CHANGES revision bee9a28af0f923c205f76819618ed7ffcf3f6997
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson3683. [cleanup] Add a more detailed "not found" message to rndc
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson commands which specify a zone name. [RT #35059]
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson3682. [bug] Correct the behavior of rndc retransfer to allow
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson inline-signing slave zones to retain NSEC3 parameters
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson instead of reverting to NSEC. [RT #34745]
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson3681. [port] Update the Windows build system to support feature
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson selection and WIN64 builds. This is a work in
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson progress. [RT #34160]
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson3680. [bug] Ensure buffer space is available in "rndc zonestatus".
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson3679. [bug] dig could fail to clean up TCP sockets still
68a8db1efb0cd13e0e3d59362ab9db1a4a8bc496Andreas Gustafsson waiting on connect(). [RT #35074]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3678. [port] Update config.guess and config.sub. [RT #35060]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3677. [bug] 'nsupdate' leaked memory if 'realm' was used multiple
9db88ce113701a6fb600a67aaa65764d800e25b0Mark Andrews times. [RT #35073]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3676. [bug] "named-checkconf -z" now checks zones of type
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson hint and redirect as well as master. [RT #35046]
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews3675. [misc] Provide a place for third parties to add version
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews information for their extensions in the version
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson file by setting the EXTENSIONS variable.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson --- 9.10.0a1 released ---
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3674. [bug] RPZ zeroed ttls if the query type was '*'. [RT #35026]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3673. [func] New "in-view" zone option allows direct sharing
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of zones between views. [RT #32968]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3672. [func] Local address can now be specified when using
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dns_client API. [RT #34811]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3671. [bug] Don't allow dnssec-importkey overwrite a existing
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson non-imported private key.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3670. [bug] Address read after free in server side of
9db88ce113701a6fb600a67aaa65764d800e25b0Mark Andrews lwres_getrrsetbyname. [RT #29075]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3669. [port] freebsd: --with-gssapi needs -lhx509. [RT #35001]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3668. [bug] Fix cast in lex.c which could see 0xff treated as eof.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3667. [test] dig: add support to keep the TCP socket open between
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson successive queries (+[no]keepopen). [RT #34918]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3666. [func] Add a tool, named-rrchecker, for checking the syntax
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of individual resource records. This tool is intended
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to be called by provisioning systems so that the front
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 end does not need to be upgraded to support new DNS
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 record types. [RT #34778]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3665. [bug] Failure to release lock on error in receive_secure_db.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3664. [bug] Updated OpenSSL PKCS#11 patches to fix active list
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson locking and other bugs. [RT #34855]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3663. [bug] Address bugs in dns_rdata_fromstruct and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dns_rdata_tostruct for WKS and ISDN types. [RT #34910]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3662. [bug] 'host' could die if a UDP query timed out. [RT #34870]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3661. [bug] Address lock order reversal deadlock with inline zones.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3660. [cleanup] Changed the name of "isc-config.sh" to "bind9-config".
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3659. [port] solaris: don't add explict dependencies/rules for
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson python programs as make won't use the implicit rules.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3658. [port] linux: Address platform specific compilation issue
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when libcap-devel is installed. [RT #34838]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3657. [port] Some readline clones don't accept NULL pointers when
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson calling add_history. [RT #34842]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3656. [bug] Treat an all zero netmask as invalid when generating
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt the localnets acl. [RT #34687]
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt3655. [cleanup] Simplify TCP message processing when requesting a
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt zone transfer. [RT #34825]
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt3654. [bug] Address race condition with manual notify requests.
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt3653. [func] Create delegations for all "children" of empty zones
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt except "forward first". [RT #34826]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3652. [bug] Address bug with rpz-drop policy. [RT #34816]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3651. [tuning] Adjust when a master server is deemed unreachable.
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt3650. [tuning] Use separate rate limiting queues for refresh and
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt notify requests. [RT #30589]
3192f9981331ae89c91a03f1c0f1e3b843fd4f21Evan Hunt3649. [cleanup] Include a comment in .nzf files, giving the name of
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the associated view. [RT #34765]
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3648. [test] Updated the ATF test framework to version 0.17.
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3647. [bug] Address a race condition when shutting down a zone.
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3646. [bug] Journal filename string could be set incorrectly,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson causing garbage in log messages. [RT #34738]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3645. [protocol] Use case sensitive compression when responding to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson queries. [RT #34737]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3644. [protocol] Check that EDNS subnet client options are well formed.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3643. [doc] Clarify RRL "slip" documentation.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3642. [func] Allow externally generated DNSKEY to be imported
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson into the DNSKEY management framework. A new tool
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dnssec-importkey is used to do this. [RT #34698]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3641. [bug] Handle changes to sig-validity-interval settings
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson better. [RT #34625]
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews3640. [bug] ndots was not being checked when searching. Only
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews continue searching on NXDOMAIN responses. Add the
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews ability to specify ndots to nslookup. [RT #34711]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3639. [bug] Treat type 65533 (KEYDATA) as opaque except when used
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in a key zone. [RT #34238]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3638. [cleanup] Add the ability to handle ENOPROTOOPT in case it is
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson encountered. [RT #34668]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3637. [bug] 'allow-query-on' was checking the source address
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson rather than the destination address. [RT #34590]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3636. [bug] Automatic empty zones now behave better with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson forward only "zones" beneath them. [RT #34583]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3635. [bug] Signatures were not being removed from a zone with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson only KSK keys for a algorithm. [RT #34439]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3634. [func] Report build-id in rndc status. Report build-id
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when building from a git repository. [RT #20422]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3633. [cleanup] Refactor OPT processing in named to make it easier
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to support new EDNS options. [RT #34414]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3632. [bug] Signature from newly inactive keys were not being
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 removed. [RT #32178]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3631. [bug] Remove spurious warning about missing signatures when
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson qtype is SIG. [RT #34600]
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3630. [bug] Ensure correct ID computation for MD5 keys. [RT #33033]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3629. [func] Allow the printing of cryptographic fields in DNSSEC
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson records by dig to be suppressed (dig +nocrypto).
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3628. [func] Report DNSKEY key id's when dumping the cache.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3627. [bug] RPZ changes were not effective on slaves. [RT #34450]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3626. [func] dig: NSID output now easier to read. [RT #21160]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3625. [bug] Don't send notify messages to machines outside of the
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3624. [bug] Look for 'json_object_new_int64' when looking for a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the json library. [RT #34449]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3623. [placeholder]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3622. [tuning] Eliminate an unnecessary lock when incrementing
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson cache statistics. [RT #34339]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3621. [security] Incorrect bounds checking on private type 'keydata'
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 can lead to a remotely triggerable REQUIRE failure
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 (CVE-2013-4854). [RT #34238]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3620. [func] Added "rpz-client-ip" policy triggers, enabling
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 RPZ responses to be configured on the basis of
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 the client IP address; this can be used, for
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 example, to blacklist misbehaving recursive
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 or stub resolvers. [RT #33605]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3619. [bug] Fixed a bug in RPZ with "recursive-only no;"
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3618. [func] "rndc reload" now checks modification times of
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 include files as well as master files to determine
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 whether to skip reloading a zone. [RT #33936]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3617. [bug] Named was failing to answer queries during
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 "rndc reload" [RT #34098]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3616. [bug] Change #3613 was incomplete. [RT #34177]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3615. [cleanup] "configure" now finishes by printing a summary
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of optional BIND features and whether they are
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson active or inactive. ("configure --enable-full-report"
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson increases the verbosity of the summary.) [RT #31777]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3614. [port] Check for <linux/types.h>. [RT #34162]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3613. [bug] named could crash when deleting inline-signing
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews zones with "rndc delzone". [RT #34066]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3612. [port] Check whether to use -ljson or -ljson-c. [RT #34115]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3611. [bug] Improved resistance to a theoretical authentication
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson attack based on differential timing. [RT #33939]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3610. [cleanup] win32: Some executables had been omitted from the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson installer. [RT #34116]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3609. [bug] Corrected a possible deadlock in applications using
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the export version of the isc_app API. [RT #33967]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3608. [port] win32: added todos.pl script to ensure all text files
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the win32 build depends on are converted to DOS
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson newline format. [RT #22067]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3607. [bug] dnssec-keygen had broken 'Invalid keyfile' error
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson message. [RT #34045]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3606. [func] "rndc flushtree" now flushes matching
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson records in the address database and bad cache
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson as well as the DNS cache. (Previously only the
9db88ce113701a6fb600a67aaa65764d800e25b0Mark Andrews DNS cache was flushed.) [RT #33970]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3605. [port] win32: Addressed several compatibility issues
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson with newer versions of Visual Studio. [RT #33916]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3604. [bug] Fixed a compile-time error when building with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson JSON but not XML. [RT #33959]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3603. [bug] Install <isc/stat.h>. [RT #33956]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3602. [contrib] Added DLZ Perl module, allowing Perl scripts to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson integrate with named and serve DNS data.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (Contributed by John Eaglesham of Yahoo.)
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3601. [bug] Added to PKCS#11 openssl patches a value len
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews attribute in DH derive key. [RT #33928]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3600. [cleanup] dig: Fixed a typo in the warning output when receiving
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 an oversized response. [RT #33910]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3599. [tuning] Check for pointer equivalence in name comparisons.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3598. [cleanup] Improved portability of map file code. [RT #33820]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3597. [bug] Ensure automatic-resigning heaps are reconstructed
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 when loading zones in map format. [RT #33381]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3596. [port] Updated win32 build documentation, added
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 dnssec-verify. [RT #22067]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3595. [port] win32: Fix build problems introduced by change #3550.
