CHANGES revision d878b8d87c3f46a25ccae9f5cfe6e39af67562e0
436aad11e01e916f75e68a2e9cb89ac217a990d3Tinderbox User3327. [func] Added 'filter-aaaa-on-v6' option; this is similar
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater to 'filter-aaaa-on-v4' but applies to IPv6
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User connections. (Use "configure --enable-filter-aaaa"
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User to enable this option.) [RT #27308]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User3326. [func] Added task list statistics: task model, worker
c57668a2fbbe558c1bd21652813616f2f517c469Tinderbox User threads, quantum, tasks running, tasks ready.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3325. [func] Report cache statistics: memory use, number of
8de3f14f1c300c3e1ed99084cc03485b42c92bf1Tinderbox User nodes, number of hash buckets, hit and miss counts.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3324. [test] Add better tests for ADB stats [RT #27057]
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews3323. [func] Report the number of buckets the resolver is using.
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews3322. [func] Monitor the number of active TCP and UDP dispatches.
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews3321. [func] Monitor the number of recursive fetches and the
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews number of open sockets, and report these values in
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews the statistics channel. [RT #27054]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3320. [func] Added support for monitoring of recursing client
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User count. [RT #27009]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3319. [func] Added support for monitoring of ADB entry count and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews hash size. [RT #27057]
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews3318. [tuning] Reduce the amount of work performed while holding a
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews bucket lock when finshed with a fetch context.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3317. [func] Add ECDSA support (RFC 6605). [RT #21918]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3316. [tuning] Improved locking performance when recursing.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3315. [tuning] Use multiple dispatch objects for sending upstream
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User queries; this can improve performance on busy
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews multiprocessor systems by reducing lock contention.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User3314. [bug] The masters list could be updated while refesh_callback
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt and stub_callback were using it. [RT #26732]
16f6050f29b6b0422cee858e609f65e474e70ef2Tinderbox User3313. [protocol] Add TLSA record type. [RT #28989]
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt3312. [bug] named-checkconf didn't detect a bad dns64 clients acl.
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt3311. [bug] Abort the zone dump if zone->db is NULL in
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User zone.c:zone_gotwritehandle. [RT #29028]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3310. [test] Increase table size for mutex profiling. [RT #28809]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3309. [bug] resolver.c:fctx_finddone() was not threadsafe.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3308. [placeholder]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3307. [bug] Add missing ISC_LANG_BEGINDECLS and ISC_LANG_ENDDECLS.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3306. [bug] Improve DNS64 reverse zone performance. [RT #28563]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3305. [func] Add wire format lookup method to sdb. [RT #28563]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3304. [bug] Use hmctx, not mctx when freeing rbtdb->heaps.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3303. [bug] named could die when reloading. [RT #28606]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3302. [bug] dns_dnssec_findmatchingkeys could fail to find
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt keys if the zone name contained character that
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt required special mappings. [RT #28600]
95637507c3d47481fbf0a8a8c750a57f944f677fMark Andrews3301. [contrib] Update queryperf to build on darwin. Add -R flag
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt for non-recursive queries. [RT #28565]
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt3300. [bug] Named could die if gssapi was enabled in named.conf
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt but was not compiled in. [RT #28338]
2ae159b376dac23870d8005563c585acf85a4b5aEvan Hunt3299. [bug] Make SDB handle errors from database drivers better.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3298. [bug] Named could dereference a NULL pointer in
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews zmgr_start_xfrin_ifquota if the zone was being removed.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3297. [bug] Named could die on a malformed master file. [RT #28467]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3296. [bug] Named could die with a INSIST failure in
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User client.c:exit_check. [RT #28346]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3295. [bug] Adjust isc_time_secondsastimet range check to be more
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User portable. [RT # 26542]
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User3294. [bug] isccc/cc.c:table_fromwire failed to free alist on
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User error. [RT #28265]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3293. [func] nsupdate: list supported type. [RT #28261]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3292. [func] Log messages in the axfr stream at debug 10.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3291. [port] Fixed a build error on systems without ENOTSUP.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3290. [bug] <isc/hmacsha.h> was not being installed. [RT #28169]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3288. [bug] dlz_destroy() function wasn't correctly registered
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User by the DLZ dlopen driver. [RT #28056]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3287. [port] Update ans.pl to work with Net::DNS 0.68. [RT #28028]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3286. [bug] Managed key maintenance timer could fail to start
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson after 'rndc reconfig'. [RT #26786]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3285. [bug] val-frdataset was incorrectly disassociated in
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User proveunsecure after calling startfinddlvsep.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3284. [bug] Address race conditions with the handling of
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User3283. [bug] Raw zones with with more than 512 records in a RRset
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews failed to load. [RT #27863]
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User3282. [bug] Restrict the TTL of NS RRset to no more than that
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User of the old NS RRset when replacing it.
fd972434c29fc1169d66594e4cc7697d33036c2bTinderbox User [RT #27792] [RT #27884]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3281. [bug] SOA refresh queries could be treated as cancelled
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews despite succeeding over the loopback interface.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3280. [bug] Potential double free of a rdataset on out of memory
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews with DNS64. [RT #27762]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3279. [bug] Hold a internal reference to the zone while performing
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews a asynchronous load. Address potential memory leak
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews if the asynchronous is cancelled. [RT #27750]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3278. [bug] Make sure automatic key maintenance is started
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews when "auto-dnssec maintain" is turned on during
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews "rndc reconfig". [RT #26805]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3277. [bug] win32: isc_socket_dup is not implemented. [RT #27696]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3276. [bug] win32: ns_os_openfile failed to return NULL on
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews safe_open failure. [RT #27696]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3275. [bug] Corrected rndc -h output; the 'rndc sync -clean'
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews option had been misspelled as '-clear'. (To avoid
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews future confusion, both options now work.) [RT #27173]
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User3274. [placeholder]
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater3273. [bug] AAAA responses could be returned in the additional
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews section even when filter-aaaa-on-v4 was in use.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3272. [func] New "rndc zonestatus" command prints information
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater about the specified zone. [RT #21671]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3271. [port] darwin: mksymtbl is not always stable, loop several
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User times before giving up. mksymtbl was using non
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews portable perl to covert 64 bit hex strings. [RT #27653]
fa0326cc2cf428f67575b6ba3b97b528a31b0010Tinderbox User --- 9.9.0rc2 released ---
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3270. [bug] "rndc reload" didn't reuse existing zones correctly
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User when inline-signing was in use. [RT #27650]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3269. [port] darwin 11 and later now built threaded by default.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3268. [bug] Convert RRSIG expiry times to 64 timestamps to work
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews out the earliest expiry time. [RT #23311]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3267. [bug] Memory allocation failures could be mis-reported as
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User unexpected error. New ISC_R_UNSET result code.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3266. [bug] The maximum number of NSEC3 iterations for a
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User DNSKEY RRset was not being properly computed.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater3265. [bug] Corrected a problem with lock ordering in the
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User inline-signing code. [RT #27557]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3264. [bug] Automatic regeneration of signatures in an
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews inline-signing zone could stall when the server
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User was restarted. [RT #27344]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3263. [bug] "rndc sync" did not affect the unsigned side of an
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews inline-signing zone. [RT #27337]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3262. [bug] Signed responses were handled incorrectly by RPZ.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3261. [func] RRset ordering now defaults to random. [RT #27174]
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3260. [bug] "rrset-order cyclic" could appear not to rotate
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews for some query patterns. [RT #27170/27185]
5f7586ddbd3edd11272cdd30ed613d936129328bTinderbox User --- 9.9.0rc1 released ---
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3259. [bug] named-compilezone: Suppress "dump zone to <file>"
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User message when writing to stdout. [RT #27109]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User3258. [test] Add "forcing full sign with unreadable keys" test.
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews3257. [bug] Do not generate a error message when calling fsync()
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User in a pipe or socket. [RT #27109]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User3256. [bug] Disable empty zones for lwresd -C. [RT #27139]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User3255. [func] No longer require that a empty zones be explicitly
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews enabled or that a empty zone is disabled for
7ca715ad1587a68a531ea1cdea07515d7232567eTinderbox User RFC 1918 empty zones to be configured. [RT #27139]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3254. [bug] Set isc_socket_ipv6only() on the IPv6 control channels.
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews3253. [bug] Return DNS_R_SYNTAX when the input to a text field is
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User too long. [RT #26956]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3252. [bug] When master zones using inline-signing were
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews updated while the server was offline, the source
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews zone could fall out of sync with the signed
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater copy. They can now resynchronize. [RT #26676]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3251. [bug] Enforce a upper bound (65535 bytes) on the amount of
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater memory dns_sdlz_putrr() can allocate per record to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater prevent run away memory consumption on ISC_R_NOSPACE.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater3250. [func] 'configure --enable-developer'; turn on various
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configure options, normally off by default, that
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox User we want developers to build and test with. [RT #27103]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3249. [bug] Update log message when saving slave zones files for
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater analysis after load failures. [RT #27087]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3248. [bug] Configure options --enable-fixed-rrset and
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater --enable-exportlib were incompatible with each
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater other. [RT #27087]
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater3247. [bug] 'raw' format zones failed to preserve load order
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User breaking 'fixed' sort order. [RT #27087]
6a9d2121152c94cb9e35832126c3f2e4d18d81edTinderbox User3246. [bug] Named failed to start with a empty also-notify list.
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews3245. [bug] Don't report a error unchanged serials unless there
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater were other changes when thawing a zone with
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater ixfr-fromdifferences. [RT #26845]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User3244. [func] Added readline support to nslookup and nsupdate.
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater Also simplified nsupdate syntax to make "update"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews and "prereq" optional. [RT #24659]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User3243. [port] freebsd,netbsd,bsdi: the thread defaults were not
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews being properly set.
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox User3242. [func] Extended the header of raw-format master files to
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews include the serial number of the zone from which
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews they were generated, if different (as in the case
bf5e2127e92e52cbf661e77dd6a76e5aef43542fTinderbox User of inline-signing zones). This is to be used in
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews inline-signing zones, to track changes between the
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews unsigned and signed versions of the zone, which may
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews have different serial numbers.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User (Note: raw zonefiles generated by this version of
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User BIND are no longer compatble with prior versions.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater To generate a backward-compatible raw zonefile
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews using dnssec-signzone or named-compilezone, specify
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews output format "raw=0" instead of simply "raw".)
757ff043760e4743dda1a10e7d58349275934902Tinderbox User3241. [bug] Address race conditions in the resolver code.
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews3240. [bug] DNSKEY state change events could be missed. [RT #26874]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3239. [bug] dns_dnssec_findmatchingkeys needs to use a consistent
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater timestamp. [RT #26883]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3238. [bug] keyrdata was not being reinitialized in
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews lib/dns/rbtdb.c:iszonesecure. [RT#26913]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3237. [bug] dig -6 didn't work with +trace. [RT #26906]
757ff043760e4743dda1a10e7d58349275934902Tinderbox User3236. [bug] Backed out changes #3182 and #3202, related to
757ff043760e4743dda1a10e7d58349275934902Tinderbox User EDNS(0) fallback behavior. [RT #26416]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User3235. [func] dns_db_diffx, a extended dns_db_diff which returns
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User the generated diff and optionally writes it to a
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews journal. [RT #26386]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User3234. [bug] 'make depend' produced invalid makefiles. [RT #26830]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3233. [bug] 'rndc freeze/thaw' didn't work for inline zones.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User3232. [bug] Zero zone->curmaster before return in
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews dns_zone_setmasterswithkeys(). [RT #26732]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3231. [bug] named could fail to send a uncompressable zone.
e31cfd80616deb9781902306b34a69aa7309b6cbTinderbox User3230. [bug] 'dig axfr' failed to properly handle a multi-message
7ac34650fa344f42211d6da744ae486b0145a083Tinderbox User axfr with a serial of 0. [RT #26796]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3229. [bug] Fix local variable to struct var assignment
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews found by CLANG warning.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3228. [tuning] Dynamically grow symbol table to improve zone
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews loading performance. [RT #26523]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3227. [bug] Interim fix to make WKS's use of getprotobyname()
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews and getservbyname() self thread safe. [RT #26232]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3226. [bug] Address minor resource leakages. [RT #26624]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews3225. [bug] Silence spurious "setsockopt(517, IPV6_V6ONLY) failed"
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews messages. [RT #26507]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3224. [bug] 'rndc signing' argument parsing was broken. [RT #26684]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3223. [bug] 'task_test privilege_drop' generated false positives.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3222. [cleanup] Replace dns_journal_{get,set}_bitws with
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews dns_journal_{get,set}_sourceserial. [RT #26634]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3221. [bug] Fixed a potential coredump on shutdown due to
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater referencing fetch context after it's been freed.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews --- 9.9.0b2 released ---
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3220. [bug] Change #3186 was incomplete; dns_db_rpz_findips()
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater could fail to set the database version correctly,
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews causing an assertion failure. [RT #26180]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3219. [bug] Disable NOEDNS caching following a timeout.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3218. [security] Cache lookup could return RRSIG data associated with
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews nonexistent records, leading to an assertion
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews failure. [RT #26590]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3217. [cleanup] Fix build problem with --disable-static. [RT #26476]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3216. [bug] resolver.c:validated() was not thread-safe. [RT #26478]
c5a97a549c89d562e999d4f906b882c5a2a474e1Tinderbox User3215. [bug] 'rndc recursing' could cause a core dump. [RT #26495]
01a5c5503482fb3ba52088bf0178a7213273bf96Mark Andrews3214. [func] Add 'named -U' option to set the number of UDP
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews listener threads per interface. [RT #26485]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User3213. [doc] Clarify ixfr-from-differences behavior. [RT #25188]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User3212. [bug] rbtdb.c: failed to remove a node from the deadnodes
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User list prior to adding a reference to it leading a
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews possible assertion failure. [RT #23219]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User option prints in single-line-per-record format.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User3210. [bug] Canceling the oldest query due to recursive-client
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews overload could trigger an assertion failure. [RT #26463]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3209. [func] Add "dnssec-lookaside 'no'". [RT #24858]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater3208. [bug] 'dig -y' handle unknown tsig alorithm better.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3207. [contrib] Fixed build error in Berkeley DB DLZ module. [RT #26444]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3206. [cleanup] Add ISC information to log at start time. [RT #25484]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3205. [func] Upgrade dig's defaults to better reflect modern
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews nameserver behaviour. Enable "dig +adflag" and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews "dig +edns=0" by default. Enable "+dnssec" when
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews running "dig +trace". [RT #23497]
3a988722ad9e209ba4064604d482dc4efe0e19ebTinderbox User3204. [bug] When a master server that has been marked as
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington unreachable sends a NOTIFY, mark it reachable
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington again. [RT #25960]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews3203. [bug] Increase log level to 'info' for validation failures
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews from expired or not-yet-valid RRSIGs. [RT #21796]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3202. [bug] NOEDNS caching on timeout was too agressive.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3201. [func] 'rndc querylog' can now be given an on/off parameter
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews instead of only being used as a toggle. [RT #18351]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3200. [doc] Some rndc functions were undocumented or were
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User missing from 'rndc -h' output. [RT #25555]
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews3199. [func] When logging client information, include the name
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews being queried. [RT #25944]
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews3198. [doc] Clarified that dnssec-settime can alter keyfile
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews permissions. [RT #24866]
f7369b2881b5e63d69600adcedc8ba938303d30cTinderbox User3197. [bug] Don't try to log the filename and line number when
d6317350b1180aa4517f2e8a92fa8fbcbf904ad8Automatic Updater the config parser can't open a file. [RT #22263]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3196. [bug] nsupdate: return nonzero exit code when target zone
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington doesn't exist. [RT #25783]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3195. [cleanup] Silence "file not found" warnings when loading
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington managed-keys zone. [RT #26340]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3194. [doc] Updated RFC references in the 'empty-zones-enable'
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington documentation. [RT #25203]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3193. [cleanup] Changed MAXZONEKEYS to DNS_MAXZONEKEYS, moved to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3192. [bug] A query structure could be used after being freed.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3191. [bug] Print NULL records using "unknown" format. [RT #26392]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3190. [bug] Underflow in error handling in isc_mutexblock_init.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3189. [test] Added a summary report after system tests. [RT #25517]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3188. [bug] zone.c:zone_refreshkeys() could fail to detach
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington references correctly when errors occurred, causing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington a hang on shutdown. [RT #26372]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3187. [port] win32: support for Visual Studio 2008. [RT #26356]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington --- 9.9.0b1 released ---
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3186. [bug] Version/db mis-match in rpz code. [RT #26180]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3185. [func] New 'rndc signing' option for auto-dnssec zones:
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - 'rndc signing -list' displays the current
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington state of signing operations
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - 'rndc signing -clear' clears the signing state
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington records for keys that have fully signed the zone
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - 'rndc signing -nsec3param' sets the NSEC3
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington parameters for the zone
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington The 'rndc keydone' syntax is removed. [RT #23729]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3184. [bug] named had excessive cpu usage when a redirect zone was
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington configured. [RT #26013]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3183. [bug] Added RTLD_GLOBAL flag to dlopen call. [RT #26301]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3182. [bug] Auth servers behind firewalls which block packets
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington greater than 512 bytes may cause other servers to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington perform poorly. Now, adb retains edns information
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and caches noedns servers. [RT #23392/24964]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3181. [func] Inline-signing is now supported for master zones.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3180. [func] Local copies of slave zones are now saved in raw
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews format by default, to improve startup performance.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews 'masterfile-format text;' can be used to override
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews the default, if desired. [RT #25867]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater3179. [port] kfreebsd: build issues. [RT #26273]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater3178. [bug] A race condition introduced by change #3163 could
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater cause an assertion failure on shutdown. [RT #26271]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater3177. [func] 'rndc keydone', remove the indicator record that
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User named has finished signing the zone with the
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater corresponding key. [RT #26206]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater3176. [doc] Corrected example code and added a README to the
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater sample external DLZ module in contrib/dlz/example.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater3175. [bug] Fix how DNSSEC positive wildcard responses from a
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater NSEC3 signed zone are validated. Stop sending a
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews unnecessary NSEC3 record when generating such
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User responses. [RT #26200]
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User3174. [bug] Always compute to revoked key tag from scratch.
