]> git.ipfire.org Git - thirdparty/knot-dns.git/log
thirdparty/knot-dns.git
5 years agotests-extra: extend listen port range
Daniel Salzman [Mon, 21 Sep 2020 07:42:48 +0000 (07:42 +0000)] 
tests-extra: extend listen port range

5 years agotests-extra: make every module import unique
Daniel Salzman [Sun, 20 Sep 2020 19:19:11 +0000 (19:19 +0000)] 
tests-extra: make every module import unique

5 years agotests-extra: fix compatibility with Bind9 9.16
Daniel Salzman [Sat, 19 Sep 2020 11:53:01 +0000 (11:53 +0000)] 
tests-extra: fix compatibility with Bind9 9.16

5 years agotests-extra: add thread context
Jan Hák [Fri, 18 Sep 2020 10:12:16 +0000 (12:12 +0200)] 
tests-extra: add thread context

5 years agotests-extra: get rid of global parameters in zone generator
Jan Hák [Fri, 18 Sep 2020 08:38:14 +0000 (10:38 +0200)] 
tests-extra: get rid of global parameters in zone generator

5 years agoMerge branch 'rpm-doc-fix' into 'master'
Daniel Salzman [Fri, 18 Sep 2020 15:39:41 +0000 (17:39 +0200)] 
Merge branch 'rpm-doc-fix' into 'master'

distro/rpm: improve %files section

See merge request knot/knot-dns!1181

5 years agodistro/rpm: improve %files section
Jakub Ružička [Wed, 16 Sep 2020 14:42:38 +0000 (16:42 +0200)] 
distro/rpm: improve %files section

* improve %doc macro usage
* remove excessive %{name} usage
* update %attr rights
  * 750 -> 770 on /etc/knot to enable includes from knot.conf
  * 775 -> 770 on /var/lib/knot which can contain sensitive stuff
  * ___ -> 770 on /run/knot
* don't list /var/lib/knot/keys which is created dynamically
* remove duplicate entry
* fix incorrect whitespace

5 years agoixfr: split multi-mesage responses to 16kib -- compression
Libor Peltan [Fri, 18 Sep 2020 09:53:18 +0000 (11:53 +0200)] 
ixfr: split multi-mesage responses to 16kib -- compression

5 years agoMerge branch 'fix_load_extra' into 'master'
Daniel Salzman [Fri, 18 Sep 2020 06:34:44 +0000 (08:34 +0200)] 
Merge branch 'fix_load_extra' into 'master'

bugfix: zone load: dont start extra chgset if zonefile unupdated

See merge request knot/knot-dns!1183

5 years agobugfix: zone load: dont start extra chgset if zonefile unupdated
Libor Peltan [Thu, 17 Sep 2020 15:50:39 +0000 (17:50 +0200)] 
bugfix: zone load: dont start extra chgset if zonefile unupdated

5 years agokxdpgun: option for setup network interface
Jan Hak [Wed, 16 Sep 2020 14:37:30 +0000 (16:37 +0200)] 
kxdpgun: option for setup network interface

5 years agoMerge branch 'test_reproducible_enh' into 'master'
Daniel Salzman [Thu, 17 Sep 2020 10:38:13 +0000 (12:38 +0200)] 
Merge branch 'test_reproducible_enh' into 'master'

tests: improved test of deterministic ECDSA

See merge request knot/knot-dns!1182

5 years agoconfigure: improve detection of ECDSA reproducible signing support
Daniel Salzman [Thu, 17 Sep 2020 10:29:25 +0000 (12:29 +0200)] 
configure: improve detection of ECDSA reproducible signing support

5 years agotests: improved test of deterministic ECDSA
Libor Peltan [Thu, 17 Sep 2020 10:16:33 +0000 (12:16 +0200)] 
tests: improved test of deterministic ECDSA

5 years agotests-extra: zone/backup -- allow enough time to proceed even under Valgrind
David Vašek [Fri, 28 Aug 2020 09:38:08 +0000 (11:38 +0200)] 
tests-extra: zone/backup -- allow enough time to proceed even under Valgrind

5 years agodoc: keymgr -- add a link to the trust anchor RFC
David Vašek [Tue, 15 Sep 2020 15:13:30 +0000 (17:13 +0200)] 
doc: keymgr -- add a link to the trust anchor RFC

