ISC Open Source Projects issueshttps://gitlab.isc.org/groups/isc-projects/-/issues2020-06-30T17:28:11Zhttps://gitlab.isc.org/isc-projects/kea/-/issues/1282too late hook library effective unload2020-06-30T17:28:11ZFrancis Duponttoo late hook library effective unloadThe thread sanitizer shows too late effective unload of the HA hook library.The thread sanitizer shows too late effective unload of the HA hook library.kea1.7.10Francis DupontFrancis Duponthttps://gitlab.isc.org/isc-projects/kea/-/issues/1279unload libraries on HooksManager::unloadLibraries2020-06-30T17:27:43ZRazvan Becheriuunload libraries on HooksManager::unloadLibrarieskea1.7.10Marcin SiodelskiMarcin Siodelskihttps://gitlab.isc.org/isc-projects/bind9/-/issues/1977BIND 9.16 triggers build warnings on FreeBSD 11.42020-06-30T10:19:31ZMichał KępieńBIND 9.16 triggers build warnings on FreeBSD 11.4With Clang 10.0.0 on FreeBSD 11.4, compiling `lib/dns/spnego.c` triggers
the following warnings:
spnego.c:361:11: error: converting the result of '<<' to a boolean always evaluates to true [-Werror,-Wtautological-constant-compare]
...With Clang 10.0.0 on FreeBSD 11.4, compiling `lib/dns/spnego.c` triggers
the following warnings:
spnego.c:361:11: error: converting the result of '<<' to a boolean always evaluates to true [-Werror,-Wtautological-constant-compare]
return (GSS_S_DEFECTIVE_TOKEN);
^
/usr/include/gssapi/gssapi.h:423:41: note: expanded from macro 'GSS_S_DEFECTIVE_TOKEN'
#define GSS_S_DEFECTIVE_TOKEN (9ul << GSS_C_ROUTINE_ERROR_OFFSET)
^
spnego.c:366:11: error: converting the result of '<<' to a boolean always evaluates to true [-Werror,-Wtautological-constant-compare]
return (GSS_S_DEFECTIVE_TOKEN);
^
/usr/include/gssapi/gssapi.h:423:41: note: expanded from macro 'GSS_S_DEFECTIVE_TOKEN'
#define GSS_S_DEFECTIVE_TOKEN (9ul << GSS_C_ROUTINE_ERROR_OFFSET)
^
spnego.c:371:12: error: converting the result of '<<' to a boolean always evaluates to true [-Werror,-Wtautological-constant-compare]
return (GSS_S_DEFECTIVE_TOKEN);
^
/usr/include/gssapi/gssapi.h:423:41: note: expanded from macro 'GSS_S_DEFECTIVE_TOKEN'
#define GSS_S_DEFECTIVE_TOKEN (9ul << GSS_C_ROUTINE_ERROR_OFFSET)
^
spnego.c:376:11: error: converting the result of '<<' to a boolean always evaluates to true [-Werror,-Wtautological-constant-compare]
return (GSS_S_DEFECTIVE_TOKEN);
^
/usr/include/gssapi/gssapi.h:423:41: note: expanded from macro 'GSS_S_DEFECTIVE_TOKEN'
#define GSS_S_DEFECTIVE_TOKEN (9ul << GSS_C_ROUTINE_ERROR_OFFSET)
^
spnego.c:380:11: error: converting the result of '<<' to a boolean always evaluates to true [-Werror,-Wtautological-constant-compare]
return (GSS_S_DEFECTIVE_TOKEN);
^
/usr/include/gssapi/gssapi.h:423:41: note: expanded from macro 'GSS_S_DEFECTIVE_TOKEN'
#define GSS_S_DEFECTIVE_TOKEN (9ul << GSS_C_ROUTINE_ERROR_OFFSET)
^
5 errors generated.
For some reason, the `buster` build (which uses Clang 10.0.1) is happy
with this code as it is :shrug:
The prototype of `lib/dns/spnego.c:cmp_gss_type()` was changed back in
b105ccee68ccc3c18e6ea530063b3c8e5a42571c. `v9_11` is not affected
because !546 was not backported. `main` is not affected, either,
because 978c7b2e89aa37a7ddfe2f6b6ba12ce73dd04528 dropped
`lib/dns/spnego.c` altogether.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)https://gitlab.isc.org/isc-projects/bind9/-/issues/1949check-names doesn't use 'primary' and 'secondary'2020-06-30T07:19:07ZEvan Huntcheck-names doesn't use 'primary' and 'secondary'`primary` and `secondary` are valid parameters for the `check-names` option in the parser, but they were never hooked in to `named_zone_configure()` correctly and are currently being ignored.`primary` and `secondary` are valid parameters for the `check-names` option in the parser, but they were never hooked in to `named_zone_configure()` correctly and are currently being ignored.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Evan HuntEvan Hunthttps://gitlab.isc.org/isc-projects/stork/-/issues/306Demo compilation problem on Ubuntu202020-06-30T05:51:43ZTomek MrugalskiDemo compilation problem on Ubuntu20This is completely fresh Ubuntu 20. Here's what I did:
1. `sudo apt rake docker docker-compose`
1. (added myself to docker group, started docker: sudo systemctl start docker)
1. got latest code from master
1. `rake docker_up`
Result:
`...This is completely fresh Ubuntu 20. Here's what I did:
1. `sudo apt rake docker docker-compose`
1. (added myself to docker group, started docker: sudo systemctl start docker)
1. got latest code from master
1. `rake docker_up`
Result:
```
46 packages are looking for funding
run `npm fund` for details
found 446 vulnerabilities (444 low, 2 high)
run `npm audit fix` to fix them, or `npm audit` for details
/repo/build-root/webui/node_modules/.bin/yamlinc -o swagger.yaml swagger.in.yaml
Analize : swagger.in.yaml
Include : users-paths.yaml
Include : services-paths.yaml
Include : dhcp-paths.yaml
Include : settings-paths.yaml
Include : search-paths.yaml
Include : users-defs.yaml
Include : services-defs.yaml
Include : dhcp-defs.yaml
Include : settings-defs.yaml
Include : search-defs.yaml
Compile : swagger.yaml
/repo/build-root/tools/v0.23.0/swagger_linux_amd64 generate server -s server/gen/restapi -m server/gen/models --name Stork --exclude-main --spec /repo/build-root/api/swagger.yaml --template stratoscale --regenerate-configureapi
runtime: mlock of signal stack failed: 12
runtime: increase the mlock limit (ulimit -l) or
runtime: update your kernel to 5.3.15+, 5.4.2+, or 5.5+
fatal error: mlock failed
runtime stack:
runtime.throw(0xd2780f, 0xc)
/usr/local/go/src/runtime/panic.go:1112 +0x72
runtime.mlockGsignal(0xc000580180)
/usr/local/go/src/runtime/os_linux_x86.go:72 +0x107
runtime.mpreinit(0xc000681180)
/usr/local/go/src/runtime/os_linux.go:341 +0x78
runtime.mcommoninit(0xc000681180)
/usr/local/go/src/runtime/proc.go:630 +0x108
runtime.allocm(0xc000061800, 0xd6dda8, 0x0)
/usr/local/go/src/runtime/proc.go:1390 +0x14e
runtime.newm(0xd6dda8, 0xc000061800)
/usr/local/go/src/runtime/proc.go:1704 +0x39
runtime.startm(0x0, 0xc000102a01)
/usr/local/go/src/runtime/proc.go:1869 +0x12a
runtime.wakep(...)