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3594. [maint] Update config.guess and config.sub. [RT #33816]
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews3593. [func] Update EDNS processing to better track remote server
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson capabilities. [RT #30655]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3592. [doc] Moved documentation of rndc command options to the
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 rndc man page. [RT #33506]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3591. [func] Use CRC-64 to detect map file corruption at load
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson time. [RT #33746]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3590. [bug] When using RRL on recursive servers, defer
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson rate-limiting until after recursion is complete;
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson also, use correct rcode for slipped NXDOMAIN
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson responses. [RT #33604]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3589. [func] Report serial numbers in when starting zone transfers.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Report accepted NOTIFY requests including serial.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3588. [bug] dig: addressed a memory leak in the sigchase code
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson that could cause a shutdown crash. [RT #33733]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3587. [func] 'named -g' now checks the logging configuration but
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson does not use it. [RT #33473]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3586. [bug] Handle errors in xmlDocDumpFormatMemoryEnc. [RT #33706]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3585. [func] "rndc delzone -clean" option removes zone files
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when deleting a zone. [RT #33570]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3584. [security] Caching data from an incompletely signed zone could
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson trigger an assertion failure in resolver.c
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (CVE-2013-3919). [RT #33690]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3583. [bug] Address memory leak in GSS-API processing [RT #33574]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3582. [bug] Silence false positive warning regarding missing file
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson directive for inline slave zones. [RT #33662]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3581. [bug] Changed the tcp-listen-queue default to 10. [RT #33029]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3580. [bug] Addressed a possible race in acache.c [RT #33602]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3579. [maint] Updates to PKCS#11 openssl patches, supporting
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson versions 0.9.8y, 1.0.0k, 1.0.1e [RT #33463]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3578. [bug] 'rndc -c file' now fails if 'file' does not exist.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3577. [bug] Handle zero TTL values better. [RT #33411]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3576. [bug] Address a shutdown race when validating. [RT #33573]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3575. [func] Changed the logging category for RRL events from
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson 'queries' to 'query-errors'. [RT #33540]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3574. [doc] The 'hostname' keyword was missing from server-id
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson description in the named.conf man page. [RT #33476]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3573. [bug] "rndc addzone" and "rndc delzone" incorrectly handled
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson zone names containing punctuation marks and other
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson nonstandard characters. [RT #33419]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3572. [func] Threads are now enabled by default on most
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson operating systems. [RT #25483]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3571. [bug] Address race condition in dns_client_startresolve().
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3570. [bug] Check internal pointers are valid when loading map
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson files. [RT #33403]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3569. [contrib] Ported mysql DLZ driver to dynamically-loadable
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson module, and added multithread support. [RT #33394]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3568. [cleanup] Add a product description line to the version file,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to be reported by named -v/-V. [RT #33366]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3567. [bug] Silence clang static analyzer warnings. [RT #33365]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3566. [func] Log when forwarding updates to master. [RT #33240]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3565. [placeholder]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3564. [bug] Improved handling of corrupted map files. [RT #33380]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3563. [contrib] zone2sqlite failed with some table names. [RT #33375]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3562. [func] Update map file header format to include a SHA-1 hash
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of the database content, so that corrupted map files
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson can be rejected at load time. [RT #32459]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3561. [bug] dig: issue a warning if an EDNS query returns FORMERR
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 or NOTIMP. Adjust usage message. [RT #33363]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3560. [bug] isc-config.sh did not honor includedir and libdir
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 when set via configure. [RT #33345]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3559. [func] Check that both forms of Sender Policy Framework
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 records exist or do not exist. [RT #33355]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3558. [bug] IXFR of a DLZ stored zone was broken. [RT #33331]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3557. [bug] Reloading redirect zones was broken. [RT #33292]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3556. [maint] Added AAAA for D.ROOT-SERVERS.NET.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3555. [bug] Address theoretical race conditions in acache.c
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 (change #3553 was incomplete). [RT #33252]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3554. [bug] RRL failed to correctly rate-limit upward
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 referrals and failed to count dropped error
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 responses in the statistics. [RT #33225]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3553. [bug] Address suspected double free in acache. [RT #33252]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3552. [bug] Wrong getopt option string for 'nsupdate -r'.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3551. [bug] resolver.querydscp[46] were uninitialized. [RT #32686]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3550. [func] Unified the internal and export versions of the
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 BIND libraries, allowing external clients to use
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 the same libraries as BIND. [RT #33131]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3549. [doc] Documentation for "request-nsid" was missing.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3548. [bug] The NSID request code in resolver.c was broken
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 resulting in invalid EDNS options being sent.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3547. [bug] Some malformed unknown rdata records were not properly
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 detected and rejected. [RT #33129]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3546. [func] Add EUI48 and EUI64 types. [RT #33082]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3545. [bug] RRL slip behavior was incorrect when set to 1.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3544. [contrib] check5011.pl: Script to report the status of
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 managed keys as recorded in managed-keys.bind.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 Contributed by Tony Finch <dot@dotat.at>
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3543. [bug] Update socket structure before attaching to socket
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 manager after accept. [RT #33084]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3542. [placeholder]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3541. [bug] Parts of libdns were not properly initialized when
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 built in libexport mode. [RT #33028]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3540. [test] libt_api: t_info and t_assert were not thread safe.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3539. [port] win32: timestamp format didn't match other platforms.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3538. [test] Running "make test" now requires loopback interfaces
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to be set up. [RT #32452]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3537. [tuning] Slave zones, when updated, now send NOTIFY messages
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to peers before being dumped to disk rather than
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson after. [RT #27242]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3536. [func] Add support for setting Differentiated Services Code
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Point (DSCP) values in named. Most configuration
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson options which take a "port" option (e.g.,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson listen-on, forwarders, also-notify, masters,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson notify-source, etc) can now also take a "dscp"
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson option specifying a code point for use with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson outgoing traffic, if supported by the underlying
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson OS. [RT #27596]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3535. [bug] Minor win32 cleanups. [RT #32962]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3534. [bug] Extra text after an embedded NULL was ignored when
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson parsing zone files. [RT #32699]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3533. [contrib] query-loc-0.4.0: memory leaks. [RT #32960]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3532. [contrib] zkt: fixed buffer overrun, resource leaks. [RT #32960]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3531. [bug] win32: A uninitialized value could be returned on out
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of memory. [RT #32960]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3530. [contrib] Better RTT tracking in queryperf. [RT #30128]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3529. [func] Named now listens on both IPv4 and IPv6 interfaces
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson by default. Named previously only listened on IPv4
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson interfaces by default unless named was running in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson IPv6 only mode. [RT #32945]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3528. [func] New "dnssec-coverage" command scans the timing
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson metadata for a set of DNSSEC keys and reports if a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson lapse in signing coverage has been scheduled
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson inadvertently. (Note: This tool depends on python;
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson it will not be built or installed on systems that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson do not have a python interpreter.) [RT #28098]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3527. [compat] Add a URI to allow applications to explicitly
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson request a particular XML schema from the statistics
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson channel, returning 404 if not supported. [RT #32481]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3526. [cleanup] Set up dependencies for unit tests correctly during
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson build. [RT #32803]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3525. [func] Support for additional signing algorithms in rndc:
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson The -A option to rndc-confgen can be used to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson select the algorithm for the generated key.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (The default is still hmac-md5; this may
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson change in a future release.) [RT #20363]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3524. [func] Added an alternate statistics channel in JSON format,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when the server is built with the json-c library:
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson http://[address]:[port]/json. [RT #32630]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3523. [contrib] Ported filesystem and ldap DLZ drivers to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dynamically-loadable modules, and added the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson "wildcard" module based on a contribution from
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Vadim Goncharov <vgoncharov@nic.ru>. [RT #23569]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3522. [bug] DLZ lookups could fail to return SERVFAIL when
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson they ought to. [RT #32685]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3520. [bug] 'mctx' was not being referenced counted in some places
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson where it should have been. [RT #32794]
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3519. [func] Full replay protection via four-way handshake is
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson now mandatory for rndc clients. Very old versions
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of rndc will no longer work. [RT #32798]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3518. [bug] Increase the size of dns_rrl_key.s.rtype by one bit
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson so that all dns_rrl_rtype_t enum values fit regardless
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of whether it is teated as signed or unsigned by
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the compiler. [RT #32792]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3517. [bug] Reorder destruction to avoid shutdown race. [RT #32777]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3516. [placeholder]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3515. [port] '%T' is not portable in strftime(). [RT #32763]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3514. [bug] The ranges for valid key sizes in ddns-confgen and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson rndc-confgen were too constrained. Keys up to 512
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson bits are now allowed for most algorithms, and up
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to 1024 bits for hmac-sha384 and hmac-sha512.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3513. [func] "dig -u" prints times in microseconds rather than
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson milliseconds. [RT #32704]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3512. [func] "rndc validation check" reports the current status
7d8bfa8f8ea4c222b9403fe97dba0523d768f667Mark Andrews of DNSSEC validation. [RT #21397]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3511. [doc] Improve documentation of redirect zones. [RT #32756]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3510. [func] "rndc status" and XML statistics channel now report
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 server start and reconfiguration times. [RT #21048]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3509. [cleanup] Added a product line to version file to allow for
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 easy naming of different products (BIND
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 vs BIND ESV, for example). [RT #32755]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3508. [contrib] queryperf was incorrectly rejecting the -T option.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3507. [bug] Statistics channel XSL had a glitch when attempting
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 to chart query data before any queries had been
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 received. [RT #32620]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3506. [func] When setting "max-cache-size" and "max-acache-size",
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the keyword "unlimited" is no longer defined as equal
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to 4 gigabytes (except on 32-bit platforms); it
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson means literally unlimited. [RT #32358]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3505. [bug] When setting "max-cache-size" and "max-acache-size",
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson larger values than 4 gigabytes could not be set
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson explicitly, though larger sizes were available
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when setting cache size to 0. This has been
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson corrected; the full range is now available.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3504. [func] Add support for ACLs based on geographic location,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson using MaxMind GeoIP databases. Based on code
