BIND merge requestshttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests2022-06-09T13:28:59Zhttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5513Change nsec3param default to iter 0 salt-length 02022-06-09T13:28:59ZMatthijs Mekkingmatthijs@isc.orgChange nsec3param default to iter 0 salt-length 0When using 'nsec3param' in 'dnssec-policy' and no specific parameters
are provided, default to zero additional iterations and no salt, as
recommended by draft-ietf-dnsop-nsec3-guidance.
Closes #2956When using 'nsec3param' in 'dnssec-policy' and no specific parameters
are provided, default to zero additional iterations and no salt, as
recommended by draft-ietf-dnsop-nsec3-guidance.
Closes #2956November 2021 (9.16.23, 9.16.23-S1, 9.17.20)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6375Fix another kasp test timing issue2022-06-08T12:12:41ZMatthijs Mekkingmatthijs@isc.orgFix another kasp test timing issueIn the cases where we test SOA serial updates and TTL updates, we check if for "all zones loaded" to ensure the new zone content is loaded. But this is the unsigned zone, the signed zone still needs to be produced.
There is thus a timin...In the cases where we test SOA serial updates and TTL updates, we check if for "all zones loaded" to ensure the new zone content is loaded. But this is the unsigned zone, the signed zone still needs to be produced.
There is thus a timing issue where the dig request comes in before the signing process has finished.
Add a retry quiet to mitigate against it.
Closes #3362July 2022 (9.16.31, 9.16.31-S1, 9.18.5, 9.19.3)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6400[v9_18] Fix another kasp test timing issue2022-06-07T09:22:48ZMatthijs Mekkingmatthijs@isc.org[v9_18] Fix another kasp test timing issue(cherry picked from commit 827bba05a090cf392b1c54a4d857b7808c6a067f)
Closes #3362(cherry picked from commit 827bba05a090cf392b1c54a4d857b7808c6a067f)
Closes #3362July 2022 (9.16.31, 9.16.31-S1, 9.18.5, 9.19.3)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6401[v9_16] Fix another kasp test timing issue2022-06-07T09:11:07ZMatthijs Mekkingmatthijs@isc.org[v9_16] Fix another kasp test timing issue(cherry picked from commit 827bba05a090cf392b1c54a4d857b7808c6a067f)
Closes #3362(cherry picked from commit 827bba05a090cf392b1c54a4d857b7808c6a067f)
Closes #3362July 2022 (9.16.31, 9.16.31-S1, 9.18.5, 9.19.3)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6300[v9_18] Fix "keymgr updates key files each run"2022-06-02T13:51:47ZMatthijs Mekkingmatthijs@isc.org[v9_18] Fix "keymgr updates key files each run"Closes #3302Closes #3302June 2022 (9.16.30, 9.16.30-S1, 9.18.4, 9.19.2)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6367[v9_18] Add some dnssec-policy configuration checks2022-05-31T16:22:09ZMatthijs Mekkingmatthijs@isc.org[v9_18] Add some dnssec-policy configuration checksIf a dnssec-policy has multiple keys configured with the
same algorithm and role.
(cherry picked from commit f54dad005e02bd40d353037f562a695f53ed19c0)
Closes #1601, #1611If a dnssec-policy has multiple keys configured with the
same algorithm and role.
(cherry picked from commit f54dad005e02bd40d353037f562a695f53ed19c0)
Closes #1601, #1611June 2022 (9.16.30, 9.16.30-S1, 9.18.4, 9.19.2)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6250Fix "keymgr updates key files each run"2022-05-17T02:51:39ZMatthijs Mekkingmatthijs@isc.orgFix "keymgr updates key files each run"Closes #3302Closes #3302June 2022 (9.16.30, 9.16.30-S1, 9.18.4, 9.19.2)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6301[v9_16] Fix "keymgr updates key files each run"2022-05-17T02:51:24ZMatthijs Mekkingmatthijs@isc.org[v9_16] Fix "keymgr updates key files each run"Closes #3302Closes #3302June 2022 (9.16.30, 9.16.30-S1, 9.18.4, 9.19.2)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6286[v9_18] Remove confusing parental-source line2022-05-16T11:54:34ZMatthijs Mekkingmatthijs@isc.org[v9_18] Remove confusing parental-source lineRemove the line "This address must appear in the secondary server’s
parental-agents zone clause". This line is a copy paste error from
notify-source.
Rewrap.
(cherry picked from commit 313f606692cb451e553c22d5eb8714771e68dd04)
Closes ...Remove the line "This address must appear in the secondary server’s
parental-agents zone clause". This line is a copy paste error from
notify-source.
Rewrap.
(cherry picked from commit 313f606692cb451e553c22d5eb8714771e68dd04)
Closes #3335June 2022 (9.16.30, 9.16.30-S1, 9.18.4, 9.19.2)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6272Remove confusing parental-source line2022-05-16T11:54:18ZMatthijs Mekkingmatthijs@isc.orgRemove confusing parental-source lineRemove the line "This address must appear in the secondary server’s
parental-agents zone clause". This line is a copy paste error from
notify-source.
Rewrap.