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User3173. [port] Correctly validate root DS responses. [RT #25726]
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User3172. [port] darwin 10.* and freebsd [89] are now built threaded by
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3171. [bug] Exclusively lock the task when adding a zone using
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User 'rndc addzone'. [RT #25600]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews --- 9.9.0a3 released ---
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User3170. [func] RPZ update:
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User - fix precedence among competing rules
c11c7b47726c02eb05e29ff7be56a3343146e396Tinderbox User - improve ARM text including documenting rule precedence
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews - try to rewrite CNAME chains until first hit
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews - new "rpz" logging channel
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews - RDATA for CNAME rules can include wildcards
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews - replace "NO-OP" named.conf policy override with
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews "PASSTHRU" and add "DISABLED" override ("NO-OP"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews is still recognized)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3169. [func] Catch db/version mis-matches when calling dns_db_*().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3168. [bug] Nxdomain redirection could trigger an assert with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a ANY query. [RT #26017]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3167. [bug] Negative answers from forwarders were not being
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews correctly tagged making them appear to not be cached.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3166. [bug] Upgrading a zone to support inline-signing failed.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3165. [bug] dnssec-signzone could generate new signatures when
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User resigning, even when valid signatures were already
c01dec514a81ecf8c17ca3ef8c3ba95e437295ebAutomatic Updater present. [RT #26025]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3164. [func] Enable DLZ modules to retrieve client information,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater so that responses can be changed depending on the
e8c42d50cdaf3a3b841074d8bf72b40ffbae2a4bTinderbox User source address of the query. [RT #25768]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3163. [bug] Use finer-grained locking in client.c to address
e20309353e6246485c521278131d3fced73d7957Tinderbox User concurrency problems with large numbers of threads.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3162. [test] start.pl: modified to allow for "named.args" in
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ns*/ subdirectory to override stock arguments to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington named. Largely from RT#26044, but no separate ticket.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3161. [bug] zone.c:del_sigs failed to always reset rdata leading
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington assertion failures. [RT #25880]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3160. [bug] When printing out a NSEC3 record in multiline form
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the newline was not being printed causing type codes
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to be run together. [RT #25873]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3159. [bug] On some platforms, named could assert on startup
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington when running in a chrooted environment without
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington /proc. [RT #25863]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3158. [bug] Recursive servers would prefer a particular UDP
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington socket instead of using all available sockets.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3157. [tuning] Reduce the time spent in "rndc reconfig" by parsing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the config file before pausing the server. [RT #21373]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3156. [placeholder]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews --- 9.9.0a2 released ---
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3155. [bug] Fixed a build failure when using contrib DLZ
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews drivers (e.g., mysql, postgresql, etc). [RT #25710]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3154. [bug] Attempting to print an empty rdataset could trigger
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews an assert. [RT #25452]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3153. [func] Extend request-ixfr to zone level and remove the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews side effect of forcing an AXFR. [RT #25156]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3152. [cleanup] Some versions of gcc and clang failed due to
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews incorrect use of __builtin_expect. [RT #25183]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3151. [bug] Queries for type RRSIG or SIG could be handled
79cea03ba823e2d3a34895f0ba91d7fb5ad799e7Automatic Updater incorrectly. [RT #21050]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3150. [func] Improved startup and reconfiguration time by
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews enabling zones to load in multiple threads. [RT #25333]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3149. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3148. [bug] Processing of normal queries could be stalled when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington forwarding a UPDATE message. [RT #24711]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3147. [func] Initial inline signing support. [RT #23657]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington --- 9.9.0a1 released ---
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3146. [test] Fixed gcc4.6.0 errors in ATF. [RT #25598]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3145. [test] Capture output of ATF unit tests in "./atf.out" if
409ba95e573b40cf36acf97dd62ee7e9c7775851Tinderbox User there were any errors while running them. [RT #25527]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3144. [bug] dns_dbiterator_seek() could trigger an assert when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington used with a nonexistent database node. [RT #25358]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3143. [bug] Silence clang compiler warnings. [RT #25174]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3142. [bug] NAPTR is class agnostic. [RT #25429]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3141. [bug] Silence spurious "zone serial (0) unchanged" messages
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews associated with empty zones. [RT #25079]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3140. [func] New command "rndc flushtree <name>" clears the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews specified name from the server cache along with
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews all names under it. [RT #19970]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3139. [test] Added tests from RFC 6234, RFC 2202, and RFC 1321
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington for the hashing algorithms (md5, sha1 - sha512, and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington their hmac counterparts). [RT #25067]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3138. [bug] Address memory leaks and out-of-order operations when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington shutting named down. [RT #25210]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3137. [func] Improve hardware scalability by allowing multiple
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater worker threads to process incoming UDP packets.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater This can significantly increase query throughput
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews on some systems. [RT #22992]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3136. [func] Add RFC 1918 reverse zones to the list of built-in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater empty zones switched on by the 'empty-zones-enable'
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater option. [RT #24990]
56effd2e3f579fd77b1fb37d47871d1bf1286bc4Automatic Updater3135. [port] FreeBSD: workaround broken IPV6_USE_MIN_MTU processing.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews See http://www.freebsd.org/cgi/query-pr.cgi?pr=158307
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3134. [bug] Improve the accuracy of dnssec-signzone's signing
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews statistics. [RT #16030]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3133. [bug] Change #3114 was incomplete. [RT #24577]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3132. [placeholder]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3131. [tuning] Improve scalability by allocating one zone task
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews per 100 zones at startup time, rather than using a
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews fixed-size task table. [RT #24406]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3130. [func] Support alternate methods for managing a dynamic
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews zone's serial number. Two methods are currently
42bee07ebb8152a6ec2f87f4790d87368c24704cAutomatic Updater defined using serial-update-method, "increment"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (default) and "unixtime". [RT #23849]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews3129. [bug] Named could crash on 'rndc reconfig' when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington allow-new-zones was set to yes and named ACLs
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews were used. [RT #22739]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews3128. [func] Inserting an NSEC3PARAM via dynamic update in an
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington auto-dnssec zone that has not been signed yet
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews will cause it to be signed with the specified NSEC3
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews parameters when keys are activated. The
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews NSEC3PARAM record will not appear in the zone until
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews it is signed, but the parameters will be stored.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3127. [bug] 'rndc thaw' will now remove a zone's journal file
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington if the zone serial number has been changed and
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ixfr-from-differences is not in use. [RT #24687]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3126. [security] Using DNAME record to generate replacements caused
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington RPZ to exit with a assertion failure. [RT #24766]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3125. [security] Using wildcard CNAME records as a replacement with
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington RPZ caused named to exit with a assertion failure.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3124. [bug] Use an rdataset attribute flag to indicate
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews negative-cache records rather than using rrtype 0;
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews this will prevent problems when that rrtype is
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews used in actual DNS packets. [RT #24777]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3123. [security] Change #2912 exposed a latent flaw in
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews dns_rdataset_totext() that could cause named to
89623368b8f662d458d9964b923050f33c5f75b0Tinderbox User crash with an assertion failure. [RT #24777]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3121. [security] An authoritative name server sending a negative
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews response containing a very large RRset could
757ff043760e4743dda1a10e7d58349275934902Tinderbox User trigger an off-by-one error in the ncache code
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews and crash named. [RT #24650]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3120. [bug] Named could fail to validate zones listed in a DLV
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews that validated insecure without using DLV and had
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews DS records in the parent zone. [RT #24631]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3119. [bug] When rolling to a new DNSSEC key, a private-type
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater record could be created and never marked complete.
22d32791e5daa0bc80335a0f10ab2de95f41ccdbTinderbox User3118. [bug] nsupdate could dump core on shutdown when using
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews SIG(0) keys. [RT #24604]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3117. [cleanup] Remove doc and parser references to the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews never-implemented 'auto-dnssec create' option.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews3116. [func] New 'dnssec-update-mode' option controls updates
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews of DNSSEC records in signed dynamic zones. Set to
1fdd58445074579ee3b65c871137a7a1740eb542Mark Andrews 'no-resign' to disable automatic RRSIG regeneration
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User while retaining the ability to sign new or changed
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User data. [RT #24533]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3115. [bug] Named could fail to return requested data when
cc5a9ce75af9870f2cb9e2bf00548c2f7e6398d6Automatic Updater following a CNAME that points into the same zone.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3114. [bug] Retain expired RRSIGs in dynamic zones if key is
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews inactive and there is no replacement key. [RT #23136]
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater3113. [doc] Document the relationship between serial-query-rate
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater and NOTIFY messages.
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater3112. [doc] Add missing descriptions of the update policy name
91faa748a27dee38f6caea461d3e87f15b93abeaTinderbox User types "ms-self", "ms-subdomain", "krb5-self" and
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User "krb5-subdomain", which allow machines to update
91faa748a27dee38f6caea461d3e87f15b93abeaTinderbox User their own records, to the BIND 9 ARM.
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews3111. [bug] Improved consistency checks for dnssec-enable and
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews dnssec-validation, added test cases to the
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews checkconf system test. [RT #24398]
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews3110. [bug] dnssec-signzone: Wrong error message could appear
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews when attempting to sign with no KSK. [RT #24369]
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews3109. [func] The also-notify option now uses the same syntax
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews as a zone's masters clause. This means it is
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews now possible to specify a TSIG key to use when
93089a352d6903b0d7845a039de4ec2df9a0e35aTinderbox User sending notifies to a given server, or to include
93089a352d6903b0d7845a039de4ec2df9a0e35aTinderbox User an explicit named masters list in an also-notfiy
93089a352d6903b0d7845a039de4ec2df9a0e35aTinderbox User statement. [RT #23508]
e8c17c74535be290abaaa160a434ed80bf0ad2feMark Andrews3108. [cleanup] dnssec-signzone: Clarified some error and
93089a352d6903b0d7845a039de4ec2df9a0e35aTinderbox User warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater code (use -P instead). [RT #20852]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater3107. [bug] dnssec-signzone: Report the correct number of ZSKs
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater when using -x. [RT #20852]
93089a352d6903b0d7845a039de4ec2df9a0e35aTinderbox User3106. [func] When logging client requests, include the name of
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User the TSIG key if any. [RT #23619]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3105. [bug] GOST support can be suppressed by "configure
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater --without-gost" [RT #24367]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3104. [bug] Better support for cross-compiling. [RT #24367]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3103. [bug] Configuring 'dnssec-validation auto' in a view
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater instead of in the options statement could trigger
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater an assertion failure in named-checkconf. [RT #24382]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3102. [func] New 'dnssec-loadkeys-interval' option configures
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater how often, in minutes, to check the key repository
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater for updates when using automatic key maintenance.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater Default is every 60 minutes (formerly hard-coded
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater to 12 hours). [RT #23744]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3101. [bug] Zones using automatic key maintenance could fail
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater to check the key repository for updates. [RT #23744]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3100. [security] Certain response policy zone configurations could
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater trigger an INSIST when receiving a query of type
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater RRSIG. [RT #24280]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3099. [test] "dlz" system test now runs but gives R:SKIPPED if
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater not compiled with --with-dlz-filesystem. [RT #24146]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3098. [bug] DLZ zones were answering without setting the AA bit.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3097. [test] Add a tool to test handling of malformed packets.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3096. [bug] Set KRB5_KTNAME before calling log_cred() in
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater dst_gssapi_acceptctx(). [RT #24004]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3095. [bug] Handle isolated reserved ports in the port range.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3094. [doc] Expand dns64 documentation.
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3093. [bug] Fix gssapi/kerberos dependencies [RT #23836]
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater3092. [bug] Signatures for records at the zone apex could go
44e3b272904bfd85556771d30cf1bc6fa539dd03Automatic Updater stale due to an incorrect timer setting. [RT #23769]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3091. [bug] Fixed a bug in which zone keys that were published
bbc0e1c4f47f101c4a64db3469352c49a49e734fTinderbox User and then subsequently activated could fail to trigger
fe84edc17e0d582cf7b4270f8df9d4742a107b1cAutomatic Updater automatic signing. [RT #22911]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3090. [func] Make --with-gssapi default [RT #23738]
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater3089. [func] dnssec-dsfromkey now supports reading keys from
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews standard input "dnssec-dsfromkey -f -". [RT# 20662]
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews3088. [bug] Remove bin/tests/system/logfileconfig/ns1/named.conf
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews and add setup.sh in order to resolve changing
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater named.conf issue. [RT #23687]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3087. [bug] DDNS updates using SIG(0) with update-policy match
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater type "external" could cause a crash. [RT #23735]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3086. [bug] Running dnssec-settime -f on an old-style key will
3040b455151b1e1173193933664b2891b6159f24Mark Andrews now force an update to the new key format even if no
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User other change has been specified, using "-P now -A now"
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater as default values. [RT #22474]
4ea3649f028ea6a1e42377082a7ccf8f789fb950Automatic Updater3085. [func] New '-R' option in dnssec-signzone forces removal
40072ce70bc4125329addb4aaa56d18a1230bc17Automatic Updater of signatures which have not yet expired but
60d5d17479b47c03b9c7c86f54269718103750b8Automatic Updater were generated by a key that no longer exists.
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User3084. [func] A new command "rndc sync" dumps pending changes in
60d5d17479b47c03b9c7c86f54269718103750b8Automatic Updater a dynamic zone to disk; "rndc sync -clean" also
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater removes the journal file after syncing. Also,
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater "rndc freeze" no longer removes journal files.
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3083. [bug] NOTIFY messages were not being sent when generating
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater a NSEC3 chain incrementally. [RT #23702]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3082. [port] strtok_r is threads only. [RT #23747]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3081. [bug] Failure of DNAME substitution did not return
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater YXDOMAIN. [RT #23591]
19dbf2e20df03f2b81ed1f347e27718084374059Automatic Updater3080. [cleanup] Replaced compile time constant by STDTIME_ON_32BITS.
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3079. [bug] Handle isc_event_allocate failures in t_tasks.
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater3078. [func] Added a new include file with function typedefs
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater for the DLZ "dlopen" driver. [RT #23629]
31a540386a9abaf681d8952f1b2cdf5c75a0ba6cAutomatic Updater3077. [bug] zone.c:zone_refreshkeys() incorrectly called
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews dns_zone_attach(), use zone->irefs instead. [RT #23303]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
7dd02af3c9350553e1d52d980a7812425b3f1295Automatic Updater dnssec-keyfromlabel sets the default TTL of the
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User key. When possible, automatic signing will use that
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox User TTL when the key is published. [RT #23304]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington3075. [bug] dns_dnssec_findzonekeys{2} used a inconsistant
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews timestamp when determining which keys are active.
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox User3074. [bug] Make the adb cache read through for zone data and
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox User glue learn for zone named is authoritative for.
fa0326cc2cf428f67575b6ba3b97b528a31b0010Tinderbox User3073. [bug] managed-keys changes were not properly being recorded.
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User3072. [bug] dns_dns64_aaaaok() potential NULL pointer dereference.
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User3071. [bug] has_nsec could be used unintialised in
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User update.c:next_active. [RT #20256]
d642d3857129678797a01adee14fbd70335b05a9Mark Andrews3070. [bug] dnssec-signzone potential NULL pointer dereference.
a8677ecad546c955406b341eb8344ed06768b11eTinderbox User3069. [cleanup] Silence warnings messages from clang static analysis.
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User3068. [bug] Named failed to build with a OpenSSL without engine
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews support. [RT #23473]
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews3067. [bug] ixfr-from-differences {master|slave}; failed to
789875a1bd6d50c00d3bd883cad17ead1d3c21cdMark Andrews select the master/slave zones. [RT #23580]
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews3066. [func] The DLZ "dlopen" driver is now built by default,
08a1e53c738c425390557196a2ba5039e5afd364Mark Andrews no longer requiring a configure option. To
7e8129652903780873ba91f379f9ffca1f59773cMark Andrews disable it, use "configure --without-dlopen".
7e8129652903780873ba91f379f9ffca1f59773cMark Andrews Driver also supported on win32. [RT #23467]
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews3065. [bug] RRSIG could have time stamps too far in the future.
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews3064. [bug] powerpc: add sync instructions to the end of atomic
3040b455151b1e1173193933664b2891b6159f24Mark Andrews operations. [RT #23469]
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews3063. [contrib] More verbose error reporting from DLZ LDAP. [RT #23402]
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User3062. [func] Made several changes to enhance human readability
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews of DNSSEC data in dig output and in generated
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt - DNSKEY record comments are more verbose, no
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt longer used in multiline mode only
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt - multiline RRSIG records reformatted
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt - multiline output mode for NSEC3PARAM records
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt - "dig +norrcomments" suppresses DNSKEY comments
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt - "dig +split=X" breaks hex/base64 records into
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt fields of width X; "dig +nosplit" disables this.
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User3061. [func] New option "dnssec-signzone -D", only write out
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User generated DNSSEC records. [RT #22896]
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt3060. [func] New option "dnssec-signzone -X <date>" allows
b123be91958e0bc58a10c165be64d47661199e3bEvan Hunt specification of a separate expiration date
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3059. [test] Added a regression test for change #3023.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3058. [bug] Cause named to terminate at startup or rndc reconfig/
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater reload to fail, if a log file specified in the conf
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater file isn't a plain file. [RT #22771]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3057. [bug] "rndc secroots" would abort after the first error
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater and so could miss some views. [RT #23488]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater3056. [func] Added support for URI resource record. [RT #23386]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3055. [placeholder]
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews3054. [bug] Added elliptic curve support check in
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews GOST OpenSSL engine detection. [RT #23485]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews3053. [bug] Under a sustained high query load with a finite
5b56652059e2c22185a0b2bb1f5e58eb89a44426Tinderbox User max-cache-size, it was possible for cache memory
ff62ab3c2e6274f19190ded15548c723d38bbbe3Automatic Updater to be exhausted and not recovered. [RT #23371]
e20309353e6246485c521278131d3fced73d7957Tinderbox User3052. [test] Fixed last autosign test report. [RT #23256]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3051. [bug] NS records obsure DNAME records at the bottom of the
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews zone if both are present. [RT #23035]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User3050. [bug] The autosign system test was timing dependent.
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User Wait for the initial autosigning to complete
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater before running the rest of the test. [RT #23035]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3049. [bug] Save and restore the gid when creating creating
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews named.pid at startup. [RT #23290]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3048. [bug] Fully separate view key mangement. [RT #23419]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3047. [bug] DNSKEY NODATA responses not cached fixed in
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews validator.c. Tests added to dnssec system test.
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3046. [bug] Use RRSIG original TTL to compute validated RRset
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews and RRSIG TTL. [RT #23332]
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3045. [removed] Replaced by change #3050.
b30ec46fec40a1b246f7965fbcd341fc6cfd1cc1Mark Andrews3044. [bug] Hold the socket manager lock while freeing the socket.
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews version 0.12) for development of future unit tests.
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews Use configure --with-atf to build ATF internally
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews or configure --with-atf=prefix to use an external
95c3a5e116c1da135f669c3f15398172fac6279dMark Andrews copy. [RT #23209]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt3042. [bug] dig +trace could fail attempting to use IPv6
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User addresses on systems with only IPv4 connectivity.
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User3041. [bug] dnssec-signzone failed to generate new signatures on
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User ttl changes. [RT #23330]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3040. [bug] Named failed to validate insecure zones where a node
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with a CNAME existed between the trust anchor and the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater top of the zone. [RT #23338]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3039. [func] Redirect on NXDOMAIN support. [RT #23146]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3038. [bug] Install <dns/rpz.h>. [RT #23342]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3037. [doc] Update COPYRIGHT to contain all the individual
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User copyright notices that cover various parts.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3036. [bug] Check built-in zone arguments to see if the zone
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater is re-usable or not. [RT #21914]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3035. [cleanup] Simplify by using strlcpy. [RT #22521]
88d58d79c5bc7ce3c20a42461a5070116c736836Automatic Updater3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
7f814b8b164ae04916a8487cdc5e88ee3ff51a58Automatic Updater3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
48b36fa08b2b5bc0d552dc2a4425b3f7007b3d59Automatic Updater3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3029. [bug] isc_netaddr_format() handle a zero sized buffer.
48b36fa08b2b5bc0d552dc2a4425b3f7007b3d59Automatic Updater3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt catch NULL pointer dereferences before they happen.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3026. [bug] lib/isc/httpd.c: check that we have enough space
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater after calling grow_headerspace() and if not
1959fd489a8832e4e3d311670f64ae18e5d08156Automatic Updater re-call grow_headerspace() until we do. [RT #22521]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3025. [bug] Fixed a possible deadlock due to zone resigning.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3024. [func] RTT Banding removed due to minor security increase
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User but major impact on resolver latency. [RT #23310]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User3023. [bug] Named could be left in an inconsistent state when
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews receiving multiple AXFR response messages that were
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews not all TSIG-signed. [RT #23254]
8bc194b266a17f89e6c54469d4dfbb408070f39eMark Andrews3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
560d6da48f066000541dd43f5d407644dee12bebTinderbox User3021. [bug] Change #3010 was incomplete. [RT #22296]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3020. [bug] auto-dnssec failed to correctly update the zone when
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater changing the DNSKEY RRset. [RT #23232]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater3019. [test] Test: check apex NSEC3 records after adding DNSKEY
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User record via UPDATE. [RT #23229]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
3040b455151b1e1173193933664b2891b6159f24Mark Andrews if a zone may need to be re-signed. [RT #23120]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews3017. [doc] dnssec-keyfromlabel -I was not properly documented.