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson contributed by Ken Brownfield <kb@slide.com>.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3503. [doc] Clarify size_spec syntax. [RT #32449]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3502. [func] zone-statistics: "no" is now a synonym for "none",
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson instead of "terse". [RT #29165]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3501. [func] zone-statistics now takes three options: full,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson terse, and none. "yes" and "no" are retained as
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson synonyms for full and terse, respectively. [RT #29165]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3500. [security] Support NAPTR regular expression validation on
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson all platforms without using libregex, which
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson can be vulnerable to memory exhaustion attack
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (CVE-2013-2266). [RT #32688]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3499. [doc] Corrected ARM documentation of built-in zones.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3498. [bug] zone statistics for zones which matched a potential
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson empty zone could have their zone-statistics setting
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3497. [func] When deleting a slave/stub zone using 'rndc delzone'
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson report the files that were being used so they can
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson be cleaned up if desired. [RT #27899]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3496. [placeholder]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3495. [func] Support multiple response-policy zones (up to 32),
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson while improving RPZ performance. "response-policy"
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson syntax now includes a "min-ns-dots" clause, with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson default 1, to exclude top-level domains from
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 NSIP and NSDNAME checking. --enable-rpz-nsip and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson --enable-rpz-nsdname are now the default. [RT #32251]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3494. [func] DNS RRL: Blunt the impact of DNS reflection and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson amplification attacks by rate-limiting substantially-
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson identical responses. [RT #28130]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3493. [contrib] Added BDBHPT dynamically-loadable DLZ module,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson contributed by Mark Goldfinch. [RT #32549]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3492. [bug] Fixed a regression in zone loading performance
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson due to lock contention. [RT #30399]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3491. [bug] Slave zones using inline-signing must specify a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson file name. [RT #31946]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3490. [bug] When logging RDATA during update, truncate if it's
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson too long. [RT #32365]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3489. [bug] --enable-developer now turns on ISC_LIST_CHECKINIT.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dns_dlzcreate() failed to properly initialize
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dlzdb.link. When cloning a rdataset do not copy
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the link contents. [RT #32651]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3488. [bug] Use after free error with DH generated keys. [RT #32649]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3487. [bug] Change 3444 was not complete. There was a additional
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson place where the NOQNAME proof needed to be saved.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3486. [bug] named could crash when using TKEY-negotiated keys
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson that had been deleted and then recreated. [RT #32506]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3485. [cleanup] Only compile openssl_gostlink.c if we support GOST.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3484. [bug] Some statistics were incorrectly rendered in XML.
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3483. [placeholder]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3482. [func] dig +nssearch now prints name servers that don't
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews have address records (missing AAAA or A, or the name
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews doesn't exist). [RT #29348]
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3481. [cleanup] Removed use of const const in atf.
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3480. [bug] Silence logging noise when setting up zone
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson statistics. [RT #32525]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3479. [bug] Address potential memory leaks in gssapi support
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 code. [RT #32405]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3478. [port] Fix a build failure in strict C99 environments
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3477. [func] Expand logging when adding records via DDNS update
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews3476. [bug] "rndc zonestatus" could report a spurious "not
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews found" error on inline-signing zones. [RT #29226]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3475. [cleanup] Changed name of 'map' zone file format (previously
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 'fast'). [RT #32458]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3474. [bug] nsupdate could assert when the local and remote
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 address families didn't match. [RT #22897]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3473. [bug] dnssec-signzone/verify could incorrectly report
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 an error condition due to an empty node above an
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 opt-out delegation lacking an NSEC3. [RT #32072]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3472. [bug] The active-connections counter in the socket
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 statistics could underflow. [RT #31747]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3471. [bug] The number of UDP dispatches now defaults to
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 the number of CPUs even if -n has been set to
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 a higher value. [RT #30964]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3470. [bug] Slave zones could fail to dump when successfully
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 refreshing after an initial failure. [RT #31276]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3469. [bug] Handle DLZ lookup failures more gracefully. Improve
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 backward compatibility between versions of DLZ dlopen
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 API. [RT #32275]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3468. [security] RPZ rules to generate A records (but not AAAA records)
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 could trigger an assertion failure when used in
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 conjunction with DNS64 (CVE-2012-5689). [RT #32141]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3467. [bug] Added checks in dnssec-keygen and dnssec-settime
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 to check for delete date < inactive date. [RT #31719]
bd3946db298667e769804b2e978df2d6dcd85e29Mark Andrews3466. [contrib] Corrected the DNS_CLIENTINFOMETHODS_VERSION check
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in DLZ example driver. [RT #32275]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3465. [bug] Handle isolated reserved ports. [RT #31778]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3464. [maint] Updates to PKCS#11 openssl patches, supporting
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson versions 0.9.8x, 1.0.0j, 1.0.1c [RT #29749]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3463. [doc] Clarify managed-keys syntax in ARM. [RT #32232]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3462. [doc] Clarify server selection behavior of dig when using
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson -4 or -6 options. [RT #32181]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3461. [bug] Negative responses could incorrectly have AD=1
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson set. [RT #32237]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3460. [bug] Only link against readline where needed. [RT #29810]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3459. [func] Added -J option to named-checkzone/named-compilezone
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to specify the path to the journal file. [RT #30958]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3458. [bug] Return FORMERR when presented with a overly long
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson domain named in a request. [RT #29682]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3457. [protocol] Add ILNP records (NID, LP, L32, L64). [RT #31836]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3456. [port] g++47: ATF failed to compile. [RT #32012]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3455. [contrib] queryperf: fix getopt option list. [RT #32338]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3454. [port] sparc64: improve atomic support. [RT #25182]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3453. [bug] 'rndc addzone' of a zone with 'inline-signing yes;'
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson failed. [RT #31960]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3452. [bug] Accept duplicate singleton records. [RT #32329]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3451. [port] Increase per thread stack size from 64K to 1M.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3450. [bug] Stop logfileconfig system test spam system logs.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3449. [bug] gen.c: use the pre-processor to construct format
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson strings so that compiler can perform sanity checks;
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson check the snprintf results. [RT #17576]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3448. [bug] The allow-query-on ACL was not processed correctly.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3447. [port] Add support for libxml2-2.9.x [RT #32231]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3446. [port] win32: Add source ID (see change #3400) to build.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3445. [bug] Warn about zone files with blank owner names
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 immediately after $ORIGIN directives. [RT #31848]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3444. [bug] The NOQNAME proof was not being returned from cached
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson insecure responses. [RT #21409]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3443. [bug] ddns-confgen: Some TSIG algorithms were incorrectly
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson rejected when generating keys. [RT #31927]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3442. [port] Net::DNS 0.69 introduced a non backwards compatible
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson change. [RT #32216]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3441. [maint] D.ROOT-SERVERS.NET is now 199.7.91.13.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3440. [bug] Reorder get_key_struct to not trigger a assertion when
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 cleaning up due to out of memory error. [RT #32131]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3439. [placeholder]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3438. [bug] Don't accept unknown data escape in quotes. [RT #32031]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3437. [bug] isc_buffer_init -> isc_buffer_constinit to initialize
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 buffers with constant data. [RT #32064]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3436. [bug] Check malloc/calloc return values. [RT #32088]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3435. [bug] Cross compilation support in configure was broken.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3434. [bug] Pass client info to the DLZ findzone() entry
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 point in addition to lookup(). This makes it
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson possible for a database to answer differently
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson whether it's authoritative for a name depending
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 on the address of the client. [RT #31775]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3433. [bug] dlz_findzone() did not correctly handle
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 ISC_R_NOMORE. [RT #31172]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3432. [func] Multiple DLZ databases can now be configured.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 DLZ databases are searched in the order configured,
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 unless set to "search no", in which case a
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 zone can be configured to be retrieved from a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson particular DLZ database by using a "dlz <name>"
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 option in the zone statement. DLZ databases can
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 support type "master" and "redirect" zones.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3431. [bug] ddns-confgen: Some valid key algorithms were
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 not accepted. [RT #31927]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3430. [bug] win32: isc_time_formatISO8601 was missing the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson 'T' between the date and time. [RT #32044]
1123872a47604644f6d74d7d8929472201db96f3Andreas Gustafsson3429. [bug] dns_zone_getserial2 could a return success without
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson returning a valid serial. [RT #32007]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3428. [cleanup] dig: Add timezone to date output. [RT #2269]
1123872a47604644f6d74d7d8929472201db96f3Andreas Gustafsson3427. [bug] dig +trace incorrectly displayed name server
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson addresses instead of names. [RT #31641]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3426. [bug] dnssec-checkds: Clearer output when records are not
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 found. [RT #31968]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3425. [bug] "acacheentry" reference counting was broken resulting
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 in use after free. [RT #31908]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3424. [func] dnssec-dsfromkey now emits the hash without spaces.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3423. [bug] "rndc signing -nsec3param" didn't accept the full
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson range of possible values. Address portability issues.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3422. [bug] Added a clear error message for when the SOA does not
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson match the referral. [RT #31281]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3421. [bug] Named loops when re-signing if all keys are offline.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3420. [bug] Address VPATH compilation issues. [RT #31879]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3419. [bug] Memory leak on validation cancel. [RT #31869]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3418. [func] New XML schema (version 3.0) for the statistics channel
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson adds query type statistics at the zone level, and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson flattens the XML tree and uses compressed format to
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 optimize parsing. Includes new XSL that permits
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 charting via the Google Charts API on browsers that
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 support javascript in XSL. The old XML schema has been
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 deprecated. [RT #30023]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3417. [placeholder]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3416. [bug] Named could die on shutdown if running with 128 UDP
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 dispatches per interface. [RT #31743]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3415. [bug] named could die with a REQUIRE failure if a validation
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson was canceled. [RT #31804]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3414. [bug] Address locking issues found by Coverity. [RT #31626]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3413. [func] Record the number of DNS64 AAAA RRsets that have been
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 synthesized. [RT #27636]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3412. [bug] Copy timeval structure from control message data.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3411. [tuning] Use IPV6_USE_MIN_MTU or equivalent with TCP in addition
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 to UDP. [RT #31690]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3410. [bug] Addressed Coverity warnings. [RT #31626]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3409. [contrib] contrib/dane/mkdane.sh: Tool to generate TLSA RR's
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 from X.509 certificates, for use with DANE
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 (DNS-based Authentication of Named Entities).