Closes #3335Remove the line "This address must appear in the secondary server’s
parental-agents zone clause". This line is a copy paste error from
notify-source.
Rewrap.
Closes #3335June 2022 (9.16.30, 9.16.30-S1, 9.18.4, 9.19.2)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6287[v9_16] Remove confusing parental-source line2022-05-16T11:54:16ZMatthijs Mekkingmatthijs@isc.org[v9_16] Remove confusing parental-source lineRemove the line "This address must appear in the secondary server’s
parental-agents zone clause". This line is a copy paste error from
notify-source.
Rewrap.
(cherry picked from commit 313f606692cb451e553c22d5eb8714771e68dd04)
Closes ...Remove the line "This address must appear in the secondary server’s
parental-agents zone clause". This line is a copy paste error from
notify-source.
Rewrap.
(cherry picked from commit 313f606692cb451e553c22d5eb8714771e68dd04)
Closes #3335June 2022 (9.16.30, 9.16.30-S1, 9.18.4, 9.19.2)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6237[v9_16] Fix kasp system test failures2022-05-02T11:00:48ZMatthijs Mekkingmatthijs@isc.org[v9_16] Fix kasp system test failuresMay 2022 (9.16.29, 9.16.29-S1, 9.18.3, 9.19.1)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6236[v9_18] Fix kasp system test failures2022-05-02T11:00:39ZMatthijs Mekkingmatthijs@isc.org[v9_18] Fix kasp system test failuresMay 2022 (9.16.29, 9.16.29-S1, 9.18.3, 9.19.1)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/6223Fix kasp system test failures2022-04-29T11:56:35ZMatthijs Mekkingmatthijs@isc.orgFix kasp system test failuresMay 2022 (9.16.29, 9.16.29-S1, 9.18.3, 9.19.1)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5836Resolve "Add checkconf check for dnssec-policy keys algorithm"2022-04-05T17:27:45ZMark AndrewsResolve "Add checkconf check for dnssec-policy keys algorithm"Closes #3142Closes #3142April 2022 (9.16.28, 9.16.28-S1, 9.18.2, 9.19.0)Mark AndrewsMark Andrewshttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5945Add test configurations with invalid dnssec-policy clauses2022-04-04T11:51:02ZMark AndrewsAdd test configurations with invalid dnssec-policy clausesbad-ksk-without-zsk.conf only has a ksk defined without a
matching zsk for the same algorithm.
bad-zsk-without-ksk.conf only has a zsk defined without a
matching ksk for the same algorithm.
bad-unpaired-keys.conf has two keys of differ...bad-ksk-without-zsk.conf only has a ksk defined without a
matching zsk for the same algorithm.
bad-zsk-without-ksk.conf only has a zsk defined without a
matching ksk for the same algorithm.
bad-unpaired-keys.conf has two keys of different algorithms
one ksk only and the other zsk only
(cherry picked from commit f23e86b96b77bb9fd485a2c8f6d3cd8a02afd7bd)
Closes #3142April 2022 (9.16.28, 9.16.28-S1, 9.18.2, 9.19.0)Mark AndrewsMark Andrewshttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5941Add test configurations with invalid dnssec-policy clauses2022-04-04T11:50:55ZMark AndrewsAdd test configurations with invalid dnssec-policy clausesbad-ksk-without-zsk.conf only has a ksk defined without a
matching zsk for the same algorithm.
bad-zsk-without-ksk.conf only has a zsk defined without a
matching ksk for the same algorithm.
bad-unpaired-keys.conf has two keys of differ...bad-ksk-without-zsk.conf only has a ksk defined without a
matching zsk for the same algorithm.
bad-zsk-without-ksk.conf only has a zsk defined without a
matching ksk for the same algorithm.
bad-unpaired-keys.conf has two keys of different algorithms
one ksk only and the other zsk only
(cherry picked from commit f23e86b96b77bb9fd485a2c8f6d3cd8a02afd7bd)
Closes #3142April 2022 (9.16.28, 9.16.28-S1, 9.18.2, 9.19.0)Mark AndrewsMark Andrewshttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/4813Rekey immediately after rndc checkds/rollover2022-03-14T09:47:54ZMatthijs Mekkingmatthijs@isc.orgRekey immediately after rndc checkds/rolloverCloses #2488Closes #2488April 2021 (9.11.30/9.11.31, 9.11.30-S1/9.11.31-S1, 9.16.14/9.16.15, 9.16.14-S1/9.16.15-S1, 9.17.12)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5239Backport checkds to 9.162022-02-01T18:00:10ZMatthijs Mekkingmatthijs@isc.orgBackport checkds to 9.16Closes #1126Closes #1126July 2021 (9.11.34, 9.11.34-S1, 9.16.19, 9.16.19-S1, 9.17.16)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.orghttps://gitlab.isc.org/isc-projects/bind9/-/merge_requests/5234checkds2022-02-01T17:25:25ZMatthijs Mekkingmatthijs@isc.orgcheckdsCloses #1126Closes #1126July 2021 (9.11.34, 9.11.34-S1, 9.16.19, 9.16.19-S1, 9.17.16)Matthijs Mekkingmatthijs@isc.orgMatthijs Mekkingmatthijs@isc.org