head	1.2;
access;
symbols
	RELENG_5_5_0_RELEASE:1.1.1.1.28.1
	RELENG_5_5:1.1.1.1.28.1.0.6
	RELENG_5_5_BP:1.1.1.1.28.1
	RELENG_5_4_0_RELEASE:1.1.1.1.28.1
	RELENG_5_4:1.1.1.1.28.1.0.4
	RELENG_5_4_BP:1.1.1.1.28.1
	RELENG_4_11_0_RELEASE:1.1.1.1
	RELENG_4_11:1.1.1.1.0.30
	RELENG_4_11_BP:1.1.1.1
	RELENG_5_3_0_RELEASE:1.1.1.1.28.1
	RELENG_5_3:1.1.1.1.28.1.0.2
	RELENG_5_3_BP:1.1.1.1.28.1
	RELENG_5:1.1.1.1.0.28
	RELENG_5_BP:1.1.1.1
	RELENG_4_10_0_RELEASE:1.1.1.1
	RELENG_4_10:1.1.1.1.0.26
	RELENG_4_10_BP:1.1.1.1
	RELENG_5_2_1_RELEASE:1.1.1.1
	RELENG_5_2_0_RELEASE:1.1.1.1
	RELENG_5_2:1.1.1.1.0.24
	RELENG_5_2_BP:1.1.1.1
	v8_3_7:1.1.1.1
	RELENG_4_9_0_RELEASE:1.1.1.1
	RELENG_4_9:1.1.1.1.0.22
	RELENG_4_9_BP:1.1.1.1
	v8_3_6:1.1.1.1
	RELENG_5_1_0_RELEASE:1.1.1.1
	RELENG_5_1:1.1.1.1.0.20
	RELENG_5_1_BP:1.1.1.1
	RELENG_4_8_0_RELEASE:1.1.1.1
	RELENG_4_8:1.1.1.1.0.18
	RELENG_4_8_BP:1.1.1.1
	v8_3_4:1.1.1.1
	RELENG_5_0_0_RELEASE:1.1.1.1
	RELENG_5_0:1.1.1.1.0.16
	RELENG_5_0_BP:1.1.1.1
	RELENG_4_7_0_RELEASE:1.1.1.1
	RELENG_4_7:1.1.1.1.0.14
	RELENG_4_7_BP:1.1.1.1
	RELENG_4_6_2_RELEASE:1.1.1.1
	RELENG_4_6_1_RELEASE:1.1.1.1
	v8_3_3:1.1.1.1
	RELENG_4_6_0_RELEASE:1.1.1.1
	RELENG_4_6:1.1.1.1.0.12
	RELENG_4_6_BP:1.1.1.1
	v8_3_2_t1b:1.1.1.1
	v8_3_1:1.1.1.1
	RELENG_4_5_0_RELEASE:1.1.1.1
	RELENG_4_5:1.1.1.1.0.10
	RELENG_4_5_BP:1.1.1.1
	RELENG_4_4_0_RELEASE:1.1.1.1
	RELENG_4_4:1.1.1.1.0.8
	RELENG_4_4_BP:1.1.1.1
	v8_2_4:1.1.1.1
	RELENG_4_3_0_RELEASE:1.1.1.1
	RELENG_4_3:1.1.1.1.0.6
	RELENG_4_3_BP:1.1.1.1
	v8_2_3:1.1.1.1
	RELENG_4_2_0_RELEASE:1.1.1.1
	v8_2_3_t6b:1.1.1.1
	RELENG_4_1_1_RELEASE:1.1.1.1
	PRE_SMPNG:1.1.1.1
	RELENG_4_1_0_RELEASE:1.1.1.1
	RELENG_3_5_0_RELEASE:1.1.1.1.2.1
	v8_2_3_t5b:1.1.1.1
	ISC:1.1.1
	RELENG_4_0_0_RELEASE:1.1.1.1
	RELENG_4:1.1.1.1.0.4
	RELENG_4_BP:1.1.1.1
	RELENG_3_4_0_RELEASE:1.1.1.1.2.1
	RELENG_3:1.1.1.1.0.2
	v8_2_2_p5:1.1.1.1;
locks; strict;
comment	@# @;


1.2
date	2004.09.24.19.48.35;	author des;	state dead;
branches;
next	1.1;

1.1
date	99.11.30.02.41.37;	author peter;	state Exp;
branches
	1.1.1.1;
next	;

1.1.1.1
date	99.11.30.02.41.37;	author peter;	state Exp;
branches
	1.1.1.1.2.1
	1.1.1.1.28.1;
next	;

1.1.1.1.2.1
date	99.12.13.15.04.18;	author peter;	state Exp;
branches;
next	;

1.1.1.1.28.1
date	2004.09.26.03.09.15;	author des;	state dead;
branches;
next	;


desc
@@


1.2
log
@Retire the BIND 8 sources.
@
text
@$Id: DNSSEC,v 8.2 1999/10/12 18:23:27 ogud Exp $

DNSSEC Notes:

This file contains description of two interoperabilty problems related
to DNSSEC that only affect sites using DNSSEC.

1. All versions of bind-8 older than 8.2.2 

Between versions 8.2.1 and 8.2.2 the printed format of SIG records
changed. As a result, using a signer, named and named-xfer of
differrent versions will cause parsing errors on signed zonefiles.
Included is an AWK program that converts old signed zone files to new 
new format, see contrib/dns_signer/add_labels.awk 
Usage: awk -f <path>/contrib/dns_signer/add_labels.awk <signed_zone >fixed_zone

2. BIND-8.1 BIND-8.1.1 BIND-8.1.2 Interoperability

If you wish to use BIND-8.1.x as a master server (either primary or
secondary) for DNSSEC signed zone you MUST apply the following patch
to the file src/bin/named/db_load.c. It fixes a bug that rejects
valid RSA signatures on load. 
You can patch the file by running following command from this directory 
	patch -d bin/named   <DNSSEC 

--- db_load.c.old	Mon Oct 11 15:21:24 1999
+++ db_load.c	Mon Oct 11 15:21:38 1999
@@@@ -1123,9 +1123,6 @@@@
 				ERRTO("Signature too short");
 			if (siglen > (NS_MD5RSA_MAX_BITS + 7) / 8)
 				ERRTO("Signature too long");
-			/* We rely on  cp  from parse */
-			if (*cp == 0)
-				ERRTO("Signature starts with zeroes");
 			break;
 
 		case NS_ALG_EXPIRE_ONLY:


@


1.1
log
@Initial revision
@
text
@@


1.1.1.1
log
@Import bind v8.2.2.p5, minus the crypto for the time being.  The bind
package does have BXA export approval, but the licensing strings on the
dnssafe code are a bit unpleasant.  The crypto is easy to restore and bind
will run without it - just without full dnssec support.

Obtained from:	The Internet Software Consortium (www.isc.org)
@
text
@@


1.1.1.1.28.1
log
@MFC: BIND 9 and related bits.

Approved by:	re
@
text
@@


1.1.1.1.2.1
log
@MFC: bind 8.2.2.p5

Urged by:	imp, alfred, and a whole bunch of other folks.
Approved by:	jkh (a few days ago)
@
text
@@