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3408. [bug] Some DNSSEC-related options (update-check-ksk,
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 dnssec-loadkeys-interval, dnssec-dnskey-kskonly)
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 are now legal in slave zones as long as
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 inline-signing is in use. [RT #31078]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3407. [placeholder]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3406. [bug] mem.c: Fix compilation errors when building with
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 ISC_MEM_TRACKLINES or ISC_MEMPOOL_NAMES disabled.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 Also, ISC_MEM_DEBUG is no longer optional. [RT #31559]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3405. [bug] Handle time going backwards in acache. [RT #31253]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3404. [bug] dnssec-signzone: When re-signing a zone, remove
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 RRSIG and NSEC records from nodes that used to be
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 in-zone but are now below a zone cut. [RT #31556]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3403. [bug] Silence noisy OpenSSL logging. [RT #31497]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3402. [test] The IPv6 interface numbers used for system
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 tests were incorrect on some platforms. [RT #25085]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3401. [bug] Addressed Coverity warnings. [RT #31484]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3400. [cleanup] "named -V" can now report a source ID string, defined
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 in the "srcid" file in the build tree and normally set
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 to the most recent git hash. [RT #31494]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3399. [port] netbsd: rename 'bool' parameter to avoid namespace
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 clash. [RT #31515]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3398. [bug] SOA parameters were not being updated with inline
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 signed zones if the zone was modified while the
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 server was offline. [RT #29272]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3397. [bug] dig crashed when using +nssearch with +tcp. [RT #25298]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3396. [bug] OPT records were incorrectly removed from signed,
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 truncated responses. [RT #31439]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3395. [protocol] Add RFC 6598 reverse zones to built in empty zones
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 list, 64.100.IN-ADDR.ARPA ... 127.100.IN-ADDR.ARPA.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3394. [bug] Adjust 'successfully validated after lower casing
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 signer' log level and category. [RT #31414]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3393. [bug] 'host -C' could core dump if REFUSED was received.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3392. [func] Keep statistics on REFUSED responses. [RT #31412]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3391. [bug] A DNSKEY lookup that encountered a CNAME failed.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3390. [bug] Silence clang compiler warnings. [RT #30417]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3389. [bug] Always return NOERROR (not 0) in TSIG. [RT #31275]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3388. [bug] Fixed several Coverity warnings.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 Note: This change includes a fix for a bug that
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 was subsequently determined to be an exploitable
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 security vulnerability, CVE-2012-5688: named could
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 die on specific queries with dns64 enabled.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3387. [func] DS digest can be disabled at runtime with
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 disable-ds-digests. [RT #21581]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3386. [bug] Address locking violation when generating new NSEC /
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 NSEC3 chains. [RT #31224]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3385. [bug] named-checkconf didn't detect missing master lists
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 in also-notify clauses. [RT #30810]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3384. [bug] Improved logging of crypto errors. [RT #30963]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3383. [security] A certain combination of records in the RBT could
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson cause named to hang while populating the additional
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson section of a response. [RT #31090]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3382. [bug] SOA query from slave used use-v6-udp-ports range,
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson if set, regardless of the address family in use.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3381. [contrib] Update queryperf to support more RR types.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3380. [bug] named could die if a nonexistent master list was
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson referenced in a also-notify. [RT #31004]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3379. [bug] isc_interval_zero and isc_time_epoch should be
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson "const (type)* const". [RT #31069]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3378. [bug] Handle missing 'managed-keys-directory' better.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3377. [bug] Removed spurious newline from NSEC3 multiline
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson output. [RT #31044]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3376. [bug] Lack of EDNS support was being recorded without a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson successful response. [RT #30811]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3375. [bug] 'rndc dumpdb' failed on empty caches. [RT #30808]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3374. [bug] isc_parse_uint32 failed to return a range error on
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson systems with 64 bit longs. [RT #30232]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3373. [bug] win32: open raw files in binary mode. [RT #30944]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3372. [bug] Silence spurious "deleted from unreachable cache"
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson messages. [RT #30501]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3371. [bug] AD=1 should behave like DO=1 when deciding whether to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson add NS RRsets to the additional section or not.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3370. [bug] Address use after free while shutting down. [RT #30241]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3369. [bug] nsupdate terminated unexpectedly in interactive mode
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson if built with readline support. [RT #29550]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3368. [bug] <dns/iptable.h>, <dns/private.h> and <dns/zone.h>
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 were not C++ safe.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3367. [bug] dns_dnsseckey_create() result was not being checked.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3366. [bug] Fixed Read-After-Write dependency violation for IA64
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson atomic operations. [RT #25181]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3365. [bug] Removed spurious newlines from log messages in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3364. [security] Named could die on specially crafted record.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3363. [bug] Need to allow "forward" and "fowarders" options
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in static-stub zones; this had been overlooked.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3362. [bug] Setting some option values to 0 in named.conf
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson could trigger an assertion failure on startup.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3361. [bug] "rndc signing -nsec3param" didn't work correctly
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 when salt was set to '-' (no salt). [RT #30099]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3360. [bug] 'host -w' could die. [RT #18723]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3359. [bug] An improperly-formed TSIG secret could cause a
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 memory leak. [RT #30607]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3358. [placeholder]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3357. [port] Add support for libxml2-2.8.x [RT #30440]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3356. [bug] Cap the TTL of signed RRsets when RRSIGs are
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson approaching their expiry, so they don't remain
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in caches after expiry. [RT #26429]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3355. [port] Use more portable awk in verify system test.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3354. [func] Improve OpenSSL error logging. [RT #29932]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3353. [bug] Use a single task for task exclusive operations.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3352. [bug] Ensure that learned server attributes timeout of the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson adb cache. [RT #29856]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3351. [bug] isc_mem_put and isc_mem_putanddetach didn't report
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson caller if either ISC_MEM_DEBUGSIZE or ISC_MEM_DEBUGCTX
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson memory debugging flags are set. [RT #30243]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3350. [bug] Memory read overrun in isc___mem_reallocate if
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson ISC_MEM_DEBUGCTX memory debugging flag is set.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3349. [bug] Change #3345 was incomplete. [RT #30233]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3348. [bug] Prevent RRSIG data from being cached if a negative
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson record matching the covering type exists at a higher
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson trust level. Such data already can't be retrieved from
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the cache since change 3218 -- this prevents it
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson being inserted into the cache as well. [RT #26809]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3347. [bug] dnssec-settime: Issue a warning when writing a new
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson private key file would cause a change in the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson permissions of the existing file. [RT #27724]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3346. [security] Bad-cache data could be used before it was
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson initialized, causing an assert. [RT #30025]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3345. [bug] Addressed race condition when removing the last item
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson or inserting the first item in an ISC_QUEUE.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3344. [func] New "dnssec-checkds" command checks a zone to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson determine which DS records should be published
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in the parent zone, or which DLV records should be
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson published in a DLV zone, and queries the DNS to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson ensure that it exists. (Note: This tool depends
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson on python; it will not be built or installed on
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson systems that do not have a python interpreter.)
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3343. [placeholder]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3342. [bug] Change #3314 broke saving of stub zones to disk
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson resulting in excessive cpu usage in some cases.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3341. [func] New "dnssec-verify" command checks a signed zone
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to ensure correctness of signatures and of NSEC/NSEC3
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson chains. [RT #23673]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3340. [func] Added new 'map' zone file format, which is an image
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of a zone database that can be loaded directly into
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson memory via mmap(), allowing much faster zone loading.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (Note: Because of pointer sizes and other
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson considerations, this file format is platform-dependent;
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson 'map' zone files cannot always be transferred from one
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson server to another.) [RT #25419]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3339. [func] Allow the maximum supported rsa exponent size to be
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson specified: "max-rsa-exponent-size <value>;" [RT #29228]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3338. [bug] Address race condition in units tests: asyncload_zone
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson and asyncload_zt. [RT #26100]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3337. [bug] Change #3294 broke support for the multiple keys
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in controls. [RT #29694]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3336. [func] Maintain statistics for RRsets tagged as "stale".
