Evan Hunt
b62b7fbe9e
3114. [bug] Retain expired RRSIGs in dynamic zones if key is
...
inactive and there is no replacement key. [RT #23136 ]
2011-05-19 04:42:51 +00:00
Evan Hunt
613b6fc9c7
Corrected a bug in the dnssec test introduced in change #3046 .
2011-03-31 15:56:44 +00:00
Francis Dupont
e83c5eb545
Use RRSIG original TTL in validated RRset TTL [RT #23332 ]
2011-02-28 14:25:17 +00:00
Automatic Updater
09bde3103b
update copyright notice
2011-02-28 01:20:05 +00:00
Mark Andrews
8d59a69b90
3040. [bug] Named failed to validate insecure zones where a node
...
with a CNAME existed between the trust anchor and the
top of the zone. [RT #23338 ]
2011-02-23 11:36:03 +00:00
Mark Andrews
32f0239b5d
3020. [bug] auto-dnssec failed to correctly update the zone when
...
changing the DNSKEY RRset. [RT #23232 ]
2011-02-15 22:06:27 +00:00
Mark Andrews
3524f3dfa0
3019. [func] Test: check apex NSEC3 records after adding DNSKEY
...
record via UPDATE. [RT #23229 ]
2011-02-14 23:59:33 +00:00
Mark Andrews
8dacc63d9f
Regression test for:
...
3018. [bug] Named failed to check for the "none;" acl when deciding
if a zone may need to be re-signed. [RT #23120 ]
2011-02-08 03:48:22 +00:00
Automatic Updater
6bb1560124
update copyright notice
2010-01-18 23:48:40 +00:00
Evan Hunt
e11a0c114c
2841. [func] Added "smartsign" and improved "autosign" and
...
"dnssec" regression tests. [RT #20865 ]
2010-01-18 19:19:31 +00:00
Mark Andrews
c6d2578fd6
2741. [func] Allow the dnssec-keygen progress messages to be
...
suppressed (dnssec-keygen -q). Automatically
suppress the progress messages when stdin is not
a tty. [RT #20474 ]
2009-10-28 00:27:10 +00:00
Mark Andrews
e09cdbac08
2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
...
test. [RT #20453 ]
2009-10-27 22:25:37 +00:00
Evan Hunt
fb596cc9af
2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
...
chain when re-signing a previously-signed zone.
Use -u to modify NSEC3 parameters or switch
between NSEC and NSEC3. [RT #20304 ]
2009-09-25 06:47:50 +00:00
Automatic Updater
39844d4710
update copyright notice
2009-06-04 02:56:47 +00:00
Mark Andrews
2534a73a59
2608. [func] Perform post signing verification checks in
...
dnssec-signzone. These can be disabled with -P.
The post sign verification test ensures that for each
algorithm in use there is at least one non revoked
self signed KSK key. That all revoked KSK keys are
self signed. That all records in the zone are signed
by the algorithm. [RT #19653 ]
2009-06-04 02:13:37 +00:00
Automatic Updater
3398334b3a
update copyright notice
2008-09-25 04:02:39 +00:00
Mark Andrews
6098d364b6
2448. [func] Add NSEC3 support. [RT #15452 ]
2008-09-24 02:46:23 +00:00
Automatic Updater
70e5a7403f
update copyright notice
2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
59d84d1b07
2001. [func] Check the KSK flag when updating a secure dynamic zone.
...
New zone option "update-check-ksk yes;". [RT #15817 ]
2006-03-06 01:27:52 +00:00
Mark Andrews
35da39a7f1
update copyright notice
2006-01-04 00:37:24 +00:00
Mark Andrews
2a90390dee
1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is nolonger recommended.
...
To generate a RSAMD5 key you must explictly request
RSAMD5. [RT #13780 ]
2006-01-03 06:06:04 +00:00
Mark Andrews
dafcb997e3
update copyright notice
2004-03-05 05:14:21 +00:00
Mark Andrews
0b09763c35
1328. [func] DS (delegation signer) support.
2002-06-17 04:01:37 +00:00
Mark Andrews
a7038d1a05
copyrights
2002-02-20 03:35:59 +00:00
Andreas Gustafsson
473ca0bf8c
Added RT #2399 regression test
2002-01-22 22:27:29 +00:00
Andreas Gustafsson
e4b5f088ca
Added RT #1763 regression test
2001-09-19 21:19:52 +00:00
Brian Wellington
81b172466c
*** empty log message ***
2001-09-17 17:47:20 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Brian Wellington
2c46670fb4
ignore stdout from the dnssec tools
2000-11-22 20:37:50 +00:00
David Lawrence
40f53fa8d9
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
...
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
David Lawrence
15a4474541
word wrap copyright notice at column 70
2000-07-27 09:55:03 +00:00
David Lawrence
9c3531d72a
add RCS id string
2000-06-22 22:00:42 +00:00
Michael Sawyer
e6e0dadd30
Match output format to what scripts expect
2000-06-12 20:32:47 +00:00
Michael Sawyer
d349843282
Add copyright entries
2000-05-19 22:45:47 +00:00
Michael Sawyer
78ad076390
Fix typo in ifconfig script and add dnssec clean script
2000-05-17 23:15:32 +00:00
Michael Sawyer
d98372394f
Addition of test suite.
2000-05-17 22:10:42 +00:00
Andreas Gustafsson
b04adaa782
simplified
2000-05-16 01:24:50 +00:00
Andreas Gustafsson
02b4e9aef2
be compatible with new dnssec tool command line argument
...
usage; bug fixes
2000-05-16 01:22:45 +00:00
Andreas Gustafsson
0e9dcd5480
added system tests
2000-05-15 22:53:15 +00:00