5 years agoMerge branch 'no_repro_warn' into 'master'
Daniel Salzman [Wed, 16 Sep 2020 10:41:33 +0000 (12:41 +0200)] 
Merge branch 'no_repro_warn' into 'master'

dnssec: warn if reproducible signing not avail

See merge request knot/knot-dns!1180

5 years agodnssec: warn if reproducible signing not avail
Libor Peltan [Tue, 15 Sep 2020 15:48:03 +0000 (17:48 +0200)] 
dnssec: warn if reproducible signing not avail

5 years agodoc: add a reference to the DNS Catalog Zones Internet Draft and a link to the trust...
David Vašek [Tue, 15 Sep 2020 08:36:42 +0000 (10:36 +0200)] 
doc: add a reference to the DNS Catalog Zones Internet Draft and a link to the trust anchor RFC

5 years agonode: fix some documentation typos
Daniel Salzman [Mon, 14 Sep 2020 14:41:04 +0000 (16:41 +0200)] 
node: fix some documentation typos

5 years agoconfigure: don't automatically disable fastparser with Clang compiler
Daniel Salzman [Sat, 12 Sep 2020 14:15:29 +0000 (16:15 +0200)] 
configure: don't automatically disable fastparser with Clang compiler

5 years agoMerge branch 'ci-remove-bsd' into 'master'
Daniel Salzman [Fri, 11 Sep 2020 12:57:14 +0000 (14:57 +0200)] 
Merge branch 'ci-remove-bsd' into 'master'

CI: remove broken FreeBSD jobs

See merge request knot/knot-dns!1178

5 years agoCI: remove broken FreeBSD jobs
Jakub Ružička [Fri, 11 Sep 2020 12:44:05 +0000 (14:44 +0200)] 
CI: remove broken FreeBSD jobs

FreeBSD jobs are currently failing and blocking merges.

They can be restored once functional.

5 years agoMerge branch 'libnghttp2_include_fixups' into 'master'
Daniel Salzman [Fri, 11 Sep 2020 06:14:32 +0000 (08:14 +0200)] 
Merge branch 'libnghttp2_include_fixups' into 'master'

Libnghttp2 include fixups

Closes #690

See merge request knot/knot-dns!1176

5 years agoMerge branch 'master' into 'master'
Daniel Salzman [Thu, 10 Sep 2020 12:34:35 +0000 (14:34 +0200)] 
Merge branch 'master' into 'master'

README.md: make links to docs interactive

See merge request knot/knot-dns!1177

5 years agoREADME.md: make links to docs interactive
Jakub Ružička [Thu, 10 Sep 2020 11:08:38 +0000 (13:08 +0200)] 
README.md: make links to docs interactive

using GitLab markdown.

5 years agoMerge branch 'validation_no_policy_fix' into 'master'
Daniel Salzman [Thu, 10 Sep 2020 09:11:16 +0000 (11:11 +0200)] 
Merge branch 'validation_no_policy_fix' into 'master'

dnssec: don't crash if no policy is configured in the validation mode

See merge request knot/knot-dns!1175

5 years agosrc/utils/Makefile.inc: Add $(libnghttp2_CFLAGS) where needed
Robert Edmonds [Thu, 10 Sep 2020 01:05:47 +0000 (21:05 -0400)] 
src/utils/Makefile.inc: Add $(libnghttp2_CFLAGS) where needed

The header file src/utils/common/https.h includes the external header
file <nghttp2/nghttp2.h> (when nghttp2 support is enabled by the build
system). This header file is included by src/utils/common/netio.h, which can
in turn be included directly or indirectly by various knot components.

The nghttp2 header files are not guaranteed to be located in the compiler's
default include paths. This dependency is detected by the build system
via PKG_CHECK_MODULES, which populates the automake variable
$(libnghttp2_CFLAGS). These extra CFLAGS must be added to the compiler flags
for any targets that include a header file that results in header file
inclusions of the external dependencies. Otherwise the build will fail when
those external header files cannot be located.

This commit adds $(libnghttp2_CLAGS) to the *_CPPFLAGS for kdig, khost, and
knsupdate.