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews3014. [placeholder]
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont3013. [bug] The DNS64 ttl was not always being set as expected.
4dca64bb8991502db368028aeeba2f832d3b971dAutomatic Updater3012. [bug] Remove DNSKEY TTL change pairs before generating
e5bf83fe0bbca838a0749e9071bd76d9ee0fb59bFrancis Dupont signing records for any remaining DNSKEY changes.
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater3011. [func] Change the default query timeout from 30 seconds
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater to 10. Allow setting this in named.conf using the new
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater 'resolver-query-timeout' option, which specifies a max
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater time in seconds. 0 means 'default' and anything longer
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater than 30 will be silently set to 30. [RT #22852]
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
7169f76a893666eb20fc7750782e7f411db742d6Tinderbox User for refreshing managed-keys. [RT #22296]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater3009. [bug] clients-per-query code didn't work as expected with
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater particular query patterns. [RT #22972]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater --- 9.8.0b1 released ---
2ba8f584b97cbab864570e38fd26b8cb90961428Tinderbox User3008. [func] Response policy zones (RPZ) support. [RT #21726]
ead8aa3182c5805fccb6c7c1636cede6a24a5fc1Automatic Updater3007. [bug] Named failed to preserve the case of domain names in
3040b455151b1e1173193933664b2891b6159f24Mark Andrews rdata which is not compressible when writing master
2ba8f584b97cbab864570e38fd26b8cb90961428Tinderbox User files. [RT #22863]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt3006. [func] Allow dynamically generated TSIG keys to be preserved
3040b455151b1e1173193933664b2891b6159f24Mark Andrews across restarts of named. Initially this is for
2ba8f584b97cbab864570e38fd26b8cb90961428Tinderbox User TSIG keys generated using GSSAPI. [RT #22639]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3005. [port] Solaris: Work around the lack of
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User gsskrb5_register_acceptor_identity() by setting
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the KRB5_KTNAME environment variable to the
e20309353e6246485c521278131d3fced73d7957Tinderbox User contents of tkey-gssapi-keytab. Also fixed
3040b455151b1e1173193933664b2891b6159f24Mark Andrews test errors on MacOSX. [RT #22853]
665ba746c0585088d0c314dcfc4671aa2c7b2dc1Automatic Updater3004. [func] DNS64 reverse support. [RT #22769]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater3003. [experimental] Added update-policy match type "external",
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater enabling named to defer the decision of whether to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater allow a dynamic update to an external daemon.
50fa300826799727204b93cbe63bebc341c5eadeTinderbox User (Contributed by Andrew Tridgell.) [RT #22758]
da82e232161d67b77df2d67898bdac693f647be1Automatic Updater3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews3001. [func] Added a default trust anchor for the root zone, which
e171a4137c6ba348957e61b7c4c3541493c0da02Automatic Updater can be switched on by setting "dnssec-validation auto;"
c53a6f37deaa396660adb6a4ca600c4a58adfd3fAutomatic Updater in the named.conf options. [RT #21727]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater3000. [bug] More TKEY/GSS fixes:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - nsupdate can now get the default realm from
19ad308d84cbf446a144e5a91f2032389a9d65c1Tinderbox User the user's Kerberos principal
19ad308d84cbf446a144e5a91f2032389a9d65c1Tinderbox User - corrected gsstest compilation flags
b3386fba31414344f38f0c30849c056dceb22dceTinderbox User - improved documentation
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater - fixed some NULL dereferences
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2999. [func] Add GOST support (RFC 5933). [RT #20639]
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox User to the task api. [RT #22776]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2997. [func] named -V now reports the OpenSSL and libxml2 verions
6671e343b8c7e44ac10a7900fde59555fbc71571Automatic Updater it was compiled against. [RT #22687]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2996. [security] Temporarily disable SO_ACCEPTFILTER support.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2995. [bug] The Kerberos realm was not being correctly extracted
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater from the signer's identity. [RT #22770]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
99c231a3bd27893583204cd0a3e3103dc78dbc28Tinderbox User do not use threads on earlier versions. Also kill
4104e236f71eb5108fcfda6711878a97f6f4a8e7Automatic Updater the unproven-pthreads, mit-pthreads, and ptl2 support.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2993. [func] Dynamically grow adb hash tables. [RT #21186]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater for looking at a secure delegation. [RT #22059]
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark Andrews2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark Andrews dynamic zones. [RT #22365]
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater2990. [bug] 'dnssec-settime -S' no longer tests prepublication
8e9f3b69914ee02a80b87c97b1f8093edb3e9ae0Automatic Updater interval validity when the interval is set to 0.
af9cf290cea6ada6ce27b51c724ab77ad5d73fa0Tinderbox User2989. [func] Added support for writable DLZ zones. (Contributed
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User by Andrew Tridgell of the Samba project.) [RT #22629]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
50fa300826799727204b93cbe63bebc341c5eadeTinderbox User of external DLZ drivers that can be loaded as
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater shared objects at runtime rather than linked with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater named. Currently this is switched on via a
e20309353e6246485c521278131d3fced73d7957Tinderbox User compile-time option, "configure --with-dlz-dlopen".
e20309353e6246485c521278131d3fced73d7957Tinderbox User Note: the syntax for configuring DLZ zones
e20309353e6246485c521278131d3fced73d7957Tinderbox User is likely to be refined in future releases.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews (Contributed by Andrew Tridgell of the Samba
e628576d3b3d91c8954679077f4c208f1e43b433Automatic Updater project.) [RT #22629]
e628576d3b3d91c8954679077f4c208f1e43b433Automatic Updater2987. [func] Improve ease of configuring TKEY/GSS updates by
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews adding a "tkey-gssapi-keytab" option. If set,
3040b455151b1e1173193933664b2891b6159f24Mark Andrews updates will be allowed with any key matching
9d80d23172c30fd63e5046a7e69b8445e564ff31Automatic Updater a principal in the specified keytab file.
1f4c645185bd8fc70048e0a69eee46193a284e5cTinderbox User "tkey-gssapi-credential" is no longer required
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews and is expected to be deprecated. (Contributed
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews by Andrew Tridgell of the Samba project.)
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2986. [func] Add new zone type "static-stub". It's like a stub
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews zone, but the nameserver names and/or their IP
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews addresses are statically configured. [RT #21474]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2985. [bug] Add a regression test for change #2896. [RT #21324]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2984. [bug] Don't run MX checks when the target of the MX record
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews is ".". [RT #22645]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews --- 9.8.0a1 released ---
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2982. [bug] Reference count dst keys. dst_key_attach() can be used
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews increment the reference count.
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User Note: dns_tsigkey_createfromkey() callers should now
3040b455151b1e1173193933664b2891b6159f24Mark Andrews always call dst_key_free() rather than setting it
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User to NULL on success. [RT #22672]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2980. [bug] named didn't properly handle UPDATES that changed the
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User TTL of the NSEC3PARAM RRset. [RT #22363]
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2979. [bug] named could deadlock during shutdown if two
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User "rndc stop" commands were issued at the same
61932ed91732417e05c8c6fd335acf1be896c778Mark Andrews time. [RT #22108]
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2978. [port] hpux: look for <devpoll.h> [RT #21919]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2977. [bug] 'nsupdate -l' report if the session key is missing.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2976. [bug] named could die on exit after negotiating a GSS-TSIG
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User key. [RT #22573]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
e80c7005e3d59dfeb04dad186d36f3c15622954cTinderbox User wrong lock which could lead to server deadlock.
08190bd4d89153cee463b34f9233ad6dd88965fcMark Andrews2974. [bug] Some valid UPDATE requests could fail due to a
08190bd4d89153cee463b34f9233ad6dd88965fcMark Andrews consistency check examining the existing version
08190bd4d89153cee463b34f9233ad6dd88965fcMark Andrews of the zone rather than the new version resulting
08190bd4d89153cee463b34f9233ad6dd88965fcMark Andrews from the UPDATE. [RT #22413]
08190bd4d89153cee463b34f9233ad6dd88965fcMark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User at the end of configure resulting in build failures
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User where there is very old version of perl installed.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews Move it to "make maintainer-clean". [RT #22230]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2972. [bug] win32: address windows socket errors. [RT #21906]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2971. [bug] Fixed a bug that caused journal files not to be
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews compacted on Windows systems as a result of
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews non-POSIX-compliant rename() semantics. [RT #22434]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2970. [security] Adding a NO DATA negative cache entry failed to clear
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews any matching RRSIG records. A subsequent lookup of
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews of NO DATA cache entry could trigger a INSIST when the
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews unexpected RRSIG was also returned with the NO DATA
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews cache entry.
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews CVE-2010-3613, VU#706148. [RT #22288]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2969. [security] Fix acl type processing so that allow-query works
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User in options and view statements. Also add a new
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater set of tests to verify proper functioning.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater CVE-2010-3615, VU#510208. [RT #22418]
48dfee71508886d86fe8fb12f91961b5daf3141dMark Andrews2968. [security] Named could fail to prove a data set was insecure
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User before marking it as insecure. One set of conditions
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User that can trigger this occurs naturally when rolling
8c9c79e5fea0cb698026a74821695907c8312a46Mark Andrews DNSKEY algorithms.
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User CVE-2010-3614, VU#837744. [RT #22309]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2967. [bug] 'host -D' now turns on debugging messages earlier.
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater2966. [bug] isc_print_vsnprintf() failed to check if there was
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater space available in the buffer when adding a left
3040b455151b1e1173193933664b2891b6159f24Mark Andrews justified character with a non zero width,
3040b455151b1e1173193933664b2891b6159f24Mark Andrews (e.g. "%-1c"). [RT #22270]
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews2965. [func] Test HMAC functions using test data from RFC 2104 and
6025cbbe8408f4b09d53d5ec1e95cb6da97e0a8dTinderbox User RFC 4634. [RT #21702]
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews2964. [placeholder]
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews2963. [security] The allow-query acl was being applied instead of the
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews allow-query-cache acl to cache lookups. [RT #22114]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2962. [port] win32: add more dependencies to BINDBuild.dsw.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2961. [bug] Be still more selective about the non-authoritative
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington answers we apply change 2748 to. [RT #22074]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2960. [func] Check that named accepts non-authoritative answers.
166c467a9414778bdd0f2a1e4a32220843c0fde3Tinderbox User2959. [func] Check that named starts with a missing masterfile.
e007e3e5b0316c6c05698a71101885743aca22bdAutomatic Updater2958. [bug] named failed to start with a missing master file.
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2957. [bug] entropy_get() and entropy_getpseudo() failed to match
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews the API for RAND_bytes() and RAND_pseudo_bytes()
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox User respectively. [RT #21962]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2955. [func] Provide more detail in the recursing log. [RT #22043]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews build_sqldbinstance failure. [RT #21623]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2953. [bug] Silence spurious "expected covering NSEC3, got an
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews exact match" message when returning a wildcard
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews no data response. [RT #21744]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2952. [port] win32: named-checkzone and named-checkconf failed
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews to initialise winsock. [RT #21932]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2951. [bug] named failed to generate a correct signed response
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews in a optout, delegation only zone with no secure
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews delegations. [RT #22007]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2950. [bug] named failed to perform a SOA up to date check when
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews falling back to TCP on UDP timeouts when
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews ixfr-from-differences was set. [RT #21595]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2949. [bug] dns_view_setnewzones() contained a memory leak if
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews it was called multiple times. [RT #21942]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2948. [port] MacOS: provide a mechanism to configure the test
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews interfaces at reboot. See bin/tests/system/README
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2947. [placeholder]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2946. [doc] Document the default values for the minimum and maximum
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews zone refresh and retry values in the ARM. [RT #21886]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2945. [doc] Update empty-zones list in ARM. [RT #21772]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2944. [maint] Remove ORCHID prefix from built in empty zones.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2943. [func] Add support to load new keys into managed zones
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington without signing immediately with "rndc loadkeys".
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Add support to link keys with "dnssec-keygen -S"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and "dnssec-settime -S". [RT #21351]
bbf7c3fd96ae5e02cb84743c581862e35327032aAutomatic Updater2942. [contrib] zone2sqlite failed to setup the entropy sources.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2941. [bug] sdb and sdlz (dlz's zone database) failed to support
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User DNAME at the zone apex. [RT #21610]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2940. [port] Remove connection aborted error message on
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews Windows. [RT #21549]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2939. [func] Check that named successfully skips NSEC3 records
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater that fail to match the NSEC3PARAM record currently
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater in use. [RT# 21868]
95cfad51a3f71246d263af79a7861a6821f7a0beAutomatic Updater2938. [bug] When generating signed responses, from a signed zone
61932ed91732417e05c8c6fd335acf1be896c778Mark Andrews that uses NSEC3, named would use a uninitialised
3040b455151b1e1173193933664b2891b6159f24Mark Andrews pointer if it needed to skip a NSEC3 record because
e80c7005e3d59dfeb04dad186d36f3c15622954cTinderbox User it didn't match the selected NSEC3PARAM record for
e135e3c4b1f4f986f00997f5ad5866effb203139Tinderbox User zone. [RT# 21868]
0e91f17da8a29086876a88962e0a3482094b6057Evan Hunt2937. [bug] Worked around an apparent race condition in over
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews memory conditions. Without this fix a DNS cache DB or
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater ADB could incorrectly stay in an over memory state,
99c231a3bd27893583204cd0a3e3103dc78dbc28Tinderbox User effectively refusing further caching, which
3040b455151b1e1173193933664b2891b6159f24Mark Andrews subsequently made a BIND 9 caching server unworkable.
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater This fix prevents this problem from happening by
6fd5f289d8455283fad33d1051e6fbaa3bec43d5Tinderbox User polling the state of the memory context, rather than
08d53af7d51409036462fa80fb1bde7a8c2ac123Automatic Updater making a copy of the state, which appeared to cause
08d53af7d51409036462fa80fb1bde7a8c2ac123Automatic Updater a race. This is a "workaround" in that it doesn't
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater solve the possible race per se, but several experiments
ec7751119a08c6a7250f3187beed69a8b836d349Tinderbox User proved this change solves the symptom. Also, the
6fd5f289d8455283fad33d1051e6fbaa3bec43d5Tinderbox User polling overhead hasn't been reported to be an issue.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews This bug should only affect a caching server that
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater specifies a finite max-cache-size. It's also quite
5ecad47f69b3fd945472ab2900a9ff826a7ce2f6Automatic Updater likely that the bug happens only when enabling threads,
07d9d0dbcc0c79deb3c34f4a8af05ac68a6800e4Mark Andrews but it's not confirmed yet. [RT #21818]
a66012b52c20200f118781463db4e4ee44454298Automatic Updater2936. [func] Improved configuration syntax and multiple-view
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt support for addzone/delzone feature (see change
3040b455151b1e1173193933664b2891b6159f24Mark Andrews #2930). Removed "new-zone-file" option, replaced
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews with "allow-new-zones (yes|no)". The new-zone-file
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater for each view is now created automatically, with
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User a filename generated from a hash of the view name.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User It is no longer necessary to "include" the
e135e3c4b1f4f986f00997f5ad5866effb203139Tinderbox User new-zone-file in named.conf; this happens
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User automatically. Zones that were not added via
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater "rndc addzone" can no longer be removed with
2fd1e3918971180155c10d09454a277f015daecaAutomatic Updater "rndc delzone". [RT #19447]
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User2935. [bug] nsupdate: improve 'file not found' error message.
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User2933. [bug] 'dig +nsid' used stack memory after it went out of
18920d790825d96ca3943aa2dcb6eb80dc611c5fTinderbox User scope. This could potentially result in a unknown,
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User potentially malformed, EDNS option being sent instead
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of the desired NSID option. [RT #21781]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2932. [cleanup] Corrected a numbering error in the "dnssec" test.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2931. [bug] Temporarily and partially disable change 2864
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater because it would cause infinite attempts of RRSIG
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater queries. This is an urgent care fix; we'll
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User revisit the issue and complete the fix later.
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2930. [experimental] New "rndc addzone" and "rndc delzone" commads
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User allow dynamic addition and deletion of zones.
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User To enable this feature, specify a "new-zone-file"
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User option at the view or options level in named.conf.
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater Zone configuration information for the new zones
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User will be written into that file. To make the new
6a9d2121152c94cb9e35832126c3f2e4d18d81edTinderbox User zones persist after a restart, "include" the file
08190bd4d89153cee463b34f9233ad6dd88965fcMark Andrews into named.conf in the appropriate view. (Note:
85b52a5959291f5014442814488ccb267cdea369Tinderbox User This feature is not yet documented, and its syntax
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is expected to change.) [RT #19447]
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews2929. [bug] Improved handling of GSS security contexts:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - added LRU expiration for generated TSIGs
e062b72f783cdb436a1a57a630bdff471dbb3038Mark Andrews - added the ability to use a non-default realm
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater - added new "realm" keyword in nsupdate
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - limited lifetime of generated keys to 1 hour
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater or the lifetime of the context (whichever is
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2928. [bug] Be more selective about the non-authoritative
85b52a5959291f5014442814488ccb267cdea369Tinderbox User answer we apply change 2748 to. [RT #21594]
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2927. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2926. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2925. [bug] Named failed to accept uncachable negative responses
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater from insecure zones. [RT# 21555]
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater2924. [func] 'rndc secroots' dump a combined summary of the
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User current managed keys combined with trusted keys.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2923. [bug] 'dig +trace' could drop core after "connection
52cfbde0bd391cfb37e3c1a1b460c16ba6bf1a73Automatic Updater timeout". [RT #21514]
5f7586ddbd3edd11272cdd30ed613d936129328bTinderbox User2922. [contrib] Update zkt to version 1.0.
4fda24d843edac463c98785ec0c850d912592dc1Tinderbox User2921. [bug] The resolver could attempt to destroy a fetch context
27c3c21f41520e8d6336d80a8094389e321cb6d2Mark Andrews too soon. [RT #19878]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
4fda24d843edac463c98785ec0c850d912592dc1Tinderbox User to IPv4 clients. New acl 'filter-aaaa' (default any).
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2917. [func] Virtual time test framework. [RT #20801]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2916. [func] Add framework to use IPv6 in tests.
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2915. [cleanup] Be smarter about which objects we attempt to compile
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater based on configure options. [RT #21444]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2914. [bug] Make the "autosign" system test more portable.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2913. [func] Add pkcs#11 system tests. [RT #20784]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2912. [func] Windows clients don't like UPDATE responses that clear
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews the zone section. [RT #20986]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2911. [bug] dnssec-signzone didn't handle out of zone records well.
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
cd839f5cf5f84cf163f55ff05cb88ce37efd24d1Automatic Updater2909. [bug] named-checkconf -p could die if "update-policy local;"
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews was specified in named.conf. [RT #21416]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2908. [bug] It was possible for re-signing to stop after removing
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt a DNSKEY. [RT #21384]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2907. [bug] The export version of libdns had undefined references.
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2905. [port] aix: set use_atomic=yes with native compiler.