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3335. [func] nslookup: return a nonzero exit code when unable
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 to get an answer. [RT #29492]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3334. [bug] Hold a zone table reference while performing a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson asynchronous load of a zone. [RT #28326]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3333. [bug] Setting resolver-query-timeout too low can cause
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson named to not recover if it loses connectivity.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3332. [bug] Re-use cached DS rrsets if possible. [RT #29446]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3331. [security] dns_rdataslab_fromrdataset could produce bad
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson rdataslabs. [RT #29644]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3330. [func] Fix missing signatures on NOERROR results despite
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson RPZ rewriting. Also
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson - add optional "recursive-only yes|no" to the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson response-policy statement
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson - add optional "max-policy-ttl" to the response-policy
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson statement to limit the false data that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson "recursive-only no" can introduce into
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson resolvers' caches
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson - add a RPZ performance test to bin/tests/system/rpz
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when queryperf is available.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson - the encoding of PASSTHRU action to "rpz-passthru".
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (The old encoding is still accepted.)
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3329. [bug] Handle RRSIG signer-name case consistently: We
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson generate RRSIG records with the signer-name in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson lower case. We accept them with any case, but if
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson they fail to validate, we try again in lower case.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3328. [bug] Fixed inconsistent data checking in dst_parse.c.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to 'filter-aaaa-on-v4' but applies to IPv6
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson connections. (Use "configure --enable-filter-aaaa"
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to enable this option.) [RT #27308]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3326. [func] Added task list statistics: task model, worker
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson threads, quantum, tasks running, tasks ready.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3325. [func] Report cache statistics: memory use, number of
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson nodes, number of hash buckets, hit and miss counts.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3324. [test] Add better tests for ADB stats [RT #27057]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3323. [func] Report the number of buckets the resolver is using.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3322. [func] Monitor the number of active TCP and UDP dispatches.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3321. [func] Monitor the number of recursive fetches and the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson number of open sockets, and report these values in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the statistics channel. [RT #27054]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3320. [func] Added support for monitoring of recursing client
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson count. [RT #27009]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3319. [func] Added support for monitoring of ADB entry count and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson hash size. [RT #27057]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3318. [tuning] Reduce the amount of work performed while holding a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson bucket lock when finished with a fetch context.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3316. [tuning] Improved locking performance when recursing.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3315. [tuning] Use multiple dispatch objects for sending upstream
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 queries; this can improve performance on busy
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson multiprocessor systems by reducing lock contention.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3314. [bug] The masters list could be updated while stub_callback
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson or refresh_callback were using it. [RT #26732]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3313. [protocol] Add TLSA record type. [RT #28989]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3311. [bug] Abort the zone dump if zone->db is NULL in
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson zone.c:zone_gotwritehandle. [RT #29028]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3310. [test] Increase table size for mutex profiling. [RT #28809]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3309. [bug] resolver.c:fctx_finddone() was not thread safe.
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3308. [placeholder]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3305. [func] Add wire format lookup method to sdb. [RT #28563]
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3303. [bug] named could die when reloading. [RT #28606]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3302. [bug] dns_dnssec_findmatchingkeys could fail to find
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson keys if the zone name contained character that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson required special mappings. [RT #28600]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3301. [contrib] Update queryperf to build on darwin. Add -R flag
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson for non-recursive queries. [RT #28565]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3300. [bug] Named could die if gssapi was enabled in named.conf
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson but was not compiled in. [RT #28338]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3299. [bug] Make SDB handle errors from database drivers better.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3298. [bug] Named could dereference a NULL pointer in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson zmgr_start_xfrin_ifquota if the zone was being removed.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3297. [bug] Named could die on a malformed master file. [RT #28467]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3296. [bug] Named could die with a INSIST failure in
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 client.c:exit_check. [RT #28346]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3295. [bug] Adjust isc_time_secondsastimet range check to be more
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 portable. [RT # 26542]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 error. [RT #28265]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3293. [func] nsupdate: list supported type. [RT #28261]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3292. [func] Log messages in the axfr stream at debug 10.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3291. [port] Fixed a build error on systems without ENOTSUP.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3288. [bug] dlz_destroy() function wasn't correctly registered
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 by the DLZ dlopen driver. [RT #28056]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3286. [bug] Managed key maintenance timer could fail to start
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson after 'rndc reconfig'. [RT #26786]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3285. [bug] val-frdataset was incorrectly disassociated in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson proveunsecure after calling startfinddlvsep.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3284. [bug] Address race conditions with the handling of
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3283. [bug] Raw zones with with more than 512 records in a RRset
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson failed to load. [RT #27863]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3282. [bug] Restrict the TTL of NS RRset to no more than that
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 of the old NS RRset when replacing it.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 [RT #27792] [RT #27884]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3281. [bug] SOA refresh queries could be treated as cancelled
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 despite succeeding over the loopback interface.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3280. [bug] Potential double free of a rdataset on out of memory
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson with DNS64. [RT #27762]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3279. [bug] Hold a internal reference to the zone while performing
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson a asynchronous load. Address potential memory leak
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson if the asynchronous is cancelled. [RT #27750]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3278. [bug] Make sure automatic key maintenance is started
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when "auto-dnssec maintain" is turned on during
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson "rndc reconfig". [RT #26805]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3276. [bug] win32: ns_os_openfile failed to return NULL on
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson safe_open failure. [RT #27696]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson option had been misspelled as '-clear'. (To avoid
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson future confusion, both options now work.) [RT #27173]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3274. [placeholder]
6d7939a85025621aa11e9cfe933629113bd0963aMark Andrews3273. [bug] AAAA responses could be returned in the additional
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson section even when filter-aaaa-on-v4 was in use.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3272. [func] New "rndc zonestatus" command prints information
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson about the specified zone. [RT #21671]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3271. [port] darwin: mksymtbl is not always stable, loop several
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson times before giving up. mksymtbl was using non
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson portable perl to covert 64 bit hex strings. [RT #27653]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson --- 9.9.0rc2 released ---
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3270. [bug] "rndc reload" didn't reuse existing zones correctly
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when inline-signing was in use. [RT #27650]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3269. [port] darwin 11 and later now built threaded by default.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson out the earliest expiry time. [RT #23311]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3267. [bug] Memory allocation failures could be mis-reported as
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson unexpected error. New ISC_R_UNSET result code.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3266. [bug] The maximum number of NSEC3 iterations for a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson DNSKEY RRset was not being properly computed.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3265. [bug] Corrected a problem with lock ordering in the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson inline-signing code. [RT #27557]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3264. [bug] Automatic regeneration of signatures in an
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson inline-signing zone could stall when the server
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson was restarted. [RT #27344]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3263. [bug] "rndc sync" did not affect the unsigned side of an
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson inline-signing zone. [RT #27337]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3262. [bug] Signed responses were handled incorrectly by RPZ.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3261. [func] RRset ordering now defaults to random. [RT #27174]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3260. [bug] "rrset-order cyclic" could appear not to rotate
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson for some query patterns. [RT #27170/27185]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson --- 9.9.0rc1 released ---
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3259. [bug] named-compilezone: Suppress "dump zone to <file>"
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews message when writing to stdout. [RT #27109]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3258. [test] Add "forcing full sign with unreadable keys" test.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3257. [bug] Do not generate a error message when calling fsync()
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson in a pipe or socket. [RT #27109]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3255. [func] No longer require that a empty zones be explicitly
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson enabled or that a empty zone is disabled for
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson RFC 1918 empty zones to be configured. [RT #27139]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson too long. [RT #26956]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3252. [bug] When master zones using inline-signing were
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson updated while the server was offline, the source
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson zone could fall out of sync with the signed
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson copy. They can now resynchronize. [RT #26676]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson memory dns_sdlz_putrr() can allocate per record to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson prevent run away memory consumption on ISC_R_NOSPACE.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3250. [func] 'configure --enable-developer'; turn on various
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson configure options, normally off by default, that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson we want developers to build and test with. [RT #27103]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3249. [bug] Update log message when saving slave zones files for
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson analysis after load failures. [RT #27087]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3248. [bug] Configure options --enable-fixed-rrset and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson --enable-exportlib were incompatible with each
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson other. [RT #27087]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3247. [bug] 'raw' format zones failed to preserve load order
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson breaking 'fixed' sort order. [RT #27087]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3246. [bug] Named failed to start with a empty also-notify list.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3245. [bug] Don't report a error unchanged serials unless there
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson were other changes when thawing a zone with
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews ixfr-fromdifferences. [RT #26845]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3244. [func] Added readline support to nslookup and nsupdate.
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews Also simplified nsupdate syntax to make "update"
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews and "prereq" optional. [RT #24659]
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews being properly set.
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3242. [func] Extended the header of raw-format master files to
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews include the serial number of the zone from which
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews they were generated, if different (as in the case
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews of inline-signing zones). This is to be used in
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews inline-signing zones, to track changes between the
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews unsigned and signed versions of the zone, which may
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews have different serial numbers.
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews (Note: raw zonefiles generated by this version of
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews BIND are no longer compatible with prior versions.
