bTinderbox User reading from a K* files. [RT #19357]
7692464e78fc43578c394b8d1d30e81fec1d8523Tinderbox User2558. [func] Set the ownership of missing directories created
c75bf330fc68e1c07cfb14631e7d3de7e2786ee7Mark Andrews for pid-file if -u has been specified on the command
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews line. [RT #19328]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2557. [cleanup] PCI compliance:
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * new libisc log module file
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * isc_dir_chroot() now also changes the working
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews directory to "/".
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User * additional INSISTs
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews * additional logging when files can't be removed.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews error checks in the correct order resulting in the
5b3dd19d815f0389d566d20c2fee57cb37d1dd47Tinderbox User wrong error code sometimes being returned. [RT #19249]
bd7a552249814fa4b03c69418c8d6828fc013f6bTinderbox User2555. [func] dig: when emitting a hex dump also display the
bd7a552249814fa4b03c69418c8d6828fc013f6bTinderbox User corresponding characters. [RT #19258]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews fail. [RT #19297]
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2552. [bug] zero-no-soa-ttl-cache was not being honored.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
a04588e781b513ae3b30e061ac98035802b5e8e8Mark Andrews2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2548. [bug] Install iterated_hash.h. [RT #19335]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2547. [bug] openssl_link.c:mem_realloc() could reference an
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews out-of-range area of the source buffer. New public
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews function isc_mem_reallocate() was introduced to address
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews this bug. [RT #19313]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2546. [func] Add --enable-openssl-hash configure flag to use
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews OpenSSL (in place of internal routine) for hash
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews functions (MD5, SHA[12] and HMAC). [RT #18815]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews for SRV RDATA too. [RT #19304]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2542. [doc] Update the description of dig +adflag. [RT #19290]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2541. [bug] Conditionally update dispatch manager statistics.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2539. [security] Update the interaction between recursion, allow-query,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews allow-query-cache and allow-recursion. [RT #19198]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2538. [bug] cache/ADB memory could grow over max-cache-size,
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews especially with threads and smaller max-cache-size
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews values. [RT #19240]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2537. [func] Added more statistics counters including those on socket
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews I/O events and query RTT histograms. [RT #18802]
77f9b64584056d769b3056980b4bf1a2bd1f484fTinderbox User2536. [cleanup] Silence some warnings when -Werror=format-security is
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews specified. [RT #19083]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2534. [func] Check NAPTR records regular expressions and
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews replacement strings to ensure they are syntactically
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews valid and consistent. [RT #18168]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2533. [doc] ARM: document @ (at-sign). [RT #17144]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2532. [bug] dig: check the question section of the response to
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews see if it matches the asked question. [RT #18495]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2531. [bug] Change #2207 was incomplete. [RT #19098]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2530. [bug] named failed to reject insecure to secure transitions
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews via UPDATE. [RT #19101]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2529. [cleanup] Upgrade libtool to silence complaints from recent
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews version of autoconf. [RT #18657]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2528. [cleanup] Silence spurious configure warning about
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews --datarootdir [RT #19096]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2527. [placeholder]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2526. [func] New named option "attach-cache" that allows multiple
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews views to share a single cache to save memory and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews improve lookup efficiency. Based on contributed code
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews from Barclay Osborn, Google. [RT #18905]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2525. [func] New logging category "query-errors" to provide detailed
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews internal information about query failures, especially
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews about server failures. [RT #19027]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2523. [bug] Random type rdata freed by dns_nsec_typepresent().
