1. 11 Apr, 2017 1 commit
  2. 06 Dec, 2016 1 commit
  3. 21 Jul, 2016 3 commits
  4. 27 Jun, 2016 1 commit
  5. 22 Oct, 2015 1 commit
  6. 06 Oct, 2015 3 commits
  7. 22 Aug, 2014 1 commit
  8. 16 Jun, 2014 1 commit
    • Mukund Sivaraman's avatar
      [10686] Add version printing option to various BIND utilites · 42782931
      Mukund Sivaraman authored
      Squashed commit of the following:
      
      commit 95effe9b2582a7eb878ccb8cb9ef51dfc5bbfde7
      Author: Evan Hunt <each@isc.org>
      Date:   Tue Jun 10 16:52:45 2014 -0700
      
          [rt10686] move version() to dnssectool.c
      
      commit df205b541d1572ea5306a5f671af8b54b9c5c770
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:38:31 2014 +0530
      
          Rearrange order of cases
      
      commit cfd30893f2540bf9d607e1fd37545ea7b441e0d0
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:38:08 2014 +0530
      
          Add version printer to dnssec-verify
      
      commit a625ea338c74ab5e21634033ef87f170ba37fdbe
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:32:19 2014 +0530
      
          Add version printer to dnssec-signzone
      
      commit d91e1c0f0697b3304ffa46fccc66af65591040d9
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:26:01 2014 +0530
      
          Add version printer to dnssec-settime
      
      commit 46fc8775da3e13725c31d13e090b406d69b8694f
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:25:48 2014 +0530
      
          Fix docbook
      
      commit 8123d2efbd84cdfcbc70403aa9bb27b96921bab2
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:20:17 2014 +0530
      
          Add version printer to dnssec-revoke
      
      commit d0916420317d3e8c69cf1b37d2209ea2d072b913
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:17:54 2014 +0530
      
          Add version printer to dnssec-keygen
      
      commit 93b0bd5ebc043298dc7d8f446ea543cb40eaecf8
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:14:11 2014 +0530
      
          Add version printer to dnssec-keyfromlabel
      
      commit 07001bcd9ae2d7b09dd9e243b0ab35307290d05d
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:13:39 2014 +0530
      
          Update usage help output, docbook
      
      commit 85cdd702f41c96fbc767fc689d1ed97fe1f3a926
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:07:18 2014 +0530
      
          Add version printer to dnssec-importkey
      
      commit 9274fc61e38205aad561edf445940b4e73d788dc
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:01:53 2014 +0530
      
          Add version printer to dnssec-dsfromkey
      
      commit bf4605ea2d7282e751fd73489627cc8a99f45a90
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 20:49:22 2014 +0530
      
          Add -V to nsupdate usage output
      42782931
  9. 29 Apr, 2014 1 commit
  10. 27 Feb, 2014 1 commit
  11. 19 Feb, 2014 1 commit
    • Evan Hunt's avatar
      [master] max-zone-ttl · 35f6a21f
      Evan Hunt authored
      3746.	[func]		New "max-zone-ttl" option enforces maximum
      			TTLs for zones. If loading a zone containing a
      			higher TTL, the load fails. DDNS updates with
      			higher TTLs are accepted but the TTL is truncated.
      			(Note: Currently supported for master zones only;
      			inline-signing slaves will be added.) [RT #38405]
      35f6a21f
  12. 16 Jan, 2014 1 commit
  13. 14 Jan, 2014 1 commit
    • Evan Hunt's avatar
      [master] native PKCS#11 support · ba751492
      Evan Hunt authored
      3705.	[func]		"configure --enable-native-pkcs11" enables BIND
      			to use the PKCS#11 API for all cryptographic
      			functions, so that it can drive a hardware service
      			module directly without the need to use a modified
      			OpenSSL as intermediary (so long as the HSM's vendor
      			provides a complete-enough implementation of the
      			PKCS#11 interface). This has been tested successfully
      			with the Thales nShield HSM and with SoftHSMv2 from
      			the OpenDNSSEC project. [RT #29031]
      ba751492
  14. 11 Dec, 2013 1 commit
    • Evan Hunt's avatar
      [master] dnssec-signzone -Q · 0bbe3273
      Evan Hunt authored
      3686.	[func]		"dnssec-signzone -Q" drops signatures from keys
      			that are still published but no longer active.
      			[RT #34990]
      0bbe3273
  15. 13 Oct, 2013 1 commit
  16. 25 Jan, 2013 1 commit
  17. 24 Jan, 2013 1 commit
  18. 21 Jun, 2012 2 commits
  19. 22 Dec, 2011 1 commit
  20. 08 Dec, 2011 1 commit
    • Evan Hunt's avatar
      3241. [func] Extended the header of raw-format master files to · b4d8192d
      Evan Hunt authored
      			include the serial number of the zone from which
      			they were generated, if different (as in the case
      			of inline-signing zones).  This is to be used in
      			inline-signing zones, to track changes between the
      			unsigned and signed versions of the zone, which may
      			have different serial numbers.
      
      			(Note: raw zonefiles generated by this version of
      			BIND are no longer compatble with prior versions.
      			To generate a backward-compatible raw zonefile
      			using dnssec-signzone or named-compilezone, specify
      			output format "raw=0" instead of simply "raw".)
      			[RT #26587]
      b4d8192d
  21. 07 Nov, 2011 1 commit
  22. 21 Mar, 2011 1 commit
  23. 17 Mar, 2011 1 commit
  24. 05 Mar, 2011 2 commits
  25. 04 Mar, 2011 1 commit
  26. 03 Dec, 2009 1 commit
  27. 03 Nov, 2009 1 commit
  28. 12 Oct, 2009 2 commits
  29. 10 Oct, 2009 1 commit
  30. 05 Oct, 2009 1 commit
  31. 29 Sep, 2009 1 commit
  32. 25 Sep, 2009 1 commit
  33. 02 Sep, 2009 1 commit
    • Evan Hunt's avatar
      2668. [func] Several improvements to dnssec-* tools, including: · eab9975b
      Evan Hunt authored
      			- dnssec-keygen and dnssec-settime can now set key
      			  metadata fields 0 (to unset a value, use "none")
      			- dnssec-revoke sets the revocation date in
      			  addition to the revoke bit
      			- dnssec-settime can now print individual metadata
      			  fields instead of always printing all of them,
      			  and can print them in unix epoch time format for
      			  use by scripts
      			[RT #19942]
      eab9975b