1. 06 Oct, 2017 2 commits
    • Evan Hunt's avatar
      [master] further restrict update-policy local · 995c41e8
      Evan Hunt authored
      4762.	[func]		"update-policy local" is now restricted to updates
      			from local addresses. (Previously, other addresses
      			were allowed so long as updates were signed by the
      			local session key.) [RT #45492]
      995c41e8
    • Evan Hunt's avatar
      [master] fix topology doc · 99e00793
      Evan Hunt authored
      4758.	[doc]		Remove documentation of unimplemented "topology".
      			[RT #46161]
      99e00793
  2. 04 Oct, 2017 1 commit
  3. 03 Oct, 2017 3 commits
  4. 28 Sep, 2017 2 commits
    • Evan Hunt's avatar
      [master] completed and corrected the crypto-random change · 24172bd2
      Evan Hunt authored
      4724.	[func]		By default, BIND now uses the random number
      			functions provided by the crypto library (i.e.,
      			OpenSSL or a PKCS#11 provider) as a source of
      			randomness rather than /dev/random.  This is
      			suitable for virtual machine environments
      			which have limited entropy pools and lack
      			hardware random number generators.
      
      			This can be overridden by specifying another
      			entropy source via the "random-device" option
      			in named.conf, or via the -r command line option;
      			however, for functions requiring full cryptographic
      			strength, such as DNSSEC key generation, this
      			cannot be overridden. In particular, the -r
      			command line option no longer has any effect on
      			dnssec-keygen.
      
      			This can be disabled by building with
      			"configure --disable-crypto-rand".
      			[RT #31459] [RT #46047]
      24172bd2
    • Mark Andrews's avatar
      4742. [func] Synthesis of responses from DNSSEC-verified records. · e00fdad1
      Mark Andrews authored
                              Stage 2 - synthesis of records from wildcard data.
                              If the dns64 or filter-aaaa* is configured then the
                              involved lookups are currently excluded. [RT #40138]
      e00fdad1
  5. 21 Sep, 2017 1 commit
  6. 19 Sep, 2017 2 commits
  7. 13 Sep, 2017 1 commit
  8. 12 Sep, 2017 1 commit
  9. 11 Sep, 2017 1 commit
    • Evan Hunt's avatar
      [master] DNS Response Policy Service API · 3363f314
      Evan Hunt authored
      4713.	[func]		Added support for the DNS Response Policy Service
      			(DNSRPS) API, which allows named to use an external
      			response policy daemon when built with
      			"configure --enable-dnsrps".  Thanks to Vernon
      			Schryver and Farsight Security. [RT #43376]
      3363f314
  10. 08 Sep, 2017 1 commit
    • Evan Hunt's avatar
      [master] add libns and remove liblwres · 8eb88aaf
      Evan Hunt authored
      4708.   [cleanup]       Legacy Windows builds (i.e. for XP and earlier)
                              are no longer supported. [RT #45186]
      
      4707.	[func]		The lightweight resolver daemon and library (lwresd
      			and liblwres) have been removed. [RT #45186]
      
      4706.	[func]		Code implementing name server query processing has
      			been moved from bin/named to a new library "libns".
      			Functions remaining in bin/named are now prefixed
      			with "named_" rather than "ns_".  This will make it
      			easier to write unit tests for name server code, or
      			link name server functionality into new tools.
      			[RT #45186]
      8eb88aaf
  11. 05 Sep, 2017 1 commit
  12. 04 Sep, 2017 1 commit
  13. 30 Aug, 2017 1 commit
  14. 10 Aug, 2017 2 commits
  15. 09 Aug, 2017 1 commit
  16. 28 Jul, 2017 2 commits
  17. 18 May, 2017 1 commit
  18. 02 May, 2017 1 commit
    • Evan Hunt's avatar
      [master] automatically tune max-journal-size · d39ab744
      Evan Hunt authored
      4613.	[func]		By default, the maximum size of a zone journal file
      			is now twice the size of the zone's contents (there
      			is little benefit to a journal larger than this).
      			This can be overridden by setting "max-journal-size"
      			to "unlimited" or to an explicit value up to 2G.
      			Thanks to Tony Finch. [RT #38324]
      d39ab744
  19. 26 Apr, 2017 1 commit
  20. 24 Apr, 2017 2 commits
  21. 22 Apr, 2017 1 commit
  22. 10 Mar, 2017 1 commit
  23. 09 Mar, 2017 3 commits
  24. 20 Feb, 2017 1 commit
  25. 07 Feb, 2017 2 commits
  26. 02 Feb, 2017 1 commit
  27. 05 Jan, 2017 1 commit
  28. 04 Jan, 2017 1 commit
    • Evan Hunt's avatar
      [master] EDNS padding and keepalive support · 58043325
      Evan Hunt authored
      4549.	[func]		Added support for the EDNS TCP Keepalive option
      			(RFC 7828). [RT #42126]
      
      4548.	[func]		Added support for the EDNS Padding option (RFC 7830).
      			[RT #42094]
      58043325
  29. 27 Dec, 2016 1 commit