/usr/local/go/src/runtime/proc.go:1953
runtime.resetspinning()
/usr/local/go/src/runtime/proc.go:2415 +0x93
runtime.schedule()
/usr/local/go/src/runtime/proc.go:2527 +0x2de
runtime.park_m(0xc000102480)
/usr/local/go/src/runtime/proc.go:2690 +0x9d
runtime.mcall(0x0)
/usr/local/go/src/runtime/asm_amd64.s:318 +0x5b
goroutine 1 [runnable]:
text/template/parse.(*lexer).nextItem(...)
/usr/local/go/src/text/template/parse/lex.go:195
text/template/parse.(*Tree).next(...)
/usr/local/go/src/text/template/parse/parse.go:64
text/template/parse.(*Tree).nextNonSpace(0xc0007ba000, 0x11, 0x380, 0xc00051dd00, 0x1, 0x1c)
/usr/local/go/src/text/template/parse/parse.go:102 +0x14c
text/template/parse.(*Tree).action(0xc0007ba000, 0xa, 0x37e)
/usr/local/go/src/text/template/parse/parse.go:353 +0x43
text/template/parse.(*Tree).textOrAction(0xc0007ba000, 0xa, 0x37e)
/usr/local/go/src/text/template/parse/parse.go:340 +0x293
text/template/parse.(*Tree).itemList(0xc0007ba000, 0xd131eb, 0x2, 0xc000b860c0)
/usr/local/go/src/text/template/parse/parse.go:322 +0x196
text/template/parse.(*Tree).parseControl(0xc0007ba000, 0xc00051dc01, 0xd131eb, 0x2, 0x0, 0x0, 0xc000b860c0, 0x0, 0x0)
/usr/local/go/src/text/template/parse/parse.go:454 +0xef
text/template/parse.(*Tree).ifControl(0xc0007ba000, 0x1b, 0x318)
/usr/local/go/src/text/template/parse/parse.go:488 +0x4c
text/template/parse.(*Tree).action(0xc0007ba000, 0xa, 0x314)
/usr/local/go/src/text/template/parse/parse.go:361 +0x512
text/template/parse.(*Tree).textOrAction(0xc0007ba000, 0xa, 0x314)
/usr/local/go/src/text/template/parse/parse.go:340 +0x293
text/template/parse.(*Tree).itemList(0xc0007ba000, 0xd14f1f, 0x4, 0xc0007be2a0)
/usr/local/go/src/text/template/parse/parse.go:322 +0x196
text/template/parse.(*Tree).parseControl(0xc0007ba000, 0xc000680000, 0xd14f1f, 0x4, 0x0, 0x0, 0xc0007be2a0, 0x0, 0x0)
/usr/local/go/src/text/template/parse/parse.go:454 +0xef
text/template/parse.(*Tree).withControl(0xc0007ba000, 0x1f, 0x1bc)
/usr/local/go/src/text/template/parse/parse.go:504 +0x4c
text/template/parse.(*Tree).action(0xc0007ba000, 0xa, 0x1b9)
/usr/local/go/src/text/template/parse/parse.go:367 +0x55d
text/template/parse.(*Tree).textOrAction(0xc0007ba000, 0xc0007ba080, 0xc000b25620)
/usr/local/go/src/text/template/parse/parse.go:340 +0x293
text/template/parse.(*Tree).parse(0xc0007ba000)
/usr/local/go/src/text/template/parse/parse.go:286 +0x381
text/template/parse.(*Tree).Parse(0xc0007ba000, 0xc00051d980, 0x18bc, 0x0, 0x0, 0x0, 0x0, 0xc0007a8090, 0xc0007a2030, 0x2, ...)
/usr/local/go/src/text/template/parse/parse.go:225 +0x21c
text/template/parse.Parse(0xc0007a0080, 0x12, 0xc00051d980, 0x18bc, 0x0, 0x0, 0x0, 0x0, 0xc0007a2030, 0x2, ...)
/usr/local/go/src/text/template/parse/parse.go:55 +0x115
text/template.(*Template).Parse(0xc0007a6000, 0xc00051d980, 0x18bc, 0x12, 0x40c016, 0x0)
/usr/local/go/src/text/template/template.go:201 +0x111
github.com/go-swagger/go-swagger/generator.(*Repository).addFile(0xc00038a000, 0xd44200, 0x1a, 0xc00051d980, 0x18bc, 0x1801, 0x0, 0x0)
/go/src/github.com/go-swagger/go-swagger/generator/template_repo.go:283 +0x12d
github.com/go-swagger/go-swagger/generator.(*Repository).LoadDefaults(0xc00038a000)
/go/src/github.com/go-swagger/go-swagger/generator/template_repo.go:221 +0x10d
github.com/go-swagger/go-swagger/generator.(*GenOpts).setTemplates(0xc000435d40, 0x0, 0x0)
/go/src/github.com/go-swagger/go-swagger/generator/shared.go:659 +0x31
github.com/go-swagger/go-swagger/generator.newAppGenerator(0x7ffe82dd8dec, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000435d40, 0xc000768540, ...)
/go/src/github.com/go-swagger/go-swagger/generator/support.go:57 +0x64
github.com/go-swagger/go-swagger/generator.GenerateServer(0x7ffe82dd8dec, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000435d40, 0xc000435d40, ...)
