GitLab

[v9_11] Fix DNAME handling in DNSSEC tools

See merge request !364

4971.	[bug]		dnssec-signzone and dnssec-verify did not treat records
			below a DNAME as out-of-zone data. [GL #298]

(cherry picked from commit f9637ae0)

(cherry picked from commit 899e5606)

DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains.  Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records.  Check that DNAME-obscured
records are not signed.

(cherry picked from commit ff7015a0)

[v9_11] Unify keyfile-to-configuration conversions in system tests

See merge request !361

The keyfile and key ID for the original managed key do not change
throughout the mkeys system test.  Keep them in helper variables to
prevent calling "cat" multiple times and improve code readability.

(cherry picked from commit 2cad3825)

Reduce code duplication by replacing a code snippet repeated throughout
system tests using "trusted-keys" and/or "managed-keys" configuration
sections with calls to keyfile_to_{managed,trusted}_keys() helper
functions.

(cherry picked from commit dce66f76)

Add a set of helper functions for system test scripts which enable
converting key data from a set of keyfiles to either a "trusted-keys"
section or a "managed-keys" section suitable for including in a
resolver's configuration file.

(cherry picked from commit 21d3658b)

[v9_11] Refactor zone logging functions

See merge request !358

4969.	[cleanup]	Refactor zone logging functions. [GL #269]

(cherry picked from commit c8de677e)

In order to decrease code duplication, express the logic contained in
all zone logging functions using dns_zone_logv() calls.

(cherry picked from commit 5c03cd33)

Add a new libdns function, dns_zone_logv(), which takes a single va_list
argument rather than a variable number of arguments and can be used as a
base for implementing more specific zone logging functions.

(cherry picked from commit bb2dfb3f)

(cherry picked from commit 74c3b9d3)

(cherry picked from commit 1734f1b3)

- use RADIX_V4, RADIX_V6, RADIX_V4_ECS, and RADIX_V6_ECS as array
  indices instead of 0 through 3.
- remove some unused macros

(cherry picked from commit f7f20b12)

Resolve "add cfg_parse_buffer4"

Closes #325

See merge request !353

(cherry picked from commit b313084a)

Resolve "option to disable responding with cookies [ISC-Support #12614]"

See merge request !154

(cherry picked from commit 5f7a6232)

(cherry picked from commit b5265a8c)

(cherry picked from commit a5933fa2)

(cherry picked from commit 29305073)

Resolve "add support for marking options as deprecated."

Closes #322

See merge request !351

(cherry picked from commit befff945)

Don't fetch DNSKEY when fuzzing resolver

See merge request !347

(cherry picked from commit cb3208aa)

Merge branch '240-multiple-rrsigs-on-some-records-in-signed-zone-even-though-only-one-key-is-ever-active-at-a-time-v9_12-v9_11' into 'v9_11'

Resolve "Multiple RRSIGs on some records in signed zone even though only one key is ever active at a time"

Closes #240

See merge request !231

(cherry picked from commit ba7a3431)
(cherry picked from commit 00f1956c)

(cherry picked from commit 0db5b087)
(cherry picked from commit 1783fa5a)

(cherry picked from commit 87a3dc8a)
(cherry picked from commit 69340b5a)

only sign with other keys when deleting a key if there are not already existing signature for the deleted algorithm

(cherry picked from commit 0667bf7a)
(cherry picked from commit c1e342ce)

Resolve "move named -T processing to its own function"

Closes #316

See merge request !343

(cherry picked from commit ef7401e4)