Without the $(libnghttp2_CFLAGS) fixes in this commit, the build will
fail with an error like:

    Making all in src
    make[1]: Entering directory '/tmp/knot-3.0.0/src'
      GEN      contrib/dnstap/dnstap.pb-c.c
      GEN      contrib/dnstap/dnstap.pb-c.h
    NOTE: Compilation of scanner.c can take several minutes!
    make  all-recursive
    make[2]: Entering directory '/tmp/knot-3.0.0/src'
    make[3]: Entering directory '/tmp/knot-3.0.0/src'
      CC       libdnssec/la-tsig.lo
      CC       utils/kdig/khost-kdig_exec.o
      CC       utils/kdig/khost-kdig_params.o
      CC       utils/kdig/kdig-kdig_exec.o
      CC       utils/kdig/kdig-kdig_main.o
      CC       utils/kdig/kdig-kdig_params.o
      CC       utils/common/libknotus_la-cert.lo
      CC       utils/common/libknotus_la-exec.lo
      CC       utils/common/libknotus_la-hex.lo
      CC       utils/common/libknotus_la-https.lo
      CC       utils/common/libknotus_la-lookup.lo
      CC       utils/common/libknotus_la-msg.lo
    In file included from ./utils/common/netio.h:23,
                     from ./utils/common/exec.h:21,
                     from ./utils/kdig/kdig_params.h:22,
                     from ./utils/kdig/kdig_exec.h:19,
                     from utils/kdig/kdig_exec.c:22:
    ./utils/common/https.h:45:10: fatal error: nghttp2/nghttp2.h: No such file or directory
       45 | #include <nghttp2/nghttp2.h>
          |          ^~~~~~~~~~~~~~~~~~~
    compilation terminated.
    In file included from ./utils/common/netio.h:23,
                     from ./utils/common/exec.h:21,
                     from ./utils/kdig/kdig_params.h:22,
                     from utils/kdig/kdig_params.c:23:
    ./utils/common/https.h:45:10: fatal error: nghttp2/nghttp2.h: No such file or directory
       45 | #include <nghttp2/nghttp2.h>
          |          ^~~~~~~~~~~~~~~~~~~
    compilation terminated.
    make[3]: *** [Makefile:5500: utils/kdig/khost-kdig_exec.o] Error 1
    make[3]: *** Waiting for unfinished jobs....
    make[3]: *** [Makefile:5514: utils/kdig/khost-kdig_params.o] Error 1
    In file included from ./utils/common/netio.h:23,
                     from ./utils/common/exec.h:21,
                     from ./utils/kdig/kdig_params.h:22,
                     from utils/kdig/kdig_main.c:20:
    ./utils/common/https.h:45:10: fatal error: nghttp2/nghttp2.h: No such file or directory
       45 | #include <nghttp2/nghttp2.h>
          |          ^~~~~~~~~~~~~~~~~~~
    compilation terminated.
    make[3]: *** [Makefile:5416: utils/kdig/kdig-kdig_main.o] Error 1
    In file included from ./utils/common/netio.h:23,
                     from ./utils/common/exec.h:21,
                     from ./utils/kdig/kdig_params.h:22,
                     from ./utils/kdig/kdig_exec.h:19,
                     from utils/kdig/kdig_exec.c:22:
    ./utils/common/https.h:45:10: fatal error: nghttp2/nghttp2.h: No such file or directory
       45 | #include <nghttp2/nghttp2.h>
          |          ^~~~~~~~~~~~~~~~~~~
    compilation terminated.
    In file included from ./utils/common/netio.h:23,
                     from ./utils/common/exec.h:21,
                     from ./utils/kdig/kdig_params.h:22,
                     from utils/kdig/kdig_params.c:23:
    ./utils/common/https.h:45:10: fatal error: nghttp2/nghttp2.h: No such file or directory
       45 | #include <nghttp2/nghttp2.h>
          |          ^~~~~~~~~~~~~~~~~~~
    compilation terminated.
    make[3]: *** [Makefile:5402: utils/kdig/kdig-kdig_exec.o] Error 1
    make[3]: *** [Makefile:5430: utils/kdig/kdig-kdig_params.o] Error 1
    make[3]: Leaving directory '/tmp/knot-3.0.0/src'
    make[2]: *** [Makefile:5950: all-recursive] Error 1
    make[2]: Leaving directory '/tmp/knot-3.0.0/src'
    make[1]: *** [Makefile:2046: all] Error 2
    make[1]: Leaving directory '/tmp/knot-3.0.0/src'
    make: *** [Makefile:491: all-recursive] Error 1

