CHANGES revision ef421f66f47224a42073deaf087378c5d0c9952e
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews3043. [test] Merged in the NetBSD ATF test framework (currently
885f47576842cf3c569315b9a48bd9f0ca03f203Automatic Updater version 0.12) for development of future unit tests.
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater Use configure --with-atf to build ATF internally
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater or configure --with-atf=prefix to use an external
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater copy. [RT #23209]
0bddff542cf2ae1b6595020f2f72ca482c6b438fAutomatic Updater3042. [bug] dig +trace could fail attempting to use IPv6
75b70a68aefaa17ac4e768d5ed85d2f50d471490Automatic Updater addresses on systems with only IPv4 connectivity.
78cb74fab4665da2e2641ba909c6f59f74cc4193Automatic Updater3041. [bug] dnssec-signzone failed to generate new signatures on
c89d02f2fb4c06168236d600e86831cff324f763Mark Andrews ttl changes. [RT #23330]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington3040. [bug] Named failed to validate insecure zones where a node
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews with a CNAME existed between the trust anchor and the
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater top of the zone. [RT #23338]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3039. [func] Redirect on NXDOMAIN support. [RT #23146]
56874aef380a64a2c183b7c282c3e7a361d67fa1Automatic Updater3038. [bug] Install <dns/rpz.h>. [RT #23342]
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater3037. [doc] Update COPYRIGHT to contain all the individual
3cc98b8ecedcbc8465f1cf2740b966b315662430Automatic Updater copyright notices that cover various parts.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3036. [bug] Check built-in zone arguments to see if the zone
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater is re-usable or not. [RT #21914]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3035. [cleanup] Simplify by using strlcpy. [RT #22521]
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews3034. [cleanup] nslookup: use strlcpy instead of safecopy. [RT #22521]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3033. [cleanup] Add two INSIST(bucket != DNS_ADB_INVALIDBUCKET).
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3032. [bug] rdatalist.c: add missing REQUIREs. [RT #22521]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3031. [bug] dns_rdataclass_format() handle a zero sized buffer.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3030. [bug] dns_rdatatype_format() handle a zero sized buffer.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3029. [bug] isc_netaddr_format() handle a zero sized buffer.
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt3028. [bug] isc_sockaddr_format() handle a zero sized buffer.
aa9c561961e9d877946ebaa8795fa2be054ab7bfEvan Hunt3027. [bug] Add documented REQUIREs to cfg_obj_asnetprefix() to
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater catch NULL pointer dereferences before they happen.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3026. [bug] lib/isc/httpd.c: check that we have enough space
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater after calling grow_headerspace() and if not
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater re-call grow_headerspace() until we do. [RT #22521]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3025. [bug] Fixed a possible deadlock due to zone resigning.
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater3024. [func] RTT Banding removed due to minor security increase
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews but major impact on resolver latency. [RT #23310]
eabc9c3c07cd956d3c436bd7614cb162dabdda76Mark Andrews3023. [bug] Named could be left in an inconsistent state when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington receiving multiple AXFR response messages that were
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater not all TSIG-signed. [RT #23254]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater3022. [bug] Fixed rpz SERVFAILs after failed zone transfers
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater3021. [bug] Change #3010 was incomplete. [RT #22296]
db5b7e2cdf150c46e8242d3e2e3ad3f5c7300258Automatic Updater3020. [bug] auto-dnssec failed to correctly update the zone when
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater changing the DNSKEY RRset. [RT #23232]
1a06700908f5a1d9f4a8d51285a0fd971e2f9117Automatic Updater3019. [test] Test: check apex NSEC3 records after adding DNSKEY
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews record via UPDATE. [RT #23229]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews3018. [bug] Named failed to check for the "none;" acl when deciding
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews if a zone may need to be re-signed. [RT #23120]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3017. [doc] dnssec-keyfromlabel -I was not properly documented.
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews3016. [bug] rndc usage missing '-b'. [RT #22937]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3015. [port] win32: fix IN6_IS_ADDR_LINKLOCAL and
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater IN6_IS_ADDR_SITELOCAL macros. [RT #22724]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3014. [placeholder]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater3013. [bug] The DNS64 ttl was not always being set as expected.
55e03fc54708d97917bf26639b987f759bdc1f44Automatic Updater3012. [bug] Remove DNSKEY TTL change pairs before generating
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater signing records for any remaining DNSKEY changes.
52367885450d8f61d4f2d63292beb15ba8f39ac7Automatic Updater3011. [func] Change the default query timeout from 30 seconds
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater to 10. Allow setting this in named.conf using the new
2a31bd531072824ef252c18303859d6af7451b00Francis Dupont 'resolver-query-timeout' option, which specifies a max
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews time in seconds. 0 means 'default' and anything longer
52367885450d8f61d4f2d63292beb15ba8f39ac7Automatic Updater than 30 will be silently set to 30. [RT #22852]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews3010. [bug] Fixed a bug where "rndc reconfig" stopped the timer
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater for refreshing managed-keys. [RT #22296]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater3009. [bug] clients-per-query code didn't work as expected with
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater particular query patterns. [RT #22972]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater --- 9.8.0b1 released ---
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater3008. [func] Response policy zones (RPZ) support. [RT #21726]
885f47576842cf3c569315b9a48bd9f0ca03f203Automatic Updater3007. [bug] Named failed to preserve the case of domain names in
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater rdata which is not compressible when writing master
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews files. [RT #22863]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater3006. [func] Allow dynamically generated TSIG keys to be preserved
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater across restarts of named. Initially this is for
cdfc81e048bd34c1d628380247bda6b80a89e20eAutomatic Updater TSIG keys generated using GSSAPI. [RT #22639]
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater3005. [port] Solaris: Work around the lack of
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater gsskrb5_register_acceptor_identity() by setting
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater the KRB5_KTNAME environment variable to the
fe80a4909bf62b602feaf246866e9d29f7654194Automatic Updater contents of tkey-gssapi-keytab. Also fixed
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater test errors on MacOSX. [RT #22853]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson3004. [func] DNS64 reverse support. [RT #22769]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews3003. [experimental] Added update-policy match type "external",
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson enabling named to defer the decision of whether to
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater allow a dynamic update to an external daemon.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater (Contributed by Andrew Tridgell.) [RT #22758]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater3002. [bug] isc_mutex_init_errcheck() failed to destroy attr.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater3001. [func] Added a default trust anchor for the root zone, which
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson can be switched on by setting "dnssec-validation auto;"
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater in the named.conf options. [RT #21727]
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater3000. [bug] More TKEY/GSS fixes:
e8c7dc2a5ce48f11c07a67c9923eeb8f419ff19fEvan Hunt - nsupdate can now get the default realm from
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater the user's Kerberos principal
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater - corrected gsstest compilation flags
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater - improved documentation
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater - fixed some NULL dereferences
3b6e4c84a525b0b3fc9e8affd8bb9fa5c000345fAutomatic Updater2999. [func] Add GOST support (RFC 5933). [RT #20639]
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater2998. [func] Add isc_task_beginexclusive and isc_task_endexclusive
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to the task api. [RT #22776]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2997. [func] named -V now reports the OpenSSL and libxml2 verions
c243d779731a410f8dc2d2feeed20c15f299b6e3Automatic Updater it was compiled against. [RT #22687]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2996. [security] Temporarily disable SO_ACCEPTFILTER support.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2995. [bug] The Kerberos realm was not being correctly extracted
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater from the signer's identity. [RT #22770]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2994. [port] NetBSD: use pthreads by default on NetBSD >= 5.0, and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater do not use threads on earlier versions. Also kill
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater the unproven-pthreads, mit-pthreads, and ptl2 support.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2993. [func] Dynamically grow adb hash tables. [RT #21186]
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater2992. [contrib] contrib/check-secure-delegation.pl: A simple tool
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for looking at a secure delegation. [RT #22059]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2991. [contrib] contrib/zone-edit.sh: A simple zone editing tool for
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater dynamic zones. [RT #22365]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2990. [bug] 'dnssec-settime -S' no longer tests prepublication
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater interval validity when the interval is set to 0.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2989. [func] Added support for writable DLZ zones. (Contributed
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater by Andrew Tridgell of the Samba project.) [RT #22629]
7262eb86f2b465822206122921e2f357218f0cfdAutomatic Updater2988. [experimental] Added a "dlopen" DLZ driver, allowing the creation
96ea71632887c58a9d00f47eb318bf76b35903c3Mark Andrews of external DLZ drivers that can be loaded as
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater shared objects at runtime rather than linked with
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater named. Currently this is switched on via a
bbb069be941f649228760edcc241122933c066d2Automatic Updater compile-time option, "configure --with-dlz-dlopen".
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater Note: the syntax for configuring DLZ zones
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater is likely to be refined in future releases.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews (Contributed by Andrew Tridgell of the Samba
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater project.) [RT #22629]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2987. [func] Improve ease of configuring TKEY/GSS updates by
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater adding a "tkey-gssapi-keytab" option. If set,
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater updates will be allowed with any key matching
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews a principal in the specified keytab file.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews "tkey-gssapi-credential" is no longer required
70f5a54bf2676b136aa838d1ee9688e00b5dd8b9Automatic Updater and is expected to be deprecated. (Contributed
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews by Andrew Tridgell of the Samba project.)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2986. [func] Add new zone type "static-stub". It's like a stub
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater zone, but the nameserver names and/or their IP
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater addresses are statically configured. [RT #21474]
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater2985. [bug] Add a regression test for change #2896. [RT #21324]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2984. [bug] Don't run MX checks when the target of the MX record
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington is ".". [RT #22645]
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater2983. [bug] Include "loadkeys" in rndc help output. [RT #22493]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater --- 9.8.0a1 released ---
cf7e98f59148b559946a7f1ca728471374f1eef3Automatic Updater2982. [bug] Reference count dst keys. dst_key_attach() can be used
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater increment the reference count.
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater Note: dns_tsigkey_createfromkey() callers should now
361bec4bdec45042897fb479b7071cd05bbd56b9Automatic Updater always call dst_key_free() rather than setting it
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater to NULL on success. [RT #22672]
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater2981. [func] Partial DNS64 support (AAAA synthesis). [RT #21991]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2980. [bug] named didn't properly handle UPDATES that changed the
3857cb6fcabeb79d85de4b3e3e4ab99912b701f8Mark Andrews TTL of the NSEC3PARAM RRset. [RT #22363]
80faf1588895fd26490f82f95a7a1b771df1c324Automatic Updater2979. [bug] named could deadlock during shutdown if two
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews "rndc stop" commands were issued at the same
9174e44c14b1cb91a651fa1dc29470438c246ab9Automatic Updater time. [RT #22108]
e2caa7536302de34de6cc04025abcd53dc3a499aAutomatic Updater2978. [port] hpux: look for <devpoll.h> [RT #21919]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2977. [bug] 'nsupdate -l' report if the session key is missing.
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2976. [bug] named could die on exit after negotiating a GSS-TSIG
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater key. [RT #22573]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2975. [bug] rbtdb.c:cleanup_dead_nodes_callback() acquired the
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews wrong lock which could lead to server deadlock.
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2974. [bug] Some valid UPDATE requests could fail due to a
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews consistency check examining the existing version
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater of the zone rather than the new version resulting
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater from the UPDATE. [RT #22413]
3351ccbd5c1961404044f8273d54dad405f53960Mark Andrews2973. [bug] bind.keys.h was being removed by the "make clean"
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater at the end of configure resulting in build failures
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater where there is very old version of perl installed.
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater Move it to "make maintainer-clean". [RT #22230]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2972. [bug] win32: address windows socket errors. [RT #21906]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2971. [bug] Fixed a bug that caused journal files not to be
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater compacted on Windows systems as a result of
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater non-POSIX-compliant rename() semantics. [RT #22434]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2970. [security] Adding a NO DATA negative cache entry failed to clear
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater any matching RRSIG records. A subsequent lookup of
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater of NO DATA cache entry could trigger a INSIST when the
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater unexpected RRSIG was also returned with the NO DATA
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater CVE-2010-3613, VU#706148. [RT #22288]
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater2969. [security] Fix acl type processing so that allow-query works
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater in options and view statements. Also add a new
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater set of tests to verify proper functioning.
e8fc8c884b44371784805e1e0d3100da403dd3f1Automatic Updater CVE-2010-3615, VU#510208. [RT #22418]
807ffe7aba4095b2f25c75ac1459f9efcd017eebMark Andrews2968. [security] Named could fail to prove a data set was insecure
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater before marking it as insecure. One set of conditions
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington that can trigger this occurs naturally when rolling
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater DNSKEY algorithms.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews CVE-2010-3614, VU#837744. [RT #22309]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2967. [bug] 'host -D' now turns on debugging messages earlier.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2966. [bug] isc_print_vsnprintf() failed to check if there was
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews space available in the buffer when adding a left
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews justified character with a non zero width,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (e.g. "%-1c"). [RT #22270]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2965. [func] Test HMAC functions using test data from RFC 2104 and
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson RFC 4634. [RT #21702]
efb0e886f18894a1d2489f1ad74ad14b579e11c7Mark Andrews2964. [placeholder]
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews2963. [security] The allow-query acl was being applied instead of the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington allow-query-cache acl to cache lookups. [RT #22114]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2962. [port] win32: add more dependencies to BINDBuild.dsw.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2961. [bug] Be still more selective about the non-authoritative
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater answers we apply change 2748 to. [RT #22074]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2960. [func] Check that named accepts non-authoritative answers.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2959. [func] Check that named starts with a missing masterfile.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2958. [bug] named failed to start with a missing master file.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2957. [bug] entropy_get() and entropy_getpseudo() failed to match
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the API for RAND_bytes() and RAND_pseudo_bytes()
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington respectively. [RT #21962]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2956. [port] Enable atomic operations on the PowerPC64. [RT #21899]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2955. [func] Provide more detail in the recursing log. [RT #22043]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2954. [bug] contrib: dlz_mysql_driver.c bad error handling on
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington build_sqldbinstance failure. [RT #21623]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2953. [bug] Silence spurious "expected covering NSEC3, got an
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington exact match" message when returning a wildcard
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington no data response. [RT #21744]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2952. [port] win32: named-checkzone and named-checkconf failed
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to initialise winsock. [RT #21932]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2951. [bug] named failed to generate a correct signed response
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington in a optout, delegation only zone with no secure
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington delegations. [RT #22007]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2950. [bug] named failed to perform a SOA up to date check when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington falling back to TCP on UDP timeouts when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington ixfr-from-differences was set. [RT #21595]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2949. [bug] dns_view_setnewzones() contained a memory leak if
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington it was called multiple times. [RT #21942]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2948. [port] MacOS: provide a mechanism to configure the test
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington interfaces at reboot. See bin/tests/system/README
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2947. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2946. [doc] Document the default values for the minimum and maximum
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington zone refresh and retry values in the ARM. [RT #21886]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2945. [doc] Update empty-zones list in ARM. [RT #21772]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2944. [maint] Remove ORCHID prefix from built in empty zones.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2943. [func] Add support to load new keys into managed zones
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington without signing immediately with "rndc loadkeys".
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Add support to link keys with "dnssec-keygen -S"
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater and "dnssec-settime -S". [RT #21351]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2942. [contrib] zone2sqlite failed to setup the entropy sources.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2941. [bug] sdb and sdlz (dlz's zone database) failed to support
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater DNAME at the zone apex. [RT #21610]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2940. [port] Remove connection aborted error message on
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater Windows. [RT #21549]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2939. [func] Check that named successfully skips NSEC3 records
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater that fail to match the NSEC3PARAM record currently
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater in use. [RT# 21868]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2938. [bug] When generating signed responses, from a signed zone
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater that uses NSEC3, named would use a uninitialised
0d3490f93bb980fde704055e74c1b508987a5fe4Mark Andrews pointer if it needed to skip a NSEC3 record because
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington it didn't match the selected NSEC3PARAM record for
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington zone. [RT# 21868]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington2937. [bug] Worked around an apparent race condition in over
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews memory conditions. Without this fix a DNS cache DB or
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews ADB could incorrectly stay in an over memory state,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington effectively refusing further caching, which
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews subsequently made a BIND 9 caching server unworkable.