/go/src/github.com/go-swagger/go-swagger/generator/support.go:36 +0x94
github.com/go-swagger/go-swagger/cmd/swagger/commands/generate.(*Server).generate(0xc00000a5a0, 0xc000435d40, 0x0, 0x0)
/go/src/github.com/go-swagger/go-swagger/cmd/swagger/commands/generate/server.go:88 +0x94
github.com/go-swagger/go-swagger/cmd/swagger/commands/generate.createSwagger(0xea6e40, 0xc00000a5a0, 0x8b4a01, 0x7f2c6edd14a0)
/go/src/github.com/go-swagger/go-swagger/cmd/swagger/commands/generate/shared.go:175 +0x225
github.com/go-swagger/go-swagger/cmd/swagger/commands/generate.(*Server).Execute(0xc00000a5a0, 0xc0000c68c0, 0x0, 0xe, 0xc00000a5a0, 0x1)
/go/src/github.com/go-swagger/go-swagger/cmd/swagger/commands/generate/server.go:115 +0x37
github.com/jessevdk/go-flags.(*Parser).ParseArgs(0xc0007393e0, 0xc000030100, 0xe, 0xe, 0x10, 0xd54c3a, 0x2a, 0xbda6e0, 0xc0002a4240)
/go/pkg/mod/github.com/jessevdk/go-flags@v1.4.0/parser.go:316 +0x8c0
github.com/jessevdk/go-flags.(*Parser).Parse(...)
/go/pkg/mod/github.com/jessevdk/go-flags@v1.4.0/parser.go:186
main.main()
/go/src/github.com/go-swagger/go-swagger/cmd/swagger/swagger.go:145 +0xafc
goroutine 113 [chan send]:
text/template/parse.(*lexer).emit(...)
/usr/local/go/src/text/template/parse/lex.go:157
text/template/parse.lexSpace(0xc0007bc000, 0xd6e0b0)
/usr/local/go/src/text/template/parse/lex.go:442 +0x172
text/template/parse.(*lexer).run(0xc0007bc000)
/usr/local/go/src/text/template/parse/lex.go:230 +0x37
created by text/template/parse.lex
/usr/local/go/src/text/template/parse/lex.go:223 +0x190
rake aborted!
Command failed with status (2): [/repo/build-root/tools/v0.23.0/swagger_lin...]
/repo/build-root/Rakefile:194:in `block (2 levels) in <top (required)>'
/repo/build-root/Rakefile:193:in `chdir'
/repo/build-root/Rakefile:193:in `block in <top (required)>'
Tasks: TOP => install_server => build_server => gen_server => /repo/build-root/backend/server/gen/restapi/configure_stork.go
(See full trace by running task with --trace)
rake aborted!
Command failed with status (1): [cd ./build-root && GOPATH=/repo/build-root...]
/repo/Rakefile:537:in `block in <top (required)>'
Tasks: TOP => build_all_copy_in_subdir
(See full trace by running task with --trace)
rake aborted!
Command failed with status (1): [docker run -v $PWD:/repo --rm -ti stork-bu...]
/home/thomson/devel/stork/Rakefile:530:in `block in <top (required)>'
/usr/share/rubygems-integration/all/gems/rake-13.0.1/exe/rake:27:in `<top (required)>'
Tasks: TOP => docker_up => build_all_in_container
(See full trace by running task with --trace)
```
This is yet another problem with swagger. There are two things to do here:
* [ ] somehow fix this particular problem (I suspect increasing mlock limit will do the trick, so this may be a doc update only)
* [ ] change the build process, so docker generated files are checked into repo.
The second item will also greatly speed up and simplify (no need for Java or swagger, unless you change the API). This is of particular importance on FreeBSD. But the speed up should be observed everywhere.https://gitlab.isc.org/isc-projects/bind9/-/issues/1983Block all domains from being resolved except one domain2020-06-30T01:59:17ZmkhadherBlock all domains from being resolved except one domainHi everyone,
I have Bind9 installed which is working perfectly as a DNS forwarder. I know how to sinkhole/block certain domains from being resolved and now I want to block all domains and only allow one domain "MyDummyDomain.com" to be ...Hi everyone,
I have Bind9 installed which is working perfectly as a DNS forwarder. I know how to sinkhole/block certain domains from being resolved and now I want to block all domains and only allow one domain "MyDummyDomain.com" to be resolved.
Is that technically feasible with Bind9? If so, could you please share some examples?https://gitlab.isc.org/isc-projects/bind9/-/issues/1876kasp: algnum migration test does not wait long enough.2020-06-29T14:04:33ZMark Andrewskasp: algnum migration test does not wait long enough.Job [#903691](https://gitlab.isc.org/isc-projects/bind9/-/jobs/903691) failed for 79790edb84f0d37dfa3d8d302925cdb7eac7ae12:
The zone is still in the process of being signed when the checks where performed.
```
I:kasp:check keys are cre...Job [#903691](https://gitlab.isc.org/isc-projects/bind9/-/jobs/903691) failed for 79790edb84f0d37dfa3d8d302925cdb7eac7ae12:
The zone is still in the process of being signed when the checks where performed.
