Simon Kelley
1d97ac4fd2
copy-n-paste error.
2014-01-31 11:12:27 +00:00
Simon Kelley
db73746620
Anounce DNSSEC at startup.
2014-01-31 10:32:45 +00:00
Simon Kelley
97bc798b05
Init ->dependent field in frec allocation.
2014-01-31 10:19:52 +00:00
Simon Kelley
edc231bc58
Compiler warning.
2014-01-31 09:52:50 +00:00
Simon Kelley
b85e092e23
Add a file containing current root trust anchors, for convenience.
2014-01-30 09:49:28 +00:00
Simon Kelley
583043f527
Crash in cache code when compiled with HAVE_DNSSEC.
2014-01-28 14:54:46 +00:00
Simon Kelley
8f6213cce9
Allow use of COPTS in Debian rules invokation for nefarious purposes.
2014-01-28 11:16:49 +00:00
Simon Kelley
00ec693db8
Debian package with DNSSEC now possible.
...
DNSSEC will eventually become opt-out and when that happens
I'll add libnettle build-depends. For now, build with
fakeroot debian/rules DEB_BUILD_OPTIONS=usednssec
to get DNSSEC support.
2014-01-28 11:08:57 +00:00
Simon Kelley
70b4a818ef
Man page entries for DNSSEC flags.
2014-01-27 22:38:48 +00:00
Simon Kelley
7c28612a59
Trivial format fix.
2014-01-27 21:38:11 +00:00
Simon Kelley
6f4681034e
Code tidy.
2014-01-26 23:39:17 +00:00
Simon Kelley
6938f3476e
Don't mark answers as DNSEC validated if DNS-doctored.
2014-01-26 22:47:39 +00:00
Simon Kelley
17fb9ea763
Exclude CRC code in DNSSEC build - replaced with SHA1.
2014-01-26 09:36:54 +00:00
Simon Kelley
7d23a66ff0
Remove --dnssec-permissive, pointless if we don't set CD upstream.
2014-01-26 09:33:21 +00:00
Simon Kelley
703c7ff429
Fix to last commit.
2014-01-25 23:46:23 +00:00
Simon Kelley
8a9be9e493
Replace CRC32 with SHA1 for spoof detection in DNSSEC builds.
2014-01-25 23:17:21 +00:00
Simon Kelley
c92f0083a2
Get AA flag right in DNSSEC answers from cache.
2014-01-25 18:43:59 +00:00
Simon Kelley
b5dbfd142a
RRSIG answer logging.
2014-01-25 18:19:51 +00:00
Simon Kelley
cbf13a2a6d
Class specifier in --dnskey, instead of hardwiring C_IN.
2014-01-25 17:59:14 +00:00
Simon Kelley
5b3bf92101
--dnssec-debug
2014-01-25 17:03:07 +00:00
Simon Kelley
0744ca66ad
More DNSSEC caching logic, and avoid repeated validation of DS/DNSKEY
2014-01-25 16:40:15 +00:00
Simon Kelley
2d33bda2e6
RRSIGS for PTR records from cache.
2014-01-24 22:37:25 +00:00
Simon Kelley
32f90c0fad
Tweak.
2014-01-24 10:37:36 +00:00
Simon Kelley
bce6e1bc6d
RRSIGs in DS and DNSKEY cached answers.
2014-01-23 22:02:19 +00:00
Simon Kelley
824202ef54
More DNSSEC cache readout.
2014-01-23 20:59:46 +00:00
Simon Kelley
9ebfca1e84
Compiler warning.
2014-01-23 12:11:43 +00:00
Simon Kelley
6429e421b3
Compiler warning.
2014-01-23 12:09:36 +00:00
Simon Kelley
c9bfa948c3
remove redundant headerage
2014-01-22 22:32:33 +00:00
Simon Kelley
e7829aefd8
Cache RRSIGS.
2014-01-22 22:21:51 +00:00
Simon Kelley
51ea3ca254
Caching of DNSSEC records.
2014-01-22 19:31:38 +00:00
Jonas Gorski
57ab36e77d
Tweak definition of a permanent IPv6 address on Linux.
...
The linux kernel treats all addresses with a limited lifetime as being
non permanent, but when taking over the prefix livetimes from
upstream assigned prefixes through DHCP, addresses will always have a limited
lifetime.
Still reject temporary addresses, as they indicate autoconfigured
interfaces.
Contributed by T-Labs, Deutsche Telekom Innovation Laboratories
Signed-off-by: Jonas Gorski<jogo@openwrt.org >
2014-01-22 11:34:16 +00:00
Simon Kelley
dd0e0a3995
Handle time_t wraparound more sanely.
2014-01-22 11:16:59 +00:00
Simon Kelley
6fd6dacb39
Fix loop in RR sort.
2014-01-21 20:17:40 +00:00
Simon Kelley
39048ad10b
bug fix, avoids infinite loop in forwarding code.
2014-01-21 17:33:58 +00:00
Simon Kelley
979cdf9b64
Fix to hostname_cmp, and update to canonicalisation table. RFC 4034 LIES.
2014-01-21 16:26:41 +00:00
Simon Kelley
dbf721235b
Rationalise hostname_cmp()
2014-01-21 14:28:02 +00:00
Simon Kelley
c979fa04a4
Provide for static library linking.
2014-01-21 13:45:17 +00:00
Simon Kelley
c5f4ec7d23
NSEC proof-of-non-existence.
2014-01-20 22:37:55 +00:00
Simon Kelley
5d3b87a484
Better handling of truncated DNSSEC replies.
2014-01-20 11:57:23 +00:00
Simon Kelley
72ae2f3d56
Don't validate error returns.
2014-01-19 09:54:16 +00:00
Simon Kelley
6c0cb858c1
Trivial format fix
2014-01-17 14:40:46 +00:00
Simon Kelley
e0c0ad3b5e
UDP retries for DNSSEC
2014-01-16 22:42:07 +00:00
Simon Kelley
4619d94622
Fix SEGV and failure to validate on x86_64.
2014-01-16 19:53:06 +00:00
Simon Kelley
0975a58e9b
Merge branch 'master' of ssh://central/var/cache/git/dnsmasq
2014-01-15 17:12:08 +00:00
Simon Kelley
a25720a34a
protocol handling for DNSSEC
2014-01-14 23:13:55 +00:00
Simon Kelley
cc111e0bab
Add ip6addr.h to Makefile list.
2014-01-13 21:38:19 +00:00
Simon Kelley
86bec2d399
Swap crypto library from openSSL to nettle.
2014-01-13 21:31:20 +00:00
Simon Kelley
a59ff5f3df
Merge branch 'master' of ssh://central/var/cache/git/dnsmasq
2014-01-12 22:36:12 +00:00
Simon Kelley
c3a04081ff
[fd00::} and [fe80::] special addresses in DHCPv6 options.
2014-01-11 22:18:19 +00:00
Simon Kelley
ae76242fdf
Fix missing RA RDNS option with --dhcp-option=option6:23,[::]
2014-01-10 18:15:16 +00:00