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater2904. [bug] When using DLV, sub-zones of the zones in the DLV,
3040b455151b1e1173193933664b2891b6159f24Mark Andrews could be incorrectly marked as insecure instead of
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater secure leading to negative proofs failing. This was
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater a unintended outcome from change 2890. [RT# 21392]
f9119ad8f6114b2255e7545bf5cd187f4db0a89bAutomatic Updater2903. [bug] managed-keys-directory missing from namedconf.c.
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater2902. [func] Add regression test for change 2897. [RT #21040]
c95f536d78842fbc8ebcef653d88e1f2270054f8Automatic Updater2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2900. [bug] The placeholder negative caching element was not
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User properly constructed triggering a INSIST in
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User dns_ncache_towire(). [RT #21346]
45c349c278fd83acd4dcb91eec3482401a623e47Automatic Updater2899. [port] win32: Support linking against OpenSSL 1.0.0.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2898. [bug] nslookup leaked memory when -domain=value was
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews specified. [RT #21301]
bf8c3776f1bf1a1270e5e0443ae5a8df022632a8Mark Andrews2897. [bug] NSEC3 chains could be left behind when transitioning
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews to insecure. [RT #21040]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2896. [bug] "rndc sign" failed to properly update the zone
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews when adding a DNSKEY for publication only. [RT #21045]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2895. [func] genrandom: add support for the generation of multiple
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews files. [RT #20917]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2893. [bug] Improve managed keys support. New named.conf option
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater managed-keys-directory. [RT #20924]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2892. [bug] Handle REVOKED keys better. [RT #20961]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2891. [maint] Update empty-zones list to match
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2890. [bug] Handle the introduction of new trusted-keys and
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater DS, DLV RRsets better. [RT #21097]
560d6da48f066000541dd43f5d407644dee12bebTinderbox User2889. [bug] Elements of the grammar where not properly reported.
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt2888. [bug] Only the first EDNS option was displayed. [RT #21273]
560d6da48f066000541dd43f5d407644dee12bebTinderbox User2887. [bug] Report the keytag times in UTC in the .key file,
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews local time is presented as a comment within the
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User comment. [RT #21223]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2886. [bug] ctime() is not thread safe. [RT #21223]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2885. [bug] Improve -fno-strict-aliasing support probing in
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater configure. [RT #21080]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2884. [bug] Insufficient validation in dns_name_getlabelsequence().
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2883. [bug] 'dig +short' failed to handle really large datasets.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2882. [bug] Remove memory context from list of active contexts
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox User before clearing 'magic'. [RT #21274]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2881. [bug] Reduce the amount of time the rbtdb write lock
e0bf4fc289705375be65c05a8fb085d514a98c97Tinderbox User is held when closing a version. [RT #21198]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User consistent. [RT #21078]
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater2878. [func] Incrementally write the master file after performing
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater a AXFR. [RT #21010]
2cdbfcdad94eba75f3f8e77343a0eefabf553b8eAutomatic Updater2877. [bug] The validator failed to skip obviously mismatching
e0bf4fc289705375be65c05a8fb085d514a98c97Tinderbox User RRSIGs. [RT #21138]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2876. [bug] Named could return SERVFAIL for negative responses
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater from unsigned zones. [RT #21131]
f42fc714eda962112e45b904d1f846c61a080114Automatic Updater2875. [bug] dns_time64_fromtext() could accept non digits.
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox User2874. [bug] Cache lack of EDNS support only after the server
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox User successfully responds to the query using plain DNS.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2873. [bug] Cancelling a dynamic update via the dns/client module
3040b455151b1e1173193933664b2891b6159f24Mark Andrews could trigger an assertion failure. [RT #21133]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2872. [bug] Modify dns/client.c:dns_client_createx() to only
d98b4b724343547314bde32a54966c8f124a5f03Mark Andrews require one of IPv4 or IPv6 rather than both.
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User2871. [bug] Type mismatch in mem_api.c between the definition and
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User the header file, causing build failure with
3040b455151b1e1173193933664b2891b6159f24Mark Andrews --enable-exportlib. [RT #21138]
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2868. [cleanup] Run "make clean" at the end of configure to ensure
e8e87ede5c36b95806c77bcd34894ad9c4b39a78Tinderbox User any changes made by configure are integrated.
e8e87ede5c36b95806c77bcd34894ad9c4b39a78Tinderbox User Use --with-make-clean=no to disable. [RT #20994]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews don't like it. [RT #20986]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2866. [bug] Windows does not like the TSIG name being compressed.
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2865. [bug] memset to zero event.data. [RT #20986]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2862. [bug] nsupdate didn't default to the parent zone when
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt updating DS records. [RT #20896]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2861. [doc] dnssec-settime man pages didn't correctly document the
3040b455151b1e1173193933664b2891b6159f24Mark Andrews inactivation time. [RT #21039]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2860. [bug] named-checkconf's usage was out of date. [RT #21039]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2859. [bug] When cancelling validation it was possible to leak
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews memory. [RT #20800]
d98b4b724343547314bde32a54966c8f124a5f03Mark Andrews2858. [bug] RTT estimates were not being adjusted on ICMP errors.
e7d35dad55e8deae14f29aabfb20d540b4b6ab3dMark Andrews2857. [bug] named-checkconf did not fail on a bad trusted key.
015f044f7f916eb18d053f2e5dcbee481425bc66Mark Andrews2856. [bug] The size of a memory allocation was not always properly
bec9d04b657e1582d2531bdc02503bebde2aa978Tinderbox User recorded. [RT #20927]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2855. [func] nsupdate will now preserve the entered case of domain
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews names in update requests it sends. [RT #20928]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2854. [func] dig: allow the final soa record in a axfr response to
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews be suppressed, dig +onesoa. [RT #20929]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
ec8755f605d7dcb2de1076040e77bc2d7ec33b4aTinderbox User2851. [doc] nslookup.1, removed <informalexample> from the docbook
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews source as it produced bad nroff. [RT #21007]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2850. [bug] If isc_heap_insert() failed due to memory shortage
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews the heap would have corrupted entries. [RT #20951]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2849. [bug] Don't treat errors from the xml2 library as fatal.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews README.rfc5011 into the ARM. [RT #20899]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2846. [bug] EOF on unix domain sockets was not being handled
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews correctly. [RT #20731]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2844. [doc] notify-delay default in ARM was wrong. It should have
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews been five (5) seconds.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews creating key files if there is a chance that the new
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews key ID will collide with an existing one after
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews either of the keys has been revoked. (To override
bbd726b86a5b0f97a192b6027958dc7b763dc48bTinderbox User this in the case of dnssec-keyfromlabel, use the -y
7a2a1b8b14fc804ac80612d7b98064095e445be5Automatic Updater option. dnssec-keygen will simply create a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater different, non-colliding key, so an override is
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater not necessary.) [RT #20838]
3a988722ad9e209ba4064604d482dc4efe0e19ebTinderbox User2842. [func] Added "smartsign" and improved "autosign" and
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews "dnssec" regression tests. [RT #20865]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2841. [bug] Change 2836 was not complete. [RT #20883]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2840. [bug] Temporary fixed pkcs11-destroy usage check.
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2839. [bug] A KSK revoked by named could not be deleted.
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2838. [placeholder]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2837. [port] Prevent Linux spurious warnings about fwrite().
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2836. [bug] Keys that were scheduled to become active could
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews be delayed. [RT #20874]
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews2835. [bug] Key inactivity dates were inadvertently stored in
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews the private key file with the outdated tag
3040b455151b1e1173193933664b2891b6159f24Mark Andrews "Unpublish" rather than "Inactive". This has been
351eca011cf38fd3272b325029afce144a9a1ebaMark Andrews fixed; however, any existing keys that had Inactive
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews dates set will now need to have them reset, using
3040b455151b1e1173193933664b2891b6159f24Mark Andrews 'dnssec-settime -I'. [RT #20868]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2834. [bug] HMAC-SHA* keys that were longer than the algorithm
d46a3a2f7c1032c947b7bfde6e08010442645139Tinderbox User digest length were used incorrectly, leading to
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User interoperability problems with other DNS
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User implementations. This has been corrected.
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews (Note: If an oversize key is in use, and
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews compatibility is needed with an older release of
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews BIND, the new tool "isc-hmac-fixup" can convert
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews the key secret to a form that will work with all
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews versions.) [RT #20751]
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
ff8ec39ce4afc2d774ce99f2386474d2c8539cd4Automatic Updater2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
3040b455151b1e1173193933664b2891b6159f24Mark Andrews to avoid redefinition in some OSs [RT 20831]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2831. [security] Do not attempt to validate or cache
3040b455151b1e1173193933664b2891b6159f24Mark Andrews out-of-bailiwick data returned with a secure
3040b455151b1e1173193933664b2891b6159f24Mark Andrews answer; it must be re-fetched from its original
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User source and validated in that context. [RT #20819]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2830. [bug] Changing the OPTOUT setting could take multiple
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater passes. [RT #20813]
9a5217f827ac0e006016745e5305b31dc0c7767fTinderbox User2829. [bug] Fixed potential node inconsistency in rbtdb.c.
9a5217f827ac0e006016745e5305b31dc0c7767fTinderbox User2828. [security] Cached CNAME or DNAME RR could be returned to clients
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews without DNSSEC validation. [RT #20737]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater being released. [RT #20740]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater was in the process of being created was not properly
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater recorded in the zone. [RT #20786]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2824. [bug] "rndc sign" was not being run by the correct task.
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2822. [bug] rbtdb.c:loadnode() could return the wrong result.
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews2821. [doc] Add note that named-checkconf doesn't automatically
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2820. [func] Handle read access failure of OpenSSL configuration
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater file more user friendly (PKCS#11 engine patch).
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2818. [cleanup] rndc could return an incorrect error code
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater when a zone was not found. [RT #20767]
8aa53dcb1d26277e8e805464bfff7bb7136f60cbAutomatic Updater2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews2816. [bug] previous_closest_nsec() could fail to return
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User data for NSEC3 nodes [RT #29730]
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2815. [bug] Exclusively lock the task when freezing a zone.
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2814. [func] Provide a definitive error message when a master
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User zone is not loaded. [RT #20757]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2813. [bug] Better handling of unreadable DNSSEC key files.
1368e4b34cef64604c874fcc40201c78e548714cTinderbox User2812. [bug] Make sure updates can't result in a zone with
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User NSEC-only keys and NSEC3 records. [RT #20748]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater output. [RT #20733]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2810. [doc] Clarified the process of transitioning an NSEC3 zone
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater to insecure. [RT #20746]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2809. [cleanup] Restored accidentally-deleted text in usage output
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User in dnssec-settime and dnssec-revoke [RT #20739]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2808. [bug] Remove the attempt to install atomic.h from lib/isc.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington atomic.h is correctly installed by the architecture
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews specific subdirectories. [RT #20722]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2807. [bug] Fixed a possible ASSERT when reconfiguring zone
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater keys. [RT #20720]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.7.0rc1 released ---
a5636b773fa05a272b6876afd99309c0b3090e2fMark Andrews2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
3040b455151b1e1173193933664b2891b6159f24Mark Andrews when it had changed. [RT #20703]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2805. [bug] Fixed namespace problems encountered when building
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews external programs using non-exported BIND9 libraries
3040b455151b1e1173193933664b2891b6159f24Mark Andrews (i.e., built without --enable-exportlib). [RT #20679]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2804. [bug] Send notifies when a zone is signed with "rndc sign"
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrews or as a result of a scheduled key change. [RT #20700]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews and genrandom under windows. [RT #20670]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
ec7751119a08c6a7250f3187beed69a8b836d349Tinderbox User2801. [func] Detect and report records that are different according
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to DNSSEC but are semantically equal according to plain
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User DNS. Apply plain DNS comparisons rather than DNSSEC
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User comparisons when processing UPDATE requests.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User dnssec-signzone now removes such semantically duplicate
3040b455151b1e1173193933664b2891b6159f24Mark Andrews records prior to signing the RRset.
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater named-checkzone -r {ignore|warn|fail} (default warn)
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater named-compilezone -r {ignore|warn|fail} (default warn)
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User named.conf: check-dup-records {ignore|warn|fail};
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt2800. [func] Reject zones which have NS records which refer to
3040b455151b1e1173193933664b2891b6159f24Mark Andrews CNAMEs, DNAMEs or don't have address record (class IN
3040b455151b1e1173193933664b2891b6159f24Mark Andrews only). Reject UPDATEs which would cause the zone
c5f7f6aa6c51d35353a9485b32abbabfe8358b4eMark Andrews to fail the above checks if committed. [RT #20678]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2799. [cleanup] Changed the "secure-to-insecure" option to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "dnssec-secure-to-insecure", and "dnskey-ksk-only"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2798. [bug] Addressed bugs in managed-keys initialization
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and rollover. [RT #20683]
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User2797. [bug] Don't decrement the dispatch manager's maxbuffers.
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User2796. [bug] Missing dns_rdataset_disassociate() call in
3f68e9c0e5a6ce475d15eef04bfed9b08a22afa9Tinderbox User dns_nsec3_delnsec3sx(). [RT #20681]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2795. [cleanup] Add text to differentiate "update with no effect"
3040b455151b1e1173193933664b2891b6159f24Mark Andrews log messages. [RT #18889]
c5f7f6aa6c51d35353a9485b32abbabfe8358b4eMark Andrews2794. [bug] Install <isc/namespace.h>. [RT #20677]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2793. [func] Add "autosign" and "metadata" tests to the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington automatic tests. [RT #19946]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2792. [func] "filter-aaaa-on-v4" can now be set in view
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington options (if compiled in). [RT #20635]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2791. [bug] The installation of isc-config.sh was broken.
63654fea53d6a58a65112234bc8d0c322e0c81b5Automatic Updater2790. [bug] Handle DS queries to stub zones. [RT #20440]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2788. [bug] dnssec-signzone could sign with keys that were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater not requested [RT #20625]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2787. [bug] Spurious log message when zone keys were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dynamically reconfigured. [RT #20659]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2786. [bug] Additional could be promoted to answer. [RT #20663]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User --- 9.7.0b3 released ---
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2785. [bug] Revoked keys could fail to self-sign [RT #20652]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2784. [bug] TC was not always being set when required glue was
551271d8198ae06e37edf5da519d8ee153eeac0fTinderbox User dropped. [RT #20655]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
fedd407a76adfdd745eb7d2461673693c6f9fea9Mark Andrews buffer size of 512 or less. [RT #20654]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2782. [port] win32: use getaddrinfo() for hostname lookups.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2781. [bug] Inactive keys could be used for signing. [RT #20649]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2780. [bug] dnssec-keygen -A none didn't properly unset the
fedd407a76adfdd745eb7d2461673693c6f9fea9Mark Andrews activation date in all cases. [RT #20648]
b6561016dc8a813bfd91cef5b876b3dfc3f08ffaTinderbox User2779. [bug] Dynamic key revocation could fail. [RT #20644]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2778. [bug] dnssec-signzone could fail when a key was revoked
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User without deleting the unrevoked version. [RT #20638]
80f05de86cd3cd8e4a4215c4501643891b942dafTinderbox User2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2776. [bug] Change #2762 was not correct. [RT #20647]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrews in dnssec-keyfromlabel. [RT #20643]
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User2774. [bug] Existing cache DB wasn't being reused after
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User reconfiguration. [RT #20629]
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User2773. [bug] In autosigned zones, the SOA could be signed
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User with the KSK. [RT #20628]
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2772. [security] When validating, track whether pending data was from
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews the additional section or not and only return it if
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews validates as secure. [RT #20438]
cc17f4a672fc4ce67327902dd797c4465f12c4c9Mark Andrews2771. [bug] dnssec-signzone: DNSKEY records could be
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrews corrupted when importing from key files [RT #20624]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt2770. [cleanup] Add log messages to resolver.c to indicate events
3040b455151b1e1173193933664b2891b6159f24Mark Andrews causing FORMERR responses. [RT #20526]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2769. [cleanup] Change #2742 was incomplete. [RT #19589]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater2767. [bug] named could crash on startup if a zone was
82447d835d3ff5c658749b4e9b4f66166407b3eaAutomatic Updater configured with auto-dnssec and there was no
551271d8198ae06e37edf5da519d8ee153eeac0fTinderbox User key-directory. [RT #20615]
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews2766. [bug] isc_socket_fdwatchpoke() should only update the
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater socketmgr state if the socket is not pending on a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater read or write. [RT #20603]
551271d8198ae06e37edf5da519d8ee153eeac0fTinderbox User2765. [bug] Skip masters for which the TSIG key cannot be found.
183b6c7fca54001820078f324d102fc33e64bbc6Automatic Updater2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
e130ab53e992670e2a2ecf043976ac09f21358d1Automatic Updater2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
551271d8198ae06e37edf5da519d8ee153eeac0fTinderbox User2762. [bug] DLV validation failed with a local slave DLV zone.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2761. [cleanup] Enable internal symbol table for backtrace only for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater systems that are known to work. Currently, BSD
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater variants, Linux and Solaris are supported. [RT# 20202]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2759. [doc] Add information about .jbk/.jnw files to
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User the ARM. [RT #20303]
f46621af221784fd08339c6fe9509d9e48334561Tinderbox User2758. [bug] win32: Added a workaround for a windows 2008 bug
f46621af221784fd08339c6fe9509d9e48334561Tinderbox User that could cause the UDP client handler to shut
f46621af221784fd08339c6fe9509d9e48334561Tinderbox User down. [RT #19176]
f46621af221784fd08339c6fe9509d9e48334561Tinderbox User2757. [bug] dig: assertion failure could occur in connect
f46621af221784fd08339c6fe9509d9e48334561Tinderbox User timeout. [RT #20599]
f46621af221784fd08339c6fe9509d9e48334561Tinderbox User2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2755. [placeholder]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2754. [bug] Secure-to-insecure transitions failed when zone
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater was signed with NSEC3. [RT #20587]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2753. [bug] Removed an unnecessary warning that could appear when
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User building an NSEC chain. [RT #20589]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2752. [bug] Locking violation. [RT #20587]
3040b455151b1e1173193933664b2891b6159f24Mark Andrews2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2750. [bug] dig: assertion failure could occur when a server
22d32791e5daa0bc80335a0f10ab2de95f41ccdbTinderbox User didn't have an address. [RT #20579]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2749. [bug] ixfr-from-differences generated a non-minimal ixfr
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews for NSEC3 signed zones. [RT #20452]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2748. [func] Identify bad answers from GTLD servers and treat them
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews as referrals. [RT #18884]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2747. [bug] Journal roll forwards failed to set the re-signing
22d32791e5daa0bc80335a0f10ab2de95f41ccdbTinderbox User time of RRSIGs correctly. [RT #20541]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2746. [port] hpux: address signed/unsigned expansion mismatch of
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2745. [bug] configure script didn't probe the return type of
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews gai_strerror(3) correctly. [RT #20573]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2744. [func] Log if a query was over TCP. [RT #19961]
17198e77b87667f796e910d31a4f47a80e256d09Mark Andrews2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User for a insecure delegation.
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater --- 9.7.0b2 released ---
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2742. [cleanup] Clarify some DNSSEC-related log messages in
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2741. [func] Allow the dnssec-keygen progress messages to be
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User suppressed (dnssec-keygen -q). Automatically
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater suppress the progress messages when stdin is not
c07cdac6cf5bf3e9affc1aed25f8350087691f1eAutomatic Updater a tty. [RT #20474]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2740. [placeholder]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2739. [cleanup] Clean up API for initializing and clearing trust
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User anchors for a view. [RT #20211]
de73ef7ecdb9e009155993a6fa8dee5cd1bde319Mark Andrews2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater test. [RT #20453]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2737. [func] UPDATE requests can leak existence information.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2736. [func] Improve the performance of NSEC signed zones with
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User more than a normal amount of glue below a delegation.
