Simon Kelley
ee4158678a
Use DS records as trust anchors, not DNSKEYs.
...
This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.
2014-02-11 11:07:22 +00:00
Simon Kelley
c8ca33f810
Fix DNSSEC caching problems: incomplete RRSIG RRsets.
2014-02-10 10:35:42 +00:00
Simon Kelley
610e782a29
Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch.
2014-02-06 14:45:17 +00:00
Simon Kelley
12fae49fff
Make RR work when returning A/AAAA records and an RRSIG.
2014-02-04 22:03:06 +00:00
Simon Kelley
40b695c1f1
Log NXDOMAIN correctly.
2014-02-03 17:07:51 +00:00
Simon Kelley
5f938534a9
Return configured DNSKEYs even though we don't have RRSIGS for them.
2014-02-03 16:44:32 +00:00
Simon Kelley
8d718cbb3e
Nasty cache failure and memory leak with DNSSEC.
2014-02-03 16:27:37 +00:00
Simon Kelley
82e3f45a9f
Blockdata fixes and tuning.
2014-01-31 21:05:48 +00:00
Simon Kelley
072e81b3c5
Blockdata leak.
2014-01-31 12:42:54 +00:00
Simon Kelley
583043f527
Crash in cache code when compiled with HAVE_DNSSEC.
2014-01-28 14:54:46 +00:00
Simon Kelley
cbf13a2a6d
Class specifier in --dnskey, instead of hardwiring C_IN.
2014-01-25 17:59:14 +00:00
Simon Kelley
2d33bda2e6
RRSIGS for PTR records from cache.
2014-01-24 22:37:25 +00:00
Simon Kelley
bce6e1bc6d
RRSIGs in DS and DNSKEY cached answers.
2014-01-23 22:02:19 +00:00
Simon Kelley
824202ef54
More DNSSEC cache readout.
2014-01-23 20:59:46 +00:00
Simon Kelley
6429e421b3
Compiler warning.
2014-01-23 12:09:36 +00:00
Simon Kelley
e7829aefd8
Cache RRSIGS.
2014-01-22 22:21:51 +00:00
Simon Kelley
51ea3ca254
Caching of DNSSEC records.
2014-01-22 19:31:38 +00:00
Simon Kelley
4f04476e3b
Set AD bit for address replies from /etc/hosts &c
2014-01-10 12:20:38 +00:00
Simon Kelley
c2207688c0
Memory stats for DNSSEC.
2014-01-08 18:04:20 +00:00
Simon Kelley
98c098bfc7
Move blockdata to it's own file.
2014-01-08 17:31:16 +00:00
Simon Kelley
c47e3ba446
Update copyright for 2014.
2014-01-08 17:07:54 +00:00
Simon Kelley
0fc2f31368
First functional DNSSEC - highly alpha.
2014-01-08 10:26:58 +00:00
Simon Kelley
c3e0b9b6e7
backup
2013-12-31 13:50:39 +00:00
Simon Kelley
c352dd8f1a
Merge branch 'master' into dnssec
2013-12-12 12:16:17 +00:00
Simon Kelley
532066ee2d
Add missing malloc() return-code check.
2013-11-26 10:14:47 +00:00
Simon Kelley
254390644a
Segfault with some CNAMEs. Also memory leak on reload of /etc/hosts.
2013-11-25 21:14:51 +00:00
Simon Kelley
06e54b823e
Merge branch 'master' into dnssec
2013-11-14 10:39:40 +00:00
Simon Kelley
7b174c250d
Fix check for local domains in CNAME case. Fixes d56a604a96
2013-10-28 13:14:03 +00:00
Simon Kelley
5a4120dbfb
Merge branch 'master' into dnssec
...
Conflicts:
src/dnsmasq.h
src/forward.c
src/option.c
2013-10-25 13:16:27 +01:00
Simon Kelley
b485ed97aa
Always answer queries for authoritative zones locally, never forward.
2013-10-18 22:00:39 +01:00
Simon Kelley
d56a604a96
CNAMEs can now point to interface names.
2013-10-11 14:39:03 +01:00
Giovanni Bajo
28f04fd647
Remove unused variable.
2013-08-20 15:41:22 +01:00
Giovanni Bajo
458824dcb4
Helper function to walk through keydata chained blocks.
2013-08-20 15:41:21 +01:00
Giovanni Bajo
02f9b76418
Rename key cache field.
2013-08-20 15:41:19 +01:00
Giovanni Bajo
ba8badd6df
Fix bug in keydata_alloc()
2013-08-20 15:41:19 +01:00
Simon Kelley
2bb73af7d1
Add --synth-domain
2013-04-24 20:35:43 +01:00
Simon Kelley
61744359de
Change copyright messages to include 2013.
2013-01-31 14:34:40 +00:00
Simon Kelley
1d6c639310
Fix broken cache.
2012-12-14 11:19:36 +00:00
Simon Kelley
b75e936372
First cut at zone transfer.
2012-12-07 11:50:41 +00:00
Simon Kelley
4f7b304f53
Initial code to do authoritative DNS.
2012-11-28 21:27:02 +00:00
Simon Kelley
1d860415f2
Add --max-cache-ttl option.
2012-09-20 20:48:04 +01:00
Simon Kelley
12d71ed28c
Finesse the check for /etc/hosts names which conflict with DHCP names.
2012-08-30 15:16:41 +01:00
Simon Kelley
611ebc5f1e
Fix broken caching of CNAME chains.
2012-07-16 16:23:46 +01:00
Simon Kelley
cdbee9a40b
Find room to store key-id and digest-type in DS records.
...
->uid is now overloaded to store key length
2012-04-27 10:30:49 +01:00
Simon Kelley
7b4ad2eb34
Teach cache to store DS and DNSKEY records
2012-04-27 10:30:49 +01:00
Simon Kelley
e759d426fa
--host-record support
2012-03-16 13:18:57 +00:00
Simon Kelley
d74942a03d
IPv6 address range parsing for --domain.
...
Counted string DHCP option type printing
2012-02-07 20:51:56 +00:00
Simon Kelley
4cb1b32009
Clean compile, basic DHCPv6 functionality is there.
...
TODO
hostname handling.
update DHCP6 configs from dns
parse domain=<domain>,<IPv6 range>
pretty-print counted string options.
DECLINE messages
lease-script fro DHCPv6
2012-02-06 14:30:41 +00:00
Simon Kelley
805a11345c
We don't need to check that a cache record is F_HOST in the
...
duplicate address code, since we're now searching a temporary hash
which holds only F_HOST records.
2012-01-13 11:51:46 +00:00
Simon Kelley
1ab62aec37
Further tuning of the fast hostfile reading code.
...
Use the packet buffer for hash-buckets, better hash function.
2012-01-12 11:33:16 +00:00