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews To generate a backward-compatible raw zonefile
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews using dnssec-signzone or named-compilezone, specify
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews output format "raw=0" instead of simply "raw".)
8ac1acc30d0f405222ffa7b2b93131d9d4e18599Mark Andrews3241. [bug] Address race conditions in the resolver code.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3240. [bug] DNSKEY state change events could be missed. [RT #26874]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 timestamp. [RT #26883]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3238. [bug] keyrdata was not being reinitialized in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson lib/dns/rbtdb.c:iszonesecure. [RT#26913]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3237. [bug] dig -6 didn't work with +trace. [RT #26906]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3236. [bug] Backed out changes #3182 and #3202, related to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson EDNS(0) fallback behavior. [RT #26416]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3235. [func] dns_db_diffx, a extended dns_db_diff which returns
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the generated diff and optionally writes it to a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson journal. [RT #26386]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3232. [bug] Zero zone->curmaster before return in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dns_zone_setmasterswithkeys(). [RT #26732]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3231. [bug] named could fail to send a incompressible zone.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3230. [bug] 'dig axfr' failed to properly handle a multi-message
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson axfr with a serial of 0. [RT #26796]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3229. [bug] Fix local variable to struct var assignment
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson found by CLANG warning.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3228. [tuning] Dynamically grow symbol table to improve zone
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson loading performance. [RT #26523]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3227. [bug] Interim fix to make WKS's use of getprotobyname()
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 and getservbyname() self thread safe. [RT #26232]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3226. [bug] Address minor resource leakages. [RT #26624]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 messages. [RT #26507]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3223. [bug] 'task_test privilege_drop' generated false positives.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3222. [cleanup] Replace dns_journal_{get,set}_bitws with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dns_journal_{get,set}_sourceserial. [RT #26634]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3221. [bug] Fixed a potential core dump on shutdown due to
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 referencing fetch context after it's been freed.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 --- 9.9.0b2 released ---
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 could fail to set the database version correctly,
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 causing an assertion failure. [RT #26180]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3219. [bug] Disable NOEDNS caching following a timeout.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3218. [security] Cache lookup could return RRSIG data associated with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson nonexistent records, leading to an assertion
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 failure. [RT #26590]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3214. [func] Add 'named -U' option to set the number of UDP
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson listener threads per interface. [RT #26485]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson list prior to adding a reference to it leading a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson possible assertion failure. [RT #23219]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 option prints in single-line-per-record format.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3210. [bug] Canceling the oldest query due to recursive-client
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson overload could trigger an assertion failure. [RT #26463]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3208. [bug] 'dig -y' handle unknown tsig algorithm better.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3206. [cleanup] Add ISC information to log at start time. [RT #25484]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3205. [func] Upgrade dig's defaults to better reflect modern
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 nameserver behavior. Enable "dig +adflag" and
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 "dig +edns=0" by default. Enable "+dnssec" when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 running "dig +trace". [RT #23497]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3204. [bug] When a master server that has been marked as
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 unreachable sends a NOTIFY, mark it reachable
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 again. [RT #25960]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3203. [bug] Increase log level to 'info' for validation failures
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 from expired or not-yet-valid RRSIGs. [RT #21796]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3202. [bug] NOEDNS caching on timeout was too aggressive.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3201. [func] 'rndc querylog' can now be given an on/off parameter
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 instead of only being used as a toggle. [RT #18351]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3200. [doc] Some rndc functions were undocumented or were
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 missing from 'rndc -h' output. [RT #25555]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3199. [func] When logging client information, include the name
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 being queried. [RT #25944]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3198. [doc] Clarified that dnssec-settime can alter keyfile
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 permissions. [RT #24866]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3197. [bug] Don't try to log the filename and line number when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 the config parser can't open a file. [RT #22263]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3196. [bug] nsupdate: return nonzero exit code when target zone
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 doesn't exist. [RT #25783]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3195. [cleanup] Silence "file not found" warnings when loading
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 managed-keys zone. [RT #26340]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3194. [doc] Updated RFC references in the 'empty-zones-enable'
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 documentation. [RT #25203]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3192. [bug] A query structure could be used after being freed.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3191. [bug] Print NULL records using "unknown" format. [RT #26392]
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3190. [bug] Underflow in error handling in isc_mutexblock_init.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3189. [test] Added a summary report after system tests. [RT #25517]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3188. [bug] zone.c:zone_refreshkeys() could fail to detach
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 references correctly when errors occurred, causing
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson a hang on shutdown. [RT #26372]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3187. [port] win32: support for Visual Studio 2008. [RT #26356]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 --- 9.9.0b1 released ---
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3186. [bug] Version/db mis-match in rpz code. [RT #26180]
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3185. [func] New 'rndc signing' option for auto-dnssec zones:
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews - 'rndc signing -list' displays the current
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson state of signing operations
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson - 'rndc signing -clear' clears the signing state
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews records for keys that have fully signed the zone
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews - 'rndc signing -nsec3param' sets the NSEC3
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson parameters for the zone
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson The 'rndc keydone' syntax is removed. [RT #23729]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3184. [bug] named had excessive cpu usage when a redirect zone was
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 configured. [RT #26013]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3182. [bug] Auth servers behind firewalls which block packets
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 greater than 512 bytes may cause other servers to
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 perform poorly. Now, adb retains edns information
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 and caches noedns servers. [RT #23392/24964]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3181. [func] Inline-signing is now supported for master zones.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3180. [func] Local copies of slave zones are now saved in raw
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson format by default, to improve startup performance.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson 'masterfile-format text;' can be used to override
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the default, if desired. [RT #25867]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3179. [port] kfreebsd: build issues. [RT #26273]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3178. [bug] A race condition introduced by change #3163 could
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson cause an assertion failure on shutdown. [RT #26271]
66f51d8678c8fcc7256354b599317f67455120fdMark Andrews3177. [func] 'rndc keydone', remove the indicator record that
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson named has finished signing the zone with the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson corresponding key. [RT #26206]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3176. [doc] Corrected example code and added a README to the
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 sample external DLZ module in contrib/dlz/example.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3175. [bug] Fix how DNSSEC positive wildcard responses from a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson NSEC3 signed zone are validated. Stop sending a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson unnecessary NSEC3 record when generating such
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson responses. [RT #26200]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3174. [bug] Always compute to revoked key tag from scratch.
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3173. [port] Correctly validate root DS responses. [RT #25726]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3172. [port] darwin 10.* and freebsd [89] are now built threaded by
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3171. [bug] Exclusively lock the task when adding a zone using
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 'rndc addzone'. [RT #25600]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 --- 9.9.0a3 released ---
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3170. [func] RPZ update:
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 - fix precedence among competing rules
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 - improve ARM text including documenting rule precedence
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 - try to rewrite CNAME chains until first hit
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 - new "rpz" logging channel
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 - RDATA for CNAME rules can include wildcards
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 - replace "NO-OP" named.conf policy override with
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 "PASSTHRU" and add "DISABLED" override ("NO-OP"
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 is still recognized)
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3169. [func] Catch db/version mis-matches when calling dns_db_*().
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3168. [bug] Nxdomain redirection could trigger an assert with
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 a ANY query. [RT #26017]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3167. [bug] Negative answers from forwarders were not being
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 correctly tagged making them appear to not be cached.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3166. [bug] Upgrading a zone to support inline-signing failed.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3165. [bug] dnssec-signzone could generate new signatures when
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 resigning, even when valid signatures were already
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 present. [RT #26025]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3164. [func] Enable DLZ modules to retrieve client information,
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 so that responses can be changed depending on the
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 source address of the query. [RT #25768]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3163. [bug] Use finer-grained locking in client.c to address
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 concurrency problems with large numbers of threads.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3162. [test] start.pl: modified to allow for "named.args" in
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 ns*/ subdirectory to override stock arguments to
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 named. Largely from RT#26044, but no separate ticket.