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater2735. [bug] dnssec-signzone could fail to read keys
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User that were specified on the command line with
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User full paths, but weren't in the current
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User directory. [RT #20421]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2734. [port] cygwin: arpaname did not compile. [RT #20473]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
7c899ff8af55a6855100e7fb4f5dd9a0a04b48a0Automatic Updater2732. [func] Add optional filter-aaaa-on-v4 option, available
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews if built with './configure --enable-filter-aaaa'.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Filters out AAAA answers to clients connecting
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews via IPv4. (This is NOT recommended for general
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews use.) [RT #20339]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2731. [func] Additional work on change 2709. The key parser
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews will now ignore unrecognized fields when the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews minor version number of the private key format
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews has been increased. It will reject any key with
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews the major version number increased. [RT #20310]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2730. [func] Have dnssec-keygen display a progress indication
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews a la 'openssl genrsa' on standard error. Note
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews when the first '.' is followed by a long stop
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews one has the choice between slow generation vs.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews TTL. [RT #20451]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews dnssec-signzone now warn immediately if asked to
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews write into a nonexistent directory. [RT #20278]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2727. [func] The 'key-directory' option can now specify a relative
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews path. [RT #20154]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews RSASHA256 and RSASHA512. [RT #20023]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2725. [doc] Added information about the file "managed-keys.bind"
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews to the ARM. [RT #20235]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews were failing. [RT #20448]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews isc_base64_totext(), didn't always mark regions of
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews memory as fully consumed after conversion. [RT #20445]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2722. [bug] Ensure that the memory associated with the name of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a node in a rbt tree is not altered during the life
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of the node. [RT #20431]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2721. [port] Have dst__entropy_status() prime the random number
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington generator. [RT #20369]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2720. [bug] RFC 5011 trust anchor updates could trigger an
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater2719. [func] Skip trusted/managed keys for unsupported algorithms.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User incorrect. [RT #20394]
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews the last private type record was removed as a result
e213b38b48486b3a6349329655d9169085001fa0Tinderbox User of completing the signing the zone with a key.
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User --- 9.7.0b1 released ---
c5a97a549c89d562e999d4f906b882c5a2a474e1Tinderbox User2715. [bug] Require OpenSSL support to be explicitly disabled.
c5a97a549c89d562e999d4f906b882c5a2a474e1Tinderbox User2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2713. [bug] powerpc: atomic operations missing asm("ics") /
78f3ed4bc2fcd3d270bfd599804f3b27a1db4d91Mark Andrews __isync() calls.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2712. [func] New 'auto-dnssec' zone option allows zone signing
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews to be fully automated in zones configured for
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews dynamic DNS. 'auto-dnssec allow;' permits a zone
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews to be signed by creating keys for it in the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews key-directory and using 'rndc sign <zone>'.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews 'auto-dnssec maintain;' allows that too, plus it
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater also keeps the zone's DNSSEC keys up to date
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews according to their timing metadata. [RT #19943]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews build. [RT #20372]
56334ccb2d4b5a04fc12b70b5852049db5d24088Evan Hunt2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User zone option cause a zone to be signed with only KSKs
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User the size of a DNSKEY answer. [RT #20340]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2709. [func] Added some data fields, currently unused, to the
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater private key file format, to allow implementation
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews of explicit key rollover in a future release
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews without impairing backward or forward compatibility.
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User2708. [func] Insecure to secure and NSEC3 parameter changes via
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater update are now fully supported and no longer require
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User defines to enable. We now no longer overload the
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
9ecb5d33470ebfb3719a1b8d56bcefdf4b27f7b2Tinderbox User apex. Secure to insecure changes are controlled by
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews by the named.conf option 'secure-to-insecure'.
51901858be9d4632c1d0bed28cfa8f29932c1967Tinderbox User Warning: If you had previously enabled support by
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews adding defines at compile time to BIND 9.6 you should
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews ensure that all changes that are in progress have
347333bc39e9e2df63cc4e7309cef5354d52b1fbTinderbox User completed prior to upgrading to BIND 9.7. BIND 9.7
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews is not backwards compatible.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2707. [func] dnssec-keyfromlabel no longer require engine name
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater to be specified in the label if there is a default
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews engine or the -E option has been used. Also, it
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson now uses default algorithms as dnssec-keygen does
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews trigger an assert. [RT #20368]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2705. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2704. [bug] Serial of dynamic and stub zones could be inconsistent
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with their SOA serial. [RT #19387]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
7932a7637170550bc53b38c35db9a0187dcb3d3bAutomatic Updater for all binaries which can take benefit of
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson crypto hardware. [RT #20230]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
229ea4644b3a7d9c7fdaa43888e7f55ba01e2ee3Automatic Updater2701. [doc] Correction to ARM: hmac-md5 is no longer the only
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews supported TSIG key algorithm. [RT #18046]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
de7b9a1dac0c293b39994c91d4376883da25554fTinderbox User2699. [bug] Missing lock in rbtdb.c. [RT #20037]
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews2698. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User S_IFREG are defined after including <isc/stat.h>.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2696. [bug] named failed to successfully process some valid
467a823e57af687ebd486dfd73ea32f9d2a145beTinderbox User acl constructs. [RT #20308]
7d704e522860496310bb29c28e76064868401a9cMark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User callback functon for isc_socket_fdwatchcreate)
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User to include information about the direction (read
e6fc17ec5ad5ba1c4bf5730b2b97c82d1f2b8f3cMark Andrews or write) and add isc_socket_fdwatchpoke.
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2693. [port] Add some noreturn attributes. [RT #20257]
402eda3e7d4254ffac1543bf2917c71248a09e4cTinderbox User2692. [port] win32: 32/64 bit cleanups. [RT #20335]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews chain when re-signing a previously-signed zone.
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater Use -u to modify NSEC3 parameters or switch
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews between NSEC and NSEC3. [RT #20304]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
f7a71eef29bcbf892270460269c79664f600cffdAutomatic Updater to decide to fetch the destination address. [RT #20305]
f751b1576ee6fef4023bf7101d10167e4fe520f3Tinderbox User2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
261ef37955c3468cbcb55d54b83c9a3b14e114dfTinderbox User Also, added warnings when revoking a ZSK, as this is
f751b1576ee6fef4023bf7101d10167e4fe520f3Tinderbox User not defined by protocol (but is legal). [RT #19943]
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater2686. [bug] dnssec-signzone should clean the old NSEC chain when
8711e5c73ca872d59810760af0332194cbdd619bAutomatic Updater signing with NSEC3 and vice versa. [RT #20301]
261ef37955c3468cbcb55d54b83c9a3b14e114dfTinderbox User2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
261ef37955c3468cbcb55d54b83c9a3b14e114dfTinderbox User2684. [cleanup] dig: formalize +ad and +cd as synonyms for
261ef37955c3468cbcb55d54b83c9a3b14e114dfTinderbox User +adflag and +cdflag. [RT #19305]
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User the NSEC3 parameters used to sign the zone change.
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User2682. [bug] "configure --enable-symtable=all" failed to
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User build. [RT #20282]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User decoded. [RT #20269]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User2679. [func] dig -k can now accept TSIG keys in named.conf
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User format. [RT #20031]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User2678. [func] Treat DS queries as if "minimal-response yes;"
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User was set. [RT #20258]
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User2677. [func] Changes to key metadata behavior:
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User - Keys without "publish" or "active" dates set will
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User no longer be used for smart signing. However,
87d422bb38fa1c8f0fb29c2a1b8c044870a7df46Tinderbox User those dates will be set to "now" by default when
b8cc0c5d896c361525708a2be2e5af7df76c96d7Tinderbox User a key is created; to generate a key but not use
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User it yet, use dnssec-keygen -G.
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User - New "inactive" date (dnssec-keygen/settime -I)
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User sets the time when a key is no longer used for
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User signing but is still published.
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User - The "unpublished" date (-U) is deprecated in
959e5da49a2cff7dfd8fdb885cd11c5d7d94a292Tinderbox User favour of "deleted" (-D).
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User2676. [bug] --with-export-installdir should have been
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User --with-export-includedir. [RT #20252]
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User2675. [bug] dnssec-signzone could crash if the key directory
7a6494cfb6cc7d3f67af07359561e05e6bb8c0edTinderbox User did not exist. [RT #20232]
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User --- 9.7.0a3 released ---
02d20c5d79600704d617d248642c477e9b5e6a2aTinderbox User2674. [bug] "dnssec-lookaside auto;" crashed if named was built
2ec4ab21838e218863d052ebfa3e106e04f50820Evan Hunt without openssl. [RT #20231]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2673. [bug] The managed-keys.bind zone file could fail to
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews load due to a spurious result from sync_keyzone()
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews lookups. [RT #20218]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2671. [bug] Add support for PKCS#11 providers not returning
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the public exponent in RSA private keys
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews (OpenCryptoki for instance) in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dnssec-keyfromlabel. [RT #19294]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2670. [bug] Unexpected connect failures failed to log enough
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews information to be useful. [RT #20205]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2669. [func] Update PKCS#11 support to support Keyper HSM.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Update PKCS#11 patch to be against openssl-0.9.8i.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2668. [func] Several improvements to dnssec-* tools, including:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - dnssec-keygen and dnssec-settime can now set key
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews metadata fields 0 (to unset a value, use "none")
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - dnssec-revoke sets the revocation date in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews addition to the revoke bit
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - dnssec-settime can now print individual metadata
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews fields instead of always printing all of them,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews and can print them in unix epoch time format for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews use by scripts
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2667. [func] Add support for logging stack backtrace on assertion
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews failure (not available for all platforms). [RT #19780]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2666. [func] Added an 'options' argument to dns_name_fromstring()
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews (API change from 9.7.0a2). [RT #20196]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2665. [func] Clarify syntax for managed-keys {} statement, add
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews ARM documentation about RFC 5011 support. [RT #19874]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2664. [bug] create_keydata() and minimal_update() in zone.c
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews didn't properly check return values for some
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews functions. [RT #19956]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2663. [func] win32: allow named to run as a service using
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews "NT AUTHORITY\LocalService" as the account. [RT #19977]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews returned a misleading error code when lwresd was
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews down. [RT #20028]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews creating lwres context. [RT #20029]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews applications. See README.libdns. [RT #19369]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2659. [doc] Clarify dnssec-keygen doc: key name must match zone
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews name for DNSSEC keys. [RT #19938]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews key file paths correctly. [RT #20078]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2657. [cleanup] Lower "journal file <path> does not exist, creating it"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews log level to debug 1. [RT #20058]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2656. [func] win32: add a "tools only" check box to the installer
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews which causes it to only install dig, host, nslookup,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews nsupdate and relevant DLLs. [RT #19998]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2655. [doc] Document that key-directory does not affect
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews bind.keys, rndc.key or session.key. [RT #20155]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2654. [bug] Improve error reporting on duplicated names for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews deny-answer-xxx. [RT #20164]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2653. [bug] Treat ENGINE_load_private_key() failures as key
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews not found rather than out of memory. [RT #18033]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2652. [func] Provide more detail about what record is being
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews deleted. [RT #20061]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2651. [bug] Dates could print incorrectly in K*.key files on
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews 64-bit systems. [RT #20076]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2650. [bug] Assertion failure in dnssec-signzone when trying
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to read keyset-* files. [RT #20075]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2649. [bug] Set the domain for forward only zones. [RT #19944]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2647. [bug] Remove unnecessary SOA updates when a new KSK is
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews added. [RT #19913]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews which default to 64 bits. [RT #19927]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews --- 9.7.0a2 released ---
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2644. [bug] Change #2628 caused a regression on some systems;
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews named was unable to write the PID file and would
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews fail on startup. [RT #20001]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2643. [bug] Stub zones interacted badly with NSEC3 support.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2642. [bug] nsupdate could dump core on solaris when reading
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews improperly formatted key files. [RT #20015]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2641. [bug] Fixed an error in parsing update-policy syntax,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews added a regression test to check it. [RT #20007]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2640. [security] A specially crafted update packet will cause named
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to exit. [RT #20000]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2638. [bug] Install arpaname. [RT #19957]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2636. [func] Simplify zone signing and key maintenance with the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dnssec-* tools. Major changes:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - all dnssec-* tools now take a -K option to
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews specify a directory in which key files will be
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - DNSSEC can now store metadata indicating when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews they are scheduled to be published, activated,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews revoked or removed; these values can be set by
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dnssec-keygen or overwritten by the new
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dnssec-settime command
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - dnssec-signzone -S (for "smart") option reads key
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews metadata and uses it to determine automatically
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews which keys to publish to the zone, use for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews signing, revoke, or remove from the zone
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2634. [port] win32: Add support for libxml2, enable
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews statschannel. [RT #19773]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2633. [bug] Handle 15 bit rand() functions. [RT #19783]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2632. [func] util/kit.sh: warn if documentation appears to be out of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews date. [RT #19922]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews [RT #19926 ]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2630. [func] Improved syntax for DDNS autoconfiguration: use
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews "update-policy local;" to switch on local DDNS in a
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews zone. (The "ddns-autoconf" option has been removed.)
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2629. [port] Check for seteuid()/setegid(), use setresuid()/
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews setresgid() if not present. [RT #19932]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2628. [port] linux: Allow /var/run/named/named.pid to be opened
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews at startup with reduced capabilities in operation.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2627. [bug] Named aborted if the same key was included in
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews trusted-keys more than once. [RT #19918]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2626. [bug] Multiple trusted-keys could trigger an assertion
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews failure. [RT #19914]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2624. [func] 'named-checkconf -p' will print out the parsed
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews configuration. [RT #18871]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2623. [bug] Named started searches for DS non-optimally. [RT #19915]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2621. [doc] Made copyright boilerplate consistent. [RT #19833]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2620. [bug] Delay thawing the zone until the reload of it has
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews completed successfully. [RT #19750]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2619. [func] Add support for RFC 5011, automatic trust anchor
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews maintenance. The new "managed-keys" statement can
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews be used in place of "trusted-keys" for zones which
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews support this protocol. (Note: this syntax is
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt expected to change prior to 9.7.0 final.) [RT #19248]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2618. [bug] The sdb and sdlz db_interator_seek() methods could
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt loop infinitely. [RT #19847]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2617. [bug] ifconfig.sh failed to emit an error message when
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt run from the wrong location. [RT #19375]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2616. [bug] 'host' used the nameservers from resolv.conf even
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt when a explicit nameserver was specified. [RT #19852]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2615. [bug] "__attribute__((unused))" was in the wrong place
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt for ia64 gcc builds. [RT #19854]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2614. [port] win32: 'named -v' should automatically be executed
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt in the foreground. [RT #19844]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2613. [placeholder]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User --- 9.7.0a1 released ---
214af784e91553d387246fd9ce46cb1291697b9aTinderbox User2612. [func] Add default values for the arguments to
ab272d2204a075b5ed0798d04733a9028782b8daEvan Hunt dnssec-keygen. Without arguments, it will now
ab272d2204a075b5ed0798d04733a9028782b8daEvan Hunt generate a 1024-bit RSASHA1 zone-signing key,
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater or with the -f KSK option, a 2048-bit RSASHA1
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater key-signing key. [RT #19300]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2611. [func] Add -l option to dnssec-dsfromkey to generate
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater DLV records instead of DS records. [RT #19300]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2610. [port] sunos: Change #2363 was not complete. [RT #19796]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2609. [func] Simplify the configuration of dynamic zones:
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater - add ddns-confgen command to generate
c57668a2fbbe558c1bd21652813616f2f517c469Tinderbox User configuration text for named.conf
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater - add zone option "ddns-autoconf yes;", which
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User causes named to generate a TSIG session key
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater and allow updates to the zone using that key
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater - add '-l' (localhost) option to nsupdate, which
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater causes nsupdate to connect to a locally-running
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews named process using the session key generated
66d24a46538c7c2d29fdb5611ab1173e83685b1dTinderbox User2608. [func] Perform post signing verification checks in
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson dnssec-signzone. These can be disabled with -P.
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews The post sign verification test ensures that for each
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews algorithm in use there is at least one non revoked
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews self signed KSK key. That all revoked KSK keys are
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews self signed. That all records in the zone are signed
94df856897945fe58f130ba78765c57308bc5400Automatic Updater by the algorithm. [RT #19653]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2607. [bug] named could incorrectly delete NSEC3 records for
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User empty nodes when processing a update request.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2606. [bug] "delegation-only" was not being accepted in
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews delegation-only type zones. [RT #19717]
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews2605. [bug] Accept DS responses from delegation only zones.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2604. [func] Add support for DNS rebinding attack prevention through
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews new options, deny-answer-addresses and
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews deny-answer-aliases. Based on contributed code from
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews JD Nurmi, Google. [RT #18192]
da93950363b307b718d156514b95b9df93a63776Mark Andrews2603. [port] win32: handle .exe extension of named-checkzone and
da93950363b307b718d156514b95b9df93a63776Mark Andrews named-comilezone argv[0] names under windows.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2602. [port] win32: fix debugging command line build of libisccfg.
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater2601. [doc] Mention file creation mode mask in the
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic Updater named manual page.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2600. [doc] ARM: miscellaneous reformatting for different
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater page widths. [RT #19574]
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater2599. [bug] Address rapid memory growth when validation fails.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2598. [func] Reserve the -F flag. [RT #19657]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2597. [bug] Handle a validation failure with a insecure delegation
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User from a NSEC3 signed master/slave zone. [RT #19464]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User long, leading to inefficient memory usage or rejecting
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User newer cache entries in the worst case. [RT #19563]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2594. [func] Have rndc warn if using its default configuration
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User file when the key file also exists. [RT #19424]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2591. [bug] named could die when processing a update in
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt removed_orphaned_ds(). [RT #19507]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2590. [func] Report zone/class of "update with no effect".
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2588. [bug] SO_REUSEADDR could be set unconditionally after failure
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt of bind(2) call. This should be rare and mostly
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User harmless, but may cause interference with other
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User processes that happen to use the same port. [RT #19642]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2587. [func] Improve logging by reporting serial numbers for
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User when zone serial has gone backwards or unchanged.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User or SDB. [RT #19577]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2585. [bug] Uninitialized socket name could be referenced via a
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User statistics channel, triggering an assertion failure in
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User XML rendering. [RT #19427]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2584. [bug] alpha: gcc optimization could break atomic operations.