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington This fix prevents this problem from happening by
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews polling the state of the memory context, rather than
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater making a copy of the state, which appeared to cause
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington a race. This is a "workaround" in that it doesn't
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater solve the possible race per se, but several experiments
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater proved this change solves the symptom. Also, the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington polling overhead hasn't been reported to be an issue.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington This bug should only affect a caching server that
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington specifies a finite max-cache-size. It's also quite
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington likely that the bug happens only when enabling threads,
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater but it's not confirmed yet. [RT #21818]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2936. [func] Improved configuration syntax and multiple-view
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater support for addzone/delzone feature (see change
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater #2930). Removed "new-zone-file" option, replaced
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with "allow-new-zones (yes|no)". The new-zone-file
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for each view is now created automatically, with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a filename generated from a hash of the view name.
c01dec514a81ecf8c17ca3ef8c3ba95e437295ebAutomatic Updater It is no longer necessary to "include" the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater new-zone-file in named.conf; this happens
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater automatically. Zones that were not added via
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "rndc addzone" can no longer be removed with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "rndc delzone". [RT #19447]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2935. [bug] nsupdate: improve 'file not found' error message.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2934. [bug] Use ANSI C compliant shift range in lib/isc/entropy.c.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2933. [bug] 'dig +nsid' used stack memory after it went out of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington scope. This could potentially result in a unknown,
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington potentially malformed, EDNS option being sent instead
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington of the desired NSID option. [RT #21781]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2932. [cleanup] Corrected a numbering error in the "dnssec" test.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2931. [bug] Temporarily and partially disable change 2864
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington because it would cause infinite attempts of RRSIG
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington queries. This is an urgent care fix; we'll
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington revisit the issue and complete the fix later.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2930. [experimental] New "rndc addzone" and "rndc delzone" commads
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews allow dynamic addition and deletion of zones.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews To enable this feature, specify a "new-zone-file"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington option at the view or options level in named.conf.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington Zone configuration information for the new zones
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater will be written into that file. To make the new
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater zones persist after a restart, "include" the file
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington into named.conf in the appropriate view. (Note:
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater This feature is not yet documented, and its syntax
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater is expected to change.) [RT #19447]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2929. [bug] Improved handling of GSS security contexts:
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - added LRU expiration for generated TSIGs
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - added the ability to use a non-default realm
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater - added new "realm" keyword in nsupdate
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington - limited lifetime of generated keys to 1 hour
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews or the lifetime of the context (whichever is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2928. [bug] Be more selective about the non-authoritative
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington answer we apply change 2748 to. [RT #21594]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2927. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2926. [placeholder]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2925. [bug] Named failed to accept uncachable negative responses
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington from insecure zones. [RT# 21555]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2924. [func] 'rndc secroots' dump a combined summary of the
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews current managed keys combined with trusted keys.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2923. [bug] 'dig +trace' could drop core after "connection
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington timeout". [RT #21514]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2922. [contrib] Update zkt to version 1.0.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2921. [bug] The resolver could attempt to destroy a fetch context
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington too soon. [RT #19878]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2920. [func] Allow 'filter-aaaa-on-v4' to be applied selectively
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to IPv4 clients. New acl 'filter-aaaa' (default any).
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2919. [func] Add autosign-ksk and autosign-zsk virtual time tests.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2918. [maint] Add AAAA address for I.ROOT-SERVERS.NET.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2917. [func] Virtual time test framework. [RT #20801]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2916. [func] Add framework to use IPv6 in tests.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater fd92:7065:b8e:ffff::1 ... fd92:7065:b8e:ffff::7
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2915. [cleanup] Be smarter about which objects we attempt to compile
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater based on configure options. [RT #21444]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2914. [bug] Make the "autosign" system test more portable.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2913. [func] Add pkcs#11 system tests. [RT #20784]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2912. [func] Windows clients don't like UPDATE responses that clear
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews the zone section. [RT #20986]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2911. [bug] dnssec-signzone didn't handle out of zone records well.
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2910. [func] Sanity check Kerberos credentials. [RT #20986]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2909. [bug] named-checkconf -p could die if "update-policy local;"
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews was specified in named.conf. [RT #21416]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2908. [bug] It was possible for re-signing to stop after removing
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington a DNSKEY. [RT #21384]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2907. [bug] The export version of libdns had undefined references.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2906. [bug] Address RFC 5011 implementation issues. [RT #20903]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2905. [port] aix: set use_atomic=yes with native compiler.
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater2904. [bug] When using DLV, sub-zones of the zones in the DLV,
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater could be incorrectly marked as insecure instead of
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington secure leading to negative proofs failing. This was
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a unintended outcome from change 2890. [RT# 21392]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2903. [bug] managed-keys-directory missing from namedconf.c.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2902. [func] Add regression test for change 2897. [RT #21040]
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater2901. [port] Use AC_C_FLEXIBLE_ARRAY_MEMBER. [RT #21316]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2900. [bug] The placeholder negative caching element was not
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater properly constructed triggering a INSIST in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dns_ncache_towire(). [RT #21346]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2899. [port] win32: Support linking against OpenSSL 1.0.0.
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater2898. [bug] nslookup leaked memory when -domain=value was
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater specified. [RT #21301]
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater2897. [bug] NSEC3 chains could be left behind when transitioning
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater to insecure. [RT #21040]
532d27b39244fadfcf8d8b4593f4c65434c9c664Automatic Updater2896. [bug] "rndc sign" failed to properly update the zone
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when adding a DNSKEY for publication only. [RT #21045]
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington2895. [func] genrandom: add support for the generation of multiple
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington files. [RT #20917]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2894. [contrib] DLZ LDAP support now use '$' not '%'. [RT #21294]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2893. [bug] Improve managed keys support. New named.conf option
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater managed-keys-directory. [RT #20924]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2892. [bug] Handle REVOKED keys better. [RT #20961]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2891. [maint] Update empty-zones list to match
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater draft-ietf-dnsop-default-local-zones-13. [RT# 21099]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2890. [bug] Handle the introduction of new trusted-keys and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DS, DLV RRsets better. [RT #21097]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2889. [bug] Elements of the grammar where not properly reported.
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2888. [bug] Only the first EDNS option was displayed. [RT #21273]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2887. [bug] Report the keytag times in UTC in the .key file,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater local time is presented as a comment within the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater comment. [RT #21223]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2886. [bug] ctime() is not thread safe. [RT #21223]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2885. [bug] Improve -fno-strict-aliasing support probing in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configure. [RT #21080]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2884. [bug] Insufficient validation in dns_name_getlabelsequence().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2883. [bug] 'dig +short' failed to handle really large datasets.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2882. [bug] Remove memory context from list of active contexts
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington before clearing 'magic'. [RT #21274]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2881. [bug] Reduce the amount of time the rbtdb write lock
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is held when closing a version. [RT #21198]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2880. [cleanup] Make the output of dnssec-keygen and dnssec-revoke
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater consistent. [RT #21078]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2879. [contrib] DLZ bdbhpt driver fails to close correct cursor.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2878. [func] Incrementally write the master file after performing
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a AXFR. [RT #21010]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2877. [bug] The validator failed to skip obviously mismatching
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater RRSIGs. [RT #21138]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2876. [bug] Named could return SERVFAIL for negative responses
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater from unsigned zones. [RT #21131]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2875. [bug] dns_time64_fromtext() could accept non digits.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2874. [bug] Cache lack of EDNS support only after the server
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater successfully responds to the query using plain DNS.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2873. [bug] Cancelling a dynamic update via the dns/client module
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater could trigger an assertion failure. [RT #21133]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2872. [bug] Modify dns/client.c:dns_client_createx() to only
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater require one of IPv4 or IPv6 rather than both.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2871. [bug] Type mismatch in mem_api.c between the definition and
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater the header file, causing build failure with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --enable-exportlib. [RT #21138]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2870. [maint] Add AAAA address for L.ROOT-SERVERS.NET.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2869. [bug] Fix arguments to dns_keytable_findnextkeynode() call.
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2868. [cleanup] Run "make clean" at the end of configure to ensure
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington any changes made by configure are integrated.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Use --with-make-clean=no to disable. [RT #20994]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2867. [bug] Don't set GSS_C_SEQUENCE_FLAG as Windows DNS servers
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater don't like it. [RT #20986]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2866. [bug] Windows does not like the TSIG name being compressed.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2865. [bug] memset to zero event.data. [RT #20986]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2864. [bug] Direct SIG/RRSIG queries were not handled correctly.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2863. [port] linux: disable IPv6 PMTUD and use network minimum MTU.
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2862. [bug] nsupdate didn't default to the parent zone when
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater updating DS records. [RT #20896]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2861. [doc] dnssec-settime man pages didn't correctly document the
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington inactivation time. [RT #21039]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2860. [bug] named-checkconf's usage was out of date. [RT #21039]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2859. [bug] When cancelling validation it was possible to leak
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater memory. [RT #20800]
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2858. [bug] RTT estimates were not being adjusted on ICMP errors.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2857. [bug] named-checkconf did not fail on a bad trusted key.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2856. [bug] The size of a memory allocation was not always properly
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater recorded. [RT #20927]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2855. [func] nsupdate will now preserve the entered case of domain
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater names in update requests it sends. [RT #20928]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2854. [func] dig: allow the final soa record in a axfr response to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater be suppressed, dig +onesoa. [RT #20929]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2853. [bug] add_sigs() could run out of scratch space. [RT #21015]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2852. [bug] Handle broken DNSSEC trust chains better. [RT #15619]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2851. [doc] nslookup.1, removed <informalexample> from the docbook
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater source as it produced bad nroff. [RT #21007]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2850. [bug] If isc_heap_insert() failed due to memory shortage
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the heap would have corrupted entries. [RT #20951]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2849. [bug] Don't treat errors from the xml2 library as fatal.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2848. [doc] Moved README.dnssec, README.libdns, README.pkcs11 and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater README.rfc5011 into the ARM. [RT #20899]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2847. [cleanup] Corrected usage message in dnssec-settime. [RT #20921]
7adcb4de92bf4383a4c5624c4ed256736d02bc6dMark Andrews2846. [bug] EOF on unix domain sockets was not being handled
6d3ca68adcd2e825d7de011d78f14002c8b7e55eAutomatic Updater correctly. [RT #20731]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2845. [bug] RFC 5011 client could crash on shutdown. [RT #20903]
7a6ad11e0185a73984410f3252f3c49c3a301dbdBrian Wellington2844. [doc] notify-delay default in ARM was wrong. It should have
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater been five (5) seconds.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2843. [func] Prevent dnssec-keygen and dnssec-keyfromlabel from
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater creating key files if there is a chance that the new
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington key ID will collide with an existing one after
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington either of the keys has been revoked. (To override
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington this in the case of dnssec-keyfromlabel, use the -y
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington option. dnssec-keygen will simply create a
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington different, non-colliding key, so an override is
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington not necessary.) [RT #20838]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2842. [func] Added "smartsign" and improved "autosign" and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "dnssec" regression tests. [RT #20865]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2841. [bug] Change 2836 was not complete. [RT #20883]
f65d2e1c04c806a185bf9f3120e80692f5ccd5e6Automatic Updater2840. [bug] Temporary fixed pkcs11-destroy usage check.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2839. [bug] A KSK revoked by named could not be deleted.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2838. [placeholder]
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater2837. [port] Prevent Linux spurious warnings about fwrite().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2836. [bug] Keys that were scheduled to become active could
d145b64cacc8d9cda51f9924ec70cd4661c3e2cfAutomatic Updater be delayed. [RT #20874]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2835. [bug] Key inactivity dates were inadvertently stored in
3e79333aa37d3b88959372431a02af8a3eb7cfd9Automatic Updater the private key file with the outdated tag
e076d0c88be69de7c190ab924d095e69d2e11f7aAndreas Gustafsson "Unpublish" rather than "Inactive". This has been
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater fixed; however, any existing keys that had Inactive
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews dates set will now need to have them reset, using
e076d0c88be69de7c190ab924d095e69d2e11f7aAndreas Gustafsson 'dnssec-settime -I'. [RT #20868]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2834. [bug] HMAC-SHA* keys that were longer than the algorithm
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater digest length were used incorrectly, leading to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater interoperability problems with other DNS
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater implementations. This has been corrected.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (Note: If an oversize key is in use, and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater compatibility is needed with an older release of
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater BIND, the new tool "isc-hmac-fixup" can convert
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the key secret to a form that will work with all
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater versions.) [RT #20751]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2833. [cleanup] Fix usage messages in dnssec-keygen and dnssec-settime.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2832. [bug] Modify "struct stat" in lib/export/samples/nsprobe.c
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to avoid redefinition in some OSs [RT 20831]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2831. [security] Do not attempt to validate or cache
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater out-of-bailiwick data returned with a secure
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater answer; it must be re-fetched from its original
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater source and validated in that context. [RT #20819]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2830. [bug] Changing the OPTOUT setting could take multiple
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington passes. [RT #20813]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2829. [bug] Fixed potential node inconsistency in rbtdb.c.
47ce374fcf4bac7a56bb69f5dae1d30be5b4376dAutomatic Updater2828. [security] Cached CNAME or DNAME RR could be returned to clients
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater without DNSSEC validation. [RT #20737]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2827. [security] Bogus NXDOMAIN could be cached as if valid. [RT #20712]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2826. [bug] NSEC3->NSEC transitions could fail due to a lock not
47ce374fcf4bac7a56bb69f5dae1d30be5b4376dAutomatic Updater being released. [RT #20740]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2825. [bug] Changing the setting of OPTOUT in a NSEC3 chain that
47ce374fcf4bac7a56bb69f5dae1d30be5b4376dAutomatic Updater was in the process of being created was not properly
47ce374fcf4bac7a56bb69f5dae1d30be5b4376dAutomatic Updater recorded in the zone. [RT #20786]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2824. [bug] "rndc sign" was not being run by the correct task.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2823. [bug] rbtdb.c:getsigningtime() was missing locks. [RT #20781]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2822. [bug] rbtdb.c:loadnode() could return the wrong result.
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2821. [doc] Add note that named-checkconf doesn't automatically
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2820. [func] Handle read access failure of OpenSSL configuration
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater file more user friendly (PKCS#11 engine patch).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2819. [cleanup] Removed unnecessary DNS_POINTER_MAXHOPS define.
6de27e27ad6056d7c049feb912df5a6b9a56d1b8Automatic Updater2818. [cleanup] rndc could return an incorrect error code
53aed64e0f8553762fc0c380ee41cb42f514c7d5Brian Wellington when a zone was not found. [RT #20767]
6de27e27ad6056d7c049feb912df5a6b9a56d1b8Automatic Updater2817. [cleanup] Removed unnecessary isc_task_endexclusive() calls.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2816. [bug] previous_closest_nsec() could fail to return
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater data for NSEC3 nodes [RT #29730]
af3e516f771c8ba376a8cd954a7233badfce8cdcAutomatic Updater2815. [bug] Exclusively lock the task when freezing a zone.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2814. [func] Provide a definitive error message when a master
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews zone is not loaded. [RT #20757]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2813. [bug] Better handling of unreadable DNSSEC key files.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2812. [bug] Make sure updates can't result in a zone with
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews NSEC-only keys and NSEC3 records. [RT 20748]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2811. [cleanup] Add "rndc sign" to list of commands in rndc usage
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews output. [RT #20733]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2810. [doc] Clarified the process of transitioning an NSEC3 zone
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews to insecure. [RT #20746]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2809. [cleanup] Restored accidentally-deleted text in usage output
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews in dnssec-settime and dnssec-revoke [RT #20739]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2808. [bug] Remove the attempt to install atomic.h from lib/isc.