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3161. [bug] zone.c:del_sigs failed to always reset rdata leading
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉 assertion failures. [RT #25880]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3160. [bug] When printing out a NSEC3 record in multiline form
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson the newline was not being printed causing type codes
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to be run together. [RT #25873]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3159. [bug] On some platforms, named could assert on startup
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when running in a chrooted environment without
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 /proc. [RT #25863]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3158. [bug] Recursive servers would prefer a particular UDP
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson socket instead of using all available sockets.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 the config file before pausing the server. [RT #21373]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3156. [placeholder]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 --- 9.9.0a2 released ---
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3155. [bug] Fixed a build failure when using contrib DLZ
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 drivers (e.g., mysql, postgresql, etc). [RT #25710]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3154. [bug] Attempting to print an empty rdataset could trigger
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 an assert. [RT #25452]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3153. [func] Extend request-ixfr to zone level and remove the
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 side effect of forcing an AXFR. [RT #25156]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3152. [cleanup] Some versions of gcc and clang failed due to
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 incorrect use of __builtin_expect. [RT #25183]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3151. [bug] Queries for type RRSIG or SIG could be handled
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 incorrectly. [RT #21050]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3150. [func] Improved startup and reconfiguration time by
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 enabling zones to load in multiple threads. [RT #25333]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3149. [placeholder]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3148. [bug] Processing of normal queries could be stalled when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 forwarding a UPDATE message. [RT #24711]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3147. [func] Initial inline signing support. [RT #23657]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 --- 9.9.0a1 released ---
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3145. [test] Capture output of ATF unit tests in "./atf.out" if
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 there were any errors while running them. [RT #25527]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3144. [bug] dns_dbiterator_seek() could trigger an assert when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 used with a nonexistent database node. [RT #25358]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3143. [bug] Silence clang compiler warnings. [RT #25174]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3142. [bug] NAPTR is class agnostic. [RT #25429]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3141. [bug] Silence spurious "zone serial (0) unchanged" messages
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson associated with empty zones. [RT #25079]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3140. [func] New command "rndc flushtree <name>" clears the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson specified name from the server cache along with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson all names under it. [RT #19970]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson for the hashing algorithms (md5, sha1 - sha512, and
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 their hmac counterparts). [RT #25067]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3138. [bug] Address memory leaks and out-of-order operations when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 shutting named down. [RT #25210]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3137. [func] Improve hardware scalability by allowing multiple
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 worker threads to process incoming UDP packets.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 This can significantly increase query throughput
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 on some systems. [RT #22992]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3136. [func] Add RFC 1918 reverse zones to the list of built-in
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 empty zones switched on by the 'empty-zones-enable'
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 option. [RT #24990]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3134. [bug] Improve the accuracy of dnssec-signzone's signing
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 statistics. [RT #16030]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3133. [bug] Change #3114 was incomplete. [RT #24577]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3132. [placeholder]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3131. [tuning] Improve scalability by allocating one zone task
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 per 100 zones at startup time, rather than using a
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson fixed-size task table. [RT #24406]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3130. [func] Support alternate methods for managing a dynamic
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 zone's serial number. Two methods are currently
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson defined using serial-update-method, "increment"
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson (default) and "unixtime". [RT #23849]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3129. [bug] Named could crash on 'rndc reconfig' when
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson allow-new-zones was set to yes and named ACLs
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson were used. [RT #22739]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3128. [func] Inserting an NSEC3PARAM via dynamic update in an
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 auto-dnssec zone that has not been signed yet
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 will cause it to be signed with the specified NSEC3
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 parameters when keys are activated. The
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 NSEC3PARAM record will not appear in the zone until
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 it is signed, but the parameters will be stored.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3127. [bug] 'rndc thaw' will now remove a zone's journal file
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 if the zone serial number has been changed and
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 ixfr-from-differences is not in use. [RT #24687]
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3126. [security] Using DNAME record to generate replacements caused
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson RPZ to exit with a assertion failure. [RT #24766]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3125. [security] Using wildcard CNAME records as a replacement with
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson RPZ caused named to exit with a assertion failure.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3124. [bug] Use an rdataset attribute flag to indicate
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 negative-cache records rather than using rrtype 0;
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 this will prevent problems when that rrtype is
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 used in actual DNS packets. [RT #24777]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3123. [security] Change #2912 exposed a latent flaw in
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 dns_rdataset_totext() that could cause named to
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 crash with an assertion failure. [RT #24777]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3121. [security] An authoritative name server sending a negative
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 response containing a very large RRset could
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 trigger an off-by-one error in the ncache code
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 and crash named. [RT #24650]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3120. [bug] Named could fail to validate zones listed in a DLV
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 that validated insecure without using DLV and had
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 DS records in the parent zone. [RT #24631]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3119. [bug] When rolling to a new DNSSEC key, a private-type
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 record could be created and never marked complete.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3118. [bug] nsupdate could dump core on shutdown when using
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 SIG(0) keys. [RT #24604]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3117. [cleanup] Remove doc and parser references to the
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 never-implemented 'auto-dnssec create' option.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3116. [func] New 'dnssec-update-mode' option controls updates
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson of DNSSEC records in signed dynamic zones. Set to
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson 'no-resign' to disable automatic RRSIG regeneration
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 while retaining the ability to sign new or changed
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 data. [RT #24533]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3115. [bug] Named could fail to return requested data when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 following a CNAME that points into the same zone.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3114. [bug] Retain expired RRSIGs in dynamic zones if key is
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson inactive and there is no replacement key. [RT #23136]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3113. [doc] Document the relationship between serial-query-rate
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 and NOTIFY messages.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3112. [doc] Add missing descriptions of the update policy name
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson types "ms-self", "ms-subdomain", "krb5-self" and
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 "krb5-subdomain", which allow machines to update
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson their own records, to the BIND 9 ARM.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3111. [bug] Improved consistency checks for dnssec-enable and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dnssec-validation, added test cases to the
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 checkconf system test. [RT #24398]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3110. [bug] dnssec-signzone: Wrong error message could appear
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson when attempting to sign with no KSK. [RT #24369]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3109. [func] The also-notify option now uses the same syntax
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 as a zone's masters clause. This means it is
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 now possible to specify a TSIG key to use when
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 sending notifies to a given server, or to include
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 an explicit named masters list in an also-notfiy
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson statement. [RT #23508]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3108. [cleanup] dnssec-signzone: Clarified some error and
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 code (use -P instead). [RT #20852]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3107. [bug] dnssec-signzone: Report the correct number of ZSKs
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 when using -x. [RT #20852]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3106. [func] When logging client requests, include the name of
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 the TSIG key if any. [RT #23619]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3105. [bug] GOST support can be suppressed by "configure
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson --without-gost" [RT #24367]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3104. [bug] Better support for cross-compiling. [RT #24367]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3103. [bug] Configuring 'dnssec-validation auto' in a view
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 instead of in the options statement could trigger
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson an assertion failure in named-checkconf. [RT #24382]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3102. [func] New 'dnssec-loadkeys-interval' option configures
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 how often, in minutes, to check the key repository
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 for updates when using automatic key maintenance.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Default is every 60 minutes (formerly hard-coded
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 to 12 hours). [RT #23744]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3101. [bug] Zones using automatic key maintenance could fail
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 to check the key repository for updates. [RT #23744]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3100. [security] Certain response policy zone configurations could
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 trigger an INSIST when receiving a query of type
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 RRSIG. [RT #24280]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3099. [test] "dlz" system test now runs but gives R:SKIPPED if
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 not compiled with --with-dlz-filesystem. [RT #24146]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3098. [bug] DLZ zones were answering without setting the AA bit.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3097. [test] Add a tool to test handling of malformed packets.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3096. [bug] Set KRB5_KTNAME before calling log_cred() in
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 dst_gssapi_acceptctx(). [RT #24004]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3095. [bug] Handle isolated reserved ports in the port range.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3094. [doc] Expand dns64 documentation.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3092. [bug] Signatures for records at the zone apex could go
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 stale due to an incorrect timer setting. [RT #23769]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3091. [bug] Fixed a bug in which zone keys that were published
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 and then subsequently activated could fail to trigger
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 automatic signing. [RT #22911]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3090. [func] Make --with-gssapi default [RT #23738]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3089. [func] dnssec-dsfromkey now supports reading keys from
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 standard input "dnssec-dsfromkey -f -". [RT# 20662]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson and add setup.sh in order to resolve changing
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 named.conf issue. [RT #23687]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3087. [bug] DDNS updates using SIG(0) with update-policy match
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 type "external" could cause a crash. [RT #23735]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3086. [bug] Running dnssec-settime -f on an old-style key will
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 now force an update to the new key format even if no
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 other change has been specified, using "-P now -A now"
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 as default values. [RT #22474]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3085. [func] New '-R' option in dnssec-signzone forces removal
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 of signatures which have not yet expired but
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 were generated by a key that no longer exists.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3084. [func] A new command "rndc sync" dumps pending changes in
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews a dynamic zone to disk; "rndc sync -clean" also
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews removes the journal file after syncing. Also,
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews "rndc freeze" no longer removes journal files.
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3083. [bug] NOTIFY messages were not being sent when generating
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews a NSEC3 chain incrementally. [RT #23702]
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3082. [port] strtok_r is threads only. [RT #23747]
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews3081. [bug] Failure of DNAME substitution did not return
e2cf0e8ff9ff37121518af5b34b9e4de7abbb47cMark Andrews YXDOMAIN. [RT #23591]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3079. [bug] Handle isc_event_allocate failures in t_tasks.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3078. [func] Added a new include file with function typedefs
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson for the DLZ "dlopen" driver. [RT #23629]
f620c5e527746a2ec3d90a11d21abd8a114746dfTatuya JINMEI 神明達哉3077. [bug] zone.c:zone_refreshkeys() incorrectly called
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dns_zone_attach(), use zone->irefs instead. [RT #23303]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson dnssec-keyfromlabel sets the default TTL of the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson key. When possible, automatic signing will use that
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson TTL when the key is published. [RT #23304]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistent
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 timestamp when determining which keys are active.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3074. [bug] Make the adb cache read through for zone data and
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 glue learn for zone named is authoritative for.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3073. [bug] managed-keys changes were not properly being recorded.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3071. [bug] has_nsec could be used uninitialized in
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 update.c:next_active. [RT #20256]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3070. [bug] dnssec-signzone potential NULL pointer dereference.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3069. [cleanup] Silence warnings messages from clang static analysis.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3068. [bug] Named failed to build with a OpenSSL without engine
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 support. [RT #23473]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3067. [bug] ixfr-from-differences {master|slave}; failed to
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 select the master/slave zones. [RT #23580]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3066. [func] The DLZ "dlopen" driver is now built by default,
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 no longer requiring a configure option. To
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 disable it, use "configure --without-dlopen".