```
I:kasp:check keys are created for zone migrate-nomatch-algnum.kasp (631)
I:kasp:check number of keys for zone migrate-nomatch-algnum.kasp in dir ns6 (632)
I:kasp:check key id 04654
I:kasp:check key id 09798
I:kasp:check key id 04373
I:kasp:check key id 22984
I:kasp:KEY1 ID 22984
I:kasp:KEY2 ID 9798
I:kasp:KEY3 ID 4654
I:kasp:KEY4 ID 4373
I:kasp:check DNSKEY rrset is signed correctly for zone migrate-nomatch-algnum.kasp (633)
I:kasp:check SOA rrset is signed correctly for zone migrate-nomatch-algnum.kasp (634)
I:kasp:check CDS and CDNSKEY rrset are signed correctly for zone migrate-nomatch-algnum.kasp (635)
I:kasp:check A a.migrate-nomatch-algnum.kasp rrset is signed correctly for zone migrate-nomatch-algnum.kasp (636)
I:kasp:error: A RRset not signed with key 4373
I:kasp:failed
I:kasp:dnssec-verify zone migrate-nomatch-algnum.kasp (637)
No correct ECDSAP256SHA256 signature for migrate-nomatch-algnum.kasp NS
No correct ECDSAP256SHA256 signature for migrate-nomatch-algnum.kasp NSEC
No correct ECDSAP256SHA256 signature for a.migrate-nomatch-algnum.kasp A
No correct ECDSAP256SHA256 signature for a.migrate-nomatch-algnum.kasp NSEC
No correct ECDSAP256SHA256 signature for b.migrate-nomatch-algnum.kasp A
No correct ECDSAP256SHA256 signature for b.migrate-nomatch-algnum.kasp NSEC
No correct ECDSAP256SHA256 signature for c.migrate-nomatch-algnum.kasp A
No correct ECDSAP256SHA256 signature for c.migrate-nomatch-algnum.kasp NSEC
No correct ECDSAP256SHA256 signature for ns6.migrate-nomatch-algnum.kasp A
No correct ECDSAP256SHA256 signature for ns6.migrate-nomatch-algnum.kasp NSEC
I:kasp:error: dnssec verify zone migrate-nomatch-algnum.kasp failed
I:kasp:failed
```
```
[beetle:bin/tests/system] marka% more kasp/*636
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62626
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
; COOKIE: 539b5c354526c809010000005ecc56840b1cefd068a5ccb2 (good)
;; QUESTION SECTION:
;a.migrate-nomatch-algnum.kasp. IN A
;; ANSWER SECTION:
a.migrate-nomatch-algnum.kasp. 300 IN A 10.0.0.1
a.migrate-nomatch-algnum.kasp. 300 IN RRSIG A 5 3 300 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. p4xB5lIEIpu4pnIwLYUQOWKP7pVwcWNoQDQ9pEapzf820XpxCHpTDhmi 8VJ3HARLm5UdUgL6UBE/JQWXUfkbV9ZCYmbdNt6Y2CEltU7FSPyV5K15 8V7geR2JSHhQJ5jUFvrTGUhgkUCakYpJ+mIwrN0TknrUyGznaf6ohOTJ jTk=
[beetle:bin/tests/system] marka%
```
```
[beetle:bin/tests/system] marka% more kasp/*637
migrate-nomatch-algnum.kasp. 300 IN SOA mname1. . 3 20 20 1814400 3600
migrate-nomatch-algnum.kasp. 300 IN RRSIG SOA 5 2 300 20200608233635 20200525223635 9798 migrate-nomatch-algnum.kasp. bhgTCazJtBIrZDTTTCKRhkOF9lvmiE4TLIPmiDIx8xlynhCDvx/rL0nq h0LpaB7W8chi85ElE6rSDKkbrwyOjqYXP0OZJL+9zdFkgVBbrl51/rqQ XcqqcvclpOLb1XFdDxffVQui/KEsMPFB1gE0Sfb1eYNCrirE9ZVC7V9w D74=
migrate-nomatch-algnum.kasp. 300 IN RRSIG SOA 13 2 300 20200608233635 20200525223635 4373 migrate-nomatch-algnum.kasp. MfGPTKg4OHsLBwoE5Q10ir0Z/hK3gK15kJ8v0AhrTb0ZuM6o+S3wJ/ht tdOeII7+t0ntjj+p8/yFcZW9MN1ZGw==
migrate-nomatch-algnum.kasp. 300 IN NS ns6.migrate-nomatch-algnum.kasp.
migrate-nomatch-algnum.kasp. 300 IN RRSIG NS 5 2 300 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. b4O+//W02SIsTtsympGQmqkCnXOK02G4W3rczloBJeFa9MgNoYuJH+2H F5zA4e2MvG2JhklScavqU4IKtFP0STHZU83dP5Yx/JYk8PYbxrs94hfF OOxtQOxkxtTGBeEFBKgX/Z1YoFh+m4rkf5JLxg5QgGcGvMmIwtsxJxx5 X4I=
migrate-nomatch-algnum.kasp. 3600 IN NSEC a.migrate-nomatch-algnum.kasp. NS SOA RRSIG NSEC DNSKEY CDS CDNSKEY TYPE65534
migrate-nomatch-algnum.kasp. 3600 IN RRSIG NSEC 5 2 3600 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. u5n7aAdoruD3yBZnJUKPagjMGV+CKmZQGaudGjquseku0UqQO+G4rEl7 J9L4hvqPiv67sqHNzSjpf0AsxbbUxIzATqlOiC2H5Ib0NGsV3ZjXqwgV u98VtOkAk7IC8TlVoFfMeUukb03pZJv7rlrmnEUhIysaGQrmm2PuRQQi /40=
migrate-nomatch-algnum.kasp. 300 IN DNSKEY 257 3 5 AwEAAez6IqlwOH2xuvuqfL4WAEzoxkja0SM8b2PJ2/zCtyRZGIbkFRut Cqfk3i16aBYN3q1+VyeG9C1Tl+7CE0EpgLdw96FQFttpDZqvi6hiDewE EkSnCeI5WjydqtYfHvHp4wa53Re71x1Zy0jMJG6BZ5gYXBVrerrHsZDK pHaGcGNejYqpgGde1l9d6ALXYHeHxxaaafKi4SEWY2OX/x+Teawpl0gg jMPdboZy23oW1mRjMHmfVhuKZcpp5j/WoZkNzVaJgzbraGqMSM89Q9qm m6w6ap0yl9YtovB/SfBKVWSFnHmlYAU7mXG9RfHM6F6rhBqly0k6qj3t Kd4AwUIrfOE=