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews atomic.h is correctly installed by the architecture
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews specific subdirectories. [RT #20722]
7e1a8f402e3881388db37152f71c698cb1f1c426Mark Andrews2807. [bug] Fixed a possible ASSERT when reconfiguring zone
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater keys. [RT #20720]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.7.0rc1 released ---
af3e516f771c8ba376a8cd954a7233badfce8cdcAutomatic Updater2806. [bug] "rdnc sign" could delay re-signing the DNSKEY
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater when it had changed. [RT #20703]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2805. [bug] Fixed namespace problems encountered when building
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater external programs using non-exported BIND9 libraries
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater (i.e., built without --enable-exportlib). [RT #20679]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2804. [bug] Send notifies when a zone is signed with "rndc sign"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater or as a result of a scheduled key change. [RT #20700]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2803. [port] win32: Install named-journalprint, nsec3hash, arpaname
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater and genrandom under windows. [RT #20670]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2802. [cleanup] Rename journalprint to named-journalprint. [RT #20670]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2801. [func] Detect and report records that are different according
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to DNSSEC but are semantically equal according to plain
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DNS. Apply plain DNS comparisons rather than DNSSEC
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington comparisons when processing UPDATE requests.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dnssec-signzone now removes such semantically duplicate
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington records prior to signing the RRset.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington named-checkzone -r {ignore|warn|fail} (default warn)
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater named-compilezone -r {ignore|warn|fail} (default warn)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater named.conf: check-dup-records {ignore|warn|fail};
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2800. [func] Reject zones which have NS records which refer to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater CNAMEs, DNAMEs or don't have address record (class IN
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington only). Reject UPDATEs which would cause the zone
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to fail the above checks if committed. [RT #20678]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2799. [cleanup] Changed the "secure-to-insecure" option to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "dnssec-secure-to-insecure", and "dnskey-ksk-only"
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington to "dnssec-dnskey-kskonly", for clarity. [RT #20586]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2798. [bug] Addressed bugs in managed-keys initialization
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington and rollover. [RT #20683]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2797. [bug] Don't decrement the dispatch manager's maxbuffers.
73eb75dc212911e4da58a3ce0a4672d3910193ebBrian Wellington2796. [bug] Missing dns_rdataset_disassociate() call in
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater dns_nsec3_delnsec3sx(). [RT #20681]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater2795. [cleanup] Add text to differentiate "update with no effect"
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater log messages. [RT #18889]
bbf7c3fd96ae5e02cb84743c581862e35327032aAutomatic Updater2794. [bug] Install <isc/namespace.h>. [RT #20677]
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2793. [func] Add "autosign" and "metadata" tests to the
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater automatic tests. [RT #19946]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2792. [func] "filter-aaaa-on-v4" can now be set in view
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater options (if compiled in). [RT #20635]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2791. [bug] The installation of isc-config.sh was broken.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2790. [bug] Handle DS queries to stub zones. [RT #20440]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2789. [bug] Fixed an INSIST in dispatch.c [RT #20576]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2788. [bug] dnssec-signzone could sign with keys that were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater not requested [RT #20625]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2787. [bug] Spurious log message when zone keys were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dynamically reconfigured. [RT #20659]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2786. [bug] Additional could be promoted to answer. [RT #20663]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington --- 9.7.0b3 released ---
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2785. [bug] Revoked keys could fail to self-sign [RT #20652]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2784. [bug] TC was not always being set when required glue was
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater dropped. [RT #20655]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2783. [func] Return minimal responses to EDNS/UDP queries with a UDP
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington buffer size of 512 or less. [RT #20654]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2782. [port] win32: use getaddrinfo() for hostname lookups.
8227257b1c0224a7991e04bb79dc5059d5062dfbAndreas Gustafsson2781. [bug] Inactive keys could be used for signing. [RT #20649]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2780. [bug] dnssec-keygen -A none didn't properly unset the
8227257b1c0224a7991e04bb79dc5059d5062dfbAndreas Gustafsson activation date in all cases. [RT #20648]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2779. [bug] Dynamic key revocation could fail. [RT #20644]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2778. [bug] dnssec-signzone could fail when a key was revoked
8227257b1c0224a7991e04bb79dc5059d5062dfbAndreas Gustafsson without deleting the unrevoked version. [RT #20638]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2777. [contrib] DLZ MYSQL auto reconnect support discovery was wrong.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2776. [bug] Change #2762 was not correct. [RT #20647]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2775. [bug] Accept RSASHA256 and RSASHA512 as NSEC3 compatible
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in dnssec-keyfromlabel. [RT #20643]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2774. [bug] Existing cache DB wasn't being reused after
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater reconfiguration. [RT #20629]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2773. [bug] In autosigned zones, the SOA could be signed
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with the KSK. [RT #20628]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2772. [security] When validating, track whether pending data was from
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the additional section or not and only return it if
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater validates as secure. [RT #20438]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2771. [bug] dnssec-signzone: DNSKEY records could be
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater corrupted when importing from key files [RT #20624]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2770. [cleanup] Add log messages to resolver.c to indicate events
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington causing FORMERR responses. [RT #20526]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2769. [cleanup] Change #2742 was incomplete. [RT #19589]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568]
fd7c65dce9c2b1a3d12ca4df9074cd38019fdb5fAutomatic Updater2767. [bug] named could crash on startup if a zone was
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configured with auto-dnssec and there was no
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater key-directory. [RT #20615]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2766. [bug] isc_socket_fdwatchpoke() should only update the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater socketmgr state if the socket is not pending on a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater read or write. [RT #20603]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2765. [bug] Skip masters for which the TSIG key cannot be found.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2764. [bug] "rndc-confgen -a" could trigger a REQUIRE. [RT #20610]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2763. [bug] "rndc sign" didn't create an NSEC chain. [RT #20591]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2762. [bug] DLV validation failed with a local slave DLV zone.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2761. [cleanup] Enable internal symbol table for backtrace only for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater systems that are known to work. Currently, BSD
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater variants, Linux and Solaris are supported. [RT# 20202]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2760. [cleanup] Corrected named-compilezone usage summary. [RT #20533]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2759. [doc] Add information about .jbk/.jnw files to
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington the ARM. [RT #20303]
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater2758. [bug] win32: Added a workaround for a windows 2008 bug
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater that could cause the UDP client handler to shut
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington down. [RT #19176]
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater2757. [bug] dig: assertion failure could occur in connect
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater timeout. [RT #20599]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2756. [bug] Fixed corrupt logfile message in update.c. [RT# 20597]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2755. [placeholder]
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater2754. [bug] Secure-to-insecure transitions failed when zone
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater was signed with NSEC3. [RT #20587]
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater2753. [bug] Removed an unnecessary warning that could appear when
0df8ead472f207020f8da22a185fe4b945248ab8Automatic Updater building an NSEC chain. [RT #20589]
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2752. [bug] Locking violation. [RT #20587]
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2751. [bug] Fixed a memory leak in dnssec-keyfromlabel. [RT #20588]
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2750. [bug] dig: assertion failure could occur when a server
cab3e375b77a980a5d4b7e5e4ee90167439e7934Mark Andrews didn't have an address. [RT #20579]
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2749. [bug] ixfr-from-differences generated a non-minimal ixfr
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater for NSEC3 signed zones. [RT #20452]
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2748. [func] Identify bad answers from GTLD servers and treat them
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater as referrals. [RT #18884]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2747. [bug] Journal roll forwards failed to set the re-signing
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater time of RRSIGs correctly. [RT #20541]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2746. [port] hpux: address signed/unsigned expansion mismatch of
3a9593055ead76cbbb417aee2d2e656c2c92cf46Automatic Updater2745. [bug] configure script didn't probe the return type of
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater gai_strerror(3) correctly. [RT #20573]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2744. [func] Log if a query was over TCP. [RT #19961]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2743. [bug] RRSIG could be incorrectly set in the NSEC3 record
3341c8b653577f2f0cb8b72702ea6197035334ffMark Andrews for a insecure delegation.
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson --- 9.7.0b2 released ---
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2742. [cleanup] Clarify some DNSSEC-related log messages in
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2741. [func] Allow the dnssec-keygen progress messages to be
2fd97723b2ec7fc1975672780ab0c1c9a8c369d6Automatic Updater suppressed (dnssec-keygen -q). Automatically
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater suppress the progress messages when stdin is not
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews a tty. [RT #20474]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2740. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2739. [cleanup] Clean up API for initializing and clearing trust
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater anchors for a view. [RT #20211]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater test. [RT #20453]
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews2737. [func] UPDATE requests can leak existence information.
0ca8fddd5b5e26d8a05f0936fc4b2666a025b9c0Mark Andrews2736. [func] Improve the performance of NSEC signed zones with
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews more than a normal amount of glue below a delegation.
0ca8fddd5b5e26d8a05f0936fc4b2666a025b9c0Mark Andrews2735. [bug] dnssec-signzone could fail to read keys
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater that were specified on the command line with
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews full paths, but weren't in the current
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater directory. [RT #20421]
8fca573ba41a1669fff64f234275e956551eb6e5Mark Andrews2734. [port] cygwin: arpaname did not compile. [RT #20473]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2733. [cleanup] Clean up coding style in pkcs11-* tools. [RT #20355]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2732. [func] Add optional filter-aaaa-on-v4 option, available
4f5257ba7afbe06e949d1577581de18b22ef6c05Automatic Updater if built with './configure --enable-filter-aaaa'.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews Filters out AAAA answers to clients connecting
b795291f8ea5bc2c8470cc34f82e8c570337308aAutomatic Updater via IPv4. (This is NOT recommended for general
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews use.) [RT #20339]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2731. [func] Additional work on change 2709. The key parser
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews will now ignore unrecognized fields when the
f36bdaf5a7cbb029a8fe035fa9ade140bae98087Automatic Updater minor version number of the private key format
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews has been increased. It will reject any key with
21f8d40dbd9be951555f46b0bfa23571c5a9b913Automatic Updater the major version number increased. [RT #20310]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2730. [func] Have dnssec-keygen display a progress indication
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews a la 'openssl genrsa' on standard error. Note
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews when the first '.' is followed by a long stop
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews one has the choice between slow generation vs.
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2729. [func] When constructing a CNAME from a DNAME use the DNAME
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews TTL. [RT #20451]
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
821d2613356f81e5bb5c107288d6d5cf35c2a1e8Mark Andrews dnssec-signzone now warn immediately if asked to
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews write into a nonexistent directory. [RT #20278]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2727. [func] The 'key-directory' option can now specify a relative
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews path. [RT #20154]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2726. [func] Added support for SHA-2 DNSSEC algorithms,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews RSASHA256 and RSASHA512. [RT #20023]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2725. [doc] Added information about the file "managed-keys.bind"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to the ARM. [RT #20235]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2724. [bug] Updates to a existing node in secure zone using NSEC
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews were failing. [RT #20448]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2723. [bug] isc_base32_totext(), isc_base32hex_totext(), and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews isc_base64_totext(), didn't always mark regions of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews memory as fully consumed after conversion. [RT #20445]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2722. [bug] Ensure that the memory associated with the name of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews a node in a rbt tree is not altered during the life
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of the node. [RT #20431]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2721. [port] Have dst__entropy_status() prime the random number
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews generator. [RT #20369]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2720. [bug] RFC 5011 trust anchor updates could trigger an
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews assert if the DNSKEY record was unsigned. [RT #20406]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2719. [func] Skip trusted/managed keys for unsupported algorithms.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2718. [bug] The space calculations in opensslrsa_todns() were
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews incorrect. [RT #20394]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2717. [bug] named failed to update the NSEC/NSEC3 record when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the last private type record was removed as a result
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of completing the signing the zone with a key.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2716. [bug] nslookup debug mode didn't return the ttl. [RT #20414]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews --- 9.7.0b1 released ---
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2715. [bug] Require OpenSSL support to be explicitly disabled.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2714. [port] aix/powerpc: 'asm("ics");' needs non standard assembler
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2713. [bug] powerpc: atomic operations missing asm("ics") /
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews __isync() calls.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2712. [func] New 'auto-dnssec' zone option allows zone signing
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to be fully automated in zones configured for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews dynamic DNS. 'auto-dnssec allow;' permits a zone
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to be signed by creating keys for it in the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews key-directory and using 'rndc sign <zone>'.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews 'auto-dnssec maintain;' allows that too, plus it
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews also keeps the zone's DNSSEC keys up to date
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews according to their timing metadata. [RT #19943]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2711. [port] win32: Add the bin/pkcs11 tools into the full
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews build. [RT #20372]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews zone option cause a zone to be signed with only KSKs
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews signing the DNSKEY RRset, not ZSKs. This reduces
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the size of a DNSKEY answer. [RT #20340]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2709. [func] Added some data fields, currently unused, to the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews private key file format, to allow implementation
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews of explicit key rollover in a future release
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews without impairing backward or forward compatibility.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2708. [func] Insecure to secure and NSEC3 parameter changes via
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews update are now fully supported and no longer require
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews defines to enable. We now no longer overload the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews NSEC3PARAM flag field, nor the NSEC OPT bit at the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews apex. Secure to insecure changes are controlled by
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews by the named.conf option 'secure-to-insecure'.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Warning: If you had previously enabled support by
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews adding defines at compile time to BIND 9.6 you should
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews ensure that all changes that are in progress have
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews completed prior to upgrading to BIND 9.7. BIND 9.7
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews is not backwards compatible.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2707. [func] dnssec-keyfromlabel no longer require engine name
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to be specified in the label if there is a default
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews engine or the -E option has been used. Also, it
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews now uses default algorithms as dnssec-keygen does
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews (i.e., RSASHA1, or NSEC3RSASHA1 if -3 is used).
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2706. [bug] Loading a zone with a very large NSEC3 salt could
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews trigger an assert. [RT #20368]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2705. [placeholder]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2704. [bug] Serial of dynamic and stub zones could be inconsistent
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews with their SOA serial. [RT #19387]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2703. [func] Introduce an OpenSSL "engine" argument with -E
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews for all binaries which can take benefit of
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews crypto hardware. [RT #20230]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2702. [func] Update PKCS#11 tools (bin/pkcs11) [RT #20225 & all]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2701. [doc] Correction to ARM: hmac-md5 is no longer the only
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews supported TSIG key algorithm. [RT #18046]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2700. [doc] The match-mapped-addresses option is discouraged.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2699. [bug] Missing lock in rbtdb.c. [RT #20037]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2698. [placeholder]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2697. [port] win32: ensure that S_IFMT, S_IFDIR, S_IFCHR and
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews S_IFREG are defined after including <isc/stat.h>.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2696. [bug] named failed to successfully process some valid
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews acl constructs. [RT #20308]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2695. [func] DHCP/DDNS - update fdwatch code for use by
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews DHCP. Modify the api to isc_sockfdwatch_t (the
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews callback functon for isc_socket_fdwatchcreate)
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to include information about the direction (read
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews or write) and add isc_socket_fdwatchpoke.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2694. [bug] Reduce default NSEC3 iterations from 100 to 10.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2693. [port] Add some noreturn attributes. [RT #20257]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2692. [port] win32: 32/64 bit cleanups. [RT #20335]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews chain when re-signing a previously-signed zone.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Use -u to modify NSEC3 parameters or switch
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews between NSEC and NSEC3. [RT #20304]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2690. [bug] win32: fix isc_thread_key_getspecific() prototype.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2689. [bug] Correctly handle snprintf result. [RT #20306]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2688. [bug] Use INTERFACE_F_POINTTOPOINT, not IFF_POINTOPOINT,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews to decide to fetch the destination address. [RT #20305]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2687. [bug] Fixed dnssec-signzone -S handling of revoked keys.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews Also, added warnings when revoking a ZSK, as this is
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews not defined by protocol (but is legal). [RT #19943]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2686. [bug] dnssec-signzone should clean the old NSEC chain when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews signing with NSEC3 and vice versa. [RT #20301]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2685. [contrib] Update contrib/zkt to version 0.99c. [RT #20054]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2684. [cleanup] dig: formalize +ad and +cd as synonyms for
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews +adflag and +cdflag. [RT #19305]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews the NSEC3 parameters used to sign the zone change.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2682. [bug] "configure --enable-symtable=all" failed to
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews build. [RT #20282]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2681. [bug] IPSECKEY RR of gateway type 3 was not correctly
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews decoded. [RT #20269]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2680. [func] Move contrib/pkcs11-keygen to bin/pkcs11. [RT #20067]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2679. [func] dig -k can now accept TSIG keys in named.conf
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews format. [RT #20031]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2678. [func] Treat DS queries as if "minimal-response yes;"
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews was set. [RT #20258]
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews2677. [func] Changes to key metadata behavior:
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - Keys without "publish" or "active" dates set will
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews no longer be used for smart signing. However,
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews those dates will be set to "now" by default when
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews a key is created; to generate a key but not use
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews it yet, use dnssec-keygen -G.