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2521. [bug] Improve epoll cross compilation support. [RT #19047]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2520. [bug] Update xml statistics version number to 2.0 as change
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews #2388 made the schema incompatible to the previous
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews version. [RT #19080]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2519. [bug] dig/host with -4 or -6 didn't work if more than two
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews nameserver addresses of the excluded address family
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews preceded in resolv.conf. [RT #19081]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2518. [func] Add support for the new CERT types from RFC 4398.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2517. [bug] dig +trace with -4 or -6 failed when it chose a
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews nameserver address of the excluded address type.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2516. [bug] glue sort for responses was performed even when not
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews needed. [RT #19039]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
015055b6e23f5c08f6a5b34726f90b62597e9e45Tinderbox User a nameserver of the excluded address family.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2513. [bug] Fix windows cli build. [RT #19062]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2512. [func] Print a summary of the cached records which make up
415d630b6309922caee8469384a6fab75cf05032Mark Andrews the negative response. [RT #18885]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2509. [bug] Specifying a fixed query source port was broken.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2508. [placeholder]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2507. [func] Log the recursion quota values when killing the
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews oldest query or refusing to recurse due to quota.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2506. [port] solaris: Check at configure time if
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews hack_shutup_pthreadonceinit is needed. [RT #19037]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt atomic operation support. [RT #19031]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews2504. [bug] Address race condition in the socket code. [RT #18899]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2503. [port] linux: improve compatibility with Linux Standard
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt Base. [RT #18793]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2502. [cleanup] isc_radix: Improve compliance with coding style,
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews document function in <isc/radix.h>. [RT #18534]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2501. [func] $GENERATE now supports all rdata types. Multi-field
415d630b6309922caee8469384a6fab75cf05032Mark Andrews rdata types need to be quoted. See the ARM for
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt details. [RT #18368]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User function. [RT #18582]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews --- 9.6.0rc1 released ---
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2498. [bug] Removed a bogus function argument used with
415d630b6309922caee8469384a6fab75cf05032Mark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt warning or crash named with the debug 1 level
415d630b6309922caee8469384a6fab75cf05032Mark Andrews of logging. [RT #18917]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2496. [bug] Add sanity length checks to NSID option. [RT #18813]
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews2495. [bug] Tighten RRSIG checks. [RT #18795]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews installed. [RT #18826]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews up after itself. [RT #18767]
6c2a76b3e2ccd32c35814b6e0f54da00190749d7Evan Hunt2492. [func] Rndc status now reports the number of cpus discovered
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews and the number of worker threads when running
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews multi-threaded. [RT #18273]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2491. [func] Attempt to re-use a local port if we are already using
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews the port. [RT #18548]
9218b940febade3085fd6d95a15e67d5f94833f0Tinderbox User2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews is cleared when IPV6_V6ONLY is set. [RT #18785]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
e813f036c8251b6d9d2a72fa84f80c2c9d2795afMark Andrews this workaround. [RT #18870]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews from keyset and .key files. [RT #18694]
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews2486. [func] The default locations for named.pid and lwresd.pid
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews This allows the owner of the containing directory
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User to be set, for "named -u" support, and allows there
1f9754245cbd5eec2d2a667bb292f62f72386d4bMark Andrews to be a permanent symbolic link in the path, for
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson "named -t" support. [RT #18306]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2485. [bug] Change update's the handling of obscured RRSIG
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User records. Not all orphaned DS records were being
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User removed. [RT #18828]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2484. [bug] It was possible to trigger a REQUIRE failure when
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User adding NSEC3 proofs to the response in
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User query_addwildcardproof(). [RT #18828]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2483. [port] win32: chroot() is not supported. [RT #18805]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2482. [port] libxml2: support versions 2.7.* in addition
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User to 2.6.*. [RT #18806]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User --- 9.6.0b1 released ---
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User collisions. [RT #18812]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2480. [bug] named could fail to emit all the required NSEC3
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User records. [RT #18812]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2478. [bug] 'addresses' could be used uninitialized in
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User configure_forward(). [RT #18800]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2477. [bug] dig: the global option to print the command line is
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User +cmd not print_cmd. Update the output to reflect
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews this. [RT #17008]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2476. [doc] ARM: improve documentation for max-journal-size and
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User ixfr-from-differences. [RT #15909] [RT #18541]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2475. [bug] LRU cache cleanup under overmem condition could purge
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews particular entries more aggressively. [RT #17628]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2474. [bug] ACL structures could be allocated with insufficient
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews space, causing an array overrun. [RT #18765]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2473. [port] linux: raise the limit on open files to the possible
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User maximum value before spawning threads; 'files'
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User specified in named.conf doesn't seem to work with
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User threads as expected. [RT #18784]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2472. [port] linux: check the number of available cpu's before
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User calling chroot as it depends on "/proc". [RT #16923]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2471. [bug] named-checkzone was not reporting missing mandatory
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User glue when sibling checks were disabled. [RT #18768]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2470. [bug] Elements of the isc_radix_node_t could be incorrectly
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User overwritten. [RT# 18719]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2469. [port] solaris: Work around Solaris's select() limitations.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2468. [bug] Resolver could try unreachable servers multiple times.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2465. [bug] Adb's handling of lame addresses was different
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User for IPv4 and IPv6. [RT #18738]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2464. [port] linux: check that a capability is present before
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User trying to set it. [RT #18135]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater API and glibc hides parts of the IPv6 Advanced Socket
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User API as a result. This is stupid as it breaks how the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User two halves (Basic and Advanced) of the IPv6 Socket API
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User were designed to be used but we have to live with it.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User API. [RT #18388]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2462. [doc] Document -m (enable memory usage debugging)
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater option for dig. [RT #18757]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2461. [port] sunos: Change #2363 was not complete. [RT #17513]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User --- 9.6.0a1 released ---
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2458. [doc] ARM: update and correction for max-cache-size.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2457. [tuning] max-cache-size is reverted to 0, the previous
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User default. It should be safe because expired cache
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User entries are also purged. [RT #18684]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews address, regardless of family. They now correctly
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User distinguish IPv4 from IPv6. [RT #18559]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2455. [bug] Stop metadata being transferred via axfr/ixfr.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2453. [bug] Remove NULL pointer dereference in dns_journal_print().