migrate-nomatch-algnum.kasp. 300 IN DNSKEY 256 3 5 AwEAAb4FGL/9IJ0rv3vMeTDHXVifDAoJy44JHtsgDHZjm9zzI9dzQy6c 0ePw6LqX5u3n7G9RJmpwllCzhZPbSx44KELvj9oJ7RjcfN1O5eYKhOlx kYhKOXJ+2NQT3kVodQAPWUHuJGGFtCajQ85aoWzwsXvz3LIDu8kw2U9V /4+Qh01X
migrate-nomatch-algnum.kasp. 300 IN DNSKEY 257 3 13 X4Mh8goXFmaZxyikplqOFJ/W4ANHtzBFYwtDkpcFaLMc4wKkt802UEKm bHzPeDPTiUv8twOccmmNu0OzEzg2YQ==
migrate-nomatch-algnum.kasp. 300 IN DNSKEY 256 3 13 HAGrXYKNr/iIxYopX13vedH36i5ufQk7Z8Kn6xSbdiz0JRcKPJitNiCp zHGKFwnFxHK6D8Q5PA2d1eePsku2lg==
migrate-nomatch-algnum.kasp. 300 IN RRSIG DNSKEY 5 2 300 20200608233635 20200525223635 22984 migrate-nomatch-algnum.kasp. uN2ku7GN1IDSeAv620XoDaZIQhciPVo5sl9InrigNP6Cmub4grZYSx+U VP9PmA2c9BrghLHenD3rsOVV5Sz5Q/ZIA9z2SDRA5n3i52x2AjJI+hSU nBLkBuQu5Knzaxv3EuBaUtBJ/AghspRLQb4atWalLLmDc0D56SoCygfJ xBES9dDD3uBTa9dO2tZHG2RpPE+CkATHmN2IhLyusL9KNWk3RxW1fFsQ Ag06ydkzGYJN2xGSMsuqruk+seqjzpHMq7X2Jnq6KpkHqvU8SjGOUi/1 kGPAuU70FOwy3fH7KeoNELAJmPVrXQMKvt9FiIPm+LwR1o6sO3nGLIq6 ZsahSQ==
migrate-nomatch-algnum.kasp. 300 IN RRSIG DNSKEY 13 2 300 20200608233635 20200525223635 4654 migrate-nomatch-algnum.kasp. nKRLpFysVhkzMoocVeXwri7nS+LGBrGF93ZRN3MOtOFGn1B9cBKVJPY1 wRP3mB8vmZhruRD8ZdBypUBuWhuncw==
migrate-nomatch-algnum.kasp. 300 IN CDS 22984 5 2 6D4521712D7213ED09B33FA79CE8ED7D1E666250476094DAAE13BD0B BCB063DC
migrate-nomatch-algnum.kasp. 300 IN RRSIG CDS 5 2 300 20200608233635 20200525223635 22984 migrate-nomatch-algnum.kasp. k3NsKuWgJrvNt9peaH/h1IwonvHSBQy7KOLm9wwYzZPBUfzTzzVbSoK5 9fIec4VfAs/KsXyVWtKca9ye6rgukJ8xKAin7ZpPStQhAcY1YnyxW6Sa kX/NmiP54pT7uNynCr44XfiEEGaVygtybW1pu/f9e33zhISJZMd+SnkS MnxJE/Q++RpxJXvO/Vam8ZQ6bK8+RHUAfPnFU5DsxCaPEyAgj8GKThbX tshmK3vdwWmTF5AVQr7tY7Go+uujAvJ7SjnsAnAAzjw1SzOaniUM+E2p m8UtSGqCoLxgfS5+cQ0yyv6JkXMXedgQES2T1e+Why02BTabeyVWn0O0 HbG9Aw==
migrate-nomatch-algnum.kasp. 300 IN RRSIG CDS 13 2 300 20200608233635 20200525223635 4654 migrate-nomatch-algnum.kasp. Ei3LUYsV/BsYmn7VnzhcLC0k4gnK+Viojkttsw0luJ7czYTQ2xXcuvuG 69oSPYq/VPXaMOgwEgw1UiD2FYRTbg==
migrate-nomatch-algnum.kasp. 300 IN CDNSKEY 257 3 5 AwEAAez6IqlwOH2xuvuqfL4WAEzoxkja0SM8b2PJ2/zCtyRZGIbkFRut Cqfk3i16aBYN3q1+VyeG9C1Tl+7CE0EpgLdw96FQFttpDZqvi6hiDewE EkSnCeI5WjydqtYfHvHp4wa53Re71x1Zy0jMJG6BZ5gYXBVrerrHsZDK pHaGcGNejYqpgGde1l9d6ALXYHeHxxaaafKi4SEWY2OX/x+Teawpl0gg jMPdboZy23oW1mRjMHmfVhuKZcpp5j/WoZkNzVaJgzbraGqMSM89Q9qm m6w6ap0yl9YtovB/SfBKVWSFnHmlYAU7mXG9RfHM6F6rhBqly0k6qj3t Kd4AwUIrfOE=
migrate-nomatch-algnum.kasp. 300 IN RRSIG CDNSKEY 5 2 300 20200608233635 20200525223635 22984 migrate-nomatch-algnum.kasp. vDldVbG+ppZ92B/YGLycx89gvXFqwq97tsGaFNl1OCTy9lUAcHMGZxsL 8PYBVwcjS7Nwx+L/LzjAFQz6CwD0PdeMBYzEWtgM4Nwws/fAWs03CYgW lAMLEccTE/3I/OCjWJHqe3BhGmXvuVFKMf4yXyJt9vEtkLO9203bZu88 PU6wUyu6+pro6a08I5dSfz1r4eOe+BgkLS5/RoNEo0Q+DxNjE6L/GuM3 MQFqxbRQwWYHP9y/k0Ph+T6ft7QSDhuezGJWahs12xMHVt0cR/ELMYBN 6PaDkZ2tIqwYOR/l5G6rydJm7VX9xKouAmsd4giwrv5xWilJ/CT5ztOo cGwwIg==
migrate-nomatch-algnum.kasp. 300 IN RRSIG CDNSKEY 13 2 300 20200608233635 20200525223635 4654 migrate-nomatch-algnum.kasp. 7XbjFGYsyy/UzO1KpcYgKs8zpch2r6sZwlErwBjqegrpFMpP1LEay35a hKHuiAg+IaJhINSZnIRcaWN7uQHedA==
migrate-nomatch-algnum.kasp. 0 IN TYPE65534 \# 5 0526460001
migrate-nomatch-algnum.kasp. 0 IN TYPE65534 \# 5 0559C80001
migrate-nomatch-algnum.kasp. 0 IN TYPE65534 \# 5 0D122E0000
migrate-nomatch-algnum.kasp. 0 IN TYPE65534 \# 5 0D11150000
migrate-nomatch-algnum.kasp. 0 IN RRSIG TYPE65534 5 2 0 20200608233635 20200525223635 9798 migrate-nomatch-algnum.kasp. jq0fW1YMv2N8NrMdtVikL7D5cm+YiN0qPRgy0MYcflcHr0dQW9JGpjDw ZQdbvat0WMeYdWneCc+SBR1va1V0agS0EZxYsbd54+3ZMy9u/ICiBVof BmsVMciHfLDXidPYBz3M6ROdEYjMQlNBBaq7MjCP2jF4qEob9rzY4MEH dOM=
migrate-nomatch-algnum.kasp. 0 IN RRSIG TYPE65534 13 2 0 20200608233635 20200525223635 4373 migrate-nomatch-algnum.kasp. n2dBdtTsCcF3nNXoABZUW1pEyPnqNM3z9OcrcE4dTN/LMsHK/qjNrowp sMw9YuOPTSFfV3FVoXwDteaCE1io9Q==
a.migrate-nomatch-algnum.kasp. 300 IN A 10.0.0.1
a.migrate-nomatch-algnum.kasp. 300 IN RRSIG A 5 3 300 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. p4xB5lIEIpu4pnIwLYUQOWKP7pVwcWNoQDQ9pEapzf820XpxCHpTDhmi 8VJ3HARLm5UdUgL6UBE/JQWXUfkbV9ZCYmbdNt6Y2CEltU7FSPyV5K15 8V7geR2JSHhQJ5jUFvrTGUhgkUCakYpJ+mIwrN0TknrUyGznaf6ohOTJ jTk=
