Simon Kelley
c49778df4a
Update copyright notices. Happy new year!
2016-01-06 18:52:33 +00:00
Simon Kelley
15379ea1f2
Log signature algo with DNSKEY and DS, also digest with DS.
2015-12-21 18:31:55 +00:00
Simon Kelley
93be5b1e02
Abandon caching RRSIGs and returning them from cache.
...
The list of exceptions to being able to locally answer
cached data for validated records when DNSSEC data is requested
was getting too long, so don't ever do that. This means
that the cache no longer has to hold RRSIGS and allows
us to lose lots of code. Note that cached validated
answers are still returned as long as do=0
2015-12-15 12:04:40 +00:00
Edwin Török
41a8d9e99b
Fix crash when empty address from DNS overlays A record from hosts.
2015-11-14 17:55:41 +00:00
Simon Kelley
04b0ac0537
Fix crash caused by looking up servers.bind when many servers defined.
2015-04-06 17:19:13 +01:00
Simon Kelley
794fccca7f
Fix crash in last commit.
2015-03-29 22:35:44 +01:00
Simon Kelley
394ff492da
Allow control characters in names in the cache, handle when logging.
2015-03-29 22:17:14 +01:00
Simon Kelley
caeea190f1
Make dynamic hosts files work when --no-hosts set.
2015-02-14 20:08:56 +00:00
Simon Kelley
f9c863708c
Extra logging for inotify code.
2015-02-03 21:52:48 +00:00
Simon Kelley
aff3396280
Update copyrights for dawn of 2015.
2015-01-31 20:13:40 +00:00
Simon Kelley
70d1873dd9
Expand inotify code to dhcp-hostsdir, dhcp-optsdir and hostsdir.
2015-01-31 19:59:29 +00:00
Simon Kelley
9f79ee4ae3
Log port of requestor when doing extra logging.
2015-01-12 20:18:18 +00:00
RinSatsuki
28de38768e
Add --min-cache-ttl option.
2015-01-10 15:22:21 +00:00
Simon Kelley
25cf5e373e
Add --log-queries=extra option for more complete logging.
2015-01-09 15:53:03 +00:00
Simon Kelley
cbc6524234
Make caching work for CNAMEs pointing to A/AAAA records shadowed in /etc/hosts
...
If the answer to an upstream query is a CNAME which points to an
A/AAAA record which also exists in /etc/hosts and friends, then
caching is suppressed, to avoid inconsistent answers. This is
now modified to allow caching when the upstream and local A/AAAA
records have the same value.
2014-12-21 21:21:53 +00:00
Simon Kelley
3267804598
Tweak field width in cache dump to avoid truncating IPv6 addresses.
2014-12-17 20:38:20 +00:00
Simon Kelley
288df49c96
Fix bug when resulted in NXDOMAIN answers instead of NODATA.
...
check_for_local_domain() was broken due to new code matching F_*
bits in cache entries for DNSSEC. Because F_DNSKEY | F_DS is
used to match RRSIG entries, cache_find_by_name() insists on an exact match
of those bits. So adding F_DS to the bits that check_for_local_domain()
sends to cache_find_by_name() won't result in DS records as well
as the others, it results in only DS records. Add a new bit, F_NSIGMATCH
which suitably changes the behaviour of cache_find_by_name().
2014-09-18 21:55:27 +01:00
Wang Jian
49752b90d5
Log IPSET actions.
2014-03-28 20:52:47 +00:00
Simon Kelley
fec216df32
Cache stats availble in CHAOS .bind domain.
2014-03-27 20:54:34 +00:00
Andy
3e21a1a6fa
Tidy uid defines.
2014-03-22 19:10:07 +00:00
Simon Kelley
19c51cfa49
Tidy and fix cache->uid handling.
...
Some CNAMES left the value of ->uid undefined.
Since there are now special values if this, for CNAMES
to interface names, that could cause a crash
if the undefined value hit the special value.
