ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
12,227 Commits 589 Branches 805 Tags
3ad4e307b64bcf8baa984e10a4e7549dbeaea31d
Commit Graph

174 Commits

Author SHA1 Message Date
Mark Andrews
daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews
35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into 
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
 2004-01-14 02:06:51 +00:00
Mark Andrews
9991accfe2 sync options string with reality 2004-01-05 05:14:51 +00:00
Mark Andrews
185fd22738 1541. [func] NSEC now uses new bitmap format. 2003-12-13 04:20:44 +00:00
Mark Andrews
94be8e357c 1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong 
length of the new bitmap.
 2003-10-01 04:10:26 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews
492c2a9c24 nxt_setbit() could generate bad bit masks 
setting the DS bit in the NXT record would result in a bad signature
being generated.
 2003-04-17 03:45:49 +00:00
Mark Andrews
b0c15bd979 1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived 
from SOA MINIMUM.

1414.   [func]          Support for KSK flag.
 2003-01-18 02:40:59 +00:00
Mark Andrews
bf7f253e30 1413. [func] Explictly request the (re-)generation of DS records from 
keysets (dnssec-signzone -g).
developer: marka
reviewer: explorer
 2003-01-18 00:24:09 +00:00
Mark Andrews
93e353425a 1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset 
dnssec-signkey now report their version in the
                        usage message.
 2002-12-03 05:01:34 +00:00
Michael Graff
4411b9b6e7 pull down rt3507 (work by Mark, checked by me) 2002-11-12 21:52:44 +00:00
Mark Andrews
9977600381 1396. [func] dnssec-signzone: adjust the default signing time by 
1 hour to allow for clock skew.
 2002-11-04 00:16:05 +00:00
Mark Andrews
c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews
8d77066ba0 1342. [bug] dnssec-signzone usage message was misleading. 
1341.   [bug]           If the last RRset in a zone is glue, dnssec-signzone
                        would incorrectly duplicate its output and sign it.
 2002-07-01 07:37:38 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Brian Wellington
6c62c34a5b signing the root zone didn't work. 2002-02-05 05:16:11 +00:00
Brian Wellington
e57e32e575 restructuring - build the nxt chain independently from the signing process 2001-12-08 00:38:40 +00:00
Brian Wellington
8740bb8af0 remove #defines that shouldn't be there. 2001-12-07 01:55:42 +00:00
Andreas Gustafsson
1f1d36a87b Check return values or cast them to (void), as required by the coding 
standards; add exceptions to the coding standards for cases where this is
not desirable
 2001-11-30 01:59:49 +00:00
Brian Wellington
6785447aaf use dns_diff_applysilently 2001-11-29 00:39:07 +00:00
Brian Wellington
47b4920f08 add the undocumented -S (simple output format) option 2001-11-15 00:51:23 +00:00
Brian Wellington
08e4f1ac94 oops, inadvertantly checked in a change here. 2001-11-14 22:14:19 +00:00
Brian Wellington
b493dfe8bc Add bind9_getaddresses(), a consistent version of the get_address function 
from dig/host/nslookup, nsupdate, and rndc.  This should make it
easier to have the various programs support multiple addresses for a hostname.
 2001-11-14 22:08:38 +00:00
Brian Wellington
5fc04b8135 add an assertion check (which will never be triggered) 2001-10-26 21:08:03 +00:00
Brian Wellington
b9043a19e2 missing ISC_TF 2001-10-22 23:49:13 +00:00
Brian Wellington
05a1fd6093 more minor cleanup 2001-10-18 22:36:52 +00:00
Brian Wellington
f6132a5038 minor code restructure 2001-10-18 00:40:50 +00:00
Andreas Gustafsson
94ce9c52fb Improve error messages printed by dnssec tools when compiled 
without crypto support (patch from Olafur)
 2001-10-04 23:48:16 +00:00
Brian Wellington
39504d4517 remove dead code, consolidate dupliacted code. 2001-09-21 00:17:01 +00:00
Brian Wellington
87647e12e9 more minor cleanups 2001-09-21 00:02:20 +00:00
Brian Wellington
3bf31a5161 misc cleanup 2001-09-20 21:51:05 +00:00
Andreas Gustafsson
2f734e0a7e sizeof style 2001-09-19 23:08:24 +00:00
Brian Wellington
56ae0ccb87 minor cleanup 2001-09-18 21:43:19 +00:00
Brian Wellington
3f543c371f 981. [func] The dnssec tools can now take multiple '-r randomfile' 
arguments.
 2001-09-05 23:15:42 +00:00
Danny Mayer
a9c57ae221 Bug fixes to support win32 2001-07-22 06:09:42 +00:00
Brian Wellington
1ba1b5242e pass DST_TYPE_PUBLIC | DST_TYPE_PRIVATE when both the public and private key 
should be read.
 2001-05-10 06:04:58 +00:00
Brian Wellington
bdfb3735ac check for DNS_R_SEENINCLUDE 2001-05-08 03:20:42 +00:00
Brian Wellington
c9c630ee84 If signing a zone fails, remove the partial file. [RT #1131] 2001-03-31 02:12:26 +00:00
Brian Wellington
bb74e8ce7b output the signed data into a temp file, then rename at the end. 2001-03-31 01:46:13 +00:00
Brian Wellington
70d08aea0a 800. [bug] dnssec-signzone produced incorrect statistics for 
large zones.  [RT #1133]
 2001-03-30 18:02:34 +00:00
Brian Wellington
45e22378fc dns_name_tofilenametext() now downcases the name, which means the callers 
don't need to.
 2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8 Add dns_name_tofilenametext(), and use it in the dnssec tools. 2001-03-27 22:57:48 +00:00
Brian Wellington
d566e8ea7b open databases with the root as origin when possible. 2001-03-27 22:08:39 +00:00
Brian Wellington
b03c1bf72f Make sure to create all keyset- and signedkey- files with downcased names; 
downcase names before looking for signedkey- files in dnssec-signzone.
 2001-03-23 03:59:00 +00:00
Brian Wellington
b43d1c1f46 Don't die if a child's key is in the zone and a signedkey file is present. 2001-01-12 23:36:03 +00:00
Brian Wellington
7dec36c225 677. [bug] dnssec-signzone would occasionally use the wrong ttl 
for database operations and fail. [RT #643]
 2001-01-12 01:38:21 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Andreas Gustafsson
5ccb842cda lined up columns in signing performance statistics output 
and made all the lines use colons consistently
 2000-12-15 19:26:54 +00:00
Andreas Gustafsson
7e044d7367 fixed several bugs in signing performance statistics printing 2000-12-15 19:19:56 +00:00