67. [func] Partial support for SIG(0) on incoming messages.

67. [performance] Allow use of alternate (compile-time supplied)

OpenSSL libraries/headers.

66. [func] Data in authoritative zones should have a trust level

beyond secure.

65. [cleanup] Removed obsolete typedef of dns_zone_callbackarg_t

from <dns/types.h>.

64. [func] The RBT, DB, and zone table APIs now allow the

caller find the most-enclosing superdomain of

a name.

63 [func] generate NOTIFY messages.

62. [func] add UDP refresh support.

61. [cleanup] use single quotes consistently in log messages.

60. [func] Catch and disallow singleton types on message

parse.

59. [bug] Cause net/host unreachable to be a hard error

when sending and receiving.

58. [bug] bin/named/query.c could sometimes trigger the

(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)

== 0 assertion in query_newname().

57. [func] Added dns_nxt_typepresent()

56. [bug] SIG records were not properly returned in cached

negative answers.

55. [bug] Responses containing multiple names in the authority

section were not negatively cached.

54. [bug] If a fetch with sigrdataset==NULL joined one with

sigrdataset!=NULL or vice versa, the resolver

could catch an assertion or lose signature data,

respectively.

53. [port] freebsd 4.0: lib/isc/unix/socket.c requires

<sys/param.h>.

52. [bug] rndc: taskmgr and socketmgr were not initaliased

to NULL.

51. [cleanup] dns/compress.h and dns/zt.h did not need to include

dns/rbt.h; it was needed only by compress.c and zt.c.

50. [func] RBT deletion no longer requires a valid chain to work,

and dns_rbt_deletenode was added.

49. [func] Each cache now has its own mctx.

48. [func] isc_task_create() no longer takes an mctx.

isc_task_mem() has been eliminated.

47. [func] A number of modules now use memory context reference

counting.

46. [func] Memory contexts are now reference counted.

Added isc_mem_inuse() and isc_mem_preallocate().

Renamed isc_mem_destroy_check() to

isc_mem_setdestroycheck().

45. [bug] The trusted-key statement incorrectly loaded keys.

44. [bug] Don't include authority data if it would force us

to unset the AD bit in the message.

43. [bug] DNSSEC verification of cached rdatasets was failing.

42. [cleanup] Simplified logging of messages with embedded domain

names by introducing a new convenience function

dns_name_format().

41. [func] Use PR_SET_KEEPCAPS on Linux 2.3.99-pre3 and later

to allow 'named' to run as a non-root user while

retaining the ability to bind() to privileged

ports.

40. [func] Introduced new logging category "dnssec" and

logging module "dns/validator".

39. [cleanup] Moved the typedefs for isc_region_t, isc_textregion_t,

and isc_lex_t to <isc/types.h>.

38. [bug] TSIG signed incoming zone transfers work now.

37. [bug] If the first RR in an incoming zone transfer was

not an SOA, the server died with an assertion failure

instead of just reporting an error.

36. [cleanup] Change DNS_R_SUCCESS (and others) to ISC_R_SUCCESS

35. [performance] Log messages which are of a level too high to be

logged by any channel in the logging configuration

will not cause the log mutex to be locked.

34. [bug] Recursion was allowed even with 'recursion no'.

33. [func] The RBT now maintains a parent pointer at each node.

32. [cleanup] bin/lwresd/client.c needs <string.h> for memset()

prototype.

31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.

30. [func] config file grammer change to support optional

class type for a view.

29. [func] support new config file view options:

auth-nxdomain recursion query-source

query-source-v6 transfer-source

transfer-source-v6 max-transfer-time-out

max-transfer-idle-out transfer-format

request-ixfr privide-ixfr cleaning-interval

fetch-glue notify rfc2308-type1 lame-ttl

max-ncache-ttl min-roots

28. [func] support lame-ttl, min-roots and serial-queries

config global options.

27. [bug] Only include <netinet6/in6.h> on BSD/OS 4.[01]*.

Including it on other platforms (eg, NetBSD) can

cause a forced #error from the C preprocessor.

26. [func] new match-clients statement in config file view.

25. [bug] make install failed to install <isc/log.h> and

<isc/ondestroy.h>.

24. [cleanup] Eliminate some unnecessary #includes of header

files from header files.

23. [cleanup] Provide more context in log messages about client

requests, using a new function ns_client_log().

22. [bug] SIGs weren't returned in the answer section when

the query resulted in a fetch.

21. [port] Look at STD_CINCLUDES after CINCLUDES during

compilation, so additional system include directories

can be searched but header files in the bind9 source

tree with conflicting names take precedence. This

avoids issues with installed versions of dnssafe and

openssl.

20. [func] Configuration file post-load validation of zones

failed if there were no zones.

19. [bug] dns_zone_notifyreceive() failed to unlock the zone

lock in certain error cases.

18. [bug] Use AC_TRY_LINK rather than AC_TRY_COMPILE in

configure.in to check for presence of in6addr_any.

17. [func] Do configuration file post-load validation of zones.

16. [bug] put quotes around key names on config file

output to avoid possible keyword clashes.

15. [func] Add dns_name_dupwithoffsets(). This function is

improves comparison performance for duped names.

14. [bug] free_rbtdb() could have 'put' unallocated memory in

an unlikely error path.

13. [bug] lib/dns/master.c and lib/dns/xfrin.c didn't ignore

out-of-zone data.

12. [bug] Fixed possible unitialized variable error.

11. [bug] axfr_rrstream_first() didn't check the result code of

db_rr_iterator_first(), possibly causing an assertion

to be triggered later.

10. [bug] A bug in the code which makes EDNS0 OPT records in

bin/named/client.c and lib/dns/resolver.c could

trigger an assertion.

9. [cleanup] replaced bit-setting code in confctx.c and replaced

repeated code with macro calls.

8. [bug] Shutdown of incoming zone transfer accessed

freed memory.

7. [cleanup] removed 'listen-on' from view statement.

6. [bug] quote RR names when generating config file to

prevent possible clash with config file keywords

(such as 'key').

5. [func] syntax change to named.conf file: new ssu grant/deny

statements must now be enclosed by an 'update-policy'

block.

4. [port] bin/named/unix/os.c didn't compile on systems with

linux 2.3 kernel includes due to conflicts between

C library includes and the kernel includes. We now

get only what we need from <linux/capability.h>, and

avoid pulling in other linux kernel .h files.

3. [bug] TKEYs go in the answer section of responses, not

the additional section.

2. [bug] Generating cryptographic randomness failed on

systems without /dev/random.

1. [bug] The installdirs rule in

lib/isc/unix/include/isc/Makefile.in had a typo which

prevented the isc directory from being created if it

didn't exist.

--- 9.0.0b2 released ---