Simon Kelley
c8e8f5c204
Bump copyright notices for 2021. Happy New Year!
2021-01-24 21:59:37 +00:00
Simon Kelley
a69b017902
Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH.
...
HAVE_NETTLEHASH is retained for backwards compatibility, but deprecated.
2021-01-24 21:53:28 +00:00
Petr Menšík
2024f97297
Support hash function from nettle (only)
...
Unlike COPTS=-DHAVE_DNSSEC, allow usage of just sha256 function from
nettle, but keep DNSSEC disabled at build time. Skips use of internal
hash implementation without support for validation built-in.
2020-12-16 15:49:03 +00:00
Simon Kelley
a7d19e917a
Support ECC-GOST DNSSEC signature algorithm.
...
Requires forthcoming nettle 3.6 release.
2020-02-29 16:27:00 +00:00
Simon Kelley
ec1cc455d6
Add support for ED448 DNSSEC signature verification.
...
Note that the the current release of Nettle doesn't
yet have support. This code will become active on the
next Nettle release.
2020-02-29 16:24:49 +00:00
Simon Kelley
425e2405aa
Remove DSA signature verification from DNSSEC, as specified in RFC 8624.
2020-02-26 18:28:32 +00:00
Simon Kelley
2a8710ac2f
Update copyrights to 2020.
2020-01-05 16:40:06 +00:00
Vladislav Grishenko
ab73a746a0
Fix build with libnettle 3.5
2019-08-14 21:36:52 +01:00
Simon Kelley
94b6878821
Tidy crypto.c of old library compat. Now need libnettle 3.
2018-03-17 18:39:23 +00:00
Simon Kelley
8b96552f0d
Fix compiler warning.
2018-03-10 20:44:17 +00:00
Simon Kelley
f3223fbff6
Fix nettle_hash() function to avoid ABI incompatibilities.
...
The way of accessing the list of available hashes on nettle was
vulnerable to breaking if the version of libnettle in use was
different to the version dnsmasq was compiled against.
Change to a new system if libnettle >= 3.4 is in use.
Older versions if nettle are still OK, once 3.4 is reached,
the ABi problem is fixed. Thanks to Petr Menšík for clues on this.
2018-03-06 22:55:36 +00:00
Simon Kelley
d1ced3ae38
Update copyrights to 2018.
2018-01-01 22:18:03 +00:00
Simon Kelley
0954a977c9
Remove RSA/MD5 DNSSEC algorithm.
...
This is set to status DoNotImplement in RFC 6944.
2017-10-27 23:26:51 +01:00
Simon Kelley
b77efc1948
Tidy DNSSEC algorithm table use.
2017-10-27 23:23:53 +01:00
Simon Kelley
ad9c6f06c5
Add support for Ed25519 DNSSEC signature algorithm.
2017-10-27 22:13:49 +01:00
