629 Commits

Author	SHA1	Message	Date
Giovanni Bajo	20bccd499f	Rework the loop a little (no functionality changes)	2013-08-20 15:41:20 +01:00
Giovanni Bajo	708bcd2dd3	Call valg verify functions (unimplemented for now)	2013-08-20 15:41:20 +01:00
Giovanni Bajo	d0edff7d6e	Insert all DNSKEY/DS records into cache in one transaction.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	ccca70cb33	Change some logging messages.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	0d829ebc69	Skip non-signing keys	2013-08-20 15:41:20 +01:00
Giovanni Bajo	4137b84e4e	Postpone RRSIG processing after all DNSKEY/DS have been parsed.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	e6c2a670fe	Before using a key for validation, also verify that algorithm matches.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	47f99dd2b3	Fix argument in dnssec_parsekey() call.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	6759b99e28	Add function to extract algorithm number from context.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	3471f18130	Start parsing DNSKEY records and insert them into cache.	2013-08-20 15:41:20 +01:00
Giovanni Bajo	2ef843dd16	extract_name_no_compression: strip trailing dot.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	ce2a0f5a6a	Macros to simplify tentative parsing.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	adca3e9c4b	Refactor to use new VerifyAlg context, and start implementing logic for querying DNSKEYs.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	366dfcb907	Explicitize the context of verification algorithm.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	28c625572b	Move general macros in dnsmasq.h	2013-08-20 15:41:19 +01:00
Giovanni Bajo	02f9b76418	Rename key cache field.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	ba8badd6df	Fix bug in keydata_alloc()	2013-08-20 15:41:19 +01:00
Giovanni Bajo	0decc869ae	Fix rrset qsort comparison function.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	b573aebc09	Add skeleton for RSASHA256.	2013-08-20 15:41:19 +01:00
Giovanni Bajo	d31d057aa3	Remove useless endian-conversion after GETLONG().	2013-08-20 15:41:18 +01:00
Giovanni Bajo	6445c8ed73	Fix off-by-one in iteration.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	382e38f494	Specify the correct place where to canonicalize RR within RRset.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	9940aba9f6	Initial openssl RSASHA1 implementation (only SHA1 for now).	2013-08-20 15:41:18 +01:00
Giovanni Bajo	7e846b9858	Add openssl support to build machinery.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	d322de0613	Further abstract API of verify crypto.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	b98f771519	Filter out invalid characters in domain names.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	c7a93f6e4e	Skip trailing \0 in domain name.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	970ce22b68	Augment verify algorithm table.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	e292e93d35	Initial dnssec structure.	2013-08-20 15:41:18 +01:00
Giovanni Bajo	fa164d459f	DNSSEC validation require EDNS0, force larger packet size.	2013-08-20 15:41:17 +01:00
Giovanni Bajo	f53c79c01b	Externalize dns parsing functions.	2013-08-20 15:41:17 +01:00
Giovanni Bajo	7dbe193bee	Add run-time options to activate dnssec validation.	2013-08-20 15:41:17 +01:00
Giovanni Bajo	a669f012dd	Add dnssec RR types	2013-08-20 15:39:44 +01:00
Giovanni Bajo	237724c0c7	Rename existing DNSSEC macros into DNSSEC_PROXY.	2013-08-20 15:39:44 +01:00
Giovanni Bajo	53f84c7f62	Add compile-time macro for DNSSEC support.	2013-08-20 15:39:43 +01:00
Simon Kelley	6692a1a53f	Fix dhcp-range sanity checking.	2013-08-20 14:41:31 +01:00
Simon Kelley	a37cd7aaf5	Use tags from pxe-proxy dhcp-range statements.	2013-08-20 10:33:32 +01:00
Vladislav Grishenko	e4cdbbf521	Allow prefix :: in constructed dhcp-range.	2013-08-19 16:20:31 +01:00
Vladislav Grishenko	4568a6f842	IFACE_PERMANENT interface flag in enumeration.	2013-08-19 16:07:07 +01:00
Simon Kelley	5c72bb9e33	Silence compiler warning.	2013-08-19 14:12:59 +01:00
Vladislav Grishenko	8c3bdb4ffc	Add code to get IPv6 address lifetimes and flags for *BSD.	2013-08-19 14:04:38 +01:00
Simon Kelley	ffbad34b31	Set SOREUSEADDR as well as SOREUSEPORT on DHCP sockets when both available.	2013-08-14 15:53:57 +01:00
Simon Kelley	cc4baaab0d	Fix DHCPv6 lease time calculation when client sends VL==0 or PL==0	2013-08-05 15:03:44 +01:00
Simon Kelley	66409193dc	Sanity check for dhcp-range template.	2013-08-01 20:19:32 +01:00
Simon Kelley	2937f8a040	Provide independent control over which interfaces get TFTP.	2013-07-29 19:49:07 +01:00
Simon Kelley	edf0bde0c6	Make --listen-address higher priority than --except-interface.	2013-07-29 17:21:48 +01:00
Simon Kelley	8d03046269	Add --force-fast-ra option.	2013-07-29 15:41:26 +01:00
Simon Kelley	9f48ffa1e8	Apply ceiling of configured dhcp-range leasetime to deprecated prefix adverts.	2013-07-28 15:47:04 +01:00
Simon Kelley	871d4562f1	Support RFC-4242 information-refresh-time.	2013-07-28 09:37:38 +01:00
Simon Kelley	0f371f9e1a	Remove dead code.	2013-07-27 15:15:38 +01:00