5 years agokjournalprint: use proper include to avoid compilation issues with gnutls/libnghttp2...
Daniel Salzman [Thu, 10 Sep 2020 08:28:50 +0000 (10:28 +0200)] 
kjournalprint: use proper include to avoid compilation issues with gnutls/libnghttp2 headers

5 years agodnssec validation: dont crash if unsigned zone
Libor Peltan [Wed, 9 Sep 2020 14:12:40 +0000 (16:12 +0200)] 
dnssec validation: dont crash if unsigned zone

5 years agodnssec: don't crash if no policy is configured
Daniel Salzman [Wed, 9 Sep 2020 13:55:08 +0000 (15:55 +0200)] 
dnssec: don't crash if no policy is configured

5 years agoaxfr: split multi-mesage responses to 16kib -- compression
Libor Peltan [Mon, 7 Sep 2020 15:42:31 +0000 (17:42 +0200)] 
axfr: split multi-mesage responses to 16kib -- compression

5 years agoBump version 3.1.dev v3.1.dev
Daniel Salzman [Wed, 9 Sep 2020 08:02:04 +0000 (10:02 +0200)] 
Bump version 3.1.dev

5 years agoNEWS: update bugfixes
Daniel Salzman [Tue, 8 Sep 2020 13:24:43 +0000 (15:24 +0200)] 
NEWS: update bugfixes

5 years agoMerge branch 'cross_msg_compr' into 'master'
Daniel Salzman [Tue, 8 Sep 2020 13:12:50 +0000 (15:12 +0200)] 
Merge branch 'cross_msg_compr' into 'master'

Bugfix: cross-message-compression

See merge request knot/knot-dns!1174

5 years agolibknot: bugfix: dont compress across multi-message response
Libor Peltan [Mon, 7 Sep 2020 15:43:11 +0000 (17:43 +0200)] 
libknot: bugfix: dont compress across multi-message response

5 years agotests: added test of cross-message-compression
Libor Peltan [Tue, 8 Sep 2020 11:19:07 +0000 (13:19 +0200)] 
tests: added test of cross-message-compression

5 years agodoc: mention XDP mode requirements in the main requirements section
David Vašek [Mon, 7 Sep 2020 15:01:24 +0000 (17:01 +0200)] 
doc: mention XDP mode requirements in the main requirements section

Point out that the XDP mode is only available on Linux OS's.

5 years agotests: fix possible NULL pointer dereference (Clang analyzer)
Daniel Salzman [Mon, 7 Sep 2020 13:18:13 +0000 (15:18 +0200)] 
tests: fix possible NULL pointer dereference (Clang analyzer)

5 years agotest_rdataset: Comparsion of null reference fix (Clang analyzer)
Jan Hak [Fri, 4 Sep 2020 12:50:32 +0000 (14:50 +0200)] 
test_rdataset: Comparsion of null reference fix (Clang analyzer)

5 years agoMerge branch 'restore_expired_zone' into 'master'
Daniel Salzman [Mon, 7 Sep 2020 12:10:02 +0000 (14:10 +0200)] 
Merge branch 'restore_expired_zone' into 'master'

zone backup: fix restoring expired zone

See merge request knot/knot-dns!1172

5 years agozone backup: fix restoring expired zone
Libor Peltan [Mon, 7 Sep 2020 08:37:13 +0000 (10:37 +0200)] 
zone backup: fix restoring expired zone

5 years agodoc: update introduction
Daniel Salzman [Fri, 4 Sep 2020 09:09:23 +0000 (11:09 +0200)] 
doc: update introduction

5 years agoNEWS: add version 3.0.0
Daniel Salzman [Thu, 3 Sep 2020 11:32:16 +0000 (13:32 +0200)] 
NEWS: add version 3.0.0

5 years agoNEWS: synchronize with 2.9 branch
Daniel Salzman [Thu, 3 Sep 2020 11:27:25 +0000 (13:27 +0200)] 
NEWS: synchronize with 2.9 branch

5 years agodoc/migration: add query module API change
Daniel Salzman [Thu, 3 Sep 2020 12:24:03 +0000 (14:24 +0200)] 
doc/migration: add query module API change

5 years agocontrib/sockaddr: abandon __POSIX_VISIBLE define
David Vašek [Thu, 27 Aug 2020 13:46:48 +0000 (15:46 +0200)] 
contrib/sockaddr: abandon __POSIX_VISIBLE define

Forced define of __POSIX_VISIBLE is no longer needed. Default
__POSIX_VISIBLE has been at least 200112 on all supported platforms
for many years. In fact, the default is much higher today.