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2583. [port] netbsd: provide a control to not add the compile
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User date to the version string, -DNO_VERSION_DATE.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2582. [bug] Don't emit warning log message when we attempt to
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User remove non-existent journal. [RT #19516]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User Requires MySQL 5.0.19 or later. [RT #19084]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2580. [bug] UpdateRej statistics counter could be incremented twice
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User for one rejection. [RT #19476]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2579. [bug] DNSSEC lookaside validation failed to handle unknown
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User algorithms. [RT #19479]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2578. [bug] Changed default sig-signing-type to 65534, because
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User 65535 turns out to be reserved. [RT #19477]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2577. [doc] Clarified some statistics counters. [RT #19454]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2576. [bug] NSEC record were not being correctly signed when
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User a zone transitions from insecure to secure.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User Handle such incorrectly signed zones. [RT #19114]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2575. [func] New functions dns_name_fromstring() and
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User dns_name_tostring(), to simplify conversion
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User of a string to a dns_name structure and vice
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User versa. [RT #19451]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2574. [doc] Document nsupdate -g and -o. [RT #19351]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2573. [bug] Replacing a non-CNAME record with a CNAME record in a
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt single transaction in a signed zone failed. [RT #19397]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2572. [func] Simplify DLV configuration, with a new option
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User "dnssec-lookaside auto;" This is the equivalent
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User of "dnssec-lookaside . trust-anchor dlv.isc.org;"
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User plus setting a trusted-key for dlv.isc.org.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User Note: The trusted key is hard-coded into named,
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User but is also stored in (and can be overridden
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User by) $sysconfdir/bind.keys. As the ISC DLV key
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User rolls over it can be kept up to date by replacing
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User the bind.keys file with a key downloaded from
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User https://www.isc.org/solutions/dlv. [RT #18685]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2571. [func] Add a new tool "arpaname" which translates IP addresses
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2570. [func] Log the destination address the query was sent to.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2569. [func] Move journalprint, nsec3hash, and genrandom
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User "make install" will put them in $sbindir. [RT #19301]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2568. [bug] Report when the write to indicate a otherwise
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User successful start fails. [RT #19360]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2567. [bug] dst__privstruct_writefile() could miss write errors.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User write_public_key() could miss write errors.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User dnssec-dsfromkey could miss write errors.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2566. [cleanup] Clarify logged message when an insecure DNSSEC
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User response arrives from a zone thought to be secure:
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User "insecurity proof failed" instead of "not
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User insecure". [RT #19400]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2565. [func] Add support for HIP record. Includes new functions
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User dns_rdata_hip_first(), dns_rdata_hip_next()
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User and dns_rdata_hip_current(). [RT #19384]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2564. [bug] Only take EDNS fallback steps when processing timeouts.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2563. [bug] Dig could leak a socket causing it to wait forever
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User to exit. [RT #19359]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2562. [doc] ARM: miscellaneous improvements, reorganization,
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt and some new content.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2559. [bug] dnssec-dsfromkey could compute bad DS records when
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User reading from a K* files. [RT #19357]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2558. [func] Set the ownership of missing directories created
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User for pid-file if -u has been specified on the command
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User line. [RT #19328]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2557. [cleanup] PCI compliance:
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User * new libisc log module file
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User * isc_dir_chroot() now also changes the working
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User directory to "/".
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User * additional INSISTs
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User * additional logging when files can't be removed.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User error checks in the correct order resulting in the
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User wrong error code sometimes being returned. [RT #19249]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2555. [func] dig: when emitting a hex dump also display the
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User corresponding characters. [RT #19258]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2554. [bug] Validation of uppercase queries from NSEC3 zones could
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User fail. [RT #19297]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2552. [bug] zero-no-soa-ttl-cache was not being honoured.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2551. [bug] Potential Reference leak on return. [RT #19341]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2549. [port] linux: define NR_OPEN if not currently defined.
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2548. [bug] Install iterated_hash.h. [RT #19335]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2547. [bug] openssl_link.c:mem_realloc() could reference an
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User out-of-range area of the source buffer. New public
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt function isc_mem_reallocate() was introduced to address
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt this bug. [RT #19313]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2546. [func] Add --enable-openssl-hash configure flag to use
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User OpenSSL (in place of internal routine) for hash
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User functions (MD5, SHA[12] and HMAC). [RT #18815]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2545. [doc] ARM: Legal hostname checking (check-names) is
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User for SRV RDATA too. [RT #19304]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2542. [doc] Update the description of dig +adflag. [RT #19290]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2541. [bug] Conditionally update dispatch manager statistics.
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2539. [security] Update the interaction between recursion, allow-query,
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User allow-query-cache and allow-recursion. [RT #19198]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2538. [bug] cache/ADB memory could grow over max-cache-size,
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User especially with threads and smaller max-cache-size
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User values. [RT #19240]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2537. [func] Added more statistics counters including those on socket
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User I/O events and query RTT histograms. [RT #18802]
e2d635d630f6f61fefd3d4475c45b097b16b8a2aEvan Hunt2536. [cleanup] Silence some warnings when -Werror=format-security is
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User specified. [RT #19083]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User2534. [func] Check NAPTR records regular expressions and
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User replacement strings to ensure they are syntactically
776a8e3ff8889711a1f61a9362607c42716563f4Tinderbox User valid and consistant. [RT #18168]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2533. [doc] ARM: document @ (at-sign). [RT #17144]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2532. [bug] dig: check the question section of the response to
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User see if it matches the asked question. [RT #18495]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2531. [bug] Change #2207 was incomplete. [RT #19098]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2530. [bug] named failed to reject insecure to secure transitions
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User via UPDATE. [RT #19101]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2529. [cleanup] Upgrade libtool to silence complaints from recent
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User version of autoconf. [RT #18657]
6a0d2961c04b20f0114cca12157cfed64c5b126fTinderbox User2528. [cleanup] Silence spurious configure warning about
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User --datarootdir [RT #19096]
c7ef13f6c9ef4436bc804b150e0a93307b11fa27Tinderbox User2527. [placeholder]
644973f327e9db74779e7c0426db90909173b284Automatic Updater2526. [func] New named option "attach-cache" that allows multiple
644973f327e9db74779e7c0426db90909173b284Automatic Updater views to share a single cache to save memory and
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User improve lookup efficiency. Based on contributed code
418cc932318b1d67f88a36904d88d8a5a0a2ba09Automatic Updater from Barclay Osborn, Google. [RT #18905]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2525. [func] New logging category "query-errors" to provide detailed
95637507c3d47481fbf0a8a8c750a57f944f677fMark Andrews internal information about query failures, especially
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User about server failures. [RT #19027]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
347333bc39e9e2df63cc4e7309cef5354d52b1fbTinderbox User2523. [bug] Random type rdata freed by dns_nsec_typepresent().
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2521. [bug] Improve epoll cross compilation support. [RT #19047]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2520. [bug] Update xml statistics version number to 2.0 as change
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User #2388 made the schema incompatible to the previous
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User version. [RT #19080]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2519. [bug] dig/host with -4 or -6 didn't work if more than two
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User nameserver addresses of the excluded address family
347333bc39e9e2df63cc4e7309cef5354d52b1fbTinderbox User preceded in resolv.conf. [RT #19081]
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2518. [func] Add support for the new CERT types from RFC 4398.
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User2517. [bug] dig +trace with -4 or -6 failed when it chose a
d585233c52e283d9a8849f16f04f452419a2484eTinderbox User nameserver address of the excluded address type.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2516. [bug] glue sort for responses was performed even when not
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews needed. [RT #19039]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
90863a6f9bfb06062c7fdf269bb675e7b674fc31Mark Andrews a nameserver of the excluded address family.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2513. [bug] Fix windows cli build. [RT #19062]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2512. [func] Print a summary of the cached records which make up
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews the negative response. [RT #18885]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2509. [bug] Specifying a fixed query source port was broken.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2508. [placeholder]
8de3f14f1c300c3e1ed99084cc03485b42c92bf1Tinderbox User2507. [func] Log the recursion quota values when killing the
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews oldest query or refusing to recurse due to quota.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2506. [port] solaris: Check at configure time if
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews hack_shutup_pthreadonceinit is needed. [RT #19037]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2505. [port] Treat amd64 similarly to x86_64 when determining
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater atomic operation support. [RT #19031]
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews2504. [bug] Address race condition in the socket code. [RT #18899]
f4193c2021ab0aeaad33fe0b3d1d49c80db5c725Mark Andrews2503. [port] linux: improve compatibility with Linux Standard
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews Base. [RT #18793]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2502. [cleanup] isc_radix: Improve compliance with coding style,
872a5b83f68b8058945298715b0fa53442aad52fAutomatic Updater document function in <isc/radix.h>. [RT #18534]
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox User2501. [func] $GENERATE now supports all rdata types. Multi-field
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews rdata types need to be quoted. See the ARM for
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews details. [RT #18368]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User function. [RT #18582]
cff0e0b52cf0928123bad6f3bccf56e22bbc07f5Automatic Updater2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.6.0rc1 released ---
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2498. [bug] Removed a bogus function argument used with
c28a1243429dfaf8dc5f6c1db0dccdc6ce386baeMark Andrews ISC_SOCKET_USE_POLLWATCH: it could cause compiler
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater warning or crash named with the debug 1 level
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews of logging. [RT #18917]
5f7e0eb1cb917b788906d3e2aa01bfc4885dcae4Mark Andrews2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews2496. [bug] Add sanity length checks to NSID option. [RT #18813]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2495. [bug] Tighten RRSIG checks. [RT #18795]
9bc394fffdd50f6e47614b2d317da7274122366fTinderbox User2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User installed. [RT #18826]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2493. [bug] The linux capabilities code was not correctly cleaning
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User up after itself. [RT #18767]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2492. [func] Rndc status now reports the number of cpus discovered
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox User and the number of worker threads when running
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User multi-threaded. [RT #18273]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2491. [func] Attempt to re-use a local port if we are already using
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater the port. [RT #18548]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater is cleared when IPV6_V6ONLY is set. [RT #18785]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2489. [port] solaris: Workaround Solaris's kernel bug about
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews Define ISC_SOCKET_USE_POLLWATCH at build time to enable
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews this workaround. [RT #18870]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
436aad11e01e916f75e68a2e9cb89ac217a990d3Tinderbox User from keyset and .key files. [RT #18694]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2487. [bug] Give TCP connections longer to complete. [RT #18675]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2486. [func] The default locations for named.pid and lwresd.pid
a792d42c3cdd6cd4608b936c0a06437b8c2d99ccTinderbox User This allows the owner of the containing directory
a01aa536188bb3535dfc1107a623e6355a8e6b7cMark Andrews to be set, for "named -u" support, and allows there
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User to be a permanent symbolic link in the path, for
1d4f4d2db2d69e48fec2dde5c1535853677d22a7Automatic Updater "named -t" support. [RT #18306]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2485. [bug] Change update's the handling of obscured RRSIG
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater records. Not all orphaned DS records were being
fe600c3ad88c0bb078283a953d048087d227c0e5Tinderbox User removed. [RT #18828]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2484. [bug] It was possible to trigger a REQUIRE failure when
8d0e57cdac5e28964ebe7c0d925d158f17b401a6Tinderbox User adding NSEC3 proofs to the response in
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User query_addwildcardproof(). [RT #18828]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2483. [port] win32: chroot() is not supported. [RT #18805]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2482. [port] libxml2: support versions 2.7.* in addition
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews to 2.6.*. [RT #18806]
e10d61d84e0b735f1e8eca18644cfdb1b06cad33Tinderbox User --- 9.6.0b1 released ---
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews collisions. [RT #18812]
757ff043760e4743dda1a10e7d58349275934902Tinderbox User2480. [bug] named could fail to emit all the required NSEC3
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews records. [RT #18812]
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
90cde4c188ac5bdea4f402b241c387c9cc9d4cc4Tinderbox User2478. [bug] 'addresses' could be used uninitialized in
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User configure_forward(). [RT #18800]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2477. [bug] dig: the global option to print the command line is
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User +cmd not print_cmd. Update the output to reflect
4c9f230f7ca5b2b08ea8fd7a6944135801dbe152Tinderbox User this. [RT #17008]
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox User2476. [doc] ARM: improve documentation for max-journal-size and
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews ixfr-from-differences. [RT #15909] [RT #18541]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2475. [bug] LRU cache cleanup under overmem condition could purge
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews particular entries more aggressively. [RT #17628]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2474. [bug] ACL structures could be allocated with insufficient
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User space, causing an array overrun. [RT #18765]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2473. [port] linux: raise the limit on open files to the possible
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox User maximum value before spawning threads; 'files'
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specified in named.conf doesn't seem to work with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater threads as expected. [RT #18784]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2472. [port] linux: check the number of available cpu's before
71fa3534bfaf174f6a938dc1ba3522f66606c4e1Mark Andrews calling chroot as it depends on "/proc". [RT #16923]
e23761df2059ed612c8fb7cc248d93bb2c4f62dbTinderbox User2471. [bug] named-checkzone was not reporting missing mandatory
e80c7005e3d59dfeb04dad186d36f3c15622954cTinderbox User glue when sibling checks were disabled. [RT #18768]
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2470. [bug] Elements of the isc_radix_node_t could be incorrectly
02b3e44a996e9753d86306b6a1b6b579a73787fcTinderbox User overwritten. [RT# 18719]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2469. [port] solaris: Work around Solaris's select() limitations.
53b97c9873a923f504893d1e2ab62000dfac221fTinderbox User2468. [bug] Resolver could try unreachable servers multiple times.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
3349f0044fda807e1fd6681c833d3593a22dad86Tinderbox User2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2465. [bug] Adb's handling of lame addresses was different
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews for IPv4 and IPv6. [RT #18738]
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User2464. [port] linux: check that a capability is present before
cd34c1adb0fa2120327fc8c11cda0d4a5f722aeeTinderbox User trying to set it. [RT #18135]
b871c7156eb037d41f53828c6fcb9cc876128962Mark Andrews2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
c74518d655c1c563060f49569dce71e4a00f5f4eTinderbox User API and glibc hides parts of the IPv6 Advanced Socket
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater API as a result. This is stupid as it breaks how the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater two halves (Basic and Advanced) of the IPv6 Socket API
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews were designed to be used but we have to live with it.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
53b97c9873a923f504893d1e2ab62000dfac221fTinderbox User API. [RT #18388]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2462. [doc] Document -m (enable memory usage debugging)
28a5dd720187fddb16055a0f64b63a7b66f29f64Mark Andrews option for dig. [RT #18757]
ca904804e43f663f08eb1ac9d6d617930b9a3cd3Automatic Updater2461. [port] sunos: Change #2363 was not complete. [RT #17513]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.6.0a1 released ---
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
bbc0e1c4f47f101c4a64db3469352c49a49e734fTinderbox User2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2458. [doc] ARM: update and correction for max-cache-size.
be46cb4bee9253ee4832340c719920642e00c41aTinderbox User2457. [tuning] max-cache-size is reverted to 0, the previous
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User default. It should be safe because expired cache
c243d779731a410f8dc2d2feeed20c15f299b6e3Automatic Updater entries are also purged. [RT #18684]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
099b86fb8136a7dff81df85cf395978c16eb254cAutomatic Updater address, regardless of family. They now correctly
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews distinguish IPv4 from IPv6. [RT #18559]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater2455. [bug] Stop metadata being transferred via axfr/ixfr.
02b3e44a996e9753d86306b6a1b6b579a73787fcTinderbox User2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2453. [bug] Remove NULL pointer dereference in dns_journal_print().
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User2452. [func] Improve bin/test/journalprint. [RT #18316]
d7d105151a78d35afb4233d2a6dbd47b7ec0d9a5Tinderbox User2451. [port] solaris: handle runtime linking better. [RT #18356]
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews2450. [doc] Fix lwresd docbook problem for manual page.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2449. [placeholder]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2448. [func] Add NSEC3 support. [RT #15452]
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox User2447. [cleanup] libbind has been split out as a separate product.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2446. [func] Add a new log message about build options on startup.
a308b69ac66fadf66863484f301314d6e6a3f1d2Automatic Updater A new command-line option '-V' for named is also
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User provided to show this information. [RT# 18645]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2445. [doc] ARM out-of-date on empty reverse zones (list includes
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User RFC1918 address, but these are not yet compiled in).
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User (clear DF) for UDP responses and requests.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2443. [bug] win32: UDP connect() would not generate an event,
e20309353e6246485c521278131d3fced73d7957Tinderbox User and so connected UDP sockets would never clean up.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User Fix this by doing an immediate WSAConnect() rather
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User than an io completion port type for UDP.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2442. [bug] A lock could be destroyed twice. [RT# 18626]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2441. [bug] isc_radix_insert() could copy radix tree nodes
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User incompletely. [RT #18573]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2440. [bug] named-checkconf used an incorrect test to determine
90b25b84f037ec923efaee84d2c0dc599293d04eTinderbox User if an ACL was set to none.
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2438. [bug] Timeouts could be logged incorrectly under win32.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2437. [bug] Sockets could be closed too early, leading to
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User inconsistent states in the socket module. [RT #18298]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2435. [bug] Fixed an ACL memory leak affecting win32.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2434. [bug] Fixed a minor error-reporting bug in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2433. [tuning] Set initial timeout to 800ms.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2432. [bug] More Windows socket handling improvements. Stop
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User using I/O events and use IO Completion Ports
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater throughout. Rewrite the receive path logic to make
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User it easier to support multiple simultaneous
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater requesters in the future. Add stricter consistency
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater checking as a compile-time option (define
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2431. [bug] Acl processing could leak memory. [RT #18323]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2430. [bug] win32: isc_interval_set() could round down to
f89eb76a7516649f8717c6397fc496ca906ddb57Tinderbox User zero if the input was less than NS_INTERVAL
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater nanoseconds. Round up instead. [RT #18549]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2429. [doc] nsupdate should be in section 1 of the man pages.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2428. [bug] dns_iptable_merge() mishandled merges of negative
a61158fed2e0281a40e3e97e0b7c3f9789a07b4eTinderbox User tables. [RT #18409]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater was set. [RT #18528]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2426. [bug] libbind: inet_net_pton() can sometimes return the
59b277af9d9aac08d16be63aed5ae60ac9eef0d5Automatic Updater wrong value if excessively large net masks are
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User supplied. [RT #18512]
a1788473b239588464bdeac4ab9f3fbcae959450Tinderbox User2425. [bug] named didn't detect unavailable query source addresses
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater at load time. [RT #18536]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2424. [port] configure now probes for a working epoll
f34958b7669dfca333cc0cd20113b1f55a89e1deTinderbox User implementation. Allow the use of kqueue,
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater epoll and /dev/poll to be selected at compile
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User time. [RT #18277]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2423. [security] Randomize server selection on queries, so as to
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews make forgery a little more difficult. Instead of
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater always preferring the server with the lowest RTT,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater pick a server with RTT within the same 128
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews millisecond band. [RT #18441]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2422. [bug] Handle the special return value of a empty node as
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater if it was a NXRRSET in the validator. [RT #18447]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2421. [func] Add new command line option '-S' for named to specify
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater the max number of sockets. [RT #18493]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Use caution: this option may not work for some
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater operating systems without rebuilding named.
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2420. [bug] Windows socket handling cleanup. Let the io
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater completion event send out canceled read/write
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater done events, which keeps us from writing to memory
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater we no longer have ownership of. Add debugging
c762a0e4141c8eb9d7567c614cf6dde994f6a76dTinderbox User socket_log() function. Rework TCP socket handling
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to not leak sockets.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User should not be used for isc_sockettype_fdwatch sockets.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2417. [bug] Connecting UDP sockets for outgoing queries could
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater unexpectedly fail with an 'address already in use'
3f616e6f846be57b1717c6beaba0f74de9d5a7c6Automatic Updater error. [RT #18411]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2416. [func] Log file descriptors that cause exceeding the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater internal maximum. [RT #18460]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2415. [bug] 'rndc dumpdb' could trigger various assertion failures
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User in rbtdb.c. [RT #18455]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2414. [bug] A masterdump context held the database lock too long,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater causing various troubles such as dead lock and
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater recursive lock acquisition. [RT #18311, #18456]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
1f4c645185bd8fc70048e0a69eee46193a284e5cTinderbox User2412. [bug] win32: address a resource leak. [RT #18374]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User at compilation time. [RT #18433]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User Note: with changes #2469 and #2421 above, there is no
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
324a8797b46d646fe8d3b2eef6785e0b2b3ac956Tinderbox User2410. [bug] Correctly delete m_versionInfo. [RT #18432]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2409. [bug] Only log that we disabled EDNS processing if we were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater subsequently successful. [RT #18029]
79b627f399ce925988bb326315e6742d5316cb6bTinderbox User2408. [bug] A duplicate TCP dispatch event could be sent, which
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User could then trigger an assertion failure in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater resquery_response(). [RT #18275]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2406. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2405. [cleanup] The default value for dnssec-validation was changed to
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User "yes" in 9.5.0-P1 and all subsequent releases; this
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater was inadvertently omitted from CHANGES at the time.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2404. [port] hpux: files unlimited support.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2403. [bug] TSIG context leak. [RT #18341]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2402. [port] Support Solaris 2.11 and over. [RT #18362]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2401. [bug] Expect to get E[MN]FILE errno internal_accept()
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User (from accept() or fcntl() system calls). [RT #18358]
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2399. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2398. [bug] Improve file descriptor management. New,
979e02d122cddf1624cca8a4dab8d084c900fa48Automatic Updater temporary, named.conf option reserved-sockets,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater default 512. [RT #18344]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2397. [bug] gssapi_functions had too many elements. [RT #18355]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2396. [bug] Don't set SO_REUSEADDR for randomized ports.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2395. [port] Avoid warning and no effect from "files unlimited"
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater on Linux when running as root. [RT #18335]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2394. [bug] Default configuration options set the limit for
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User open files to 'unlimited' as described in the
402eda3e7d4254ffac1543bf2917c71248a09e4cTinderbox User documentation. [RT #18331]
bbc0e1c4f47f101c4a64db3469352c49a49e734fTinderbox User2393. [bug] nested acls containing keys could trigger an
94f3904f58cd35f76adea08e96d8e755ccfd5610Tinderbox User assertion in acl.c. [RT #18166]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2392. [bug] remove 'grep -q' from acl test script, some platforms
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User don't support it. [RT #18253]
dc5552b4df5e3821783821c8d4e734c1608c446eTinderbox User2391. [port] hpux: cover additional recvmsg() error codes.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2390. [bug] dispatch.c could make a false warning on 'odd socket'.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2389. [bug] Move the "working directory writable" check to after
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User the ns_os_changeuser() call. [RT #18326]
114f7780384371121918624ae2c80ecfce545683Tinderbox User2388. [bug] Avoid using tables for layout purposes in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater statistics XSL [RT #18159].