4f087942583014b241adca1bc78c6db89ed96e94Mark Andrews - New "inactive" date (dnssec-keygen/settime -I)
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington sets the time when a key is no longer used for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater signing but is still published.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater - The "unpublished" date (-U) is deprecated in
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews favour of "deleted" (-D).
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2676. [bug] --with-export-installdir should have been
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews --with-export-includedir. [RT #20252]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2675. [bug] dnssec-signzone could crash if the key directory
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews did not exist. [RT #20232]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews --- 9.7.0a3 released ---
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2674. [bug] "dnssec-lookaside auto;" crashed if named was built
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews without openssl. [RT #20231]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2673. [bug] The managed-keys.bind zone file could fail to
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews load due to a spurious result from sync_keyzone()
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2672. [bug] Don't enable searching in 'host' when doing reverse
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews lookups. [RT #20218]
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2671. [bug] Add support for PKCS#11 providers not returning
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews the public exponent in RSA private keys
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews (OpenCryptoki for instance) in
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater dnssec-keyfromlabel. [RT #19294]
78cb74fab4665da2e2641ba909c6f59f74cc4193Automatic Updater2670. [bug] Unexpected connect failures failed to log enough
121bd24f4b8b2fc87cc945757b0c87e7e7656489Automatic Updater information to be useful. [RT #20205]
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater2669. [func] Update PKCS#11 support to support Keyper HSM.
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater Update PKCS#11 patch to be against openssl-0.9.8i.
121bd24f4b8b2fc87cc945757b0c87e7e7656489Automatic Updater2668. [func] Several improvements to dnssec-* tools, including:
822e877c4cd2a254fddd70d6cdf24fa374c98312Automatic Updater - dnssec-keygen and dnssec-settime can now set key
822e877c4cd2a254fddd70d6cdf24fa374c98312Automatic Updater metadata fields 0 (to unset a value, use "none")
822e877c4cd2a254fddd70d6cdf24fa374c98312Automatic Updater - dnssec-revoke sets the revocation date in
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater addition to the revoke bit
78cb74fab4665da2e2641ba909c6f59f74cc4193Automatic Updater - dnssec-settime can now print individual metadata
121bd24f4b8b2fc87cc945757b0c87e7e7656489Automatic Updater fields instead of always printing all of them,
121bd24f4b8b2fc87cc945757b0c87e7e7656489Automatic Updater and can print them in unix epoch time format for
121bd24f4b8b2fc87cc945757b0c87e7e7656489Automatic Updater use by scripts
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2667. [func] Add support for logging stack backtrace on assertion
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater failure (not available for all platforms). [RT #19780]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2666. [func] Added an 'options' argument to dns_name_fromstring()
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater (API change from 9.7.0a2). [RT #20196]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2665. [func] Clarify syntax for managed-keys {} statement, add
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater ARM documentation about RFC 5011 support. [RT #19874]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2664. [bug] create_keydata() and minimal_update() in zone.c
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater didn't properly check return values for some
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater functions. [RT #19956]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2663. [func] win32: allow named to run as a service using
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater "NT AUTHORITY\LocalService" as the account. [RT #19977]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2662. [bug] lwres_getipnodebyname() and lwres_getipnodebyaddr()
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson returned a misleading error code when lwresd was
309b912841e8b97bf0b0df0d96c3eaf16990c080Automatic Updater down. [RT #20028]
56874aef380a64a2c183b7c282c3e7a361d67fa1Automatic Updater2661. [bug] Check whether socket fd exceeds FD_SETSIZE when
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson creating lwres context. [RT #20029]
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews2660. [func] Add a new set of DNS libraries for non-BIND9
754ebd37e782356aedbb2987e3c1a8ab4f29574eMark Andrews applications. See README.libdns. [RT #19369]
309b912841e8b97bf0b0df0d96c3eaf16990c080Automatic Updater2659. [doc] Clarify dnssec-keygen doc: key name must match zone
94df856897945fe58f130ba78765c57308bc5400Automatic Updater name for DNSSEC keys. [RT #19938]
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews2658. [bug] dnssec-settime and dnssec-revoke didn't process
5c679dbb66df92766f6a7e7bb93c18d61275d1feMark Andrews key file paths correctly. [RT #20078]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2657. [cleanup] Lower "journal file <path> does not exist, creating it"
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater log level to debug 1. [RT #20058]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2656. [func] win32: add a "tools only" check box to the installer
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews which causes it to only install dig, host, nslookup,
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews nsupdate and relevant DLLs. [RT #19998]
da93950363b307b718d156514b95b9df93a63776Mark Andrews2655. [doc] Document that key-directory does not affect
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater bind.keys, rndc.key or session.key. [RT #20155]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2654. [bug] Improve error reporting on duplicated names for
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater deny-answer-xxx. [RT #20164]
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic Updater2653. [bug] Treat ENGINE_load_private_key() failures as key
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic Updater not found rather than out of memory. [RT #18033]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2652. [func] Provide more detail about what record is being
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater deleted. [RT #20061]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2651. [bug] Dates could print incorrectly in K*.key files on
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 64-bit systems. [RT #20076]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2650. [bug] Assertion failure in dnssec-signzone when trying
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater to read keyset-* files. [RT #20075]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2649. [bug] Set the domain for forward only zones. [RT #19944]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2648. [port] win32: isc_time_seconds() was broken. [RT #19900]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2647. [bug] Remove unnecessary SOA updates when a new KSK is
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater added. [RT #19913]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2646. [bug] Incorrect cleanup on error in socket.c. [RT #19987]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2645. [port] "gcc -m32" didn't work on amd64 and x86_64 platforms
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater which default to 64 bits. [RT #19927]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater --- 9.7.0a2 released ---
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2644. [bug] Change #2628 caused a regression on some systems;
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater named was unable to write the PID file and would
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater fail on startup. [RT #20001]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2643. [bug] Stub zones interacted badly with NSEC3 support.
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2642. [bug] nsupdate could dump core on solaris when reading
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater improperly formatted key files. [RT #20015]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2641. [bug] Fixed an error in parsing update-policy syntax,
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater added a regression test to check it. [RT #20007]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2640. [security] A specially crafted update packet will cause named
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater to exit. [RT #20000]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2639. [bug] Silence compiler warnings in gssapi code. [RT #19954]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2638. [bug] Install arpaname. [RT #19957]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2636. [func] Simplify zone signing and key maintenance with the
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater dnssec-* tools. Major changes:
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater - all dnssec-* tools now take a -K option to
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater specify a directory in which key files will be
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater - DNSSEC can now store metadata indicating when
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater they are scheduled to be published, activated,
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater revoked or removed; these values can be set by
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater dnssec-keygen or overwritten by the new
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater dnssec-settime command
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater - dnssec-signzone -S (for "smart") option reads key
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater metadata and uses it to determine automatically
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater which keys to publish to the zone, use for
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater signing, revoke, or remove from the zone
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2635. [bug] isc_inet_ntop() incorrectly handled 0.0/16 addresses.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2634. [port] win32: Add support for libxml2, enable
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater statschannel. [RT #19773]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2633. [bug] Handle 15 bit rand() functions. [RT #19783]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2632. [func] util/kit.sh: warn if documentation appears to be out of
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater date. [RT #19922]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2631. [bug] Handle "//", "/./" and "/../" in mkdirpath().
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2630. [func] Improved syntax for DDNS autoconfiguration: use
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater "update-policy local;" to switch on local DDNS in a
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater zone. (The "ddns-autoconf" option has been removed.)
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2629. [port] Check for seteuid()/setegid(), use setresuid()/
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater setresgid() if not present. [RT #19932]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2628. [port] linux: Allow /var/run/named/named.pid to be opened
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater at startup with reduced capabilities in operation.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2627. [bug] Named aborted if the same key was included in
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater trusted-keys more than once. [RT #19918]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2626. [bug] Multiple trusted-keys could trigger an assertion
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater failure. [RT #19914]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2625. [bug] Missing UNLOCK in rbtdb.c. [RT #19865]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2624. [func] 'named-checkconf -p' will print out the parsed
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater configuration. [RT #18871]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2623. [bug] Named started searches for DS non-optimally. [RT #19915]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2622. [bug] Printing of named.conf grammar was broken. [RT #19919]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2621. [doc] Made copyright boilerplate consistent. [RT #19833]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2620. [bug] Delay thawing the zone until the reload of it has
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater completed successfully. [RT #19750]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2619. [func] Add support for RFC 5011, automatic trust anchor
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater maintenance. The new "managed-keys" statement can
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater be used in place of "trusted-keys" for zones which
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater support this protocol. (Note: this syntax is
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater expected to change prior to 9.7.0 final.) [RT #19248]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2618. [bug] The sdb and sdlz db_interator_seek() methods could
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater loop infinitely. [RT #19847]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2617. [bug] ifconfig.sh failed to emit an error message when
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater run from the wrong location. [RT #19375]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2616. [bug] 'host' used the nameservers from resolv.conf even
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater when a explicit nameserver was specified. [RT #19852]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2615. [bug] "__attribute__((unused))" was in the wrong place
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater for ia64 gcc builds. [RT #19854]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2614. [port] win32: 'named -v' should automatically be executed
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater in the foreground. [RT #19844]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2613. [placeholder]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater --- 9.7.0a1 released ---
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2612. [func] Add default values for the arguments to
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater dnssec-keygen. Without arguments, it will now
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater generate a 1024-bit RSASHA1 zone-signing key,
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater or with the -f KSK option, a 2048-bit RSASHA1
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater key-signing key. [RT #19300]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2611. [func] Add -l option to dnssec-dsfromkey to generate
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater DLV records instead of DS records. [RT #19300]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2610. [port] sunos: Change #2363 was not complete. [RT #19796]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2609. [func] Simplify the configuration of dynamic zones:
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater - add ddns-confgen command to generate
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater configuration text for named.conf
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater - add zone option "ddns-autoconf yes;", which
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater causes named to generate a TSIG session key
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater and allow updates to the zone using that key
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater - add '-l' (localhost) option to nsupdate, which
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater causes nsupdate to connect to a locally-running
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater named process using the session key generated
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2608. [func] Perform post signing verification checks in
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater dnssec-signzone. These can be disabled with -P.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater The post sign verification test ensures that for each
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater algorithm in use there is at least one non revoked
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater self signed KSK key. That all revoked KSK keys are
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater self signed. That all records in the zone are signed
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater by the algorithm. [RT #19653]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2607. [bug] named could incorrectly delete NSEC3 records for
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater empty nodes when processing a update request.
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2606. [bug] "delegation-only" was not being accepted in
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater delegation-only type zones. [RT #19717]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2605. [bug] Accept DS responses from delegation only zones.
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2604. [func] Add support for DNS rebinding attack prevention through
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater new options, deny-answer-addresses and
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater deny-answer-aliases. Based on contributed code from
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater JD Nurmi, Google. [RT #18192]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2603. [port] win32: handle .exe extension of named-checkzone and
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater named-comilezone argv[0] names under windows.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2602. [port] win32: fix debugging command line build of libisccfg.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2601. [doc] Mention file creation mode mask in the
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater named manual page.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2600. [doc] ARM: miscellaneous reformatting for different
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater page widths. [RT #19574]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2599. [bug] Address rapid memory growth when validation fails.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2598. [func] Reserve the -F flag. [RT #19657]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2597. [bug] Handle a validation failure with a insecure delegation
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater from a NSEC3 signed master/slave zone. [RT #19464]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2596. [bug] Stale tree nodes of cache/dynamic rbtdb could stay
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater long, leading to inefficient memory usage or rejecting
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater newer cache entries in the worst case. [RT #19563]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2595. [bug] Fix unknown extended rcodes in dig. [RT #19625]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2594. [func] Have rndc warn if using its default configuration
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater file when the key file also exists. [RT #19424]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2593. [bug] Improve a corner source of SERVFAILs [RT #19632]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2592. [bug] Treat "any" as a type in nsupdate. [RT #19455]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2591. [bug] named could die when processing a update in
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater removed_orphaned_ds(). [RT #19507]
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2590. [func] Report zone/class of "update with no effect".
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2589. [bug] dns_db_unregister() failed to clear '*dbimp'.
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater2588. [bug] SO_REUSEADDR could be set unconditionally after failure
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater of bind(2) call. This should be rare and mostly
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater harmless, but may cause interference with other
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater processes that happen to use the same port. [RT #19642]
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2587. [func] Improve logging by reporting serial numbers for
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater when zone serial has gone backwards or unchanged.
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater2586. [bug] Missing cleanup of SIG rdataset in searching a DLZ DB
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater or SDB. [RT #19577]
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater2585. [bug] Uninitialized socket name could be referenced via a
0b580e05aec89f501a9c20cc00ceb42d043d3928Automatic Updater statistics channel, triggering an assertion failure in
f8e61212a1b83e60f521577cc522e8bc1509c8cfAutomatic Updater XML rendering. [RT #19427]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2584. [bug] alpha: gcc optimization could break atomic operations.
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2583. [port] netbsd: provide a control to not add the compile
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater date to the version string, -DNO_VERSION_DATE.
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2582. [bug] Don't emit warning log message when we attempt to
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater remove non-existent journal. [RT #19516]
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2581. [contrib] dlz/mysql set MYSQL_OPT_RECONNECT option on connection.
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater Requires MySQL 5.0.19 or later. [RT #19084]
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2580. [bug] UpdateRej statistics counter could be incremented twice
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater for one rejection. [RT #19476]
0429fc942ef48b8ab07a01648b22f98174a2ae6fAutomatic Updater2579. [bug] DNSSEC lookaside validation failed to handle unknown
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews algorithms. [RT #19479]
251227789bd26421471076f04f4e9eb7f0efb2f1Mark Andrews2578. [bug] Changed default sig-signing-type to 65534, because
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 65535 turns out to be reserved. [RT #19477]
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2577. [doc] Clarified some statistics counters. [RT #19454]
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2576. [bug] NSEC record were not being correctly signed when
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater a zone transitions from insecure to secure.
af84f6917c6950d061f931434f337b18ad281a11Mark Andrews Handle such incorrectly signed zones. [RT #19114]
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2575. [func] New functions dns_name_fromstring() and
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater dns_name_tostring(), to simplify conversion
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater of a string to a dns_name structure and vice
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater versa. [RT #19451]
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2574. [doc] Document nsupdate -g and -o. [RT #19351]
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater2573. [bug] Replacing a non-CNAME record with a CNAME record in a
41ffa5503c1dc1ab99aa62ef61828e032ed470e8Automatic Updater single transaction in a signed zone failed. [RT #19397]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2572. [func] Simplify DLV configuration, with a new option
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews "dnssec-lookaside auto;" This is the equivalent
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews of "dnssec-lookaside . trust-anchor dlv.isc.org;"
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews plus setting a trusted-key for dlv.isc.org.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews Note: The trusted key is hard-coded into named,
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews but is also stored in (and can be overridden
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews by) $sysconfdir/bind.keys. As the ISC DLV key
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews rolls over it can be kept up to date by replacing
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews the bind.keys file with a key downloaded from
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2571. [func] Add a new tool "arpaname" which translates IP addresses
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews to the corresponding IN-ADDR.ARPA or IP6.ARPA name.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2570. [func] Log the destination address the query was sent to.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2569. [func] Move journalprint, nsec3hash, and genrandom
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "make install" will put them in $sbindir. [RT #19301]
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2568. [bug] Report when the write to indicate a otherwise
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews successful start fails. [RT #19360]
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews2567. [bug] dst__privstruct_writefile() could miss write errors.