5 years agotests/requestor: repair broken test on FreeBSD
David Vašek [Thu, 27 Aug 2020 13:05:52 +0000 (15:05 +0200)] 
tests/requestor: repair broken test on FreeBSD

Both KNOT_ECONN and KNOT_ECONNREFUSED are acceptable on BSD's.

This fix compensates for a change introduced in the commit
83e07d9262d1f3bfa92e3a6d25200804e7ac486b.

5 years agodoc/conf: unify section items order
Daniel Salzman [Thu, 27 Aug 2020 13:28:42 +0000 (15:28 +0200)] 
doc/conf: unify section items order

5 years agodoc: sort sections in the reference to be the same as in the program
Daniel Salzman [Thu, 27 Aug 2020 13:00:11 +0000 (15:00 +0200)] 
doc: sort sections in the reference to be the same as in the program

5 years agolibdnssec: make privkey_export_x509 static
Daniel Salzman [Thu, 27 Aug 2020 12:15:27 +0000 (14:15 +0200)] 
libdnssec: make privkey_export_x509 static

5 years agocontrib: fix proper Knot build on OpenBSD
David Vašek [Wed, 26 Aug 2020 18:17:10 +0000 (20:17 +0200)] 
contrib: fix proper Knot build on OpenBSD

Fixes a compatibility bug introduced by a commit named
  "BSD compatibility fixes, not yet fully ported."
more than 9 years ago.

5 years agolibdnssec: add workaround for missing gnutls_privkey_export_x509() on CentOS 7
Daniel Salzman [Thu, 27 Aug 2020 11:03:16 +0000 (13:03 +0200)] 
libdnssec: add workaround for missing gnutls_privkey_export_x509() on CentOS 7

5 years agoMerge branch 'various_tests' into 'master'
Daniel Salzman [Thu, 27 Aug 2020 09:42:53 +0000 (11:42 +0200)] 
Merge branch 'various_tests' into 'master'

Various tests

See merge request knot/knot-dns!1171

5 years agotests/catalog interpret: also try with onlinesign module
Libor Peltan [Wed, 26 Aug 2020 15:27:48 +0000 (17:27 +0200)] 
tests/catalog interpret: also try with onlinesign module

5 years agotest/backup: precise time waiting for expire
Libor Peltan [Wed, 26 Aug 2020 09:24:09 +0000 (11:24 +0200)] 
test/backup: precise time waiting for expire

5 years agolibknot: reorganize errcodes
Daniel Salzman [Wed, 26 Aug 2020 13:02:29 +0000 (15:02 +0200)] 
libknot: reorganize errcodes

5 years agobackup: fix memory leak (Coverity)
Daniel Salzman [Wed, 26 Aug 2020 12:50:54 +0000 (14:50 +0200)] 
backup: fix memory leak (Coverity)

5 years agobackup: tiny code improvements (Coverity)
Daniel Salzman [Wed, 26 Aug 2020 12:19:10 +0000 (14:19 +0200)] 
backup: tiny code improvements (Coverity)

5 years agobackup: check return from mkdir and fix TOETOU (Coverity)
Daniel Salzman [Wed, 26 Aug 2020 12:04:44 +0000 (14:04 +0200)] 
backup: check return from mkdir and fix TOETOU (Coverity)

5 years agolibdnssec: remove unmaintained API examples
Daniel Salzman [Wed, 26 Aug 2020 11:33:34 +0000 (13:33 +0200)] 
libdnssec: remove unmaintained API examples

5 years agolibdnssec: increment SOVERSION, update symbols
Daniel Salzman [Wed, 26 Aug 2020 11:09:39 +0000 (13:09 +0200)] 
libdnssec: increment SOVERSION, update symbols

5 years agoMerge branch 'deterministic_dsa' into 'master'
Daniel Salzman [Wed, 26 Aug 2020 09:25:28 +0000 (11:25 +0200)] 
Merge branch 'deterministic_dsa' into 'master'

Deterministic dsa

See merge request knot/knot-dns!1127

5 years agoreproducible sign: ED* algorithms are always reproducible
Libor Peltan [Tue, 25 Aug 2020 15:17:54 +0000 (17:17 +0200)] 
reproducible sign: ED* algorithms are always reproducible