a.migrate-nomatch-algnum.kasp. 3600 IN NSEC b.migrate-nomatch-algnum.kasp. A RRSIG NSEC
a.migrate-nomatch-algnum.kasp. 3600 IN RRSIG NSEC 5 3 3600 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. d1SyyU0E66w3ZkMHi6Oo5g8K9sA3iLUijRhZl43RrhadaC0P/Bp3a6sy HrG3lONvIvNsikd0jFluRz9ktc50v/ik1w+DcXrvRBxilttsxKOaLuiz Yp2An5zXnRLFYSU47VgOMMHOTaRMIoVM2GO9g89S5K7xerUn4Shrtg01 OAc=
b.migrate-nomatch-algnum.kasp. 300 IN A 10.0.0.2
b.migrate-nomatch-algnum.kasp. 300 IN RRSIG A 5 3 300 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. jrtEKm1y9DWHaZJSE0BrZt0jVXGbgyr9B5mFBuPmRB6BjgEFrWc4yHAE Zx7NzGvNLVHSUvPJcI2cGF9irvAqTdVFwwJVh0N8LQmGyeBAEE6toHi5 aJEQK0Aw4hkFnYk+cA06VTBTENUpDck6fIK9IxMD+Dlv0qqQlz8pYIh+ JRE=
b.migrate-nomatch-algnum.kasp. 3600 IN NSEC c.migrate-nomatch-algnum.kasp. A RRSIG NSEC
b.migrate-nomatch-algnum.kasp. 3600 IN RRSIG NSEC 5 3 3600 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. c4Z+8HKFj9MtPOq6S2JHbR000C/abBcCeW4fuoLIldhtonfqYREtUSKQ DhGtqzTT1PdWQxVyYzGxOst6Y/SBqz0lK0cqErFhK8KDBSgBjY/FpOYi pKWlcnA3jmUX4DP7SZqphhqXqJaVSr5US77C8smCqQBHme0ABjGDsE0V FXE=
c.migrate-nomatch-algnum.kasp. 300 IN A 10.0.0.3
c.migrate-nomatch-algnum.kasp. 300 IN RRSIG A 5 3 300 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. M+77iM5bJuRAtOUhR5klhcMmfOqAkPuxF/WSuJjA0iyTwkyFCyz3l50w H0D1FUTNOwt2GliBcnInNZ1L1bqATkDWhlPkUsRD0vw+vGMoFXd/QoeB mNpCZbiC1cRh2UFzgUqte4Onyl4ou4NgxhGJfOWpvESyse41zdnJdAdO cDk=
c.migrate-nomatch-algnum.kasp. 3600 IN NSEC ns6.migrate-nomatch-algnum.kasp. A RRSIG NSEC
c.migrate-nomatch-algnum.kasp. 3600 IN RRSIG NSEC 5 3 3600 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. CAR4zBq2fKuNwa/8POfP2X2pjbOD52Fg8czKQIWCwdS3vkp/HjYNZpAp 9ELpjHVuk+ejJLs0XcPeMfFqdYoMuaO1XhyFPciCoJAQlBtCAqdJ5DlZ HCH7vA6Er/Uts+uCJSFCZKRKNlxMRQXACBonJ/trxaxgSPgu87t7te1E KnU=
ns6.migrate-nomatch-algnum.kasp. 300 IN A 10.53.0.6
ns6.migrate-nomatch-algnum.kasp. 300 IN RRSIG A 5 3 300 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. f/4slXlwVmdghecejfLro3KWBX3iB9u8A+c1YHF1QyySqHQK8qh66nOd a2r7LRkWrMdQTkKmPfFMiuJd8sPxJOhNqGZYLeHmotP9zF9Wc6+ZfHp7 e2nDVr2tRULirx+LU5zqCnSIDFZjTbCJGkFa0pEEDOTiBwKDCc7+9ks4 p/g=
ns6.migrate-nomatch-algnum.kasp. 3600 IN NSEC migrate-nomatch-algnum.kasp. A RRSIG NSEC
ns6.migrate-nomatch-algnum.kasp. 3600 IN RRSIG NSEC 5 3 3600 20200608233541 20200525223541 9798 migrate-nomatch-algnum.kasp. jpLqpG3UfyKk9JDHdJh1fXSjYJn9lXztliIgdz/3WWvZohgS1vZNSgM8 J9Yj00bh/PbE9Y+7jwuT6QgCGwo2eh9tq8jI8fGj1CVxZuU7Co7wayh8 IBGJarVaCVZ1/CG1m85enCBljGW1WDEFadbHp5YUTCDO/nCkQTIal6XM 6zc=
migrate-nomatch-algnum.kasp. 300 IN SOA mname1. . 3 20 20 1814400 3600
[beetle:bin/tests/system] marka%
```July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/issues/1952IPv6 addresses can be unparsable in yaml2020-06-29T13:43:53ZEvan HuntIPv6 addresses can be unparsable in yamlIPv6 addresses sometimes end in two trailing colons. For example, in the current output of `dig +yaml ns by` there's a name server with address "2a05:4800:1:100::". This breaks YAML parsing.
To fix this we need to append "0". I think i...IPv6 addresses sometimes end in two trailing colons. For example, in the current output of `dig +yaml ns by` there's a name server with address "2a05:4800:1:100::". This breaks YAML parsing.
To fix this we need to append "0". I think it would be harmless in all IPv6 address expansions everywhere, but in any case we should always do it when using `dns_masterstyle_yaml`.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Evan HuntEvan Hunthttps://gitlab.isc.org/isc-projects/bind9/-/issues/1689BIND stops DNSKEY lookup in get_dst_key() when a key with unsupported algorit...2020-06-29T13:43:00ZTomasKorbarBIND stops DNSKEY lookup in get_dst_key() when a key with unsupported algorithm is found first
### Summary
Bind stops zone validation when dnskey with unsupported algorithm is found first. That means that zone signed with supported ksk and unsupported zsk will not be validated and such query will result in servfail status. Descr...
