1. 06 Dec, 2018 5 commits
    • Evan Hunt's avatar
      fix shared library build on darwin · 115736b3
      Evan Hunt authored
    • Evan Hunt's avatar
      name change from "hook modules" to "plugins" · fd20f10d
      Evan Hunt authored
      - "hook" is now used only for hook points and hook actions
      - the "hook" statement in named.conf is now "plugin"
      - ns_module and ns_modlist are now ns_plugin and ns_plugins
      - ns_module_load is renamed ns_plugin_register
      - the mandatory functions in plugin modules (hook_register,
        hook_check, hook_version, hook_destroy) have been renamed
    • Evan Hunt's avatar
    • Evan Hunt's avatar
      initial implementation of filter-aaaa.so as a shared object · d3f0f71b
      Evan Hunt authored
      - temporary kluge! in this version, for testing purposes,
        named always searches for a filter-aaaa module at /tmp/filter-aaaa.so.
        this enables the filter-aaaa system test to run even though the
        code to configure hooks in named.conf hasn't been written yet.
      - filter-aaaa-on-v4, filter-aaaa-on-v6 and the filter-aaaa ACL are
        still configured in the view as they were before, not in the hook.
    • Evan Hunt's avatar
      set up hooks.c to enable setting hook points and loading modules · 70cc3f80
      Evan Hunt authored
      - move hooks.h to public include directory
      - ns_hooktable_init() initializes a hook table. if NULL is passed in, it
        initializes the global hook table
      - ns_hooktable_save() saves a pointer to the current global hook table.
      - ns_hooktable_reset() replaces the global hook table with different
      - ns_hook_add() adds hooks at specified hook points in a hook table (or
        the global hook table if the specified table is NULL)
      - load and unload functions support dlopen() of hook modules (this is
        adapted from dyndb and not yet functional)
      - began adding new hook points to query.c
  2. 29 Nov, 2018 1 commit
  3. 27 Nov, 2018 2 commits
    • Ondřej Surý's avatar
      Fix build-time Python configuration · d7560240
      Ondřej Surý authored
      Apply various fixes and tweaks to Python configuration logic implemented
      in the "configure" script:
        - Prevent PYTHON_INSTALL_DIR, which holds the value passed to the
          --with-python-install-dir option, from being set to "unspec" by
          default as this breaks installing Python modules when the
          --with-python-install-dir option is not used.
        - Make the --with-python-install-dir option also work when the Python
          interpreter is specified explicitly (using --with-python=<...>).
        - Remove dnspython dependency which was erroneously introduced in
          commit 31b0dc1f: no installed Python
          module depends on dnspython, it is only used in system tests, for
          which dedicated scripts exist that check whether dnspython is
          available and act accordingly.
        - Improve contents and placement of error messages.
        - Reduce duplication of code checking Python dependencies.
        - Use Autoconf macros AS_CASE() and AS_IF() instead of plain shell
        - Update comments.  Capitalize the word "Python" when referring to the
          language itself rather than a specific executable.
    • Ondřej Surý's avatar
  4. 22 Nov, 2018 1 commit
  5. 16 Nov, 2018 1 commit
  6. 15 Nov, 2018 3 commits
  7. 12 Nov, 2018 1 commit
  8. 09 Nov, 2018 1 commit
  9. 08 Nov, 2018 1 commit
    • Ondřej Surý's avatar
      Add small tweaks to the code to fix compilation when ISC assertions are disabled · fbd2e47f
      Ondřej Surý authored
      While implementing the new unit testing framework cmocka, it was found that the
      BIND 9 code doesn't compile when assertions are disabled or replaced with any
      function (such as mock_assert() from cmocka unit testing framework) that's not
      directly recognized as assertion by the compiler.
      This made the compiler to complain about blocks of code that was recognized as
      unreachable before, but now it isn't.
      The changes in this commit include:
      * assigns default values to couple of local variables,
      * moves some return statements around INSIST assertions,
      * adds __builtin_unreachable(); annotations after some INSIST assertions,
      * fixes one broken assertion (= instead of ==)
  10. 07 Nov, 2018 1 commit
  11. 06 Nov, 2018 2 commits
  12. 02 Nov, 2018 1 commit
  13. 26 Oct, 2018 2 commits
  14. 25 Oct, 2018 1 commit
  15. 23 Oct, 2018 1 commit
  16. 22 Oct, 2018 1 commit
    • Ondřej Surý's avatar
      Add support for enabling and enforcing FIPS mode in OpenSSL: · c4cee27f
      Ondřej Surý authored
      * Add configure option --enable-fips-mode that detects and enables FIPS mode
      * Add a function to enable FIPS mode and call it on crypto init
      * Log an OpenSSL error when FIPS_mode_set() fails and exit
      * Report FIPS mode status in a separate log message from named
  17. 10 Sep, 2018 1 commit
  18. 07 Sep, 2018 14 commits