BIND issueshttps://gitlab.isc.org/isc-projects/bind9/-/issues2024-01-03T14:09:50Zhttps://gitlab.isc.org/isc-projects/bind9/-/issues/10Use and require atomic primitives support2024-01-03T14:09:50ZOndřej SurýUse and require atomic primitives supportUse the atomic primitives to replace the custom atomics code.Use the atomic primitives to replace the custom atomics code.November 2019 (9.11.13, 9.14.8, 9.15.6)Witold KrecickiWitold Krecickihttps://gitlab.isc.org/isc-projects/bind9/-/issues/1293Change the return value for dns_name_dup() to void and cleanup the code2020-01-13T14:19:53ZOndřej SurýChange the return value for dns_name_dup() to void and cleanup the codeThe following discussion from !2452 should be addressed:
- [ ] @michal started a [discussion](https://gitlab.isc.org/isc-projects/bind9/merge_requests/2452#note_86460): (+1 comment)
> Would a follow-up MR that changes the return v...The following discussion from !2452 should be addressed:
- [ ] @michal started a [discussion](https://gitlab.isc.org/isc-projects/bind9/merge_requests/2452#note_86460): (+1 comment)
> Would a follow-up MR that changes the return value for `dns_name_dup()` to `void` make sense?December 2019 (9.11.14, 9.14.9, 9.15.7)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1673lib/isc/pk11.c depend on libdns headers2020-04-15T11:52:00ZOndřej Surýlib/isc/pk11.c depend on libdns headersThere's a circular dependency between `lib/isc/pk11.c` requiring `<dst/result.h>` making libisc build depend on libdns headers. This is weird and wrong and needs to be fixed.There's a circular dependency between `lib/isc/pk11.c` requiring `<dst/result.h>` making libisc build depend on libdns headers. This is weird and wrong and needs to be fixed.April 2020 (9.11.18, 9.16.2, 9.17.1)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1763Implement and improve the PKCS#11 code2020-05-01T14:26:27ZOndřej SurýImplement and improve the PKCS#11 codeThis is umbrella issue for !3326, !3330 and !3029, and !3467.This is umbrella issue for !3326, !3330 and !3029, and !3467.May 2020 (9.11.19, 9.11.19-S1, 9.14.12, 9.16.3)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1758Clean the duplicate and not-used code from libirs2020-04-29T12:16:17ZOndřej SurýClean the duplicate and not-used code from libirsThe libirs contains:
* reimplemenation of `getnameinfo()`, `getaddrinfo()`, `freeaddrinfo()`, and `gai_strerror()` - we can drop these
* the `irs_dnsconf` API which is experimental and not used anywhere
The leaves us with irs_resconf a...The libirs contains:
* reimplemenation of `getnameinfo()`, `getaddrinfo()`, `freeaddrinfo()`, and `gai_strerror()` - we can drop these
* the `irs_dnsconf` API which is experimental and not used anywhere
The leaves us with irs_resconf and irs_context APIs.May 2020 (9.11.19, 9.11.19-S1, 9.14.12, 9.16.3)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1723Replace fputs() with fprintf()2020-05-04T10:37:46ZMichał KępieńReplace fputs() with fprintf()The following discussion from !985 should be addressed:
- [ ] @michal started a [discussion](https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/985#note_120581): (+3 comments)
> Replacing `fputs()` with `fprintf()` sounds ...The following discussion from !985 should be addressed:
- [ ] @michal started a [discussion](https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/985#note_120581): (+3 comments)
> Replacing `fputs()` with `fprintf()` sounds like something to do
> tree-wide in another issue (may be possible with Coccinelle)?May 2020 (9.11.19, 9.11.19-S1, 9.14.12, 9.16.3)https://gitlab.isc.org/isc-projects/bind9/-/issues/4Convert to modern autotools (autoconf + automake + libtool)2024-01-03T14:09:49ZOndřej SurýConvert to modern autotools (autoconf + automake + libtool)The current build system doesn't use automake. It would be much easier to maintain the build system if we use full autotools capabilities.
Also reducing the number of Makefiles scattered in subdirectories into just few would help with ...The current build system doesn't use automake. It would be much easier to maintain the build system if we use full autotools capabilities.
Also reducing the number of Makefiles scattered in subdirectories into just few would help with dependency graph and parallel builds.
