GitLab

Resolvers in the "filter-aaaa" system test are configured with a single
root hint: "ns.rootservers.net", pointing to 10.53.0.1.  However,
querying ns1 for "ns.rootservers.net" results in NXDOMAIN answers.
Since the TTL for the root hint is set to 0, it may happen that a
resolver's ADB will be asked to return any known addresses for
"ns.rootservers.net", but it will only have access to a cached NXDOMAIN
answer for that name and an expired root hint, which will result in a
resolution failure, triggering a false positive for the "filter-aaaa"
system test.  Prevent this from happening by making all the root hints
consistent with authoritative data served by ns1.

(cherry picked from commit c19ebde1)

fix a bug that could cause an assert when configuring "geoip continent"

See merge request !2203

(cherry picked from commit c3a996d5)

(cherry picked from commit 8f1cdaee)

- incidentally fixed some typos in log messages

(cherry picked from commit 32634922)

Merge branch '1106-interaction-between-dns64-and-rpz-can-cause-unexpected-results-v9_11' into 'v9_11'

Resolve "Interaction between dns64 and RPZ can cause unexpected results"

See merge request !2197

(cherry picked from commit b9a1c31d)

(cherry picked from commit 1eb64004)

(cherry picked from commit b9dc9b68)

Merge branch '1136-named-checkconf-should-report-missing-dnstap-output-option-when-dnstap-option-is-set-v9_11' into 'v9_11'

Resolve "named-checkconf should report missing dnstap-output option when dnstap option is set"

See merge request !2186

from named.conf when dnstap was specified

(cherry picked from commit a4f38bec)

Add dnstap builds to CI

See merge request !2182

Michał Kępień authored Jul 19, 2019 and Ondřej Surý committed Jul 22, 2019

Ensure BIND with dnstap support enabled is being continuously tested by
adding --enable-dnstap to the ./configure invocation used for CentOS 7
and Debian sid builds in GitLab CI.

(cherry picked from commit 2bf44c6c)

Add Debian buster to CI

See merge request !2177

Michał Kępień authored Jul 19, 2019 and Ondřej Surý committed Jul 22, 2019

Ensure BIND is continuously tested on Debian 10 (buster) as it is the
current stable Debian release.

(cherry picked from commit 5f71d9c6)

Resolve "Add SipHash24 and synchronize the Cookie algorithm with other vendors"

See merge request !2171

(cherry picked from commit be0cd728)

(cherry picked from commit 7d8e7b01)

This commit changes the BIND cookie algorithms to match
draft-sury-toorop-dnsop-server-cookies-00.  Namely, it changes the Client Cookie
algorithm to use SipHash 2-4, adds the new Server Cookie algorithm using SipHash
2-4.  The change doesn't make the SipHash 2-4 to be the default algorithm, this
is up to the operator.

(cherry picked from commit 196b342b)

Michał Kępień authored Jun 03, 2019 and Ondřej Surý committed Jul 22, 2019

On DragonFly BSD, use the same commands for configuring network
interfaces used during system tests as on NetBSD and OpenBSD.

(cherry picked from commit 496397eb)

Add a comment and remove redundant definitions.

(cherry picked from commit 84ff6a69)

Move the macOS section of <isc/endian.h> to a lower spot as it is
believed not to be the most popular platform for running BIND.  Add a
comment and remove redundant definitions.

(cherry picked from commit c727a31e)

Instead of only supporting Linux, try making <isc/endian.h> support
other GNU platforms as well.  Since some compilers define __GNUC__ on
BSDs (e.g. Clang on FreeBSD), move the relevant section to the bottom of
the platform-specific part of <isc/endian.h>, so that it only gets
evaluated when more specific platform determination criteria are not
met.  Also include <byteswap.h> so that any byte-swapping macros which
may be defined in that file on older platforms are used in the fallback
definitions of the nonstandard hto[bl]e{16,32,64}() and
[bl]e{16,32,64}toh() conversion functions.

(cherry picked from commit a98c7408)

While Solaris does not support the nonstandard hto[bl]e{16,32,64}() and
[bl]e{16,32,64}toh() conversion functions, it does have some
byte-swapping macros available in <sys/byteorder.h>.  Ensure these
macros are used in the fallback definitions of the aforementioned
nonstandard functions.

(cherry picked from commit 5b0f81e5)

Since the hto[bl]e{16,32,64}() and [bl]e{16,32,64}toh() conversion
functions are nonstandard, add fallback definitions of these functions
to <isc/endian.h>, so that their unavailability does not prevent
compilation from succeeding.

(cherry picked from commit 973d2991)

Michał Kępień authored Jun 03, 2019 and Ondřej Surý committed Jul 22, 2019

Current versions of DragonFly BSD, FreeBSD, NetBSD, and OpenBSD all
support the modern variants of functions converting values between host
and big-endian/little-endian byte order while older ones might not.
Ensure <isc/endian.h> works properly in both cases.

(cherry picked from commit 588c14d5)

(cherry picked from commit 2cbf6331)
(cherry picked from commit 2188a581)

(cherry picked from commit a197df13)
(cherry picked from commit 8d87ad53)

(cherry picked from commit 0efc36c1)
(cherry picked from commit 0b050ad4)

Disable FreeBSD Runner in the CI; it's broken again.

See merge request !2175

(cherry picked from commit 747736d3)

Fix leaked memory in geoip_test.c

See merge request !2158

Ondřej Surý authored Jul 16, 2019 and Evan Hunt committed Jul 16, 2019

Each individual test opened GeoIP databases but the database handles were never
closed.  This commit moves the open/close from the individual unit tests into
the _setup and _teardown methods where they really belong.

(cherry picked from commit d1c7b791)
(cherry picked from commit aad88d2c)

Move ax save restore flags to libtool.m4 [v9_11]

See merge request !2139

add nocrypto builds

See merge request !2136