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2387. [bug] Silence compiler warnings in lib/isc/radix.c.
49ab13eefc8841ea42865ae09d5a2f760577089eTinderbox User [RT #18147] [RT #18258]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2386. [func] Add warning about too small 'open files' limit.
757ff043760e4743dda1a10e7d58349275934902Tinderbox User2385. [bug] A condition variable in socket.c could leak in
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User rare error handling [RT #17968].
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2384. [security] Fully randomize UDP query ports to improve
bbc0e1c4f47f101c4a64db3469352c49a49e734fTinderbox User forgery resilience. [RT #17949, #18098]
d58e33bfabfee19a035031dac633d36659738d56Evan Hunt2383. [bug] named could double queries when they resulted in
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User SERVFAIL due to overkilling EDNS0 failure detection.
19ad308d84cbf446a144e5a91f2032389a9d65c1Tinderbox User2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
42c81cf2de732ec6d00e73fc755a399ca037e543Mark Andrews2381. [port] dlz/mysql: support multiple install layouts for
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User mysql. <prefix>/include/{,mysql/}mysql.h and
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User <prefix>/lib/{,mysql/}. [RT #18152]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater proofs which, in turn, caused validation failures
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater for insecure zones immediately below a secure zone
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater the server was authoritative for. [RT #18112]
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
71fc4775d04aea66809e3eb5b5159c55413bdc5cMark Andrews TLDs and supported RRs with TTLs [RT #17972]
7d704e522860496310bb29c28e76064868401a9cMark Andrews2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2376. [bug] Change #2144 was not complete.
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2375. [placeholder]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2374. [bug] "blackhole" ACLs could cause named to segfault due
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater to some uninitialized memory. [RT #18095]
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater2373. [bug] Default values of zone ACLs were re-parsed each time a
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater new zone was configured, causing an overconsumption
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater of memory. [RT #18092]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
fe600c3ad88c0bb078283a953d048087d227c0e5Tinderbox User2371. [doc] Add +nsid option to dig man page. [RT #18039]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2370. [bug] "rndc freeze" could trigger an assertion in named
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when called on a nonexistent zone. [RT #18050]
da24e725ff982595d74da7e75e9fbd6a696367ccAutomatic Updater2369. [bug] libbind: Array bounds overrun on read in bitncmp().
b7fcdb0bee7680fe9536bec3b204aea094bc514eTinderbox User2368. [port] Linux: use libcap for capability management if
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User possible. [RT# 18026]
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User2367. [bug] Improve counting of dns_resstatscounter_retry
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson2366. [bug] Adb shutdown race. [RT #18021]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2365. [bug] Fix a bug that caused dns_acl_isany() to return
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews spurious results. [RT #18000]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2364. [bug] named could trigger a assertion when serving a
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews malformed signed zone. [RT #17828]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2362. [cleanup] Make "rrset-order fixed" a compile-time option.
8bc3d252395842452a6d2c775cf8445f6349e331Tinderbox User settable by "./configure --enable-fixed-rrset".
ca5ba35827e475a824ec79d489dbcdb3341a35ccTinderbox User Disabled by default. [RT #17977]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2361. [bug] "recursion" statistics counter could be counted
fedd407a76adfdd745eb7d2461673693c6f9fea9Mark Andrews multiple times for a single query. [RT #17990]
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox User2360. [bug] Fix a condition where we release a database version
757ff043760e4743dda1a10e7d58349275934902Tinderbox User (which may acquire a lock) while holding the lock.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2359. [bug] Fix NSID bug. [RT #17942]
8e5fce1f9ceba17dd7e3ff0eb287e1e999c14249Mark Andrews2358. [doc] Update host's default query description. [RT #17934]
4c9f230f7ca5b2b08ea8fd7a6944135801dbe152Tinderbox User2357. [port] Don't use OpenSSL's engine support in versions before
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater OpenSSL 0.9.7f. [RT #17922]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2356. [bug] Built in mutex profiler was not scalable enough.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2355. [func] Extend the number statistics counters available.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2354. [bug] Failed to initialize some rdatasetheader_t elements.
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2353. [func] Add support for Name Server ID (RFC 5001).
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt 'dig +nsid' requests NSID from server.
a8677ecad546c955406b341eb8344ed06768b11eTinderbox User 'request-nsid yes;' causes recursive server to send
a8677ecad546c955406b341eb8344ed06768b11eTinderbox User NSID requests to upstream servers. Server responds
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt to NSID requests with the string configured by
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt 'server-id' option. [RT #17091]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2352. [bug] Various GSS_API fixups. [RT #17729]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2350. [port] win32: IPv6 support. [RT #17797]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2349. [func] Provide incremental re-signing support for secure
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews dynamic zones. [RT #1091]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User Documentation is in the new README.pkcs11 file.
603cf17f33da24d460616389ec40d6f2a6e110a0Automatic Updater New tool, dnssec-keyfromlabel, which takes the
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox User label of a key pair in a HSM and constructs a DNS
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User key pair for use by named and dnssec-signzone.
757ff043760e4743dda1a10e7d58349275934902Tinderbox User2347. [bug] Delete now traverses the RB tree in the canonical
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User order. [RT #17451]
71fa3534bfaf174f6a938dc1ba3522f66606c4e1Mark Andrews2346. [func] Memory statistics now cover all active memory contexts
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User in increased detail. [RT #17580]
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User2345. [bug] named-checkconf failed to detect when forwarders
b5423cbff7175727ed9046c8c670d8a7bb4d01eaTinderbox User were set at both the options/view level and in
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews a root zone. [RT #17671]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2344. [bug] Improve "logging{ file ...; };" documentation.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2343. [bug] (Seemingly) duplicate IPv6 entries could be
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User created in ADB. [RT #17837]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2341. [bug] libbind: add missing -I../include for off source
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User tree builds. [RT #17606]
365bb6f27eace1836cb5bc6b5f9ed8c88fe22e4aTinderbox User2340. [port] openbsd: interface configuration. [RT #17700]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2339. [port] tru64: support for libbind. [RT #17589]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2338. [bug] check_ds() could be called with a non DS rdataset.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
71fa3534bfaf174f6a938dc1ba3522f66606c4e1Mark Andrews2336. [func] If "named -6" is specified then listen on all IPv6
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater interfaces if there are not listen-on-v6 clauses in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2335. [port] sunos: libbind and *printf() support for long long.
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater bug in fromstruct_txt(). [RT #17609]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2333. [bug] Fix off by one error in isc_time_nowplusinterval().
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2332. [contrib] query-loc-0.4.0. [RT #17602]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2331. [bug] Failure to regenerate any signatures was not being
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews reported nor being past back to the UPDATE client.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2330. [bug] Remove potential race condition when handling
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater over memory events. [RT #17572]
137fdbc214e99c4cbe57551e9e14f2015c2e42aeTinderbox User WARNING: API CHANGE: over memory callback
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater function now needs to call isc_mem_waterack().
83d29eff2912ef967596eb5ed148de7668b35564Automatic Updater See <isc/mem.h> for details.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2329. [bug] Clearer help text for dig's '-x' and '-i' options.
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
098097efb95046a4a5285b6dae95dea3e3b70853Automatic Updater2327. [bug] It was possible to dereference a NULL pointer in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater rbtdb.c. Implement dead node processing in zones as
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater we do for caches. [RT #17312]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2326. [bug] It was possible to trigger a INSIST in the acache
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews2325. [port] Linux: use capset() function if available. [RT #17557]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User2323. [port] tru64: namespace clash. [RT #17547]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2322. [port] MacOS: work around the limitation of setrlimit()
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater for RLIMIT_NOFILE. [RT #17526]
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2321. [placeholder]
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews2320. [func] Make statistics counters thread-safe for platforms
e705db6d5d886dc14f4a75a2046a075c0750e7eeAutomatic Updater that support certain atomic operations. [RT #17466]
a8677ecad546c955406b341eb8344ed06768b11eTinderbox User2319. [bug] Silence Coverity warnings in
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2318. [port] sunos fixes for libbind. [RT #17514]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2315. [bug] Used incorrect address family for mapped IPv4
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews addresses in acl.c. [RT #17519]
137fdbc214e99c4cbe57551e9e14f2015c2e42aeTinderbox User2314. [bug] Uninitialized memory use on error path in
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2313. [cleanup] Silence Coverity warnings. Handle private stacks.
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews [RT #17447] [RT #17478]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt2311. [bug] IPv6 addresses could match IPv4 ACL entries and
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt vice versa. [RT #17462]
a8677ecad546c955406b341eb8344ed06768b11eTinderbox User2310. [bug] dig, host, nslookup: flush stdout before emitting
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt debug/fatal messages. [RT #17501]
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2306. [bug] Remove potential race from lib/dns/resolver.c.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2305. [security] inet_network() buffer overflow. CVE-2008-0122.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2304. [bug] Check returns from all dns_rdata_tostruct() calls.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2301. [bug] Remove resource leak and fix error messages in
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User bin/tests/system/lwresd/lwtest.c. [RT #17474]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2300. [bug] Fixed failure to close open file in
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2299. [bug] Remove unnecessary NULL check in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2298. [bug] isc_mutex_lock() failure not caught in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2297. [bug] isc_entropy_createfilesource() failure not caught in
1ac49378a458420bc685293d12e567d7222d17b6Tinderbox User2296. [port] Allow docbook stylesheet location to be specified to
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt configure. [RT #17457]
fe600c3ad88c0bb078283a953d048087d227c0e5Tinderbox User2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2294. [func] Allow the experimental statistics channels to have
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User multiple connections and ACL.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User Note: the stats-server and stats-server-v6 options
b16e2045ac28229c31f1ea3ebad15cbcb13e1d24Automatic Updater available in the previous beta releases are replaced
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User with the generic statistics-channels statement.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2293. [func] Add ACL regression test. [RT #17375]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2292. [bug] Log if the working directory is not writable.
4cde88fbf4c5e78a785d40f364cdcf60f3575f0cTinderbox User2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
5b56652059e2c22185a0b2bb1f5e58eb89a44426Tinderbox User failure to set PR_SET_DUMPABLE. [RT #17312]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2290. [bug] Let AD in the query signal that the client wants AD
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User set in the response. [RT #17301]
6c910bd5e4a85a56e3a61fdf7b237a45bb2553eeTinderbox User2289. [func] named-checkzone now reports the out-of-zone CNAME
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater found. [RT #17309]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2288. [port] win32: mark service as running when we have finished
66cf4a406525db9c42977d8034a60e0a8e2a9290Automatic Updater loading. [RT #17441]
d3ba57ed92b7095fdeabc444af5dd18ac4781064Tinderbox User2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2286. [func] Allow a TCP connection to be used as a weak
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User authentication method for reverse zones.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User New update-policy methods tcp-self and 6to4-self.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2285. [func] Test framework for client memory context management.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2284. [bug] Memory leak in UPDATE prerequisite processing.
ca5ba35827e475a824ec79d489dbcdb3341a35ccTinderbox User2283. [bug] TSIG keys were not attaching to the memory
757ff043760e4743dda1a10e7d58349275934902Tinderbox User context. TSIG keys should use the rings
71fa3534bfaf174f6a938dc1ba3522f66606c4e1Mark Andrews memory context rather than the clients memory
ca5ba35827e475a824ec79d489dbcdb3341a35ccTinderbox User context. [RT #17377]
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2281. [bug] Attempts to use undefined acls were not being logged.
b6e12209e3e7df826f5f8f949ad400ec6d1f6371Tinderbox User2280. [func] Allow the experimental http server to be reached
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User over IPv6 as well as IPv4. [RT #17332]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
609b8d08176469485edce25f3c2f50365bbd3819Mark Andrews to protect applications from receiving spurious
d3ba57ed92b7095fdeabc444af5dd18ac4781064Tinderbox User SIGPIPE signals when using the resolver.
757ff043760e4743dda1a10e7d58349275934902Tinderbox User2278. [bug] win32: handle the case where Windows returns no
049728912c39135db248f9b48f8f26675f456e9dTinderbox User search list or DNS suffix. [RT #17354]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2277. [bug] Empty zone names were not correctly being caught at
fd0f3e7cd8bc0e7fd08cc81ceb6ced861b706c97Mark Andrews in the post parse checks. [RT #17357]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox User2275. [func] Add support to dig to perform IXFR queries over UDP.
a80993946f29ff39df38818ee9b2e58a4e46cb7eTinderbox User2274. [func] Log zone transfer statistics. [RT #17336]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2273. [bug] Adjust log level to WARNING when saving inconsistent
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User stub/slave master and journal files. [RT# 17279]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox User2271. [bug] Fix a memory leak in http server code [RT #17100]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2270. [bug] dns_db_closeversion() version->writer could be reset
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater before it is tested. [RT #17290]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater --- 9.5.0b1 released ---
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews2267. [bug] Radix tree node_num value could be set incorrectly,
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt causing positive ACL matches to look like negative
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt ones. [RT #17311]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2266. [bug] client.c:get_clientmctx() returned the same mctx
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater once the pool of mctx's was filled. [RT #17218]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2265. [bug] Test that the memory context's basic_table is non NULL
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt before freeing. [RT #17265]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2264. [bug] Server prefix length was being ignored. [RT #17308]
04bc14c887243e624469fdbd336c1d3cb8ed7cc7Tinderbox User2263. [bug] "named-checkconf -z" failed to set default value
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for "check-integrity". [RT #17306]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2262. [bug] Error status from all but the last view could be
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews lost. [RT #17292]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2260. [bug] Reported wrong clients-per-query when increasing the
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater value. [RT #17236]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2259. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.5.0a7 released ---
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2257. [bug] win32: Use the full path to vcredist_x86.exe when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater calling it. [RT #17222]
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater2256. [bug] win32: Correctly register the installation location of
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2254. [bug] timer.c:dispatch() failed to lock timer->lock
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews when reading timer->idle allowing it to see
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater intermediate values as timer->idle was reset by
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater isc_timer_touch(). [RT #17243]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2253. [func] "max-cache-size" defaults to 32M.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "max-acache-size" defaults to 16M.
0ead2ac0a4b59c3e4a731027f0f66fbe602b1289Tinderbox User2252. [bug] Fixed errors in sortlist code [RT #17216]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2251. [placeholder]
d98b4b724343547314bde32a54966c8f124a5f03Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews memory statistics file should be written or not.
78bc8fdc2488c92d7228e8de19827e2c114c56caAutomatic Updater Additionally named's -m option will cause the
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt statistics file to be written. [RT #17113]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2249. [bug] Only set Authentic Data bit if client requested
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DNSSEC, per RFC 3655 [RT #17175]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2247. [doc] Sort doc/misc/options. [RT #17067]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews robust. [RT #17147]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2245. [bug] Validating lack of DS records at trust anchors wasn't
757ff043760e4743dda1a10e7d58349275934902Tinderbox User working. [RT #17151]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2244. [func] Allow the check of nameserver names against the
757ff043760e4743dda1a10e7d58349275934902Tinderbox User SOA MNAME field to be disabled by specifying
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater 'notify-to-soa yes;'. [RT #17073]
dbb012765c735ee0d82dedb116cdc7cf18957814Evan Hunt2243. [func] Configuration files without a newline at the end now
e705db6d5d886dc14f4a75a2046a075c0750e7eeAutomatic Updater parse without error. [RT #17120]
04bc14c887243e624469fdbd336c1d3cb8ed7cc7Tinderbox User2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews library could require a source of random data.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater a number of INSIST()s into plain fatal() errors
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater which report the triggering result code.
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews The 'key' command wasn't disabling GSS-TSIG.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2238. [bug] It was possible to trigger a REQUIRE when a
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User validation was canceled. [RT #17106]
40696c4c389a780082fb77840c173b201ce696d6Automatic Updater2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2236. [bug] dnssec-signzone failed to preserve the case of
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox User of wildcard owner names. [RT #17085]
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2233. [func] Add support for O(1) ACL processing, based on
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater radix tree code originally written by Kevin
e9e4257668ff6c4e583b0c0db2508650b0b677b8Tinderbox User Brintnall. [RT #16288]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2232. [bug] dns_adb_findaddrinfo() could fail and return
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ISC_R_SUCCESS. [RT #17137]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2230. [bug] We could INSIST reading a corrupted journal.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2229. [bug] Null pointer dereference on query pool creation
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater failure. [RT #17133]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2228. [contrib] contrib: Change 2188 was incomplete.
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2227. [cleanup] Tidied up the FAQ. [RT #17121]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2226. [placeholder]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2225. [bug] More support for systems with no IPv4 addresses.
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2224. [bug] Defer journal compaction if a xfrin is in progress.
e213b38b48486b3a6349329655d9169085001fa0Tinderbox User2223. [bug] Make a new journal when compacting. [RT #17119]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2222. [func] named-checkconf now checks server key references.
e213b38b48486b3a6349329655d9169085001fa0Tinderbox User2221. [bug] Set the event result code to reflect the actual
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews record turned to caller when a cache update is
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater rejected due to a more credible answer existing.
e5fe07a7ebff18f7ed4ac434b37daff6c8ee5d5bAutomatic Updater2220. [bug] win32: Address a race condition in final shutdown of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the Windows socket code. [RT #17028]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2219. [bug] Apply zone consistency checks to additions, not
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User removals, when updating. [RT #17049]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2218. [bug] Remove unnecessary REQUIRE from dns_validator_create().