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 Driver also supported on win32. [RT #23467]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3065. [bug] RRSIG could have time stamps too far in the future.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3064. [bug] powerpc: add sync instructions to the end of atomic
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 operations. [RT #23469]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3062. [func] Made several changes to enhance human readability
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 of DNSSEC data in dig output and in generated
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 - DNSKEY record comments are more verbose, no
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 longer used in multiline mode only
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 - multiline RRSIG records reformatted
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 - multiline output mode for NSEC3PARAM records
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 - "dig +norrcomments" suppresses DNSKEY comments
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 - "dig +split=X" breaks hex/base64 records into
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 fields of width X; "dig +nosplit" disables this.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3061. [func] New option "dnssec-signzone -D", only write out
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 generated DNSSEC records. [RT #22896]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3060. [func] New option "dnssec-signzone -X <date>" allows
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson specification of a separate expiration date
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3059. [test] Added a regression test for change #3023.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3058. [bug] Cause named to terminate at startup or rndc reconfig/
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 reload to fail, if a log file specified in the conf
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson file isn't a plain file. [RT #22771]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3057. [bug] "rndc secroots" would abort after the first error
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson and so could miss some views. [RT #23488]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3056. [func] Added support for URI resource record. [RT #23386]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3055. [placeholder]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3054. [bug] Added elliptic curve support check in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson GOST OpenSSL engine detection. [RT #23485]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3053. [bug] Under a sustained high query load with a finite
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson max-cache-size, it was possible for cache memory
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson to be exhausted and not recovered. [RT #23371]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3052. [test] Fixed last autosign test report. [RT #23256]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3051. [bug] NS records obscure DNAME records at the bottom of the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson zone if both are present. [RT #23035]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3050. [bug] The autosign system test was timing dependent.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 Wait for the initial autosigning to complete
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 before running the rest of the test. [RT #23035]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3049. [bug] Save and restore the gid when creating creating
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 named.pid at startup. [RT #23290]
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3048. [bug] Fully separate view key management. [RT #23419]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3047. [bug] DNSKEY NODATA responses not cached fixed in
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson validator.c. Tests added to dnssec system test.
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson3046. [bug] Use RRSIG original TTL to compute validated RRset
81e805888bcd4bd2a6d5c986fade6ffdf7d88a54Andreas Gustafsson and RRSIG TTL. [RT #23332]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3045. [removed] Replaced by change #3050.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3044. [bug] Hold the socket manager lock while freeing the socket.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3043. [test] Merged in the NetBSD ATF test framework (currently
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson version 0.12) for development of future unit tests.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson Use configure --with-atf to build ATF internally
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson or configure --with-atf=prefix to use an external
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson copy. [RT #23209]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3042. [bug] dig +trace could fail attempting to use IPv6
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 addresses on systems with only IPv4 connectivity.
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3041. [bug] dnssec-signzone failed to generate new signatures on
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉 ttl changes. [RT #23330]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3040. [bug] Named failed to validate insecure zones where a node
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson with a CNAME existed between the trust anchor and the
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson top of the zone. [RT #23338]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3039. [func] Redirect on NXDOMAIN support. [RT #23146]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3038. [bug] Install <dns/rpz.h>. [RT #23342]
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3037. [doc] Update COPYRIGHT to contain all the individual
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson copyright notices that cover various parts.
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3036. [bug] Check built-in zone arguments to see if the zone
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson is re-usable or not. [RT #21914]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3035. [cleanup] Simplify by using strlcpy. [RT #22521]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
b89095ba15e9163f2bacc46239d8f69d1a2b9ad3Tatuya JINMEI 神明達哉3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
4848fe4ad2c0ba6e2e69e4a2617727f8556d79a0Andreas Gustafsson3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
3026. [bug] lib/isc/httpd.c: check that we have enough space
to 10. Allow setting this in named.conf using the new
in the named.conf options. [RT #21727]
3000. [bug] More TKEY/GSS fixes:
2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
2987. [func] Improve ease of configuring TKEY/GSS updates by
zone, but the nameserver names and/or their IP
2978. [port] hpux: look for <devpoll.h> [RT #21919]
2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
2973. [bug] bind.keys.h was being removed by the "make clean"
(e.g. "%-1c"). [RT #22270]
2962. [port] win32: add more dependencies to BINDBuild.dsw.
2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
interfaces at reboot. See bin/tests/system/README
support for addzone/delzone feature (see change
new-zone-file in named.conf; this happens
2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
option at the view or options level in named.conf.
into named.conf in the appropriate view. (Note:
2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
was specified in named.conf. [RT #21416]
2903. [bug] managed-keys-directory missing from namedconf.c.
2893. [bug] Improve managed keys support. New named.conf option
2873. [bug] Canceling a dynamic update via the dns/client module
2872. [bug] Modify dns/client.c:dns_client_createx() to only
2871. [bug] Type mismatch in mem_api.c between the definition and
2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
2865. [bug] memset to zero event.data. [RT #20986]
2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
README.rfc5011 into the ARM. [RT #20899]
2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
2829. [bug] Fixed potential node inconsistency in rbtdb.c.
2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
2822. [bug] rbtdb.c:loadnode() could return the wrong result.
atomic.h is correctly installed by the architecture
(i.e., built without --enable-exportlib). [RT #20679]
named.conf: check-dup-records {ignore|warn|fail};
2794. [bug] Install <isc/namespace.h>. [RT #20677]
2791. [bug] The installation of isc-config.sh was broken.
2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
2770. [cleanup] Add log messages to resolver.c to indicate events
2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
2746. [port] hpux: address signed/unsigned expansion mismatch of
dns_rbtnode_t.nsec. [RT #20542]
validator.c. [RT #19589]
2725. [doc] Added information about the file "managed-keys.bind"
2719. [func] Skip trusted/managed keys for unsupported algorithms.
2717. [bug] named failed to update the NSEC/NSEC3 record when
2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
2711. [port] win32: Add the bin/pkcs11 tools into the full
by the named.conf option 'secure-to-insecure'.
(i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
2699. [bug] Missing lock in rbtdb.c. [RT #20037]
S_IFREG are defined after including <isc/stat.h>.
2695. [func] DHCP/DDNS - update fdwatch code for use by
2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
2679. [func] dig -k can now accept TSIG keys in named.conf
- New "inactive" date (dnssec-keygen/settime -I)
2673. [bug] The managed-keys.bind zone file could fail to
2664. [bug] create_keydata() and minimal_update() in zone.c
applications. See README.libdns. [RT #19369]
2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
2632. [func] util/kit.sh: warn if documentation appears to be out of
2628. [port] linux: Allow /var/run/named/named.pid to be opened
2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
2617. [bug] ifconfig.sh failed to emit an error message when
2616. [bug] 'host' used the nameservers from resolv.conf even
configuration text for named.conf
from a NSEC3 signed master/slave zone. [RT #19464]
2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
2590. [func] Report zone/class of "update with no effect".
2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
of "dnssec-lookaside . trust-anchor dlv.isc.org;"
plus setting a trusted-key for dlv.isc.org.
by) $sysconfdir/bind.keys. As the ISC DLV key
the bind.keys file with a key downloaded from
https://www.isc.org/solutions/dlv. [RT #18685]
2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
2548. [bug] Install iterated_hash.h. [RT #19335]
2547. [bug] openssl_link.c:mem_realloc() could reference an
2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
2538. [bug] cache/ADB memory could grow over max-cache-size,
2519. [bug] dig/host with -4 or -6 didn't work if more than two
preceded in resolv.conf. [RT #19081]
document function in <isc/radix.h>. [RT #18534]
2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
are now /var/run/named/named.pid and
/var/run/lwresd/lwresd.pid respectively.
2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
specified in named.conf doesn't seem to work with
2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
2455. [bug] Stop metadata being transferred via axfr/ixfr.
2452. [func] Improve bin/test/journalprint. [RT #18316]
epoll and /dev/poll to be selected at compile
completion event send out canceled read/write
in rbtdb.c. [RT #18455]
2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
temporary, named.conf option reserved-sockets,
assertion in acl.c. [RT #18166]
2390. [bug] dispatch.c could make a false warning on 'odd socket'.
2387. [bug] Silence compiler warnings in lib/isc/radix.c.
2385. [bug] A condition variable in socket.c could leak in
2381. [port] dlz/mysql: support multiple install layouts for
mysql. <prefix>/include/{,mysql/}mysql.h and
2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
Documentation is in the new README.pkcs11 file.
were set at both the options/view level and in
named.conf. [RT #17581]
See <isc/mem.h> for details.
2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
rbtdb.c. Implement dead node processing in zones as
lib/dns/rdata/in_1/apl_42.c. [RT #17469]
2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
addresses in acl.c. [RT #17519]
bin/named/lwdnoop.c. [RT #17476]
2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
debug/fatal messages. [RT #17501]
2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2306. [bug] Remove potential race from lib/dns/resolver.c.
2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
bin/tests/system/lwresd/lwtest.c. [RT #17474]
bin/tests/names/t_names.c. [RT #17473]
bin/nsupdate/nsupdate.c. [RT #17475]
bin/tests/timers/t_timers.c. [RT #17468]
bin/tests/dst/t_dst.c. [RT #17467]
2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
stub/slave master and journal files. [RT# 17279]
2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
2266. [bug] client.c:get_clientmctx() returned the same mctx
2257. [bug] win32: Use the full path to vcredist_x86.exe when
bindevt.dll. [RT #17159]
2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
2254. [bug] timer.c:dispatch() failed to lock timer->lock
2247. [doc] Sort doc/misc/options. [RT #17067]
2246. [bug] Make the startup of test servers (ans.pl) more
2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which