GitLab

from named.conf when dnstap was specified

(cherry picked from commit a4f38bec)

doc/arm: correct default for rrset-order

See merge request !2183

Tony Finch authored Jul 10, 2019 and Ondřej Surý committed Jul 22, 2019

(cherry picked from commit bded8af7)

Add dnstap builds to CI

See merge request !2181

Michał Kępień authored Jul 19, 2019 and Ondřej Surý committed Jul 22, 2019

Ensure BIND with dnstap support enabled is being continuously tested by
adding --enable-dnstap to the ./configure invocation used for CentOS 7
and Debian sid builds in GitLab CI.

(cherry picked from commit 2bf44c6c)

Fix LD_WRAP test [v9_14]

See merge request !2180

Evan Hunt authored Apr 15, 2019 and Ondřej Surý committed Jul 22, 2019

When the unit test is linked with dynamic libraries, the wrapping
doesn't occur, probably because it's different translation unit.

To workaround the issue, we provide thin wrappers with *real* symbol
names that just call the mocked functions.

(cherry picked from commit 839ed789)

(cherry picked from commit 135519e5)

Merge branch '1106-interaction-between-dns64-and-rpz-can-cause-unexpected-results-v9_14' into 'v9_14'

Resolve "Interaction between dns64 and RPZ can cause unexpected results"

See merge request !2179

(cherry picked from commit b9a1c31d)

(cherry picked from commit 1eb64004)

(cherry picked from commit b9dc9b68)

Add Debian buster to CI

See merge request !2176

Michał Kępień authored Jul 19, 2019 and Ondřej Surý committed Jul 22, 2019

Ensure BIND is continuously tested on Debian 10 (buster) as it is the
current stable Debian release.

(cherry picked from commit 5f71d9c6)

Disable FreeBSD Runner in the CI; it's broken again.

See merge request !2174

(cherry picked from commit 747736d3)

Resolve "Add SipHash24 and synchronize the Cookie algorithm with other vendors"

See merge request !2170

This commit changes the BIND cookie algorithms to match
draft-sury-toorop-dnsop-server-cookies-00.  Namely, it changes the Client Cookie
algorithm to use SipHash 2-4, adds the new Server Cookie algorithm using SipHash
2-4.  The change doesn't make the SipHash 2-4 to be the default algorithm, this
is up to the operator.

Michał Kępień authored Jun 03, 2019 and Ondřej Surý committed Jul 21, 2019

On DragonFly BSD, use the same commands for configuring network
interfaces used during system tests as on NetBSD and OpenBSD.

Add a comment and remove redundant definitions.

Move the macOS section of <isc/endian.h> to a lower spot as it is
believed not to be the most popular platform for running BIND.  Add a
comment and remove redundant definitions.

Instead of only supporting Linux, try making <isc/endian.h> support
other GNU platforms as well.  Since some compilers define __GNUC__ on
BSDs (e.g. Clang on FreeBSD), move the relevant section to the bottom of
the platform-specific part of <isc/endian.h>, so that it only gets
evaluated when more specific platform determination criteria are not
met.  Also include <byteswap.h> so that any byte-swapping macros which
may be defined in that file on older platforms are used in the fallback
definitions of the nonstandard hto[bl]e{16,32,64}() and
[bl]e{16,32,64}toh() conversion functions.

While Solaris does not support the nonstandard hto[bl]e{16,32,64}() and
[bl]e{16,32,64}toh() conversion functions, it does have some
byte-swapping macros available in <sys/byteorder.h>.  Ensure these
macros are used in the fallback definitions of the aforementioned
nonstandard functions.

Since the hto[bl]e{16,32,64}() and [bl]e{16,32,64}toh() conversion
functions are nonstandard, add fallback definitions of these functions
to <isc/endian.h>, so that their unavailability does not prevent
compilation from succeeding.

Michał Kępień authored Jun 03, 2019 and Ondřej Surý committed Jul 21, 2019

Current versions of DragonFly BSD, FreeBSD, NetBSD, and OpenBSD all
support the modern variants of functions converting values between host
and big-endian/little-endian byte order while older ones might not.
Ensure <isc/endian.h> works properly in both cases.

5236.   [func]          Add SipHash 2-4 implementation in lib/isc/siphash.c
                        and switch isc_hash_function() to use SipHash 2-4.
                        [GL #605]

(cherry picked from commit dc9543ab)

(cherry picked from commit d5055665)

(cherry picked from commit 2e7d8244)

(cherry picked from commit 2cbf6331)

(cherry picked from commit a197df13)

(cherry picked from commit 0efc36c1)

Fix leaked memory in geoip_test.c

See merge request !2157

Ondřej Surý authored Jul 16, 2019 and Evan Hunt committed Jul 16, 2019

Each individual test opened GeoIP databases but the database handles were never
closed.  This commit moves the open/close from the individual unit tests into
the _setup and _teardown methods where they really belong.

(cherry picked from commit d1c7b791)

statschannel.c: declare dnssecsignstat_dump only if it's used (LIBXML2 or LIBJSON is available)

See merge request !2144

Add missing AX_RESTORE_FLAGS([geoip2]) to configure.ac

See merge request !2142