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2452. [func] Improve bin/test/journalprint. [RT #18316]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2451. [port] solaris: handle runtime linking better. [RT #18356]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2450. [doc] Fix lwresd docbook problem for manual page.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2449. [placeholder]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2448. [func] Add NSEC3 support. [RT #15452]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2447. [cleanup] libbind has been split out as a separate product.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2446. [func] Add a new log message about build options on startup.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User A new command-line option '-V' for named is also
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User provided to show this information. [RT# 18645]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2445. [doc] ARM out-of-date on empty reverse zones (list includes
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User RFC1918 address, but these are not yet compiled in).
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User (clear DF) for UDP responses and requests.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2443. [bug] win32: UDP connect() would not generate an event,
d3be47a4a841ca6fc07e8f18004cf72174e2d117Tinderbox User and so connected UDP sockets would never clean up.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User Fix this by doing an immediate WSAConnect() rather
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User than an io completion port type for UDP.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2442. [bug] A lock could be destroyed twice. [RT# 18626]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2441. [bug] isc_radix_insert() could copy radix tree nodes
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User incompletely. [RT #18573]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2440. [bug] named-checkconf used an incorrect test to determine
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User if an ACL was set to none.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2437. [bug] Sockets could be closed too early, leading to
3d2e052eb879189e6d853097f8b568d887323bebTinderbox User inconsistent states in the socket module. [RT #18298]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2435. [bug] Fixed an ACL memory leak affecting win32.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2434. [bug] Fixed a minor error-reporting bug in
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2433. [tuning] Set initial timeout to 800ms.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2432. [bug] More Windows socket handling improvements. Stop
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews using I/O events and use IO Completion Ports
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User throughout. Rewrite the receive path logic to make
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User it easier to support multiple simultaneous
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User requesters in the future. Add stricter consistency
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User checking as a compile-time option (define
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2431. [bug] Acl processing could leak memory. [RT #18323]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2430. [bug] win32: isc_interval_set() could round down to
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User zero if the input was less than NS_INTERVAL
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User nanoseconds. Round up instead. [RT #18549]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2429. [doc] nsupdate should be in section 1 of the man pages.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2428. [bug] dns_iptable_merge() mishandled merges of negative
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User tables. [RT #18409]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User was set. [RT #18528]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2426. [bug] libbind: inet_net_pton() can sometimes return the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User wrong value if excessively large net masks are
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User supplied. [RT #18512]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2425. [bug] named didn't detect unavailable query source addresses
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User at load time. [RT #18536]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2424. [port] configure now probes for a working epoll
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User implementation. Allow the use of kqueue,
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews epoll and /dev/poll to be selected at compile
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User time. [RT #18277]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2423. [security] Randomize server selection on queries, so as to
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User make forgery a little more difficult. Instead of
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User always preferring the server with the lowest RTT,
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User pick a server with RTT within the same 128
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User millisecond band. [RT #18441]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2422. [bug] Handle the special return value of a empty node as
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User if it was a NXRRSET in the validator. [RT #18447]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2421. [func] Add new command line option '-S' for named to specify
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews the max number of sockets. [RT #18493]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User Use caution: this option may not work for some
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater operating systems without rebuilding named.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2420. [bug] Windows socket handling cleanup. Let the io
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User completion event send out canceled read/write
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User done events, which keeps us from writing to memory
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User we no longer have ownership of. Add debugging
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User socket_log() function. Rework TCP socket handling
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User to not leak sockets.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User should not be used for isc_sockettype_fdwatch sockets.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
