783 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Giovanni Bajo	13e435ebca	Bugfix: domain names must go through hash function in DNS format (but uncompressed!)	2013-08-20 15:41:21 +01:00
Giovanni Bajo	4b0eecbb44	Bugfix: rdata flags must go through hash function in network byte order.	2013-08-20 15:41:21 +01:00
Giovanni Bajo	0360a524df	Implement RSA verification.	2013-08-20 15:41:21 +01:00
Giovanni Bajo	262ac85107	verify() function must take a keydata chained buffer for input key.	2013-08-20 15:41:21 +01:00
Giovanni Bajo	4c70046d93	Move helper functions to common header file.	2013-08-20 15:41:21 +01:00
Giovanni Bajo	458824dcb4	Helper function to walk through keydata chained blocks.	2013-08-20 15:41:21 +01:00
Giovanni Bajo	a7338645d7	Add a FIXME for missing logic.	2013-08-20 15:41:21 +01:00
Giovanni Bajo	776fd04754	Add cast to silence warning.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	20bccd499f	Rework the loop a little (no functionality changes)	2013-08-20 15:41:20 +01:00
Giovanni Bajo	708bcd2dd3	Call valg verify functions (unimplemented for now)	2013-08-20 15:41:20 +01:00
Giovanni Bajo	d0edff7d6e	Insert all DNSKEY/DS records into cache in one transaction.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	ccca70cb33	Change some logging messages.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	0d829ebc69	Skip non-signing keys	2013-08-20 15:41:20 +01:00
Giovanni Bajo	4137b84e4e	Postpone RRSIG processing after all DNSKEY/DS have been parsed.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	e6c2a670fe	Before using a key for validation, also verify that algorithm matches.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	47f99dd2b3	Fix argument in dnssec_parsekey() call.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	6759b99e28	Add function to extract algorithm number from context.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	3471f18130	Start parsing DNSKEY records and insert them into cache.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	2ef843dd16	extract_name_no_compression: strip trailing dot.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	ce2a0f5a6a	Macros to simplify tentative parsing.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	adca3e9c4b	Refactor to use new VerifyAlg context, and start implementing logic for querying DNSKEYs.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	366dfcb907	Explicitize the context of verification algorithm.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	28c625572b	Move general macros in dnsmasq.h	2013-08-20 15:41:19 +01:00
Giovanni Bajo	02f9b76418	Rename key cache field.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	ba8badd6df	Fix bug in keydata_alloc()	2013-08-20 15:41:19 +01:00
Giovanni Bajo	0decc869ae	Fix rrset qsort comparison function.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	b573aebc09	Add skeleton for RSASHA256.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	d31d057aa3	Remove useless endian-conversion after GETLONG().	2013-08-20 15:41:18 +01:00
Giovanni Bajo	6445c8ed73	Fix off-by-one in iteration.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	382e38f494	Specify the correct place where to canonicalize RR within RRset.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	9940aba9f6	Initial openssl RSASHA1 implementation (only SHA1 for now).	2013-08-20 15:41:18 +01:00
Giovanni Bajo	7e846b9858	Add openssl support to build machinery.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	d322de0613	Further abstract API of verify crypto.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	b98f771519	Filter out invalid characters in domain names.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	c7a93f6e4e	Skip trailing \0 in domain name.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	970ce22b68	Augment verify algorithm table.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	e292e93d35	Initial dnssec structure.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	fa164d459f	DNSSEC validation require EDNS0, force larger packet size.	2013-08-20 15:41:17 +01:00
Giovanni Bajo	f53c79c01b	Externalize dns parsing functions.	2013-08-20 15:41:17 +01:00
Giovanni Bajo	7dbe193bee	Add run-time options to activate dnssec validation.	2013-08-20 15:41:17 +01:00
Giovanni Bajo	a669f012dd	Add dnssec RR types	2013-08-20 15:39:44 +01:00
Giovanni Bajo	237724c0c7	Rename existing DNSSEC macros into DNSSEC_PROXY.	2013-08-20 15:39:44 +01:00
Giovanni Bajo	53f84c7f62	Add compile-time macro for DNSSEC support.	2013-08-20 15:39:43 +01:00
Simon Kelley	6692a1a53f	Fix dhcp-range sanity checking.	2013-08-20 14:41:31 +01:00
Simon Kelley	a37cd7aaf5	Use tags from pxe-proxy dhcp-range statements.	2013-08-20 10:33:32 +01:00
Vladislav Grishenko	e4cdbbf521	Allow prefix :: in constructed dhcp-range.	2013-08-19 16:20:31 +01:00
Vladislav Grishenko	4568a6f842	IFACE_PERMANENT interface flag in enumeration.	2013-08-19 16:07:07 +01:00
Simon Kelley	5c72bb9e33	Silence compiler warning.	2013-08-19 14:12:59 +01:00
Vladislav Grishenko	8c3bdb4ffc	Add code to get IPv6 address lifetimes and flags for *BSD.	2013-08-19 14:04:38 +01:00
Simon Kelley	ffbad34b31	Set SOREUSEADDR as well as SOREUSEPORT on DHCP sockets when both available.	2013-08-14 15:53:57 +01:00