Also ensure that the special value can't arise
when the uid is encoding the source of an F_CONFIG
record, in case there's a CNAME to it.
2014-03-18 22:38:30 +00:00
Andy
d5082158ee
Ensure next_uid() can never return 0.
2014-03-17 19:50:29 +00:00
Simon Kelley
3f7483e816
Handle integer overflow in uid counter. Fixes rare crashes in cache code.
2014-03-16 22:56:58 +00:00
Simon Kelley
e3f1455850
Don't free blockdata for negative DS cache entries.
2014-03-01 17:58:28 +00:00
Simon Kelley
b8eac19177
Negative caching for DS records.
2014-02-27 14:30:03 +00:00
Simon Kelley
a0ab18f6eb
Don't mess with the TTL of DNSSEC RRs.
2014-02-13 16:38:23 +00:00
Simon Kelley
ee4158678a
Use DS records as trust anchors, not DNSKEYs.
...
This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.
2014-02-11 11:07:22 +00:00
Simon Kelley
c8ca33f810
Fix DNSSEC caching problems: incomplete RRSIG RRsets.
2014-02-10 10:35:42 +00:00
Simon Kelley
610e782a29
Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch.
2014-02-06 14:45:17 +00:00
Simon Kelley
12fae49fff
Make RR work when returning A/AAAA records and an RRSIG.
2014-02-04 22:03:06 +00:00
Simon Kelley
40b695c1f1
Log NXDOMAIN correctly.
2014-02-03 17:07:51 +00:00
Simon Kelley
5f938534a9
Return configured DNSKEYs even though we don't have RRSIGS for them.
2014-02-03 16:44:32 +00:00
Simon Kelley
8d718cbb3e
Nasty cache failure and memory leak with DNSSEC.
2014-02-03 16:27:37 +00:00
Simon Kelley
82e3f45a9f
Blockdata fixes and tuning.
2014-01-31 21:05:48 +00:00
Simon Kelley
072e81b3c5
Blockdata leak.
2014-01-31 12:42:54 +00:00
Simon Kelley
583043f527
Crash in cache code when compiled with HAVE_DNSSEC.
2014-01-28 14:54:46 +00:00
Simon Kelley
cbf13a2a6d
Class specifier in --dnskey, instead of hardwiring C_IN.
2014-01-25 17:59:14 +00:00
Simon Kelley
2d33bda2e6
RRSIGS for PTR records from cache.
2014-01-24 22:37:25 +00:00
Simon Kelley
bce6e1bc6d
RRSIGs in DS and DNSKEY cached answers.
2014-01-23 22:02:19 +00:00
Simon Kelley
824202ef54
More DNSSEC cache readout.
2014-01-23 20:59:46 +00:00
Simon Kelley
6429e421b3
Compiler warning.
2014-01-23 12:09:36 +00:00
Simon Kelley
e7829aefd8
Cache RRSIGS.
2014-01-22 22:21:51 +00:00
Simon Kelley
51ea3ca254
Caching of DNSSEC records.
2014-01-22 19:31:38 +00:00
Simon Kelley
4f04476e3b
Set AD bit for address replies from /etc/hosts &c
2014-01-10 12:20:38 +00:00
Simon Kelley
c2207688c0
Memory stats for DNSSEC.
2014-01-08 18:04:20 +00:00
Simon Kelley
98c098bfc7
Move blockdata to it's own file.
2014-01-08 17:31:16 +00:00
Simon Kelley
c47e3ba446
Update copyright for 2014.
2014-01-08 17:07:54 +00:00
Simon Kelley
0fc2f31368
First functional DNSSEC - highly alpha.
2014-01-08 10:26:58 +00:00
Simon Kelley
c3e0b9b6e7
backup
2013-12-31 13:50:39 +00:00
Simon Kelley
c352dd8f1a
Merge branch 'master' into dnssec
2013-12-12 12:16:17 +00:00