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews write_public_key() could miss write errors.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dnssec-dsfromkey could miss write errors.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2566. [cleanup] Clarify logged message when an insecure DNSSEC
45eca3a5d46ed15aee14d81f6cb6c9fb6f365344Mark Andrews response arrives from a zone thought to be secure:
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews "insecurity proof failed" instead of "not
cff0e0b52cf0928123bad6f3bccf56e22bbc07f5Automatic Updater insecure". [RT #19400]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2565. [func] Add support for HIP record. Includes new functions
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews dns_rdata_hip_first(), dns_rdata_hip_next()
872a5b83f68b8058945298715b0fa53442aad52fAutomatic Updater and dns_rdata_hip_current(). [RT #19384]
75b70a68aefaa17ac4e768d5ed85d2f50d471490Automatic Updater2564. [bug] Only take EDNS fallback steps when processing timeouts.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2563. [bug] Dig could leak a socket causing it to wait forever
90eba8a49d580f9e718983fa39d8e5ee483558c9Automatic Updater to exit. [RT #19359]
75b70a68aefaa17ac4e768d5ed85d2f50d471490Automatic Updater2562. [doc] ARM: miscellaneous improvements, reorganization,
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews and some new content.
068a66979695c77359e7a9181bb3f831c965b21cMark Andrews2561. [doc] Add isc-config.sh(1) man page. [RT #16378]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2560. [bug] Add #include <config.h> to iptable.c. [RT #18258]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2559. [bug] dnssec-dsfromkey could compute bad DS records when
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington reading from a K* files. [RT #19357]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2558. [func] Set the ownership of missing directories created
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington for pid-file if -u has been specified on the command
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington line. [RT #19328]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2557. [cleanup] PCI compliance:
cff0e0b52cf0928123bad6f3bccf56e22bbc07f5Automatic Updater * new libisc log module file
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater * isc_dir_chroot() now also changes the working
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater directory to "/".
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater * additional INSISTs
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater * additional logging when files can't be removed.
c28a1243429dfaf8dc5f6c1db0dccdc6ce386baeMark Andrews2556. [port] Solaris: mkdir(2) on tmpfs filesystems does not do the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater error checks in the correct order resulting in the
6c68e68fc550c947100581eb7b5340b81c062c94Andreas Gustafsson wrong error code sometimes being returned. [RT #19249]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2555. [func] dig: when emitting a hex dump also display the
5f7e0eb1cb917b788906d3e2aa01bfc4885dcae4Mark Andrews corresponding characters. [RT #19258]
15ae68f3db8261770fc33b8e0f83f5d8c7021e84Mark Andrews2554. [bug] Validation of uppercase queries from NSEC3 zones could
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews fail. [RT #19297]
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater2553. [bug] Reference leak on DNSSEC validation errors. [RT #19291]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2552. [bug] zero-no-soa-ttl-cache was not being honoured.
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2551. [bug] Potential Reference leak on return. [RT #19341]
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2550. [bug] Check --with-openssl=<path> finds <openssl/opensslv.h>.
a7038d1a0513c8e804937ebc95fc9cb3a46c04f5Mark Andrews2549. [port] linux: define NR_OPEN if not currently defined.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2548. [bug] Install iterated_hash.h. [RT #19335]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2547. [bug] openssl_link.c:mem_realloc() could reference an
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater out-of-range area of the source buffer. New public
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater function isc_mem_reallocate() was introduced to address
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater this bug. [RT #19313]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2546. [func] Add --enable-openssl-hash configure flag to use
10640b2e3efc7bc8034108136d7487f7407fbf37Andreas Gustafsson OpenSSL (in place of internal routine) for hash
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater functions (MD5, SHA[12] and HMAC). [RT #18815]
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews2545. [doc] ARM: Legal hostname checking (check-names) is
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater for SRV RDATA too. [RT #19304]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2544. [cleanup] Removed unused structure members in adb.c. [RT #19225]
009a0837d51b40e33ebe1223f6c53effaa14920fAutomatic Updater2543. [contrib] Update contrib/zkt to version 0.98. [RT #19113]
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater2542. [doc] Update the description of dig +adflag. [RT #19290]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2541. [bug] Conditionally update dispatch manager statistics.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2540. [func] Add a nibble mode to $GENERATE. [RT #18872]
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater2539. [security] Update the interaction between recursion, allow-query,
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater allow-query-cache and allow-recursion. [RT #19198]
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2538. [bug] cache/ADB memory could grow over max-cache-size,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater especially with threads and smaller max-cache-size
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater values. [RT #19240]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2537. [func] Added more statistics counters including those on socket
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater I/O events and query RTT histograms. [RT #18802]
133e6d43fa82e80d3798be4de00f4540f485ec6cAutomatic Updater2536. [cleanup] Silence some warnings when -Werror=format-security is
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater specified. [RT #19083]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2535. [bug] dig +showsearch and +trace interacted badly. [RT #19091]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2534. [func] Check NAPTR records regular expressions and
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater replacement strings to ensure they are syntactically
ca904804e43f663f08eb1ac9d6d617930b9a3cd3Automatic Updater valid and consistant. [RT #18168]
78cb74fab4665da2e2641ba909c6f59f74cc4193Automatic Updater2533. [doc] ARM: document @ (at-sign). [RT #17144]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2532. [bug] dig: check the question section of the response to
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews see if it matches the asked question. [RT #18495]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2531. [bug] Change #2207 was incomplete. [RT #19098]
ca904804e43f663f08eb1ac9d6d617930b9a3cd3Automatic Updater2530. [bug] named failed to reject insecure to secure transitions
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater via UPDATE. [RT #19101]
7f94d9a8162c9a96b56e66176702b66e79d8e1a2Automatic Updater2529. [cleanup] Upgrade libtool to silence complaints from recent
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater version of autoconf. [RT #18657]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2528. [cleanup] Silence spurious configure warning about
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater --datarootdir [RT #19096]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2527. [placeholder]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2526. [func] New named option "attach-cache" that allows multiple
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater views to share a single cache to save memory and
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater improve lookup efficiency. Based on contributed code
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater from Barclay Osborn, Google. [RT #18905]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2525. [func] New logging category "query-errors" to provide detailed
db5b7e2cdf150c46e8242d3e2e3ad3f5c7300258Automatic Updater internal information about query failures, especially
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater about server failures. [RT #19027]
3a32066d653b39a3f602b697a0fb98a399b88f88Automatic Updater2524. [port] sunos: dnssec-signzone needs strtoul(). [RT #19129]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2523. [bug] Random type rdata freed by dns_nsec_typepresent().
ae7e54b14c946e0984c191554db9abb4893f9349Automatic Updater2522. [security] Handle -1 from DSA_do_verify() and EVP_VerifyFinal().
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2521. [bug] Improve epoll cross compilation support. [RT #19047]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2520. [bug] Update xml statistics version number to 2.0 as change
713a5e3080f112b3efde9235e9c92035056ff966Automatic Updater #2388 made the schema incompatible to the previous
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater version. [RT #19080]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2519. [bug] dig/host with -4 or -6 didn't work if more than two
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater nameserver addresses of the excluded address family
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater preceded in resolv.conf. [RT #19081]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2518. [func] Add support for the new CERT types from RFC 4398.
3f802a977eb8ac127c1d6d0d76b8e38d032403daAutomatic Updater2517. [bug] dig +trace with -4 or -6 failed when it chose a
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater nameserver address of the excluded address type.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2516. [bug] glue sort for responses was performed even when not
ca904804e43f663f08eb1ac9d6d617930b9a3cd3Automatic Updater needed. [RT #19039]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2514. [bug] dig/host failed with -4 or -6 when resolv.conf contains
bc0a53583d92309bebcf93c408e2f3247ebd3d3cAutomatic Updater a nameserver of the excluded address family.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2513. [bug] Fix windows cli build. [RT #19062]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2512. [func] Print a summary of the cached records which make up
c243d779731a410f8dc2d2feeed20c15f299b6e3Automatic Updater the negative response. [RT #18885]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2511. [cleanup] dns_rdata_tofmttext() add const to linebreak.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2510. [bug] "dig +sigchase" could trigger REQUIRE failures.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2509. [bug] Specifying a fixed query source port was broken.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2508. [placeholder]
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater2507. [func] Log the recursion quota values when killing the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater oldest query or refusing to recurse due to quota.
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater2506. [port] solaris: Check at configure time if
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater hack_shutup_pthreadonceinit is needed. [RT #19037]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2505. [port] Treat amd64 similarly to x86_64 when determining
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater atomic operation support. [RT #19031]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2504. [bug] Address race condition in the socket code. [RT #18899]
bb93c8542756719b53096b9939e4041d0966026fAutomatic Updater2503. [port] linux: improve compatibility with Linux Standard
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater Base. [RT #18793]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2502. [cleanup] isc_radix: Improve compliance with coding style,
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater document function in <isc/radix.h>. [RT #18534]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2501. [func] $GENERATE now supports all rdata types. Multi-field
56874aef380a64a2c183b7c282c3e7a361d67fa1Automatic Updater rdata types need to be quoted. See the ARM for
3e79333aa37d3b88959372431a02af8a3eb7cfd9Automatic Updater details. [RT #18368]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2500. [contrib] contrib/sdb/pgsql/zonetodb.c called non-existent
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater function. [RT #18582]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2499. [port] solaris: lib/lwres/getaddrinfo.c namespace clash.
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater --- 9.6.0rc1 released ---
009a0837d51b40e33ebe1223f6c53effaa14920fAutomatic Updater2498. [bug] Removed a bogus function argument used with
009a0837d51b40e33ebe1223f6c53effaa14920fAutomatic Updater ISC_SOCKET_USE_POLLWATCH: it could cause compiler
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater warning or crash named with the debug 1 level
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater of logging. [RT #18917]
3f802a977eb8ac127c1d6d0d76b8e38d032403daAutomatic Updater2497. [bug] Don't add RRSIG bit to NSEC3 bit map for insecure
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2496. [bug] Add sanity length checks to NSID option. [RT #18813]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2495. [bug] Tighten RRSIG checks. [RT #18795]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2494. [bug] isc/radix.h, dns/sdlz.h and dns/dlz.h were not being
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater installed. [RT #18826]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2493. [bug] The linux capabilities code was not correctly cleaning
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater up after itself. [RT #18767]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2492. [func] Rndc status now reports the number of cpus discovered
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater and the number of worker threads when running
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater multi-threaded. [RT #18273]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2491. [func] Attempt to re-use a local port if we are already using
3098364bcdd7a719fbafa5fc8d2cc9e90e5a5989Automatic Updater the port. [RT #18548]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2490. [port] aix: work around a kernel bug where IPV6_RECVPKTINFO
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater is cleared when IPV6_V6ONLY is set. [RT #18785]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2489. [port] solaris: Workaround Solaris's kernel bug about
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater http://bugs.opensolaris.org/view_bug.do?bug_id=6724237
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Define ISC_SOCKET_USE_POLLWATCH at build time to enable
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater this workaround. [RT #18870]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2488. [func] Added a tool, dnssec-dsfromkey, to generate DS records
59b277af9d9aac08d16be63aed5ae60ac9eef0d5Automatic Updater from keyset and .key files. [RT #18694]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2487. [bug] Give TCP connections longer to complete. [RT #18675]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2486. [func] The default locations for named.pid and lwresd.pid
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater This allows the owner of the containing directory
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater to be set, for "named -u" support, and allows there
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater to be a permanent symbolic link in the path, for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "named -t" support. [RT #18306]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2485. [bug] Change update's the handling of obscured RRSIG
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater records. Not all orphaned DS records were being
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater removed. [RT #18828]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2484. [bug] It was possible to trigger a REQUIRE failure when
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater adding NSEC3 proofs to the response in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater query_addwildcardproof(). [RT #18828]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2483. [port] win32: chroot() is not supported. [RT #18805]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2482. [port] libxml2: support versions 2.7.* in addition
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to 2.6.*. [RT #18806]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater --- 9.6.0b1 released ---
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2481. [bug] rbtdb.c:matchparams() failed to handle NSEC3 chain
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater collisions. [RT #18812]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2480. [bug] named could fail to emit all the required NSEC3
1b670d35282f1b9352692ad212be3c0aa97b0689Automatic Updater records. [RT #18812]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2479. [bug] xfrout:covers was not properly initialized. [RT #18801]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2478. [bug] 'addresses' could be used uninitialized in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater configure_forward(). [RT #18800]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2477. [bug] dig: the global option to print the command line is
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater +cmd not print_cmd. Update the output to reflect
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater this. [RT #17008]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2476. [doc] ARM: improve documentation for max-journal-size and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater ixfr-from-differences. [RT #15909] [RT #18541]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2475. [bug] LRU cache cleanup under overmem condition could purge
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater particular entries more aggressively. [RT #17628]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2474. [bug] ACL structures could be allocated with insufficient
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater space, causing an array overrun. [RT #18765]
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater2473. [port] linux: raise the limit on open files to the possible
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater maximum value before spawning threads; 'files'
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater specified in named.conf doesn't seem to work with
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater threads as expected. [RT #18784]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2472. [port] linux: check the number of available cpu's before
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater calling chroot as it depends on "/proc". [RT #16923]
97669cab1f7e6f953dbf39ef1b2c4206ecb50d9eAutomatic Updater2471. [bug] named-checkzone was not reporting missing mandatory
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater glue when sibling checks were disabled. [RT #18768]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2470. [bug] Elements of the isc_radix_node_t could be incorrectly
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater overwritten. [RT# 18719]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2469. [port] solaris: Work around Solaris's select() limitations.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2468. [bug] Resolver could try unreachable servers multiple times.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2467. [bug] Failure of fcntl(F_DUPFD) wasn't logged. [RT #18740]
4cda4fd158d6ded5586bacea8c388445d99611eaAutomatic Updater2466. [doc] ARM: explain max-cache-ttl 0 SERVFAIL issue.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2465. [bug] Adb's handling of lame addresses was different
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for IPv4 and IPv6. [RT #18738]
601c1908d06375f5dea00ab98671a6c934d8a840Automatic Updater2464. [port] linux: check that a capability is present before
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater trying to set it. [RT #18135]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2463. [port] linux: POSIX doesn't include the IPv6 Advanced Socket
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater API and glibc hides parts of the IPv6 Advanced Socket
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater API as a result. This is stupid as it breaks how the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater two halves (Basic and Advanced) of the IPv6 Socket API
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater were designed to be used but we have to live with it.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Define _GNU_SOURCE to pull in the IPv6 Advanced Socket
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater API. [RT #18388]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2462. [doc] Document -m (enable memory usage debugging)
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater option for dig. [RT #18757]
ca904804e43f663f08eb1ac9d6d617930b9a3cd3Automatic Updater2461. [port] sunos: Change #2363 was not complete. [RT #17513]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater --- 9.6.0a1 released ---
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2460. [bug] Don't call dns_db_getnsec3parameters() on the cache.
e050a037cbba260bb23a34a2bd8a8c2f9ed2ae93Automatic Updater2459. [contrib] Import dnssec-zkt to contrib/zkt. [RT #18448]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2458. [doc] ARM: update and correction for max-cache-size.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2457. [tuning] max-cache-size is reverted to 0, the previous
0d3490f93bb980fde704055e74c1b508987a5fe4Mark Andrews default. It should be safe because expired cache
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater entries are also purged. [RT #18684]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2456. [bug] In ACLs, ::/0 and 0.0.0.0/0 would both match any
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater address, regardless of family. They now correctly
5ae0e2c8b72fa44237edeb37d1945b1c3535ca39Automatic Updater distinguish IPv4 from IPv6. [RT #18559]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2455. [bug] Stop metadata being transferred via axfr/ixfr.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2454. [func] nsupdate: you can now set a default ttl. [RT #18317]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2453. [bug] Remove NULL pointer dereference in dns_journal_print().