Outstanding issues:
- Critical
- [x] #1720 Building documentation is broken with Automake
- [x] #1724 Revise installation locations for certain BIND binaries
- [x] #1769 Ensure all necessary files are included in the tarball produced by "make dist"
- [x] #1774 Get Windows builds working again
- [x] #1777 Update the build instructions for automake
- [x] #1780 Fix system tests failing with Automake
- [x] #1783 AX_CHECK_COMPILE_FLAG -fno-delete-null-pointer-checks does not fail for clang
- Important
- [x] #114 Out of tree system tests
- [x] #1722 Ensure unit test core dumps are collected for Automake builds
- [x] #1725 Ensure correct use of lib/ns/tests/wrap.c
- [x] #1738 Revise the contents of "./configure" summary
- [ ] #1771 Refactor how we load librpz.so
- [x] #1787 BIND (master) does not work with krb5 1.18 (NegoEx)
- [x] #1792 Convert the checks from testsummary.sh into log driver (run.sh)
- [x] #1867 Fix the system tests on Windows
- [ ] #1880 Fix "make distcheck"
- Minor
- [ ] #1773 Consider including all compile flags in "named -V" output
- Cleanups
- [x] #48 Drop $SYSTEMTESTTOP from bin/tests/system/
- [x] #1726 Unit tests: rename TESTS to something more descriptive
- [x] #1727 Drop use of "$FEATURETEST --have-dlopen"
- [ ] #1729 Remove unused helper scripts from bin/tests/system/
- [x] #1730 Clean up no-op AC_SUBST calls
- [ ] #1731 Sort Automake files nicely
- [x] #1770 Review how we use sys/un.h
- [x] #1778 Cleanup the final remnants of platform.h
- [x] #1913 Remove unused leftoversMay 2020 (9.11.19, 9.11.19-S1, 9.14.12, 9.16.3)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1660Review tcpdns closing2020-07-01T20:34:08ZWitold KrecickiReview tcpdns closingClosing TCPDNS socket is tricky, review it thoroughly to make sure there are no races (e.g. between closing the socket and closing socket timers).Closing TCPDNS socket is tricky, review it thoroughly to make sure there are no races (e.g. between closing the socket and closing socket timers).July 2020 (9.11.21, 9.11.21-S1, 9.16.5, 9.17.3)Witold KrecickiWitold Krecickihttps://gitlab.isc.org/isc-projects/bind9/-/issues/48Drop $SYSTEMTESTTOP from bin/tests/system/2020-08-04T10:01:40ZMichał KępieńDrop $SYSTEMTESTTOP from bin/tests/system/This was suggested by @ondrej in !7.
The `$SYSTEMTESTTOP` shell variable if often set to `..` in various shell scripts inside `bin/tests/system/`, but most of the time it is only used one line later, while sourcing `conf.sh`. This hard...This was suggested by @ondrej in !7.
The `$SYSTEMTESTTOP` shell variable if often set to `..` in various shell scripts inside `bin/tests/system/`, but most of the time it is only used one line later, while sourcing `conf.sh`. This hardly improves code readability.
`$SYSTEMTESTTOP` is also used for the purpose of referencing scripts/files living in `bin/tests/system/`, but given that the variable is always set to a short, relative path, we could ponder dropping it altogether and replacing all of its occurrences with the relative path without really adversely affecting code readability.August 2020 (9.11.22, 9.11.22-S1, 9.16.6, 9.17.4)Michal NowakMichal Nowakhttps://gitlab.isc.org/isc-projects/bind9/-/issues/1118Simplify DNSSEC signing with KASP2020-01-23T08:19:28ZMatthijs Mekkingmatthijs@isc.orgSimplify DNSSEC signing with KASPMake DNSSEC signing simpler and more intuitive to configure.
1. Research current signing strategy
2. Introduce "dnssec-policy" statements to configure your Key and Signing Policy (KASP) in named.conf
3. Make sure it does not conflict wi...Make DNSSEC signing simpler and more intuitive to configure.
1. Research current signing strategy
2. Introduce "dnssec-policy" statements to configure your Key and Signing Policy (KASP) in named.conf
3. Make sure it does not conflict with existing DNSSEC sign configuration options
4. For each policy option:
4a. Adjust the code to implement the new policy features
4b. Update tests
4c. Update documentationDNSSEC Made Easyhttps://gitlab.isc.org/isc-projects/bind9/-/issues/2140convert dig and friends to use the netmgr2022-04-26T13:12:40ZEvan Huntconvert dig and friends to use the netmgrConvert `dig`, `host` and `nslookup` to use the network manager instead of the isc_socket API.Convert `dig`, `host` and `nslookup` to use the network manager instead of the isc_socket API.November 2020 (9.11.25, 9.11.25-S1, 9.16.9, 9.16.9-S1, 9.17.7)Evan HuntEvan Hunthttps://gitlab.isc.org/isc-projects/bind9/-/issues/2023use netmgr for dig/host/nslookup2020-11-13T11:13:20ZEvan Huntuse netmgr for dig/host/nslookupUpdate dig and friends to use the network manager API instead of `isc_socket`.
(mdig and delv have to wait because they use `dns_dispatch`, so that will have to be converted first.)Update dig and friends to use the network manager API instead of `isc_socket`.
