GitLab

If named is configured to perform DNSSEC validation and also forwards
all queries ("forward only;") to validating resolvers, negative trust
anchors do not work properly because the CD bit is not set in queries
sent to the forwarders.  As a result, instead of retrieving bogus DNSSEC
material and making validation decisions based on its configuration,
named is only receiving SERVFAIL responses to queries for bogus data.
Fix by ensuring the CD bit is always set in queries sent to forwarders
if the query name is covered by an NTA.

(cherry picked from commit 5e804882)

Improve the error message about missing PLY Python package

See merge request !1920

Previously, only a message about missing Python was printed, which was
misleading to many users.  The new message clearly states that Python
AND PLY is required and prints basic instructions how to install PLY
package.

(cherry picked from commit 55b48700)

sync CHANGES from 9.11.6-P1

See merge request !1917

Fix race in unix socket code when closing a socket that has already sent a recv/send event.

See merge request !1915

already sent a recv/send event.

When doing isc_socket_cancel we need to purge the event that might
already be in flight. If it has been launched already we need
to inform it that it has to bail.

Make lib/dns/gen.c compatible with reproducible builds.

See merge request !1913

The gen.c will now use SOURCE_DATE_EPOCH[1] if found in environment
to make the build more reproducible build friendly.

1. https://reproducible-builds.org/specs/source-date-epoch/

(cherry picked from commit c8cb612d)

Resolve "Add EDNS Client Tag and EDNS Server Tag"

See merge request !1911

(cherry picked from commit ee7cf180)

fix incorrect behavior mixing trusted-keys with validation auto

See merge request !1909

Merge branch '852-bind-returning-malformed-packet-error-when-sshfp-record-has-fingerprint-value-less-than-4-characters-v9_11' into 'v9_11'

Resolve "Bind returning malformed packet error when sshfp record has fingerprint value less than 4 characters"

See merge request !1906

(cherry picked from commit 1722728c)

Resolve "provide-ixfr should only be tested on TCP clients."

See merge request !1901

(cherry picked from commit ba1d7f3a)

(cherry picked from commit d547465a)

(cherry picked from commit 18c49853)

enable parallel system tests on windows

See merge request !1895

(cherry picked from commit d3cd0729)

this moves the creation of "parallel.mk" into a separate shell script
instead of bin/tests/system/Makefile. that shell script can now be
executed by runall.sh, allowing us to make use of the cygwin "make"
command, which supports parallel execution.

(cherry picked from commit bbae24c1)

RPZ test had spurious references to DNSRPS, which isn't in 9.11

See merge request !1898

Resolve "'delv www.isc.org ANY +rtrace +multiline' leaks memory"

See merge request !1897

(cherry picked from commit ce5520b6)

(cherry picked from commit 6999bee7)

(cherry picked from commit 32ba5a04)

(cherry picked from commit 127333c7)

Resolve "ARM doc RPZ NODATA policy says ANCOUNT=1"

See merge request !1891

(cherry picked from commit 4889e06c)

[v9_11] Simplify trailing period handling in system tests

See merge request !1878

Windows systems do not allow a trailing period in file names while Unix
systems do.  When BIND system tests are run, the $TP environment
variable is set to an empty string on Windows systems and to "." on Unix
systems.  This environment variable is then used by system test scripts
for handling this discrepancy properly.

In multiple system test scripts, a variable holding a zone name is set
to a string with a trailing period while the names of the zone's
corresponding dlvset-* and/or dsset-* files are determined using
numerous sed invocations like the following one:

    dlvsets="$dlvsets dlvset-`echo $zone |sed -e "s/.$//g"`$TP"

In order to improve code readability, use zone names without trailing
periods and replace sed invocations with variable substitutions.

To retain local consistency, also remove the trailing period from
certain other zone names used in system tests that are not subsequently
processed using sed.

(cherry picked from commit da2c1b74)

Prep release v9 11

See merge request !1865

(cherry picked from commit 40b034f5)

(cherry picked from commit 6195f229)

Replace atomic operations in bin/named/client.c with isc_refcount reference counting

See merge request !1864

Resolve "tcp-clients mostly ineffective"

See merge request !1863