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2452. [func] Improve bin/test/journalprint. [RT #18316]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2451. [port] solaris: handle runtime linking better. [RT #18356]
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson2450. [doc] Fix lwresd docbook problem for manual page.
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2449. [placeholder]
dd65eb1efb40b1c47d57963192bfc54873b219beAutomatic Updater2448. [func] Add NSEC3 support. [RT #15452]
b0d566a2ce0f5a67f537ee7f8233f82f2584cc61Automatic Updater2447. [cleanup] libbind has been split out as a separate product.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2446. [func] Add a new log message about build options on startup.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater A new command-line option '-V' for named is also
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater provided to show this information. [RT# 18645]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2445. [doc] ARM out-of-date on empty reverse zones (list includes
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater RFC1918 address, but these are not yet compiled in).
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2444. [port] Linux, FreeBSD, AIX: Turn off path mtu discovery
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater (clear DF) for UDP responses and requests.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2443. [bug] win32: UDP connect() would not generate an event,
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater and so connected UDP sockets would never clean up.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater Fix this by doing an immediate WSAConnect() rather
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater than an io completion port type for UDP.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2442. [bug] A lock could be destroyed twice. [RT# 18626]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2441. [bug] isc_radix_insert() could copy radix tree nodes
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater incompletely. [RT #18573]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2440. [bug] named-checkconf used an incorrect test to determine
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater if an ACL was set to none.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2439. [bug] Potential NULL dereference in dns_acl_isanyornone().
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2438. [bug] Timeouts could be logged incorrectly under win32.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2437. [bug] Sockets could be closed too early, leading to
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater inconsistent states in the socket module. [RT #18298]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2436. [security] win32: UDP client handler can be shutdown. [RT #18576]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2435. [bug] Fixed an ACL memory leak affecting win32.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2434. [bug] Fixed a minor error-reporting bug in
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2433. [tuning] Set initial timeout to 800ms.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2432. [bug] More Windows socket handling improvements. Stop
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater using I/O events and use IO Completion Ports
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater throughout. Rewrite the receive path logic to make
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater it easier to support multiple simultaneous
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater requesters in the future. Add stricter consistency
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater checking as a compile-time option (define
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater ISC_SOCKET_CONSISTENCY_CHECKS; defaults to off).
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2431. [bug] Acl processing could leak memory. [RT #18323]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2430. [bug] win32: isc_interval_set() could round down to
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater zero if the input was less than NS_INTERVAL
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater nanoseconds. Round up instead. [RT #18549]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2429. [doc] nsupdate should be in section 1 of the man pages.
7fc3b88c3a6e18f8a085406c36fddc2af63619efMark Andrews2428. [bug] dns_iptable_merge() mishandled merges of negative
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater tables. [RT #18409]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2427. [func] Treat DNSKEY queries as if "minimal-response yes;"
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater was set. [RT #18528]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2426. [bug] libbind: inet_net_pton() can sometimes return the
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater wrong value if excessively large net masks are
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater supplied. [RT #18512]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2425. [bug] named didn't detect unavailable query source addresses
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater at load time. [RT #18536]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2424. [port] configure now probes for a working epoll
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater implementation. Allow the use of kqueue,
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater epoll and /dev/poll to be selected at compile
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater time. [RT #18277]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2423. [security] Randomize server selection on queries, so as to
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews make forgery a little more difficult. Instead of
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater always preferring the server with the lowest RTT,
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater pick a server with RTT within the same 128
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater millisecond band. [RT #18441]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2422. [bug] Handle the special return value of a empty node as
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater if it was a NXRRSET in the validator. [RT #18447]
603cf17f33da24d460616389ec40d6f2a6e110a0Automatic Updater2421. [func] Add new command line option '-S' for named to specify
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater the max number of sockets. [RT #18493]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater Use caution: this option may not work for some
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater operating systems without rebuilding named.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2420. [bug] Windows socket handling cleanup. Let the io
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater completion event send out canceled read/write
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater done events, which keeps us from writing to memory
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater we no longer have ownership of. Add debugging
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater socket_log() function. Rework TCP socket handling
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to not leak sockets.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2419. [cleanup] Document that isc_socket_create() and isc_socket_open()
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater should not be used for isc_sockettype_fdwatch sockets.
db5b7e2cdf150c46e8242d3e2e3ad3f5c7300258Automatic Updater2418. [bug] AXFR request on a DLZ could trigger a REQUIRE failure
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2417. [bug] Connecting UDP sockets for outgoing queries could
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater unexpectedly fail with an 'address already in use'
19b3dc94bce93fa76bd7e066f9298630dbc9dcb4Automatic Updater error. [RT #18411]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2416. [func] Log file descriptors that cause exceeding the
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater internal maximum. [RT #18460]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2415. [bug] 'rndc dumpdb' could trigger various assertion failures
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews2414. [bug] A masterdump context held the database lock too long,
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater causing various troubles such as dead lock and
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews recursive lock acquisition. [RT #18311, #18456]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2413. [bug] Fixed an unreachable code path in socket.c. [RT #18442]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2412. [bug] win32: address a resource leak. [RT #18374]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2411. [bug] Allow using a larger number of sockets than FD_SETSIZE
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for select(). To enable this, set ISC_SOCKET_MAXSOCKETS
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater at compilation time. [RT #18433]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Note: with changes #2469 and #2421 above, there is no
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater need to tweak ISC_SOCKET_MAXSOCKETS at compilation time
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2410. [bug] Correctly delete m_versionInfo. [RT #18432]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2409. [bug] Only log that we disabled EDNS processing if we were
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater subsequently successful. [RT #18029]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2408. [bug] A duplicate TCP dispatch event could be sent, which
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater could then trigger an assertion failure in
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater resquery_response(). [RT #18275]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2407. [port] hpux: test for sys/dyntune.h. [RT #18421]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2406. [placeholder]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2405. [cleanup] The default value for dnssec-validation was changed to
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "yes" in 9.5.0-P1 and all subsequent releases; this
83d29eff2912ef967596eb5ed148de7668b35564Automatic Updater was inadvertently omitted from CHANGES at the time.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2404. [port] hpux: files unlimited support.
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater2403. [bug] TSIG context leak. [RT #18341]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2402. [port] Support Solaris 2.11 and over. [RT #18362]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2401. [bug] Expect to get E[MN]FILE errno internal_accept()
098097efb95046a4a5285b6dae95dea3e3b70853Automatic Updater (from accept() or fcntl() system calls). [RT #18358]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2400. [bug] Log if kqueue()/epoll_create()/open(/dev/poll) fails.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2399. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2398. [bug] Improve file descriptor management. New,
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater temporary, named.conf option reserved-sockets,
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater default 512. [RT #18344]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2397. [bug] gssapi_functions had too many elements. [RT #18355]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2396. [bug] Don't set SO_REUSEADDR for randomized ports.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2395. [port] Avoid warning and no effect from "files unlimited"
e705db6d5d886dc14f4a75a2046a075c0750e7eeAutomatic Updater on Linux when running as root. [RT #18335]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2394. [bug] Default configuration options set the limit for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater open files to 'unlimited' as described in the
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater documentation. [RT #18331]
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2393. [bug] nested acls containing keys could trigger an
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater assertion in acl.c. [RT #18166]
0ce87e5749aabb8eef1e0a37e4bd6e6ffa1d7196Automatic Updater2392. [bug] remove 'grep -q' from acl test script, some platforms
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater don't support it. [RT #18253]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2391. [port] hpux: cover additional recvmsg() error codes.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2390. [bug] dispatch.c could make a false warning on 'odd socket'.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2389. [bug] Move the "working directory writable" check to after
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater the ns_os_changeuser() call. [RT #18326]
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater2388. [bug] Avoid using tables for layout purposes in
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater statistics XSL [RT #18159].
2bb3422dc683c013db7042f5736240de6b86f182Automatic Updater2387. [bug] Silence compiler warnings in lib/isc/radix.c.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater [RT #18147] [RT #18258]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2386. [func] Add warning about too small 'open files' limit.
a26b22914b7bf25f065afb8cdef983766dcd672bAutomatic Updater2385. [bug] A condition variable in socket.c could leak in
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater rare error handling [RT #17968].
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2384. [security] Fully randomize UDP query ports to improve
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater forgery resilience. [RT #17949, #18098]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2383. [bug] named could double queries when they resulted in
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater SERVFAIL due to overkilling EDNS0 failure detection.
f6056ad06781c95198505ae3a361e6dd98df4b91Automatic Updater2382. [doc] Add descriptions of DHCID, IPSECKEY, SPF and SSHFP
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2381. [port] dlz/mysql: support multiple install layouts for
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater mysql. <prefix>/include/{,mysql/}mysql.h and
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater <prefix>/lib/{,mysql/}. [RT #18152]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2380. [bug] dns_view_find() was not returning NXDOMAIN/NXRRSET
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater proofs which, in turn, caused validation failures
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater for insecure zones immediately below a secure zone
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater the server was authoritative for. [RT #18112]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2379. [contrib] queryperf/gen-data-queryperf.py: removed redundant
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater TLDs and supported RRs with TTLs [RT #17972]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2378. [bug] gssapi_functions{} had a redundant member in BIND 9.5.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2377. [bug] Address race condition in dnssec-signzone. [RT #18142]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2376. [bug] Change #2144 was not complete.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2375. [placeholder]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2374. [bug] "blackhole" ACLs could cause named to segfault due
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to some uninitialized memory. [RT #18095]
681beefc668253b3e469a1de282fbc33a3752422Automatic Updater2373. [bug] Default values of zone ACLs were re-parsed each time a
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater new zone was configured, causing an overconsumption
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater of memory. [RT #18092]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2372. [bug] Fixed incorrect TAG_HMACSHA256_BITS value [RT #18047]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2371. [doc] Add +nsid option to dig man page. [RT #18039]
6ceb29d4d4d6f639e50317fa6015806e80aa422aAutomatic Updater2370. [bug] "rndc freeze" could trigger an assertion in named
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews when called on a nonexistent zone. [RT #18050]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2369. [bug] libbind: Array bounds overrun on read in bitncmp().
ac4e70ff8955669341f435bc0a734a17c01af124Mark Andrews2368. [port] Linux: use libcap for capability management if
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater possible. [RT# 18026]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2367. [bug] Improve counting of dns_resstatscounter_retry
9d330c054e02f52cefd8dc0e71550b0fe07e077eAutomatic Updater2366. [bug] Adb shutdown race. [RT #18021]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2365. [bug] Fix a bug that caused dns_acl_isany() to return
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater spurious results. [RT #18000]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2364. [bug] named could trigger a assertion when serving a
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater malformed signed zone. [RT #17828]
7af91d15b2ce1ce32f7320f6d5cc3b83621c241aAutomatic Updater2363. [port] sunos: pre-set "lt_cv_sys_max_cmd_len=4096;".
b4cebdb6ccde66a8f3e397a1b90b0cf788519d69Automatic Updater2362. [cleanup] Make "rrset-order fixed" a compile-time option.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater settable by "./configure --enable-fixed-rrset".
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater Disabled by default. [RT #17977]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2361. [bug] "recursion" statistics counter could be counted
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater multiple times for a single query. [RT #17990]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2360. [bug] Fix a condition where we release a database version
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater (which may acquire a lock) while holding the lock.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2359. [bug] Fix NSID bug. [RT #17942]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2358. [doc] Update host's default query description. [RT #17934]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2357. [port] Don't use OpenSSL's engine support in versions before
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater OpenSSL 0.9.7f. [RT #17922]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2356. [bug] Built in mutex profiler was not scalable enough.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2355. [func] Extend the number statistics counters available.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2354. [bug] Failed to initialize some rdatasetheader_t elements.
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater2353. [func] Add support for Name Server ID (RFC 5001).
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 'dig +nsid' requests NSID from server.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 'request-nsid yes;' causes recursive server to send
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater NSID requests to upstream servers. Server responds
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater to NSID requests with the string configured by
78d7186253dfed549ec0ce2d7c2b08a7978ede9cAutomatic Updater 'server-id' option. [RT #17091]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2352. [bug] Various GSS_API fixups. [RT #17729]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2351. [bug] convertxsl.pl generated very long lines. [RT #17906]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2350. [port] win32: IPv6 support. [RT #17797]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2349. [func] Provide incremental re-signing support for secure
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater dynamic zones. [RT #1091]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2348. [func] Use the EVP interface to OpenSSL. Add PKCS#11 support.
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater Documentation is in the new README.pkcs11 file.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater New tool, dnssec-keyfromlabel, which takes the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater label of a key pair in a HSM and constructs a DNS
90ff38a0d8deaf5f9c2aa5916d99b2e572d28738Automatic Updater key pair for use by named and dnssec-signzone.
c01dec514a81ecf8c17ca3ef8c3ba95e437295ebAutomatic Updater2347. [bug] Delete now traverses the RB tree in the canonical
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater order. [RT #17451]
681beefc668253b3e469a1de282fbc33a3752422Automatic Updater2346. [func] Memory statistics now cover all active memory contexts
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater in increased detail. [RT #17580]
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2345. [bug] named-checkconf failed to detect when forwarders
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater were set at both the options/view level and in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a root zone. [RT #17671]
96713299d08c0735c18ebe8772dd2cc1ecd4356aAutomatic Updater2344. [bug] Improve "logging{ file ...; };" documentation.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2343. [bug] (Seemingly) duplicate IPv6 entries could be
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington created in ADB. [RT #17837]
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater2342. [func] Use getifaddrs() if available under Linux. [RT #17224]
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater2341. [bug] libbind: add missing -I../include for off source
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater tree builds. [RT #17606]
6a6965084d061016f7ba44637c7c50e096cac36aAutomatic Updater2340. [port] openbsd: interface configuration. [RT #17700]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2339. [port] tru64: support for libbind. [RT #17589]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2338. [bug] check_ds() could be called with a non DS rdataset.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2337. [bug] BUILD_LDFLAGS was not being correctly set. [RT #17614]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2336. [func] If "named -6" is specified then listen on all IPv6
c6517a807173827b8f638d31303805ee4c1d8054Automatic Updater interfaces if there are not listen-on-v6 clauses in
6f046a065e5543f8cd7e2f24991c65d2372f4c8dMark Andrews2335. [port] sunos: libbind and *printf() support for long long.
0c42fc3acc95ea284cf1bfdf6869d1836756ebb9Automatic Updater2334. [bug] Bad REQUIRES in fromstruct_in_naptr(), off by one
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater bug in fromstruct_txt(). [RT #17609]
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater2333. [bug] Fix off by one error in isc_time_nowplusinterval().
7f79131f9a8e804b93c57f3c679065cce878b726Automatic Updater2332. [contrib] query-loc-0.4.0. [RT #17602]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2331. [bug] Failure to regenerate any signatures was not being
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater reported nor being past back to the UPDATE client.