5 years agodnssec: enable speedup of rrsig validation by deterministic ECDSA
Libor Peltan [Thu, 30 Apr 2020 12:25:56 +0000 (14:25 +0200)] 
dnssec: enable speedup of rrsig validation by deterministic ECDSA

5 years agotest: skip deterministic DSA if gnutls old
Libor Peltan [Tue, 28 Apr 2020 11:40:55 +0000 (13:40 +0200)] 
test: skip deterministic DSA if gnutls old

5 years agodnssec: implemented DSA deterministic signing
Libor Peltan [Fri, 24 Apr 2020 10:48:16 +0000 (12:48 +0200)] 
dnssec: implemented DSA deterministic signing

5 years agoMerge branch 'zone_backup' into 'master'
Daniel Salzman [Wed, 26 Aug 2020 07:42:40 +0000 (09:42 +0200)] 
Merge branch 'zone_backup' into 'master'

implemented zone data backup

See merge request knot/knot-dns!1111

5 years agomodule: refactor module reset
Daniel Salzman [Mon, 24 Aug 2020 13:14:12 +0000 (15:14 +0200)] 
module: refactor module reset

5 years agobackup: don't consider global modules, which don't use DNSSEC policy + fixup
Daniel Salzman [Mon, 24 Aug 2020 11:28:25 +0000 (13:28 +0200)] 
backup: don't consider global modules, which don't use DNSSEC policy + fixup

5 years agoctl: set failed if backup in progress for some zones
Daniel Salzman [Mon, 24 Aug 2020 09:17:23 +0000 (11:17 +0200)] 
ctl: set failed if backup in progress for some zones

5 years agobackup: reset modules after restore
Libor Peltan [Thu, 20 Aug 2020 16:06:35 +0000 (18:06 +0200)] 
backup: reset modules after restore

5 years agobackup: fix keystore backup if onlinesign
Libor Peltan [Wed, 19 Aug 2020 09:00:43 +0000 (11:00 +0200)] 
backup: fix keystore backup if onlinesign

5 years agobackup: refactor context handling
Daniel Salzman [Mon, 17 Aug 2020 07:43:11 +0000 (09:43 +0200)] 
backup: refactor context handling

5 years agolibdnssec: rename dnssec_keystore_export() to dnssec_keystore_get_private()
Daniel Salzman [Wed, 12 Aug 2020 12:10:24 +0000 (14:10 +0200)] 
libdnssec: rename dnssec_keystore_export() to dnssec_keystore_get_private()

5 years agocatalog: log catalog update
Libor Peltan [Mon, 27 Jul 2020 16:41:27 +0000 (18:41 +0200)] 
catalog: log catalog update

5 years agobackup: implemented catalog database backup
Libor Peltan [Mon, 27 Jul 2020 16:41:20 +0000 (18:41 +0200)] 
backup: implemented catalog database backup

5 years agozone: modified file_overwrite()
David Vašek [Mon, 6 Apr 2020 13:09:13 +0000 (15:09 +0200)] 
zone: modified file_overwrite()

Made to match already existing zonefile_write(). First create the file,
then move it to its place.

5 years agodoc: remove kasp db import/export topic
Libor Peltan [Fri, 27 Mar 2020 17:09:10 +0000 (18:09 +0100)] 
doc: remove kasp db import/export topic

5 years agoctl: add zone-backup and zone-restore to help
Daniel Salzman [Tue, 25 Aug 2020 19:02:32 +0000 (21:02 +0200)] 
ctl: add zone-backup and zone-restore to help

5 years agoimplemented zone data backup
Libor Peltan [Fri, 20 Mar 2020 11:39:30 +0000 (12:39 +0100)] 
implemented zone data backup

5 years agomod-onlinesign: refactor array access to mute gcc warning out of bounds access
Jan Hak [Tue, 25 Aug 2020 12:47:23 +0000 (14:47 +0200)] 
mod-onlinesign: refactor array access to mute gcc warning out of bounds access

5 years agodoc/knotc: describe the meaning of the OK response, improve zone-freeze
David Vašek [Mon, 24 Aug 2020 12:03:34 +0000 (14:03 +0200)] 
doc/knotc: describe the meaning of the OK response, improve zone-freeze