### Summary
Bind stops zone validation when dnskey with unsupported algorithm is found first. That means that zone signed with supported ksk and unsupported zsk will not be validated and such query will result in servfail status. Described configuration should be ok according to https://tools.ietf.org/html/rfc6840#section-5.11
### BIND version used
BIND 9.11.4-P2-RedHat-9.11.4-16.P2.el7_8.3 (Extended Support Version) <id:7107deb>
### Steps to reproduce
issue can be reproduced with 2 bind servers. Authoritative and a forwarder.
A. On a host with bind supporting ED25519 algorithm. This will be our authoritative server. I will be using rhel-8
1. Install BIND on RHEL-8 host.
2. Edit /etc/named/named.conf:
```
options {
listen-on port 53 { 127.0.0.1; <IP-of-RHEL8-host>; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
recursing-file "/var/named/data/named.recursing";
secroots-file "/var/named/data/named.secroots";
allow-query { localhost; <IP-of-RHEL7-host>; };
recursion no;
dnssec-enable yes;
dnssec-validation yes;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.root.key";
managed-keys-directory "/var/named/dynamic";
pid-file "/run/named/named.pid";
session-keyfile "/run/named/session.key";
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "bad." IN {
type master;
file "bad.zone.signed";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
```
3. Create /var/named/bad.zone:
```
$TTL 5M
@ IN SOA <hostname-of-RHEL8>.bad. hostmaster.bad. (
1 ; serial
5M ; refresh
1M ; retry
1H ; expire
5M ) ; minimum
NS <hostname-of-RHEL8>
A 127.0.0.1
AAAA ::1
<hostname-of-RHEL8> A 127.0.0.1
AAAA ::1
```
4. Create key pairs:
`# cd /var/named`
RHEL-7 supported KSK:
`# dnssec-keygen -f KSK -a RSASHA512 -b 2048 bad`
(remember the KSK name, it will be Kbad.+010+?????)
One or two RHEL-7 unsupported ZSKs:
`# dnssec-keygen -a ED25519 -n ZONE bad`
5. Include the keys in the bad.zone:
`# for key in 'ls Kbad.+0*.key '; do echo "\$INCLUDE $key">> /var/named/bad.zone; done`
6. Sign the zone using the KSK (replace ???? with the KSK key-id):
`# dnssec-signzone -A -k Kbad.+010+????? -z -3 9911c319070e83f8 -N INCREMENT -o bad -t /var/named/bad.zone`
7. Start named.
`# systemctl start named`
--------------------------------------------
B. On our forwarder. Bind without ED25519 support. I will be using rhel 7.
1. Edit /etc/named.conf:
```
options {
listen-on port 53 { 127.0.0.1; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { localhost; };
recursion yes;
forward only;
forwarders { <IP-of-RHEL8-host>; };
dnssec-enable yes;
dnssec-validation yes;
/* Path to ISC DLV key */
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};
trusted-keys {
<paste the KSK key content here in the following example format>
/* bad. 257 3 10 "AwEAAcjgApTNTSiRSKs4vKQtjbg0rRZSH2eFze87mbRJgH8CWJrKzDT9 XorxywQuiDGDtB/MLGRumrtRQbXppgZR+5KZrwej3AzD2TFRXQokN8k9 Rrf0vuY2XEMEXgEfEHTuaNH5vzdJlv4PbHh/HDH0b2i5JuWGKbCJmt9A 6WUUkj/PsRzGXxnEqKvRjgGGsxyJsZdmR+NeOKXP7yLQej4JYsqcnd/0 ycuKjHtQn4L7fjafS8yi/75yyrcdegN97aldBZXyMOjfvkLa3Sn3WGQD qVmM/t7WlkjOhyPqBcTUCPch74YZoWph4cjnYrxWGrVQJnRku7DUUllA jzTLZxFGuH8="; */
};
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
```
2. Start named.
`# service named start`
3. Run the query.
`# dig +dnssec @127.0.0.1 bad.`
### What is the current *bug* behavior?
Response with status SERVFAIL.
### What is the expected *correct* behavior?
Correct response with status NOERROR.
### Relevant configuration files
Configuration files mentioned in reproducer.
### Relevant logs and/or screenshots
No important logs.
### Possible fixes
In current master it is branch it is https://gitlab.isc.org/isc-projects/bind9/-/blob/master/lib/dns/validator.c#L1128
I'm attaching patch which fixes this. [dnssec-unsupp-algo.patch](/uploads/726ad11368d4c286fbb23b10ebc27970/dnssec-unsupp-algo.patch)July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Mark AndrewsMark Andrewshttps://gitlab.isc.org/isc-projects/bind9/-/issues/1965bin/named/unix/os.c warning: '%s' directive output may be truncated on OpenIn...2020-06-29T13:40:19ZMichal Nowakbin/named/unix/os.c warning: '%s' directive output may be truncated on OpenIndianaBIND 9.16.4 compilation with GCC 7.5 on OpenIndiana 2020.04 (`illumos-6682e4c38c`) emitted warning in `bin/named/unix/os.c`:
```
libtool: compile: /usr/gcc/7/bin/gcc -include /export/home/newman/oi-userland/components/network/bind/build...BIND 9.16.4 compilation with GCC 7.5 on OpenIndiana 2020.04 (`illumos-6682e4c38c`) emitted warning in `bin/named/unix/os.c`:
```
libtool: compile: /usr/gcc/7/bin/gcc -include /export/home/newman/oi-userland/components/network/bind/build/amd64/config.h -I/export/home/newman/oi-userland/components/network/bind/build/amd64 -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4 -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/bin/named/unix/include -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/bin/named/unix/../include -I/export/home/newman/oi-userland/components/network/bind/build/amd64/lib/isccfg/include -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/lib/isccfg/include -I/export/home/newman/oi-userland/components/network/bind/build/amd64/lib/isccc/include -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/lib/isccc/include -I/export/home/newman/oi-userland/components/network/bind/build/amd64/lib/dns/include -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/lib/dns/include -I/export/home/newman/oi-userland/components/network/bind/build/amd64/lib/isc/include -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/lib/isc -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/lib/isc/include -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/lib/isc/unix/include -I/export/home/newman/oi-userland/components/network/bind/bind-9.16.4/lib/isc/pthreads/include -m64 -O3 -D_XOPEN_SOURCE=600 -D__EXTENSIONS__=1 -D_XPG6 -D_POSIX_PTHREAD_SEMANTICS -pthread -fPIC -W -Wall -Wmissing-prototypes -Wcast-qual -Wwrite-strings -Wformat -Wpointer-arith -Wno-missing-field-initializers -fno-strict-aliasing -c os.c -fPIC -DPIC -o .libs/os.o
os.c: In function 'getuname':
os.c:920:49: warning: '%s' directive output may be truncated writing up to 256 bytes into a region of size between 253 and 1021 [-Wformat-truncation=]
snprintf(unamebuf, sizeof(unamebuf), "%s %s %s %s", uts.sysname,
^~
uts.machine, uts.release, uts.version);
~~~
os.c:920:2: note: 'snprintf' output between 4 and 1028 bytes into a destination of size 1024
snprintf(unamebuf, sizeof(unamebuf), "%s %s %s %s", uts.sysname,
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
uts.machine, uts.release, uts.version);
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
```
illumos [snprintf(3c)](https://illumos.org/man/3c/snprintf).July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)https://gitlab.isc.org/isc-projects/bind9/-/issues/1970configure REQUIRES --enable-static=no to be SPECIFIED on the command line.2020-06-29T13:39:00ZMark Andrewsconfigure REQUIRES --enable-static=no to be SPECIFIED on the command line.You can't just type ./configure and have it work.You can't just type ./configure and have it work.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)https://gitlab.isc.org/isc-projects/bind9/-/issues/1933'make test' fails with --enable-shared=no2020-06-29T13:38:22ZMark Andrews'make test' fails with --enable-shared=no`make test` does not skip the tests that depend on shared libraries when --enable-shared=no is passed to configure.