3e1a17d65ec6227900f388ba2f7561365f7d4f5cTinderbox User2417. [bug] Connecting UDP sockets for outgoing queries could
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews unexpectedly fail with an 'address already in use'
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User error. [RT #18411]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2416. [func] Log file descriptors that cause exceeding the
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews internal maximum. [RT #18460]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2415. [bug] 'rndc dumpdb' could trigger various assertion failures
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews in rbtdb.c. [RT #18455]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2414. [bug] A masterdump context held the database lock too long,
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User causing various troubles such as dead lock and
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User recursive lock acquisition. [RT #18311, #18456]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2412. [bug] win32: address a resource leak. [RT #18374]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User at compilation time. [RT #18433]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User Note: with changes #2469 and #2421 above, there is no
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2410. [bug] Correctly delete m_versionInfo. [RT #18432]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2409. [bug] Only log that we disabled EDNS processing if we were
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews subsequently successful. [RT #18029]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2408. [bug] A duplicate TCP dispatch event could be sent, which
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews could then trigger an assertion failure in
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews resquery_response(). [RT #18275]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2406. [placeholder]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2405. [cleanup] The default value for dnssec-validation was changed to
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User "yes" in 9.5.0-P1 and all subsequent releases; this
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User was inadvertently omitted from CHANGES at the time.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2404. [port] hpux: files unlimited support.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2403. [bug] TSIG context leak. [RT #18341]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2402. [port] Support Solaris 2.11 and over. [RT #18362]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2401. [bug] Expect to get E[MN]FILE errno internal_accept()
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User (from accept() or fcntl() system calls). [RT #18358]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2399. [placeholder]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2398. [bug] Improve file descriptor management. New,
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews temporary, named.conf option reserved-sockets,
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews default 512. [RT #18344]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2397. [bug] gssapi_functions had too many elements. [RT #18355]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2396. [bug] Don't set SO_REUSEADDR for randomized ports.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2395. [port] Avoid warning and no effect from "files unlimited"
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews on Linux when running as root. [RT #18335]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2394. [bug] Default configuration options set the limit for
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User open files to 'unlimited' as described in the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User documentation. [RT #18331]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2393. [bug] nested acls containing keys could trigger an
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User assertion in acl.c. [RT #18166]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2392. [bug] remove 'grep -q' from acl test script, some platforms
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User don't support it. [RT #18253]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2391. [port] hpux: cover additional recvmsg() error codes.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2390. [bug] dispatch.c could make a false warning on 'odd socket'.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews [RT #18301].
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2389. [bug] Move the "working directory writable" check to after
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews the ns_os_changeuser() call. [RT #18326]
edd791fb53fab504d52ccdda41e6acbf543ac0d0Tinderbox User2388. [bug] Avoid using tables for layout purposes in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews statistics XSL [RT #18159].
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews [RT #18147] [RT #18258]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2386. [func] Add warning about too small 'open files' limit.
de2cc8b8729d88140cad62506769d0f9fedc7e48Tinderbox User2385. [bug] A condition variable in socket.c could leak in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews rare error handling [RT #17968].
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2384. [security] Fully randomize UDP query ports to improve
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews forgery resilience. [RT #17949, #18098]
9dde9ce5558696850b6b9850a8475ae518409518Tinderbox User2383. [bug] named could double queries when they resulted in
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews SERVFAIL due to overkilling EDNS0 failure detection.
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2381. [port] dlz/mysql: support multiple install layouts for
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews mysql. <prefix>/include/{,mysql/}mysql.h and
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews <prefix>/lib/{,mysql/}. [RT #18152]
adeafa4320b38ec9e809b43a0e48f41e25ca856fTinderbox User2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews proofs which, in turn, caused validation failures
edd791fb53fab504d52ccdda41e6acbf543ac0d0Tinderbox User for insecure zones immediately below a secure zone
e1ebc476b08b4a498fcf3477e42c986eb1991360Tinderbox User the server was authoritative for. [RT #18112]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User TLDs and supported RRs with TTLs [RT #17972]
415d630b6309922caee8469384a6fab75cf05032Mark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
5affecff6e148a8e124d03f5dbac0da11e30dcc5Tinderbox User2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
0c27b3fe77ac1d5094ba3521e8142d9e7973133fMark Andrews2376. [bug] Change #2144 was not complete.
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which