5 years agodoc: add default policy value to module onlinesign
Daniel Salzman [Sun, 23 Aug 2020 18:36:10 +0000 (20:36 +0200)] 
doc: add default policy value to module onlinesign

5 years agoMerge branch 'validate_no_conf' into 'master'
Daniel Salzman [Fri, 21 Aug 2020 10:26:47 +0000 (12:26 +0200)] 
Merge branch 'validate_no_conf' into 'master'

DNSSEC validation: don't require configured policy

See merge request knot/knot-dns!1170

5 years agocontents: remove obsolete note at zone_contents_get_nsec3_node()
Daniel Salzman [Fri, 21 Aug 2020 08:42:32 +0000 (10:42 +0200)] 
contents: remove obsolete note at zone_contents_get_nsec3_node()

5 years agodnssec validation: only take signing-threads from config policy
Libor Peltan [Wed, 19 Aug 2020 20:01:40 +0000 (22:01 +0200)] 
dnssec validation: only take signing-threads from config policy

5 years agodnssec validation: always enable NSEC3 opt-out, but validate its correctness
Libor Peltan [Wed, 19 Aug 2020 18:37:30 +0000 (20:37 +0200)] 
dnssec validation: always enable NSEC3 opt-out, but validate its correctness

5 years agodnssec validation: don't require configured policy
Libor Peltan [Tue, 18 Aug 2020 17:38:56 +0000 (19:38 +0200)] 
dnssec validation: don't require configured policy

5 years agoctl: define an error code for multi-zone operation failure
David Vašek [Thu, 20 Aug 2020 13:00:58 +0000 (15:00 +0200)] 
ctl: define an error code for multi-zone operation failure

5 years agoctl: allow joint error reporting when taking an action for all zones
David Vašek [Wed, 19 Aug 2020 16:42:21 +0000 (18:42 +0200)] 
ctl: allow joint error reporting when taking an action for all zones

Currently used for the "zone-flush" action only.
Note: an error code for this purpose is to be created when reordering error codes in libknot.

5 years agoctl: improve logging of zone-flush errors when outdir is specified
David Vašek [Fri, 14 Aug 2020 14:34:46 +0000 (16:34 +0200)] 
ctl: improve logging of zone-flush errors when outdir is specified

5 years agokxdpgun: make TRANSACTION_ID random but constant per program execution
Daniel Salzman [Tue, 18 Aug 2020 18:11:26 +0000 (20:11 +0200)] 
kxdpgun: make TRANSACTION_ID random but constant per program execution

5 years agoMerge branch 'tests_extra_updates_04' into 'master'
Daniel Salzman [Tue, 18 Aug 2020 13:25:42 +0000 (15:25 +0200)] 
Merge branch 'tests_extra_updates_04' into 'master'

Tests extra updates 04

See merge request knot/knot-dns!1169

5 years agotests-extra: bring back logging of DDNS updates contents
David Vašek [Mon, 17 Aug 2020 13:33:06 +0000 (15:33 +0200)] 
tests-extra: bring back logging of DDNS updates contents

5 years agotests-extra: fix generation of random DDNS updates
David Vašek [Mon, 17 Aug 2020 11:34:38 +0000 (13:34 +0200)] 
tests-extra: fix generation of random DDNS updates

Properly test for zone apex's name.
Also, improve readability of the code by using symbolic name for a record owner.

5 years agokzonesign: fix warning about improper printf() formatter
Daniel Salzman [Mon, 17 Aug 2020 13:53:01 +0000 (15:53 +0200)] 
kzonesign: fix warning about improper printf() formatter

5 years agoMerge branch 'distrotests-fix-perms' into 'master'
Daniel Salzman [Mon, 17 Aug 2020 12:59:52 +0000 (14:59 +0200)] 
Merge branch 'distrotests-fix-perms' into 'master'

distro/tests: fix file permissions set by ansible

See merge request knot/knot-dns!1167

5 years agodistro/tests: fix file permissions set by ansible
Tomas Krizek [Mon, 17 Aug 2020 12:20:54 +0000 (14:20 +0200)] 
distro/tests: fix file permissions set by ansible

Ansible switched default file perm to 600 from more permissive 666.
Add file mode explicitly to avoid issues.

6 years agodistro/deb: fix symbols for Stretch
Daniel Salzman [Fri, 14 Aug 2020 11:58:04 +0000 (13:58 +0200)] 
distro/deb: fix symbols for Stretch