```
FAIL: dlzexternal
FAIL: dyndb
FAIL: filter-aaaa
FAIL: rpzrecurse
````make test` does not skip the tests that depend on shared libraries when --enable-shared=no is passed to configure.
```
FAIL: dlzexternal
FAIL: dyndb
FAIL: filter-aaaa
FAIL: rpzrecurse
```July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)https://gitlab.isc.org/isc-projects/bind9/-/issues/1898'.rst' files should be independent of configure option.2020-06-29T13:33:15ZMark Andrews'.rst' files should be independent of configure option.'.rst' files are being generated from doc/misc/options which has different line breaks depending upon which configure options are set as ' // not configured' differs. This impacts on the generated '.rst' files leading to churn in them. ...'.rst' files are being generated from doc/misc/options which has different line breaks depending upon which configure options are set as ' // not configured' differs. This impacts on the generated '.rst' files leading to churn in them. The '.rst' files are nominally independent of configure options.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)https://gitlab.isc.org/isc-projects/bind9/-/issues/1955${LMDB_CFLAGS} missing from DNS_INCLUDES in make/includes.in2020-06-29T13:19:54ZMark Andrews${LMDB_CFLAGS} missing from DNS_INCLUDES in make/includes.inIn 9.16.4 named doesn't compile as lmdb.h is not found when lmdb is installed in a non standard place.In 9.16.4 named doesn't compile as lmdb.h is not found when lmdb is installed in a non standard place.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Mark AndrewsMark Andrewshttps://gitlab.isc.org/isc-projects/bind9/-/issues/1950Build option for no unittest2020-06-29T13:12:31ZPeter DaviesBuild option for no unittestBuild option for no unittest
To ability to build without unittests.
To enable testing to be performed without error on system where necessary unittest tools cannot be installed
RT [#16737](https://support.isc.org/Ticket/Display.html?i...Build option for no unittest
To ability to build without unittests.
To enable testing to be performed without error on system where necessary unittest tools cannot be installed
RT [#16737](https://support.isc.org/Ticket/Display.html?id=16737)July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)https://gitlab.isc.org/isc-projects/bind9/-/issues/1943Remove references to "blacklist" and "whitelist" in BIND ARM2020-06-29T13:08:25ZSuzanne GoldlustRemove references to "blacklist" and "whitelist" in BIND ARMSince these are not actual commands, this terminology is unnecessary and could be considered offensive.Since these are not actual commands, this terminology is unnecessary and could be considered offensive.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Suzanne GoldlustSuzanne Goldlusthttps://gitlab.isc.org/isc-projects/bind9/-/issues/1932Text corrections in README.md2020-06-29T13:07:40ZSuzanne GoldlustText corrections in README.mdFixing grammar, typos, etc. in README.md fileFixing grammar, typos, etc. in README.md fileJuly 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Suzanne GoldlustSuzanne Goldlusthttps://gitlab.isc.org/isc-projects/bind9/-/issues/1931Fix out-of-order RFCs in general.rst file of BIND ARM2020-06-29T13:06:45ZSuzanne GoldlustFix out-of-order RFCs in general.rst file of BIND ARMA couple of the RFCs are out of numerical order.A couple of the RFCs are out of numerical order.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Suzanne GoldlustSuzanne Goldlusthttps://gitlab.isc.org/isc-projects/bind9/-/issues/1929[v9_11] Drop "#define activeemtpynode activeemtpynode64" from lib/dns/rbtdb.c2020-06-29T13:05:52ZMichal Nowak[v9_11] Drop "#define activeemtpynode activeemtpynode64" from lib/dns/rbtdb.cc18dd943dab2124f2c04289fe164930455699334, among other things, renamed `activeemtpynode` to `activeemptynode`, but it seem that the `lib/dns/rbtdb.c:148:#define activeemtpynode activeemtpynode64` was kept (but it shouldn't?).c18dd943dab2124f2c04289fe164930455699334, among other things, renamed `activeemtpynode` to `activeemptynode`, but it seem that the `lib/dns/rbtdb.c:148:#define activeemtpynode activeemtpynode64` was kept (but it shouldn't?).July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Evan HuntEvan Hunthttps://gitlab.isc.org/isc-projects/bind9/-/issues/1945system:clang:tsan has bad $SYMBOLIZER2020-06-29T13:04:21ZMark Andrewssystem:clang:tsan has bad $SYMBOLIZERJob [#954307](https://gitlab.isc.org/isc-projects/bind9/-/jobs/954307) failed for 183e1ace67a889b6b7a5bb146c0bba1e13755d28:
==named==1843==ERROR: External symbolizer path is set to '$SYMBOLIZER' which isn't a known symbolizer. Please se...Job [#954307](https://gitlab.isc.org/isc-projects/bind9/-/jobs/954307) failed for 183e1ace67a889b6b7a5bb146c0bba1e13755d28:
==named==1843==ERROR: External symbolizer path is set to '$SYMBOLIZER' which isn't a known symbolizer. Please set the path to the llvm-symbolizer binary or other known tool.July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Ondřej SurýOndřej Surý