71bd43eebd9d6e42dbcae62b730f5b6508d5acd8Automatic Updater2330. [bug] Remove potential race condition when handling
78bc8fdc2488c92d7228e8de19827e2c114c56caAutomatic Updater over memory events. [RT #17572]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater WARNING: API CHANGE: over memory callback
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater function now needs to call isc_mem_waterack().
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater See <isc/mem.h> for details.
0429fc942ef48b8ab07a01648b22f98174a2ae6fAutomatic Updater2329. [bug] Clearer help text for dig's '-x' and '-i' options.
0429fc942ef48b8ab07a01648b22f98174a2ae6fAutomatic Updater2328. [maint] Add AAAA addresses for A.ROOT-SERVERS.NET,
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater J.ROOT-SERVERS.NET, K.ROOT-SERVERS.NET and
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2327. [bug] It was possible to dereference a NULL pointer in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater rbtdb.c. Implement dead node processing in zones as
e705db6d5d886dc14f4a75a2046a075c0750e7eeAutomatic Updater we do for caches. [RT #17312]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2326. [bug] It was possible to trigger a INSIST in the acache
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2325. [port] Linux: use capset() function if available. [RT #17557]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2324. [bug] Fix IPv6 matching against "any;". [RT #17533]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2323. [port] tru64: namespace clash. [RT #17547]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2322. [port] MacOS: work around the limitation of setrlimit()
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater for RLIMIT_NOFILE. [RT #17526]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2321. [placeholder]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2320. [func] Make statistics counters thread-safe for platforms
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater that support certain atomic operations. [RT #17466]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2319. [bug] Silence Coverity warnings in
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2318. [port] sunos fixes for libbind. [RT #17514]
30cd5217f750e75c24b4fe4b5ecf92e832ba64c3Automatic Updater2317. [bug] "make distclean" removed bind9.xsl.h. [RT #17518]
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington2316. [port] Missing #include <isc/print.h> in lib/dns/gssapictx.c.
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2315. [bug] Used incorrect address family for mapped IPv4
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater addresses in acl.c. [RT #17519]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2314. [bug] Uninitialized memory use on error path in
1d92d8a2456b23842a649b6104c60a9d6ea25333Brian Wellington2313. [cleanup] Silence Coverity warnings. Handle private stacks.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater [RT #17447] [RT #17478]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2312. [cleanup] Silence Coverity warning in lib/isc/unix/socket.c.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2311. [bug] IPv6 addresses could match IPv4 ACL entries and
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater vice versa. [RT #17462]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2310. [bug] dig, host, nslookup: flush stdout before emitting
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater debug/fatal messages. [RT #17501]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2309. [cleanup] Fix Coverity warnings in lib/dns/acl.c and iptable.c.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2308. [cleanup] Silence Coverity warning in bin/named/controlconf.c.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2307. [bug] Remove infinite loop from lib/dns/sdb.c. [RT #17496]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2306. [bug] Remove potential race from lib/dns/resolver.c.
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson2305. [security] inet_network() buffer overflow. CVE-2008-0122.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2304. [bug] Check returns from all dns_rdata_tostruct() calls.
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2303. [bug] Remove unnecessary code from bin/named/lwdgnba.c.
11ba7973f989b3657cbb27447bdcdd976c71ac56Brian Wellington2302. [bug] Fix memset() calls in lib/tests/t_api.c. [RT #17472]
11ba7973f989b3657cbb27447bdcdd976c71ac56Brian Wellington2301. [bug] Remove resource leak and fix error messages in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater bin/tests/system/lwresd/lwtest.c. [RT #17474]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2300. [bug] Fixed failure to close open file in
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2299. [bug] Remove unnecessary NULL check in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2298. [bug] isc_mutex_lock() failure not caught in
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2297. [bug] isc_entropy_createfilesource() failure not caught in
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2296. [port] Allow docbook stylesheet location to be specified to
e4757e3dafe50ae59f693eec828f68c42c197a70Andreas Gustafsson configure. [RT #17457]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2295. [bug] Silence static overrun error in bin/named/lwaddr.c.
7d12a6b412fe47e6d6582923fd6954ab8cd0baebAutomatic Updater2294. [func] Allow the experimental statistics channels to have
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater multiple connections and ACL.
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater Note: the stats-server and stats-server-v6 options
a900e4f99ff134b567b6df5ac2c841c7d0c551d3Automatic Updater available in the previous beta releases are replaced
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater with the generic statistics-channels statement.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2293. [func] Add ACL regression test. [RT #17375]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2292. [bug] Log if the working directory is not writable.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2291. [bug] PR_SET_DUMPABLE may be set too late. Also report
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater failure to set PR_SET_DUMPABLE. [RT #17312]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2290. [bug] Let AD in the query signal that the client wants AD
a900e4f99ff134b567b6df5ac2c841c7d0c551d3Automatic Updater set in the response. [RT #17301]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2289. [func] named-checkzone now reports the out-of-zone CNAME
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater found. [RT #17309]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2288. [port] win32: mark service as running when we have finished
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater loading. [RT #17441]
faa406d25d1d73b04a1351d1e62ab55557ed61ebAutomatic Updater2287. [bug] Use 'volatile' if the compiler supports it. [RT #17413]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2286. [func] Allow a TCP connection to be used as a weak
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater authentication method for reverse zones.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater New update-policy methods tcp-self and 6to4-self.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2285. [func] Test framework for client memory context management.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2284. [bug] Memory leak in UPDATE prerequisite processing.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2283. [bug] TSIG keys were not attaching to the memory
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater context. TSIG keys should use the rings
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater memory context rather than the clients memory
d4ef65050feac78554addf6e16a06c6e2e0bd331Brian Wellington context. [RT #17377]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2282. [bug] Acl code fixups. [RT #17346] [RT #17374]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2281. [bug] Attempts to use undefined acls were not being logged.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2280. [func] Allow the experimental http server to be reached
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews over IPv6 as well as IPv4. [RT #17332]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2279. [bug] Use setsockopt(SO_NOSIGPIPE), when available,
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews to protect applications from receiving spurious
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews SIGPIPE signals when using the resolver.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2278. [bug] win32: handle the case where Windows returns no
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews search list or DNS suffix. [RT #17354]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2277. [bug] Empty zone names were not correctly being caught at
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews in the post parse checks. [RT #17357]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2276. [bug] Install <dst/gssapi.h>. [RT# 17359]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2275. [func] Add support to dig to perform IXFR queries over UDP.
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2274. [func] Log zone transfer statistics. [RT #17336]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews2273. [bug] Adjust log level to WARNING when saving inconsistent
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews stub/slave master and journal files. [RT# 17279]
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews2272. [bug] Handle illegal dnssec-lookaside trust-anchor names.
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews2271. [bug] Fix a memory leak in http server code [RT #17100]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2270. [bug] dns_db_closeversion() version->writer could be reset
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews before it is tested. [RT #17290]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2269. [contrib] dbus memory leaks and missing va_end calls. [RT #17232]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2268. [bug] 0.IN-ADDR.ARPA was missing from the empty zones
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews --- 9.5.0b1 released ---
4b2cb1422c7c600fbc13b1cb06a8b4693bc11af8Mark Andrews2267. [bug] Radix tree node_num value could be set incorrectly,
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews causing positive ACL matches to look like negative
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews ones. [RT #17311]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2266. [bug] client.c:get_clientmctx() returned the same mctx
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews once the pool of mctx's was filled. [RT #17218]
c651f15b30f1dae5cc2f00878fb5da5b3a35a468Mark Andrews2265. [bug] Test that the memory context's basic_table is non NULL
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater before freeing. [RT #17265]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2264. [bug] Server prefix length was being ignored. [RT #17308]
34729dbcb3526974cf98ee03ec20a107d9458417Andreas Gustafsson2263. [bug] "named-checkconf -z" failed to set default value
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater for "check-integrity". [RT #17306]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2262. [bug] Error status from all but the last view could be
34729dbcb3526974cf98ee03ec20a107d9458417Andreas Gustafsson lost. [RT #17292]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2261. [bug] Fix memory leak with "any" and "none" ACLs [RT #17272]
34729dbcb3526974cf98ee03ec20a107d9458417Andreas Gustafsson2260. [bug] Reported wrong clients-per-query when increasing the
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater value. [RT #17236]
34729dbcb3526974cf98ee03ec20a107d9458417Andreas Gustafsson2259. [placeholder]
34729dbcb3526974cf98ee03ec20a107d9458417Andreas Gustafsson --- 9.5.0a7 released ---
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2258. [bug] Fallback from IXFR/TSIG to SOA/AXFR/TSIG broken.
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2257. [bug] win32: Use the full path to vcredist_x86.exe when
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson calling it. [RT #17222]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2256. [bug] win32: Correctly register the installation location of
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2255. [maint] L.ROOT-SERVERS.NET is now 199.7.83.42.
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2254. [bug] timer.c:dispatch() failed to lock timer->lock
9cd5eb6fe0f26d65724b99216cb31dcdd12e4afdAutomatic Updater when reading timer->idle allowing it to see
713c3d5b18463f2479973e4d14f73248e60a5df7Mark Andrews intermediate values as timer->idle was reset by
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington isc_timer_touch(). [RT #17243]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2253. [func] "max-cache-size" defaults to 32M.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater "max-acache-size" defaults to 16M.
6c6a121295b30772cbf3dd75a51fb9d883051a0eAutomatic Updater2252. [bug] Fixed errors in sortlist code [RT #17216]
91216cff91b34c9ff6e846dc23f248219cafe660Andreas Gustafsson2251. [placeholder]
992616aaf75643a0c9f84826f0a1ed5a27e84328Mark Andrews2250. [func] New flag 'memstatistics' to state whether the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater memory statistics file should be written or not.
2fd97723b2ec7fc1975672780ab0c1c9a8c369d6Automatic Updater Additionally named's -m option will cause the
2fd97723b2ec7fc1975672780ab0c1c9a8c369d6Automatic Updater statistics file to be written. [RT #17113]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2249. [bug] Only set Authentic Data bit if client requested
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater DNSSEC, per RFC 3655 [RT #17175]
75b70a68aefaa17ac4e768d5ed85d2f50d471490Automatic Updater2248. [cleanup] Fix several errors reported by Coverity. [RT #17160]
9e3a7b0faf417a10f5f689edf288807b2d5eedc5Brian Wellington2247. [doc] Sort doc/misc/options. [RT #17067]
aa1d397c4736cd86540555193d71e55fa3b37b2aMark Andrews2246. [bug] Make the startup of test servers (ans.pl) more
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater robust. [RT #17147]
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater2245. [bug] Validating lack of DS records at trust anchors wasn't
2f60dbd3787caa91e8ab1d7ae39ea312ad5ba31fAutomatic Updater working. [RT #17151]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2244. [func] Allow the check of nameserver names against the
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater SOA MNAME field to be disabled by specifying
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater 'notify-to-soa yes;'. [RT #17073]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2243. [func] Configuration files without a newline at the end now
885f47576842cf3c569315b9a48bd9f0ca03f203Automatic Updater parse without error. [RT #17120]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2242. [bug] nsupdate: GSS-TSIG support using the Heimdal Kerberos
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater library could require a source of random data.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2241. [func] nsupdate: add a interactive 'help' command. [RT #17099]
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater2240. [bug] Cleanup nsupdates GSS-TSIG support. Convert
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater a number of INSIST()s into plain fatal() errors
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater which report the triggering result code.
ce9cad6bb04869c5e94d9dc721032b25117f9210Automatic Updater The 'key' command wasn't disabling GSS-TSIG.
195e7b7a6e0bdc80373d65085e12a2950e9a1226Mark Andrews2239. [func] Ship a pre built bin/named/bind9.xsl.h. [RT #17114]
9cd4b3f809a6f376c9f163a403861e22a6c2186fAutomatic Updater2238. [bug] It was possible to trigger a REQUIRE when a
9513a2a6670951f5cf5477fcfec9f933fcaff628Automatic Updater validation was canceled. [RT #17106]
63d98873e29dee9608c27f40613cb69d130a56e7Mark Andrews2237. [bug] libbind: res_init() was not thread aware. [RT #17123]
661f055cc199ed5aeac0bdc82554b545d229e672Mark Andrews2236. [bug] dnssec-signzone failed to preserve the case of
ca9a8f6d0b0f2a400a96f868193471510364336fMark Andrews of wildcard owner names. [RT #17085]
59528addd704f8d5757b54e540520f74e588a7c7Automatic Updater2235. [bug] <isc/atomic.h> was not being installed. [RT #17135]
72628f51c75245fa522fc27ac982392891e7bf87Automatic Updater2234. [port] Correct some compiler warnings on SCO OSr5 [RT #17134]
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater2233. [func] Add support for O(1) ACL processing, based on
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater radix tree code originally written by Kevin
f2770f6b39a9b2a98afb7a11ed105f73f1570c1eAutomatic Updater Brintnall. [RT #16288]
2231. [bug] Building dlzbdb (contrib/dlz/bin/dlzbdb) was broken.
If allow-query-cache is not set in named.conf then
If allow-recursion is not set in named.conf then
2194. [bug] Close journal before calling 'done' in xfrin.c.
2193. [port] win32: BINDInstall.exe is now linked statically.
2192. [port] win32: use vcredist_x86.exe to install Visual
2184. [bug] bind9.xsl.h didn't build out of the source tree.
2181. [port] sunos: libbind: add paths.h from BIND 8. [RT #16462]
need to ship Microsoft.VC80.MFCLOC.
2156. [bug] Fix node reference leaks in lookup.c:lookup_find(),
Fix a memory leak in rbtdb.c:free_noqname().
Make lookup.c:lookup_find() robust against
2154. [func] Scoped (e.g. IPv6 link-local) addresses may now be
dighost.c:get_trusted_key(). [RT #16678]
hmac_link.c. [RT #16437]
2145. [bug] Check DS/DLV digest lengths for known digests.
2141. [bug] dig/host should not be setting IDN_ASCCHECK (IDN
in adb.c. [RT #16670]
2138. [bug] Lock order reversal in resolver.c. [RT #16653]
2137. [port] Mips little endian and/or mips 64 bit are now
2136. [bug] nslookup/host looped if there was no search list
2135. [bug] Uninitialized rdataset in sdlz.c. [RT# 16656]
2131. [contrib] dlz/mysql: AXFR was broken. [RT #16630]
2114. [bug] dig/host/nslookup: searches for names with multiple
2107. [bug] dighost.c: more cleanup of buffers. [RT #16499]
2103. [port] Add /usr/sfw to list of locations for OpenSSL
2100. [port] win32: copy libeay32.dll to Build\Debug.
2098. [bug] Race in rbtdb.c:no_references(), which occasionally
if resolv.conf does not exist or no nameservers
2091. [port] dighost.c: race condition on cleanup. [RT #16417]
2085. [doc] win32: added index.html and README to zip. [RT #16201]
2081. [port] libbind: minor 64-bit portability fix in memcluster.c.
2080. [port] libbind: res_init.c did not compile on older versions
2076. [bug] Several files were missing #include <config.h>
of authoritative servers that drop EDNS and/or CD
2046. [bug] rbtdb.c:rdataset_setadditional() could cause duplicate
2043. [port] nsupdate/nslookup: Force the flushing of the prompt
2038. [bug] dig/nslookup/host was unlinking from wrong list
a non slave/stub zone. [RT # 16073]
2028. [port] linux: socket.c compatibility for old systems.
2013. [bug] Handle unexpected TSIGs on unsigned AXFR/IXFR
2008. [func] It is now possible to enable/disable DNSSEC
breaks DNSSEC (firewall/proxy). [RT #15592]
2003. [bug] libbind: The DNS name/address lookup functions could
1988. [bug] Remove a bus error from the SHA256/SHA512 support.
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608]
1981. [bug] win32: condition.c:wait() could fail to reattain
1968. [bug] Missing lock in resolver.c:validated(). [RT #15739]
1967. [func] dig/nslookup/host: warn about missing "QR". [RT #15779]
now be set in named.conf (max-udp-size). This is
xfrin.c:maybe_free() if named ran out of memory.
1944. [cleanup] isc_hash_create() does not need a read/write lock.
