137 Commits

Author	SHA1	Message	Date
Simon Kelley	8d718cbb3e	Nasty cache failure and memory leak with DNSSEC.	2014-02-03 16:27:37 +00:00
Simon Kelley	f6a2b79310	Validate Ooops.	2014-02-01 14:54:26 +00:00
Simon Kelley	6f4681034e	Code tidy.	2014-01-26 23:39:17 +00:00
Simon Kelley	7d23a66ff0	Remove --dnssec-permissive, pointless if we don't set CD upstream.	2014-01-26 09:33:21 +00:00
Simon Kelley	703c7ff429	Fix to last commit.	2014-01-25 23:46:23 +00:00
Simon Kelley	8a9be9e493	Replace CRC32 with SHA1 for spoof detection in DNSSEC builds.	2014-01-25 23:17:21 +00:00
Simon Kelley	b5dbfd142a	RRSIG answer logging.	2014-01-25 18:19:51 +00:00
Simon Kelley	5b3bf92101	--dnssec-debug	2014-01-25 17:03:07 +00:00
Simon Kelley	0744ca66ad	More DNSSEC caching logic, and avoid repeated validation of DS/DNSKEY	2014-01-25 16:40:15 +00:00
Simon Kelley	2d33bda2e6	RRSIGS for PTR records from cache.	2014-01-24 22:37:25 +00:00
Simon Kelley	824202ef54	More DNSSEC cache readout.	2014-01-23 20:59:46 +00:00
Simon Kelley	e7829aefd8	Cache RRSIGS.	2014-01-22 22:21:51 +00:00
Simon Kelley	51ea3ca254	Caching of DNSSEC records.	2014-01-22 19:31:38 +00:00
Simon Kelley	6fd6dacb39	Fix loop in RR sort.	2014-01-21 20:17:40 +00:00
Simon Kelley	979cdf9b64	Fix to hostname_cmp, and update to canonicalisation table. RFC 4034 LIES.	2014-01-21 16:26:41 +00:00
Simon Kelley	dbf721235b	Rationalise hostname_cmp()	2014-01-21 14:28:02 +00:00
Simon Kelley	c5f4ec7d23	NSEC proof-of-non-existence.	2014-01-20 22:37:55 +00:00
Simon Kelley	72ae2f3d56	Don't validate error returns.	2014-01-19 09:54:16 +00:00
Simon Kelley	e0c0ad3b5e	UDP retries for DNSSEC	2014-01-16 22:42:07 +00:00
Simon Kelley	4619d94622	Fix SEGV and failure to validate on x86_64.	2014-01-16 19:53:06 +00:00
Simon Kelley	86bec2d399	Swap crypto library from openSSL to nettle.	2014-01-13 21:31:20 +00:00
Simon Kelley	1486a9c7f2	Furthet tweak to RRset sort.	2014-01-10 11:44:26 +00:00
Simon Kelley	5ada888507	RFC 4035 5.3.2 wildcard label rules.	2014-01-09 22:25:03 +00:00
Simon Kelley	5f8e58f49b	DNSSEC consolidation.	2014-01-09 17:31:19 +00:00
Simon Kelley	b6e9e7c32d	Handle digest lengths greater than 1 block.	2014-01-08 21:21:20 +00:00
Simon Kelley	60b68069cf	Rationalise DNS packet-buffer size calculations.	2014-01-08 12:10:28 +00:00
Simon Kelley	0fc2f31368	First functional DNSSEC - highly alpha.	2014-01-08 10:26:58 +00:00
Simon Kelley	c3e0b9b6e7	backup	2013-12-31 13:50:39 +00:00
Simon Kelley	3a2371527f	Commit to allow master merge.	2013-12-12 12:15:50 +00:00
Giovanni Bajo	8d41ebd8a3	Add copyright banners	2013-08-20 15:41:26 +01:00
Simon Kelley	4f9aefc753	Don't fight over namespace with re-implementation of strchrnul()	2013-08-20 15:41:26 +01:00
Giovanni Bajo	4b5287005f	Again make errors greppable.	2013-08-20 15:41:25 +01:00
Giovanni Bajo	ccd1d32c3a	Make testsuite errors greppable.	2013-08-20 15:41:25 +01:00
Giovanni Bajo	75ffc9bf15	Implement RSA-MD5.	2013-08-20 15:41:25 +01:00
Giovanni Bajo	3af1ea8cbc	Simplify abstraction of verification algorithms (it was too flexible)	2013-08-20 15:41:25 +01:00
Giovanni Bajo	ed1fc98595	Untangle digestalg from verifyalg; better separation, less code duplication.	2013-08-20 15:41:25 +01:00
Giovanni Bajo	b58fb39f24	Since extract_name() does not convert to lowercase, do it temporarly within convert_domain_to_wire().	2013-08-20 15:41:25 +01:00
Giovanni Bajo	0304d28f7e	Parse and match DS records.	2013-08-20 15:41:25 +01:00
Giovanni Bajo	32b826e2a0	Genericize verifyalg_add_data_domain() (rename to convert_domain_to_wire()).	2013-08-20 15:41:24 +01:00
Giovanni Bajo	0937692dc6	Add rdata description for MX.	2013-08-20 15:41:24 +01:00
Giovanni Bajo	785ee80b93	Describe SOA rdata section.	2013-08-20 15:41:24 +01:00
Giovanni Bajo	f119ed382e	Simplify verifyalg_add_rdata() with new canonicalization functions.	2013-08-20 15:41:24 +01:00
Giovanni Bajo	da23c4f960	Simplify rrset_canonical_order() with new canonicalization functions.	2013-08-20 15:41:24 +01:00
Giovanni Bajo	4885d57c58	Add rdata canonicalization functions.	2013-08-20 15:41:24 +01:00
Giovanni Bajo	0db0e0c216	Fix a bug in rdlen update while decompressing a name	2013-08-20 15:41:24 +01:00
Giovanni Bajo	ec2962eacb	Fix the macro names.	2013-08-20 15:41:23 +01:00
Giovanni Bajo	0ca895f585	Fix rrset_canonical_order() to correct handle canonicalization of domain names in RDATA.	2013-08-20 15:41:23 +01:00
Giovanni Bajo	6299ffbe60	Start refactoring for correct handling of domain wire-format. ... Introduce utility functions and RDATA meta-description.	2013-08-20 15:41:23 +01:00
Giovanni Bajo	7f0485cf53	verifyalg_add_data_domain: fix for root domain ("").	2013-08-20 15:41:23 +01:00
Giovanni Bajo	d1ca25ca7e	Canonicalize NS records.	2013-08-20 15:41:23 +01:00