(mdig and delv have to wait because they use `dns_dispatch`, so that will have to be converted first.)November 2020 (9.11.25, 9.11.25-S1, 9.16.9, 9.16.9-S1, 9.17.7)Evan HuntEvan Hunthttps://gitlab.isc.org/isc-projects/bind9/-/issues/2016use netmgr for xfrin2022-01-26T11:33:41ZEvan Huntuse netmgr for xfrin- add support for establishing outgoing TCPDNS connections
- use it for zone transfers- add support for establishing outgoing TCPDNS connections
- use it for zone transfersNovember 2020 (9.11.25, 9.11.25-S1, 9.16.9, 9.16.9-S1, 9.17.7)Evan HuntEvan Hunthttps://gitlab.isc.org/isc-projects/bind9/-/issues/2321Refactor netmgr2020-12-16T21:06:24ZOndřej SurýRefactor netmgrWhile working on fixing the bugs in the netmgr, it was discovered that stacking the netmgr APIs on top of each other is very error prone, confusing and mostly unfixable. It was proposed to rewrite the tcpdns using the libuv only and alo...While working on fixing the bugs in the netmgr, it was discovered that stacking the netmgr APIs on top of each other is very error prone, confusing and mostly unfixable. It was proposed to rewrite the tcpdns using the libuv only and along with the other fixes to refactor the netmgr API together with adding unit tests.
The `netmgr/` directory and the unit tests needs to be backported to 9.16 together with relevant changes, but we must not backport any netmgr-client changes outside `netmgr/` yet.December 2020 (9.11.26, 9.11.26-S1, 9.16.10, 9.16.10-S1, 9.17.8)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/2034Refactor the netmgr API to use iov2020-12-09T09:53:34ZOndřej SurýRefactor the netmgr API to use iovThe native libuv uses iov, and we lose that ability in our own API. Restore the iov, so it can be used f.e. in TCPDNS and other places instead of copying memory back and forth.The native libuv uses iov, and we lose that ability in our own API. Restore the iov, so it can be used f.e. in TCPDNS and other places instead of copying memory back and forth.December 2020 (9.11.26, 9.11.26-S1, 9.16.10, 9.16.10-S1, 9.17.8)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/2335TLSDNS refactoring2021-02-26T15:14:59ZOndřej SurýTLSDNS refactoringThe TLSDNS needs to be refactored to use libuv/OpenSSL directly, and not via netmgr layers.The TLSDNS needs to be refactored to use libuv/OpenSSL directly, and not via netmgr layers.February 2021 (9.11.28, 9.11.28-S1, 9.16.12, 9.16.12-S1, 9.17.10)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/2263Follow-up from "Server-side TLS support in netmgr"2021-01-28T16:36:48ZOndřej SurýFollow-up from "Server-side TLS support in netmgr"The following discussion from !3532 should be addressed:
- [ ] @ondrej started a [discussion](https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/3532#note_175388):
> Optionally, we should use `SSL_set0_rbio()` and `SSL_set...The following discussion from !3532 should be addressed:
- [ ] @ondrej started a [discussion](https://gitlab.isc.org/isc-projects/bind9/-/merge_requests/3532#note_175388):
> Optionally, we should use `SSL_set0_rbio()` and `SSL_set0_wbio()`, as `SSL_set_bio()` is considered legacy function.February 2021 (9.11.28, 9.11.28-S1, 9.16.12, 9.16.12-S1, 9.17.10)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/2357Cannot compile current versions on macOS "Catalina"2021-03-04T12:22:26ZJP MensCannot compile current versions on macOS "Catalina"Compiling on macOS Catalina 10.15.7 is failing for current versions:
- 9.16.10
- 9.17.8
- git checkout
I believe this is _supposed_ to be possible, at least it used to be: going back to `9.11.26` shows it was: that version builds tools ...Compiling on macOS Catalina 10.15.7 is failing for current versions:
- 9.16.10
- 9.17.8
- git checkout
I believe this is _supposed_ to be possible, at least it used to be: going back to `9.11.26` shows it was: that version builds tools and _named_ (but fails at the end on tests on my machine because of missing Python2).
I've got output of `make -k` [at this gist](https://gist.github.com/jpmens/291a7a2013ed17623cc4b44e63e3dbce).March 2021 (9.11.29, 9.11.29-S1, 9.16.13, 9.16.13-S1, 9.17.11)https://gitlab.isc.org/isc-projects/bind9/-/issues/1740The gssapi and krb5 headers polute the public API2021-03-22T11:02:58ZOndřej SurýThe gssapi and krb5 headers polute the public APIThe GSSAPI usage currently exports the gssapi.h headers to the public API of libdns. The use of GSSAPI and KRB5 needs to become opaque, so it does not polute the libdns public API, so there's no need to include the headers in downstream...The GSSAPI usage currently exports the gssapi.h headers to the public API of libdns. The use of GSSAPI and KRB5 needs to become opaque, so it does not polute the libdns public API, so there's no need to include the headers in downstream users of the library.March 2021 (9.11.29, 9.11.29-S1, 9.16.13, 9.16.13-S1, 9.17.11)Ondřej SurýOndřej Surýhttps://gitlab.isc.org/isc-projects/bind9/-/issues/2597Make calling generic rdata methods consistent2021-03-29T14:02:33ZMark AndrewsMake calling generic rdata methods consistentApril 2021 (9.11.30/9.11.31, 9.11.30-S1/9.11.31-S1, 9.16.14/9.16.15, 9.16.14-S1/9.16.15-S1, 9.17.12)