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson2217. [func] Adjust update log levels. [RT #17092]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2216. [cleanup] Fix a number of errors reported by Coverity.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2215. [bug] Bad REQUIRE check isc_hmacsha1_verify(). [RT #17094]
3e9c07abfd4ad76b1f8085f0f96f5646f2d9e219Tinderbox User2214. [bug] Deregister OpenSSL lock callback when cleaning
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User up. Reorder OpenSSL cleanup so that RAND_cleanup()
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User is called before the locks are destroyed. [RT #17098]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2213. [bug] SIG0 diagnostic failure messages were looking at the
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User wrong status code. [RT #17101]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2212. [func] 'host -m' now causes memory statistics and active
5b4ef313da4283079786e516b4b07a1691e1dc50Mark Andrews memory to be printed at exit. [RT 17028]
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User2211. [func] Update "dynamic update temporarily disabled" message.
a900e4f99ff134b567b6df5ac2c841c7d0c551d3Automatic Updater2210. [bug] Deleting class specific records via UPDATE could
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater fail. [RT #17074]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2209. [port] osx: linking against user supplied static OpenSSL
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater libraries failed as the system ones were still being
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater found. [RT #17078]
4fda24d843edac463c98785ec0c850d912592dc1Tinderbox User2208. [port] win32: make sure both build methods produce the
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater same output. [RT #17058]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2207. [port] Some implementations of getaddrinfo() fail to set
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ai_canonname correctly. [RT #17061]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User --- 9.5.0a6 released ---
77932ac533c711eca5cd86de4e7eca8d91102b43Tinderbox User2206. [security] "allow-query-cache" and "allow-recursion" now
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater cross inherit from each other.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater If allow-query-cache is not set in named.conf then
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews allow-recursion is used if set, otherwise allow-query
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews is used if set, otherwise the default (localnets;
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews localhost;) is used.
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User If allow-recursion is not set in named.conf then
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User allow-query-cache is used if set, otherwise allow-query
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews is used if set, otherwise the default (localnets;
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User localhost;) is used.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2205. [bug] libbind: change #2119 broke thread support. [RT #16982]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2204. [bug] "rndc flushanme name unknown-view" caused named
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews to crash. [RT #16984]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2203. [security] Query id generation was cryptographically weak.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews [RT # 16915]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2202. [security] The default acls for allow-query-cache and
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews allow-recursion were not being applied. [RT #16960]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2201. [bug] The build failed in a separate object directory.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2200. [bug] The search for cached NSEC records was stopping to
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews early leading to excessive DLV queries. [RT #16930]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2199. [bug] win32: don't call WSAStartup() while loading dlls.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2198. [bug] win32: RegCloseKey() could be called when
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews RegOpenKeyEx() failed. [RT #16911]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2197. [bug] Add INSIST to catch negative responses which are
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews not setting the event result code appropriately.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2196. [port] win32: yield processor while waiting for once to
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews to complete. [RT #16958]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2195. [func] dnssec-keygen now defaults to nametype "ZONE"
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews when generating DNSKEYs. [RT #16954]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2194. [bug] Close journal before calling 'done' in xfrin.c.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User --- 9.5.0a5 released ---
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2193. [port] win32: BINDInstall.exe is now linked statically.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2192. [port] win32: use vcredist_x86.exe to install Visual
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User Studio's redistributable dlls if building with
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews Visual Stdio 2005 or later.
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2191. [func] named-checkzone now allows dumping to stdout (-).
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews named-checkconf now has -h for help.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater named-checkzone now has -h for help.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User rndc now has -h for help.
e23256e740b238bddb4ba41ffac5f81a01c92245Automatic Updater Better handling of '-?' for usage summaries.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2190. [func] Make fallback to plain DNS from EDNS due to timeouts
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User more visible. New logging category "edns-disabled".
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2189. [bug] Handle socket() returning EINTR. [RT #15949]
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2188. [contrib] queryperf: autoconf changes to make the search for
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User libresolv or libbind more robust. [RT #16299]
cd6e9010079a4e58f7e30063df3dec0ff154ad59Tinderbox User2187. [bug] query_addds(), query_addwildcardproof() and
cd6e9010079a4e58f7e30063df3dec0ff154ad59Tinderbox User query_addnxrrsetnsec() should take a version
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater argument. [RT #16368]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2186. [port] cygwin: libbind: check for struct sockaddr_storage
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson independently of IPv6. [RT #16482]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2185. [port] sunos: libbind: check for ssize_t, memmove() and
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews memchr(). [RT #16463]
91d187ce035f39073f0732ff2a401a45c3c955fbMark Andrews2184. [bug] bind9.xsl.h didn't build out of the source tree.
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User2183. [bug] dnssec-signzone didn't handle offline private keys
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews well. [RT #16832]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2182. [bug] dns_dispatch_createtcp() and dispatch_createudp()
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User could return ISC_R_SUCCESS when they ran out of
22d32791e5daa0bc80335a0f10ab2de95f41ccdbTinderbox User memory. [RT #16365]
0e573cdd111e060e5f6c18249b5ccacbe8abe278Tinderbox User2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
dc238a06bffa79de141ee7655765e2df91498a8aTinderbox User2180. [cleanup] Remove bit test from 'compress_test' as they
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt are no longer needed. [RT #16497]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2179. [func] 'rndc command zone' will now find 'zone' if it is
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt unique to all the views. [RT #16821]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2178. [bug] 'rndc reload' of a slave or stub zone resulted in
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt a reference leak. [RT #16867]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2177. [bug] Array bounds overrun on read (rcodetext) at
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt debug level 10+. [RT #16798]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2176. [contrib] dbus update to handle race condition during
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt initialization (Bugzilla 235809). [RT #16842]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2175. [bug] win32: windows broadcast condition variable support
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt was broken. [RT #16592]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2174. [bug] I/O errors should always be fatal when reading
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt master files. [RT #16825]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2173. [port] win32: When compiling with MSVS 2005 SP1 we also
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt --- 9.5.0a4 released ---
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2172. [bug] query_addsoa() was being called with a non zone db.
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2171. [bug] Handle breaks in DNSSEC trust chains where the parent
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt servers are not DS aware (DS queries to the parent
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt return a referral to the child).
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2170. [func] Add acache processing to test suite. [RT #16711]
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt2169. [bug] host, nslookup: when reporting NXDOMAIN report the
98922b2b2b024dcca25be7c220cf3b16b1e6c4b5Evan Hunt given name and not the last name searched for.
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User2168. [bug] nsupdate: in non-interactive mode treat syntax errors
710bce1a85c96e85ca1a90471382055acd29d51fTinderbox User as fatal errors. [RT #16785]
37d8e0a4455876fe1e4cca511076cc2c5ab9eedeTinderbox User2167. [bug] When re-using a automatic zone named failed to
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews attach it to the new view. [RT #16786]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews --- 9.5.0a3 released ---
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2166. [bug] When running in batch mode, dig could misinterpret
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews a server address as a name to be looked up, causing
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews unexpected output. [RT #16743]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2165. [func] Allow the destination address of a query to determine
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews if we will answer the query or recurse.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson allow-query-on, allow-recursion-on and
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews allow-query-cache-on. [RT #16291]
0eb371ca0dab50ae3462e98794a6126198c52f4bMark Andrews2164. [bug] The code to determine how named-checkzone /
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox User named-compilezone was called failed under windows.
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews2163. [bug] If only one of query-source and query-source-v6
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews specified a port the query pools code broke (change
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews 2129). [RT #16768]
bed0874e1a09e810575328c4bfc346a47514b69fMark Andrews2162. [func] Allow "rrset-order fixed" to be disabled at compile
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User time. [RT #16665]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2161. [bug] Fix which log messages are emitted for 'rndc flush'.
922e6a3c2ac4ef900dd9dc99f0cc137f18372583Andreas Gustafsson2160. [bug] libisc wasn't handling NULL ifa_addr pointers returned
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User from getifaddrs(). [RT #16708]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User --- 9.5.0a2 released ---
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2159. [bug] Array bounds overrun in acache processing. [RT #16710]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2158. [bug] ns_client_isself() failed to initialize key
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User leading to a REQUIRE failure. [RT #16688]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2157. [func] dns_db_transfernode() created. [RT #16685]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User resolver.c:validated() and resolver.c:cache_name().
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User Fix a memory leak in rbtdb.c:free_noqname().
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User Make lookup.c:lookup_find() robust against
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User event leaks. [RT #16685]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2155. [contrib] SQLite sdb module from jaboydjr@netwalk.com.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User matched in acls by omitting the scope. [RT #16599]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2153. [bug] nsupdate could leak memory. [RT #16691]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2152. [cleanup] Use sizeof(buf) instead of fixed number in
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User dighost.c:get_trusted_key(). [RT #16678]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2151. [bug] Missing newline in usage message for journalprint.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2150. [bug] 'rrset-order cyclic' uniformly distribute the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User starting point for the first response for a given
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User RRset. [RT #16655]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2149. [bug] isc_mem_checkdestroyed() failed to abort on
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews if there were still active memory contexts.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2148. [func] Add positive logging for rndc commands. [RT #14623]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2147. [bug] libbind: remove potential buffer overflow from
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2146. [cleanup] Silence Linux's spurious "obsolete setsockopt
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User SO_BSDCOMPAT" message. [RT #16641]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2145. [bug] Check DS/DLV digest lengths for known digests.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2144. [cleanup] Suppress logging of SERVFAIL from forwarders.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2143. [bug] We failed to restart the IPv6 client when the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User kernel failed to return the destination the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User packet was sent to. [RT #16613]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2142. [bug] Handle master files with a modification time that
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User matches the epoch. [RT# 16612]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User equivalent of LDH checks). [RT #16609]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2140. [bug] libbind: missing unlock on pthread_key_create()
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User failures. [RT #16654]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2139. [bug] dns_view_find() was being called with wrong type
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User in adb.c. [RT #16670]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2138. [bug] Lock order reversal in resolver.c. [RT #16653]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2137. [port] Mips little endian and/or mips 64 bit are now
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater supported for atomic operations. [RT#16648]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2136. [bug] nslookup/host looped if there was no search list
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User and the host didn't exist. [RT #16657]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2134. [func] Additional statistics support. [RT #16666]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2133. [port] powerpc: Support both IBM and MacOS Power PC
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User assembler syntaxes. [RT #16647]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2132. [bug] Missing unlock on out of memory in
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User dns_dispatchmgr_setudp().
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2130. [func] Log if CD or DO were set. [RT #16640]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2129. [func] Provide a pool of UDP sockets for queries to be
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User made over. See use-queryport-pool, queryport-pool-ports
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User and queryport-pool-updateinterval. [RT #16415]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2128. [doc] xsltproc --nonet, update DTD versions. [RT #16635]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2126. [security] Serialize validation of type ANY responses. [RT #16555]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2125. [bug] dns_zone_getzeronosoattl() REQUIRE failure if DLZ
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews was defined. [RT #16574]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2124. [security] It was possible to dereference a freed fetch
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User context. [RT #16584]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User --- 9.5.0a1 released ---
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2123. [func] Use Doxygen to generate internal documentation.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2122. [func] Experimental http server and statistics support
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User for named via xml.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2121. [func] Add a 10 slot dead masters cache (LRU) with a 600
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User second timeout. [RT #16553]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2120. [doc] Fix markup on nsupdate man page. [RT #16556]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2119. [compat] libbind: allow res_init() to succeed enough to
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User return the default domain even if it was unable
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User to allocate memory.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2118. [bug] Handle response with long chains of domain name
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User compression pointers which point to other compression
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User pointers. [RT #16427]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2117. [bug] DNSSEC fixes: named could fail to cache NSEC records
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User which could lead to validation failures. named didn't
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User handle negative DS responses that were in the process
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User of being validated. Check CNAME bit before accepting
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User NODATA proof. To be able to ignore a child NSEC there
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User must be SOA (and NS) set in the bitmap. [RT #16399]
d3be47a4a841ca6fc07e8f18004cf72174e2d117Tinderbox User2116. [bug] 'rndc reload' could cause the cache to continually
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User be cleaned. [RT #16401]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2115. [bug] 'rndc reconfig' could trigger a INSIST if the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User number of masters for a zone was reduced. [RT #16444]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2114. [bug] dig/host/nslookup: searches for names with multiple
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User labels were failing. [RT #16447]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2113. [bug] nsupdate: if a zone is specified it should be used
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User for server discover. [RT# 16455]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2112. [security] Warn if weak RSA exponent is used. [RT #16460]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2111. [bug] Fix a number of errors reported by Coverity.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2110. [bug] "minimal-responses yes;" interacted badly with BIND 8
3d2e052eb879189e6d853097f8b568d887323bebTinderbox User priming queries. [RT #16491]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2109. [port] libbind: silence aix 5.3 compiler warnings. [RT #16502]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2108. [func] DHCID support. [RT #16456]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2106. [func] 'rndc status' now reports named's version. [RT #16426]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2105. [func] GSS-TSIG support (RFC 3645).
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2104. [port] Fix Solaris SMF error message.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2103. [port] Add /usr/sfw to list of locations for OpenSSL
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User under Solaris.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2102. [port] Silence Solaris 10 warnings.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2101. [bug] OpenSSL version checks were not quite right.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2100. [port] win32: copy libeay32.dll to Build\Debug.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User Copy Debug\named-checkzone to Debug\named-compilezone.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2099. [port] win32: more manifest issues.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2098. [bug] Race in rbtdb.c:no_references(), which occasionally
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User triggered an INSIST failure about the node lock
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User reference. [RT #16411]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2097. [bug] named could reference a destroyed memory context
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User after being reloaded / reconfigured. [RT #16428]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2096. [bug] libbind: handle applications that fail to detect
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User res_init() failures better.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2095. [port] libbind: alway prototype inet_cidr_ntop_ipv6() and
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User net_cidr_ntop_ipv6(). [RT #16388]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2094. [contrib] Update named-bootconf. [RT# 16404]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2093. [bug] named-checkzone -s was broken.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2092. [bug] win32: dig, host, nslookup. Use registry config
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews if resolv.conf does not exist or no nameservers
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User listed. [RT #15877]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2091. [port] dighost.c: race condition on cleanup. [RT #16417]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2090. [port] win32: Visual C++ 2005 command line manifest support.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2089. [security] Raise the minimum safe OpenSSL versions to
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User prior to these have known security flaws which
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews are (potentially) exploitable in named. [RT #16391]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2088. [security] Change the default RSA exponent from 3 to 65537.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2087. [port] libisc failed to compile on OS's w/o a vsnprintf.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2086. [port] libbind: FreeBSD now has get*by*_r() functions.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2085. [doc] win32: added index.html and README to zip. [RT #16201]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2084. [contrib] dbus update for 9.3.3rc2.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2083. [port] win32: Visual C++ 2005 support.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2082. [doc] Document 'cache-file' as a test only option.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
10702d681eb650391bcaa0e2704aa3cf2dbf0e98Mark Andrews2080. [port] libbind: res_init.c did not compile on older versions
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User of Solaris. [RT #16363]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2079. [bug] The lame cache was not handling multiple types
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User correctly. [RT #16361]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2078. [bug] dnssec-checkzone output style "default" was badly
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User named. It is now called "relative". [RT #16326]
6fe48fb46e53ffc37542853a1edb74cb481b7d94Automatic Updater2077. [bug] 'dnssec-signzone -O raw' wasn't outputting the
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User complete signed zone. [RT #16326]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2076. [bug] Several files were missing #include <config.h>
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User causing build failures on OSF. [RT #16341]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2075. [bug] The spillat timer event hander could leak memory.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2074. [bug] dns_request_createvia2(), dns_request_createvia3(),
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews dns_request_createraw2() and dns_request_createraw3()
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User failed to send multiple UDP requests. [RT #16349]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2073. [bug] Incorrect semantics check for update policy "wildcard".
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2072. [bug] We were not generating valid HMAC SHA digests.
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2071. [port] Test whether gcc accepts -fno-strict-aliasing.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2070. [bug] The remote address was not always displayed when
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User reporting dispatch failures. [RT #16315]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2069. [bug] Cross compiling was not working. [RT #16330]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2068. [cleanup] Lower incremental tuning message to debug 1.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2067. [bug] 'rndc' could close the socket too early triggering
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User a INSIST under Windows. [RT #16317]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2066. [security] Handle SIG queries gracefully. [RT #16300]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2065. [bug] libbind: probe for HPUX prototypes for
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User endprotoent_r() and endservent_r(). [RT 16313]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2064. [bug] libbind: silence AIX compiler warnings. [RT #16218]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2063. [bug] Change #1955 introduced a bug which caused the first
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User 'rndc flush' call to not free memory. [RT #16244]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2062. [bug] 'dig +nssearch' was reusing a buffer before it had
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews been returned by the socket code. [RT #16307]
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews2061. [bug] Accept expired wildcard message reversed. [RT #16296]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2060. [bug] Enabling DLZ support could leave views partially
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User configured. [RT #16295]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2059. [bug] Search into cache rbtdb could trigger an INSIST
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User failure while cleaning up a stale rdataset.
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2058. [bug] Adjust how we calculate rtt estimates in the presence
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User of authoritative servers that drop EDNS and/or CD
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User requests. Also fallback to EDNS/512 and plain DNS
e9ab17d95e4288ab5ddedb7c89a9588c13c74bddMark Andrews faster for zones with less than 3 servers. [RT #16187]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2057. [bug] Make setting "ra" dependent on both allow-query-cache
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User and allow-recursion. [RT #16290]
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User2056. [bug] dig: ixfr= was not being treated case insensitively
9f6827a4afb75224214ea96452e787e7f710b8b6Tinderbox User at all times. [RT #15955]
017d755d7a606dfb1e02a9d6e2b29e49e39fde16Tinderbox User2055. [bug] Missing goto after dropping multicast query.
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2054. [port] freebsd: do not explicitly link against -lpthread.
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2053. [port] netbsd:libbind: silence compiler warnings. [RT #16220]
e676a596869d8a80a644c99a848afb53d1c5975eMark Andrews2052. [bug] 'rndc' improve connect failed message to report
081a44bd3019b18aec03c5c0746538fdc901da48Evan Hunt the failing address. [RT #15978]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2051. [port] More strtol() fixes. [RT #16249]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2050. [bug] Parsing of NSAP records was not case insensitive.
4c9f230f7ca5b2b08ea8fd7a6944135801dbe152Tinderbox User2049. [bug] Restore SOA before AXFR when falling back from
af9dbf1ccdd53933aaae9300d13ce0965d39b067Evan Hunt a attempted IXFR when transferring in a zone.
950d203b64f512b85fcc093ee1e9e3e531a1aea3Tinderbox User Allow a initial SOA query before attempting
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User a AXFR to be requested. [RT #16156]
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2048. [bug] It was possible to loop forever when using
a8677ecad546c955406b341eb8344ed06768b11eTinderbox User avoid-v4-udp-ports / avoid-v6-udp-ports when
8f2c45a35dd8c40bcc9caba8f7d40ce64fc27bcdAutomatic Updater the OS always returned the same local port.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2047. [bug] Failed to initialize the interface flags to zero.
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
b886b04d8d2b085cbf3e1bf4442dee87f43ba5e4Tinderbox User cleanup [RT #16247].
6508846efcd15de6b43b7da44c0bfcd665947630Tinderbox User2045. [func] Use lock buckets for acache entries to limit memory
82a986aaa5d3384a541b5a7d6dae8cf0726d6513Tinderbox User consumption. [RT #16183]
a7c412f37cc73d0332887a746e81220cbf09dd00Mark Andrews2044. [port] Add support for atomic operations for Itanium.
7ac34650fa344f42211d6da744ae486b0145a083Tinderbox User2043. [port] nsupdate/nslookup: Force the flushing of the prompt
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox User for interactive sessions. [RT#16148]
dedefc0bdbb4e6e39eeb98aa2fc6883efec2ddb0Mark Andrews2042. [bug] named-checkconf was incorrectly rejecting the
16f6050f29b6b0422cee858e609f65e474e70ef2Tinderbox User logging category "config". [RT #16117]
4fe0411487e8e4401477684c0a2bac041ca7c2d5Tinderbox User2041. [bug] "configure --with-dlz-bdb=yes" produced a bad
27739dd25026283c24645c8a1044b95ef9eb5ac6Tinderbox User set of libraries to be linked. [RT #16129]
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which