1928. [bug] Race in rbtdb.c:currentversion(). [RT #15517]
1922. [bug] check-tool.c:setup_logging() missing call to
1919. [contrib] queryperf: a set of new features: collecting/printing
'RD' was set in the query. host/nslookup skip servers
1907. [func] host/nslookup now continue (default)/fail on SERVFAIL.
1904. [func] Automatic empty zone creation for D.F.IP6.ARPA and
1866. [bug] resolv.conf parse errors were being ignored by
dig/host/nslookup. [RT #14841]
1865. [bug] Silently ignore nameservers in /etc/resolv.conf with
to disallow this (draft-ietf-ipv6-addr-arch-v4-02.txt).
when CFLAGS contains "-I /usr/local/include"
1839. [bug] <isc/hash.h> was not being installed.
1836. [cleanup] Silence compiler warnings in hash_test.c.
1834. [bug] Bad memset in rdata_test.c. [RT #13658]
rbtdb.c:subtractrdataset(). [RT #13519]
option in named.conf can be used to specify a
1816. [port] UnixWare: failed to compile lib/isc/unix/net.c.
1810. [bug] configure, lib/bind/configure make different default
1808. [bug] zone.c:notify_zone() contained a race condition,
1788. [bug] libbind9.la/libbind9.so needs to link against
1785. [bug] libbind9.la/libbind9.so needs to link against
1775. [bug] Only compile getnetent_r.c when threaded. [RT #13205]
file clause for rbt{64} master/hint zones. [RT#13009]
1750. [port] lib/bind/make/rules.in:subdirs was not bash friendly.
1748. [func] dig now returns the byte count for axfr/ixfr.
1747. [bug] BIND 8 compatibility: named/named-checkconf failed
to parse "host-statistics-max" in named.conf.
1745. [bug] Dig/host/nslookup accept replies from link locals
1731. [port] darwin: relax version test in ifconfig.sh.
1723. [cleanup] Silence compiler warnings from t_tasks.c. [RT #12493]
1717. [port] solaris: ifconfig.sh did not support Solaris 10.
"ifconfig.sh down" didn't work for Solaris 9.
1716. [doc] named.conf(5) was being installed in the wrong
1714. [bug] dig/host/nslookup were only trying the first
1707. [contrib] sdb/ldap updated to version 1.0-beta.
1705. [func] Allow the journal's name to be changed via named.conf.
"#include <isc/print.h>". [RT #12321]
1701. [doc] A minimal named.conf man page.
are defined in named.conf. [RT #12023]
/usr/lib. [RT #11971]
1668. [bug] DIG_SIGCHASE was making bin/dig/host dump core.
adb.c:set_target(). [RT #11582]
1648. [func] Update dnssec-lookaside named.conf syntax to support
1625. [bug] named failed to load/transfer RFC2535 signed zones
1612. [bug] check-names at the option/view level could trigger
1599. [bug] Fix memory leak on error path when checking named.conf.
DNSSEC specify "dnssec-enable yes;" in named.conf.
1567. [maint] B.ROOT-SERVERS.NET is now 192.228.79.201.
1566. [port] Support for the cmsg framework on Solaris and HP/UX.
were specified in /etc/resolv.conf. [RT #8232]
1551. [port] Open "/dev/null" before calling chroot().
1532. [port] netbsd: the configure test for <sys/sysctl.h>
requires <sys/param.h>.
1517. [port] Support for IPv6 interface scanning on HP/UX and
only (e.g. DE, LV, US and MUSEUM) these can be excluded
1503. [port] win32: install libeay32.dll outside of system32.
named.conf, tcp-listen-queue.
1498. [port] bsdos: 5.x support.
1478. [port] ifconfig.sh didn't account for other virtual
1456. [contrib] gen-data-queryperf.py from Stephane Bortzmeyer.
doc/misc/options. [RT #5616]
via named.conf (edns-udp-size).
1425. [port] linux/libbind: define __USE_MISC when testing *_r()
function prototypes in netdb.h. [RT #4921]
1422. [func] Log name/type/class when denying a query. [RT #4663]
1419. [port] openbsd: use /dev/arandom. [RT #4950]
1417. [func] ID.SERVER/CHAOS is now a built in zone.
1410. [func] Handle records that live in the parent zone, e.g. DS.
1397. [maint] J.ROOT-SERVERS.NET is now 192.58.128.30.
1388. [port] irix: check for sys/sysctl.h and NET_RT_IFLIST before
'recursing-file = "named.recursing";'.
1355. [bug] Fix DNSSEC wildcard proof for CNAME/DNAME.
1353. [contrib] sdb/ldap to version 0.9.
in socket.c and eliminating a host of socket
1339. [func] dig, host and nslookup now use IP6.ARPA for nibble
1336. [func] Nibble lookups under IP6.ARPA are now supported by
1334. [bug] When signing/verifying rdatasets, duplicate rdatas
1326. [bug] DNAME/CNAME signatures were not being cached when
1324. [port] darwin: ifconfig.sh now supports darwin.
1323. [port] linux: Slackware 4.0 needs <asm/unistd.h>. [RT #3205]
1298. [bug] The CINCLUDES macro in lib/dns/sec/dst/Makefile
1288. [bug] Adjusted REQUIRE's in lib/dns/name.c to better
1276. [bug] libbind: const pointer conflicts in res_debug.c.
1269. [port] Openserver: ifconfig.sh support.
<sys/param.h> is included or not. Be consistent.
1247. [bug] Don't reset the interface index for link/site local
1234. [bug] contrib/sdb: 'zonetodb' failed to call
1232. [bug] unix/errno2result() didn't handle EADDRNOTAVAIL.
1215. [port] solaris: add support to ifconfig.sh for x86 2.5.1
at the named.conf checking stage. [RT #2431]
1185. [bug] libbind: don't assume statp->_u._ext.ext is valid
lib/dns to use this function instead of local one.
occurs when parsing named.conf. [RT #2275]
1146. [func] Allow IPV6_IPV6ONLY to be set/cleared on a socket if
1145. [func] "host" no longer reports a NOERROR/NODATA response
named/lwresd at compile time. [RT #1982]
1119. [func] Added support in Win32 for NTFS file/directory ACL's
could cause an assertion failure in resolver.c
violation in adb.c. [RT #2017]
1103. [port] OpenUNIX 8 support (ifconfig.sh). [RT #1970]
1099. [cleanup] libbind: defining REPORT_ERRORS in lib/bind/dst caused
1090. [bug] libbind: dns_ho.c:add_hostent() was not returning
1088. [port] libbind: MPE/iX C.70 (incomplete)
on load/reload if views were used. [RT #1947]
1041. [bug] Dig/host/nslookup could catch an assertion failure
1032. [func] hostname.bind/txt/chaos now returns the name of
1031. [bug] libbind.a: isc__gettimeofday() infinite recursion.
1030. [bug] On systems with no resolv.conf file, nsupdate
1029. [bug] Some named.conf errors did not cause the loading
1002. [bug] When reporting an unknown class name in named.conf,
972. [bug] The file modification time code in zone.c was using the
non-existent nlist.h. [RT #1640]
957. [bug] sys/select.h inclusion was broken on older platforms.
in named/win32/os.c due to code changes in
updated to add include path for os.h header.
953. [func] The /var/run/named.key file from change #843
has been replaced by /etc/rndc.key. Both
method (rndc.conf / controls). Unlike
bin/tests. [RT #1555].
946. [cleanup] doc/misc/options is now machine-generated from the
when installing isc-config.sh.
were not accepted in named.conf. [RT #1469]
and added lib/isc/win32/entropy.c.
900. [bug] A config.guess update changed the system identification
bin/tests/system/ifconfig.sh now recognize the new
899. [bug] lib/dns/soa.c failed to compile on many platforms
897. [bug] A config.guess update changed the system identification
to Darwin. This was derived from the config.guess
849. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined.
844. [func] <isc/net.h> will ensure INADDR_LOOPBACK is defined,
just as <lwres/net.h> does.
843. [func] If no controls statement is present in named.conf,
generated by named and an rndc.conf-style file
named named.key will be written that uses it. rndc
838. [port] UnixWare 7.x.x is now suported by
833. [cleanup] Moved dns_soa_*() from <dns/journal.h> to
<dns/soa.h>, and extended them to support
832. [bug] The default location for named.conf in named-checkconf
825. [bug] zone.c:ns_query() detached from the wrong zone
character (i.e. "/") in its name and the directory
down-cased when signing/verifying records. [RT #1186]
in rndc.conf.
786. [bug] When DNSSEC signing/verifying data, owner names were
755. [bug] Fix incorrectly formatted log messages in zone.c.
748. [doc] List supported RFCs in doc/misc/rfc-compliance.
739. [port] Look for /dev/random in configure, rather than
737. [port] stdtime.c failed to compile on certain platforms.
dispatch.c:do_cancel(). [RT #733]
718. [cleanup] "internal" is no longer a reserved word in named.conf.
failure in adb.c. [RT #738]
703. [port] sys/select.h is needed on older platforms. [RT #695]
702. [func] If the address 0.0.0.0 is seen in resolv.conf,
693. [bug] An empty lwres statement in named.conf caused
685. [bug] nslookup should use the search list/domain options
from resolv.conf by default. [RT #405, #630]
646. [bug] The UnixWare ISC_PLATFORM_FIXIN6INADDR fix in isc/net.h
645. [port] BSD/OS 3.0 needs pthread_init(). [RT #603]
633. [port] Cope with rlim_t missing on BSD/OS systems. [RT #575]
for syntax checking named.conf files and zone files,
604. [bug] The named.conf parser could print incorrect line
577. [func] Log illegal RDATA combinations. e.g. multiple
570. [bug] rbtdb.c allowed zones containing nodes which had
568. [func] Add sample simple database drivers in contrib/sdb.
of rdata type/class mnemonics in log messages.
516. [bug] Cache lookups which had a NULL node pointer, e.g.
DNAME, would trigger an INSIST(!search.need_cleanup)
490. [func] When a slave/stub zone has not yet successfully
from the named.conf "listen-on" statement, sockets
477. [bug] The the isc-config.sh script could be installed before
471. [bug] nsupdate didn't compile on HP/UX 10.20
and subsequent name servers in resolv.conf if the
457. [bug] Dig/host/hslookup didn't properly handle connect
documented as such in named.conf. [RT #304, RT #311]
is specified in named.conf. [RT #306]
is specified in named.conf. [RT #301]
432. [func] Added refresh/retry jitter. The actual refresh/
428. [bug] rbtdb.c:find_closest_nxt() erroneously returned
(e.g. glue). This could cause SERVFAILs when
e.g. due to corrupt zones with multiple SOA records.
an argc/argv style vector of words and sets
view/global one for CNAME targets and additional
369. [func] Support new named.conf options, view and zone
the distribution, in doc/man/dnssec.
353. [bug] double increment in lwres/gethost.c:copytobuf().
348. [func] New boolean named.conf options 'additional-from-auth'
345. [bug] Large-scale changes/cleanups to dig:
341. [func] Support 'key' clause in named.conf zone masters
327. [bug] rndc.conf parser wasn't correctly recognizing an IP
320. [func] Multiple rndc changes: parses an rndc.conf file,
319. [func] The named.conf "controls" statement is now used
314. [func] The named.conf controls statement can now have
313. [bug] When parsing resolv.conf, don't terminate on an
resolv.conf search path from 6 to 8. If there
resolv.conf was empty or a comment.
310. [func] Changes to named.conf "controls" statement (inet
are listed in resolv.conf, silently ignore them
each library's ipv6.h defines the wrapper symbol of
any $sbindir/dig from a previous release.)
that lack /dev/random.
280. [func] Add isc-config.sh, which can be used to more
two or more files in libomapi.a were not namespace
278. [bug] bin/named/logconf.c:category_fromconf() didn't take
266. [bug] zone.c:save_nsrrset() node was not initialized.
262. [bug] 'master' was not initialized in zone.c:stub_callback().
for global options block of named.conf. Both accept
258. [bug] Fixed printing of lwres_addr_t.address field.
256. [func] isc_ratelimiter_t now has attach/detach semantics, and
253. [func] resolv.conf parser now recognizes ';' and '#' as
252. [bug] resolv.conf parser mishandled masks on sortlists.
244. [bug] empty named.conf file and empty options statement are
243. [func] new cachesize option for named.conf
+ missing sigwait prototype on BSD/OS 4.0/4.0.1.
BSD/OS 4.*, Linux and Solaris 2.8.
230. [func] Replace the dst sign/verify API with a cleaner one.
from confparser.c, because of yacc's code, are
212. [func] Added dns_message_get/settsigkey, to make TSIG
compiling in the lib/dns/sec/{dnssafe,openssl}
204. [cleanup] On HP/UX, pass +vnocompatwarnings to the linker
run on a PA 1.x system."
201. [cleanup] Removed the test/sdig program, it has been
replaced by bin/dig/dig.
(e.g., running out of network buffers) were
and/or interfaces. [19-May-2000 explorer]
191. [func] Patched to compile on UnixWare 7.x. This platform
range for overflow/underflow. In the case of
184. [cleanup] Variables/functions which began with two leading
underscores were made to conform to the ANSI/ISO
179. [func] options named.conf statement *must* now come
178. [func] Post-load of named.conf check verifies a slave zone
168. [bug] include statements in named.conf caused syntax errors
162. [bug] Ensure proper range for arguments to ctype.h functions.
masters [ port xxx ] { y.y.y.y [ port zzz ] ; }
util/check-includes for how this was tested.
145. [cleanup] Added <isc/lang.h> and ISC_LANG_BEGINDECLS/
<isc/result.h>.
of <isc/time.h>, and needed ISC_LANG_BEGINDECLS
need <isc/eventclass.h>.
instead of <isc/time.h>.
128. [cleanup] <isc/dir.h> had ISC_LANG_BEGINDECLS instead of
and creates null keys/sets zone status bit for
<isc/result.h>.
<isc/result.h>. Multiple inclusion protection
isc_symtab_t moved to <isc/types.h>.
<isc/net.h>.
118. [cleanup] libdns.a is now namespace-clean, on NetBSD, excepting
117. [cleanup] libdns.a changes:
116. [func] Added <isc/offset.h> for isc_offset_t (aka off_t
<isc/list.h>.
<isc/mutex.h>.
<isc/list.h>.
bin/tests/{db,mem,sockaddr,tasks,timers}/.
108. [cleanup] DNS_SETBIT/DNS_GETBIT/DNS_CLEARBIT moved from
105. [doc] doc/dev/coding.html expanded with other
103. [func] libisc buffer API changes for <isc/buffer.h>:
on BSD/OS 4.1.
101. [cleanup] Quieted EGCS warnings from lib/isc/print.c.
<isc/event.h>.
or <isc/result.h>.
<isc/result.h>.
90. [cleanup] Removed unneeded ISC_LANG_BEGINDECLS/ISC_LANG_ENDDECLS
from <named/listenlist.h>.
<isc/mem.h>. isc_interface_t and isc_interfaceiter_t
moved to <isc/types.h>.
86. [cleanup] isc_bufferlist_t moved from <isc/bufferlist.h> to
<isc/types.h>.
<isc/int.h>.
<isc/lang.h>.
subsumed by file.o.
OpenSSL libraries/headers.
from <dns/types.h>.
59. [bug] Cause net/host unreachable to be a hard error
58. [bug] bin/named/query.c could sometimes trigger the
(client->query.attributes & NS_QUERYATTR_NAMEBUFUSED)
53. [port] freebsd 4.0: lib/isc/unix/socket.c requires
<sys/param.h>.
logging module "dns/validator".
and isc_lex_t to <isc/types.h>.
31. [bug] Use ${LIBTOOL} to compile bin/named/main.@O@.
25. [bug] make install failed to install <isc/log.h> and
configure.in to check for presence of in6addr_any.
9. [cleanup] replaced bit-setting code in confctx.c and replaced
4. [port] bin/named/unix/os.c didn't compile on systems with
get only what we need from <linux/capability.h>, and
systems without /dev/random.
lib/isc/unix/include/isc/Makefile.in had a typo which