Mark Andrews authored Feb 26, 2019 and Evan Hunt committed Mar 07, 2019

(cherry picked from commit 435ae2f2)

fix the use of dns_wildcardname as an optimisation in DLZ

See merge request !1629

Mark Andrews authored Feb 18, 2019 and Evan Hunt committed Mar 07, 2019

(cherry picked from commit cb32cd98)

the wrong variable was used to count the test cases in one place.

See merge request !1627

Curtis Blackburn authored Mar 07, 2019 and Evan Hunt committed Mar 07, 2019

(cherry picked from commit 4f60a84e)

Resolve "teach clang that _fail() does not return."

See merge request !1626

(cherry picked from commit 3f2b7e10)

Merge branch '865-option-to-disable-information-leak-on-rpz-rewrites-isc-support-14178-v9_14' into 'v9_14'

Resolve "Option to disable information leak on RPZ rewrites [ISC-support

See merge request !1623

Mark Andrews authored Feb 18, 2019 and Evan Hunt committed Mar 07, 2019

(cherry picked from commit 89234643)

(cherry picked from commit aeed0474)

Mark Andrews authored Feb 14, 2019 and Evan Hunt committed Mar 07, 2019

(cherry picked from commit d1fa8be6)

clear out 9.14.0 release notes

See merge request !1622

Resolve "Zone data cannot be loaded with dnssec-coverage"

See merge request !1619

(cherry picked from commit 57e44efc)

Mark Andrews authored Feb 18, 2019 and Evan Hunt committed Mar 06, 2019

(cherry picked from commit ec3d830b)

cleanup dnssec-keygen manual page

See merge request !1616

Tony Finch authored Feb 21, 2019 and Mark Andrews committed Mar 07, 2019

Alphabetize options and synopsis; remove spurious -z from synopsis;
remove remnants of deprecated -k option; remove mention of long-gone
TSIG support; refer to -T KEY in options that are only relevant to
pre-RFC3755 DNSSEC; remove unnecessary -n ZONE from the example, and
add a -f KSK example.

(cherry picked from commit 1954f8d2)

Resolve "statschannel system tests fails json only (no libxml)"

See merge request !1615

(cherry picked from commit 5bc06a0a)

(cherry picked from commit a9c47414)

Fix a race in socket code

See merge request !1613

(cherry picked from commit 6d242928)

Witold Kręcicki authored Feb 15, 2019 and Evan Hunt committed Mar 06, 2019

from event loop on an socket and, in the meantime, someone has closed this
socket.

(cherry picked from commit b57a38ae)

Log plugin unloading at debug level

See merge request !1612

Michał Kępień authored Mar 06, 2019 and Evan Hunt committed Mar 06, 2019

During server reconfiguration, plugin instances set up for the old views
are unloaded very close to the end of the whole process, after new
plugin instances are set up.  As the log message announcing plugin
unloading is emitted at the default "info" level, the user might be
misled into thinking that it is the new plugin instances that are being
unloaded for some reason, particularly because all other messages logged
at the "info" level around the same time inform about setting things up
rather than tearing them down.  Since no distinction is currently made
between destroying a view due to reconfiguration and due to a shutdown
in progress, there is no easy way to vary the contents of the log
message depending on circumstances.  Since this message is not a
particularly critical one, demote it to debug level to prevent
confusion.

(cherry picked from commit af4b81f9)

[v9_14] Make nsupdate use OS-supplied ephemeral port range

See merge request !1609

5172.	[bug]		nsupdate now honors the operating system's preferred
			ephemeral port range. [GL #905]

(cherry picked from commit 0e649482)

Make nsupdate honor the operating system's preferred ephemeral port
range instead of always using the default 1024-65535 range for outgoing
messages.

(cherry picked from commit 06f582f2)

Install named plugins into a separate directory

See merge request !1605

Michał Kępień authored Feb 12, 2019 and Evan Hunt committed Mar 05, 2019

5161.	[func]		named plugins are now installed into a separate
			directory.  Supplying a filename (a string without path
			separators) in a "plugin" configuration stanza now
			causes named to look for that plugin in that directory.
			[GL #878]

(cherry picked from commit d2c960cf)

Michał Kępień authored Feb 12, 2019 and Evan Hunt committed Mar 05, 2019

Add the -c command line option to the usage message for named-checkconf
as it is not present there despite being documented.

(cherry picked from commit cba15515)

Michał Kępień authored Feb 12, 2019 and Evan Hunt committed Mar 05, 2019

When the "library" part of a "plugin" configuration stanza does not
contain at least one path separator, treat it as a filename and assume
it is a name of a shared object present in the named plugin installation
directory.  Absolute and relative paths can still be used and will be
used verbatim.  Get the full path to a plugin before attempting to
check/register it so that all relevant log messages include the same
plugin path (apart from the one logged when the full path cannot be
determined).

(cherry picked from commit 1a9fc624)

Michał Kępień authored Feb 12, 2019 and Evan Hunt committed Mar 05, 2019

Implement a helper function which, given an input string:

  - copies it verbatim if it contains at least one path separator,
  - prepends the named plugin installation directory to it otherwise.

This function will allow configuration parsing code to conveniently
determine the full path to a plugin module given either a path or a
filename.

While other, simpler ways exist for making sure filenames passed to
dlopen() cause the latter to look for shared objects in a specific
directory, they are very platform-specific.  Using full paths is thus
likely the most portable and reliable solution.

Also added unit tests for ns_plugin_expandpath() to ensure it behaves
as expected for absolute paths, relative paths, and filenames, for
various target buffer sizes.

(Note: plugins share a directory with named on Windows; there is no
default plugin path. Therefore the source path is copied to the
destination path with no modification.)

(cherry picked from commit d181c28c)

Michał Kępień authored Feb 12, 2019 and Evan Hunt committed Mar 05, 2019

Installing named plugins into ${libdir} clutters the latter and is not
in line with common filesystem conventions.  Instead, install named
plugins into a separate directory, ${libdir}/named.

(cherry picked from commit c527b7fd)

Add explicit check for libatomic to fix configure step on NetBSD

See merge request !1604

Ondřej Surý authored Mar 01, 2019 and Evan Hunt committed Mar 05, 2019

(cherry picked from commit 9a16e0a5)

Ondřej Surý authored Mar 01, 2019 and Evan Hunt committed Mar 05, 2019

(cherry picked from commit fcade061)

Resolve "Add win32util/Configure file list check to CI"

See merge request !1602

(cherry picked from commit 44242190)