1. 17 Nov, 2014 2 commits
  2. 16 Nov, 2014 1 commit
    • Evan Hunt's avatar
      [master] geoip security fixes · a0b4f6d9
      Evan Hunt authored
      4003.	[security]	When geoip-directory was reconfigured during
      			named run-time, the previously loaded GeoIP
      			data could remain, potentially causing wrong
      			ACLs to be used or wrong results to be served
      			based on geolocation. [RT #37720]
      
      4002.	[security]	Lookups in GeoIP databases that were not
      			loaded could cause an assertion failure.
      			[RT #37679]
      
      4001.	[security]	The caching of GeoIP lookups did not always
      			handle address families correctly, potentially
      			resulting in an assertion failure. [RT #37672]
      a0b4f6d9
  3. 14 Nov, 2014 1 commit
    • Evan Hunt's avatar
      [master] allow arbitrary-size rndc output · e32d354f
      Evan Hunt authored
      4005.	[func]		The buffer used for returning text from rndc
      			commands is now dynamically resizable, allowing
      			arbitrarily large amounts of text to be sent back
      			to the client. (Prior to this change, it was
      			possible for the output of "rndc tsig-list" to be
      			truncated.) [RT #37731]
      e32d354f
  4. 11 Nov, 2014 1 commit
  5. 06 Nov, 2014 1 commit
  6. 05 Nov, 2014 2 commits
    • Evan Hunt's avatar
      [master] fix nxrrset in nxdomain redirection · 3cc8c7d6
      Evan Hunt authored
      4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
      			from the redirect zone. [RT #37722]
      3cc8c7d6
    • Evan Hunt's avatar
      [master] new mkeys and nzf naming format · ce96d432
      Evan Hunt authored
      3999.	[func]		"mkeys" and "nzf" files are now named after
      			their corresponding views, unless the view name
      			contains characters that would be incompatible
      			with use in a filename (i.e., slash, backslash,
      			or capital letters). If a view name does contain
      			these characters, the files will still be named
      			using a cryptographic hash of the view name.
      			Regardless of this, if a file using the old name
      			format is found to exist, it will continue to be
      			used. [RT #37704]
      ce96d432
  7. 04 Nov, 2014 1 commit
  8. 30 Oct, 2014 4 commits
  9. 21 Oct, 2014 2 commits
  10. 20 Oct, 2014 1 commit
    • Evan Hunt's avatar
      [master] allow 1-week nta-lifetime/nta-recheck · 498b0610
      Evan Hunt authored
      3983.	[bug]		Change #3940 was incomplete: negative trust anchors
      			could be set to last up to a week, but the
      			"nta-lifetime" and "nta-recheck" options were
      			still limted to one day. [RT #37522]
      498b0610
  11. 18 Oct, 2014 2 commits
  12. 16 Oct, 2014 2 commits
  13. 10 Oct, 2014 1 commit
  14. 09 Oct, 2014 1 commit
  15. 04 Oct, 2014 2 commits
  16. 03 Oct, 2014 1 commit
  17. 02 Oct, 2014 3 commits
  18. 01 Oct, 2014 2 commits
  19. 30 Sep, 2014 3 commits
  20. 29 Sep, 2014 5 commits
  21. 27 Sep, 2014 1 commit
  22. 19 Sep, 2014 1 commit