Commit Graph

40 Commits

Author SHA1 Message Date
Evan Hunt
b62b7fbe9e 3114. [bug] Retain expired RRSIGs in dynamic zones if key is
inactive and there is no replacement key. [RT #23136]
2011-05-19 04:42:51 +00:00
Evan Hunt
613b6fc9c7 Corrected a bug in the dnssec test introduced in change #3046. 2011-03-31 15:56:44 +00:00
Francis Dupont
e83c5eb545 Use RRSIG original TTL in validated RRset TTL [RT #23332] 2011-02-28 14:25:17 +00:00
Automatic Updater
09bde3103b update copyright notice 2011-02-28 01:20:05 +00:00
Mark Andrews
8d59a69b90 3040. [bug] Named failed to validate insecure zones where a node
with a CNAME existed between the trust anchor and the
                        top of the zone. [RT #23338]
2011-02-23 11:36:03 +00:00
Mark Andrews
32f0239b5d 3020. [bug] auto-dnssec failed to correctly update the zone when
changing the DNSKEY RRset. [RT #23232]
2011-02-15 22:06:27 +00:00
Mark Andrews
3524f3dfa0 3019. [func] Test: check apex NSEC3 records after adding DNSKEY
record via UPDATE. [RT #23229]
2011-02-14 23:59:33 +00:00
Mark Andrews
8dacc63d9f Regression test for:
3018.   [bug]           Named failed to check for the "none;" acl when deciding
                        if a zone may need to be re-signed. [RT #23120]
2011-02-08 03:48:22 +00:00
Automatic Updater
6bb1560124 update copyright notice 2010-01-18 23:48:40 +00:00
Evan Hunt
e11a0c114c 2841. [func] Added "smartsign" and improved "autosign" and
"dnssec" regression tests. [RT #20865]
2010-01-18 19:19:31 +00:00
Mark Andrews
c6d2578fd6 2741. [func] Allow the dnssec-keygen progress messages to be
suppressed (dnssec-keygen -q).  Automatically
                        suppress the progress messages when stdin is not
                        a tty. [RT #20474]
2009-10-28 00:27:10 +00:00
Mark Andrews
e09cdbac08 2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
test. [RT #20453]
2009-10-27 22:25:37 +00:00
Evan Hunt
fb596cc9af 2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
chain when re-signing a previously-signed zone.
			Use -u to modify NSEC3 parameters or switch
			between NSEC and NSEC3. [RT #20304]
2009-09-25 06:47:50 +00:00
Automatic Updater
39844d4710 update copyright notice 2009-06-04 02:56:47 +00:00
Mark Andrews
2534a73a59 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:13:37 +00:00
Automatic Updater
3398334b3a update copyright notice 2008-09-25 04:02:39 +00:00
Mark Andrews
6098d364b6 2448. [func] Add NSEC3 support. [RT #15452] 2008-09-24 02:46:23 +00:00
Automatic Updater
70e5a7403f update copyright notice 2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7 update copyright notice 2007-06-18 23:47:57 +00:00
Mark Andrews
59d84d1b07 2001. [func] Check the KSK flag when updating a secure dynamic zone.
New zone option "update-check-ksk yes;".  [RT #15817]
2006-03-06 01:27:52 +00:00
Mark Andrews
35da39a7f1 update copyright notice 2006-01-04 00:37:24 +00:00
Mark Andrews
2a90390dee 1945. [cleanup] dnssec-keygen: RSA (RSAMD5) is nolonger recommended.
To generate a RSAMD5 key you must explictly request
                        RSAMD5. [RT #13780]
2006-01-03 06:06:04 +00:00
Mark Andrews
dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews
0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Andreas Gustafsson
473ca0bf8c Added RT #2399 regression test 2002-01-22 22:27:29 +00:00
Andreas Gustafsson
e4b5f088ca Added RT #1763 regression test 2001-09-19 21:19:52 +00:00
Brian Wellington
81b172466c *** empty log message *** 2001-09-17 17:47:20 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Brian Wellington
2c46670fb4 ignore stdout from the dnssec tools 2000-11-22 20:37:50 +00:00
David Lawrence
40f53fa8d9 Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts.  Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
David Lawrence
15a4474541 word wrap copyright notice at column 70 2000-07-27 09:55:03 +00:00
David Lawrence
9c3531d72a add RCS id string 2000-06-22 22:00:42 +00:00
Michael Sawyer
e6e0dadd30 Match output format to what scripts expect 2000-06-12 20:32:47 +00:00
Michael Sawyer
d349843282 Add copyright entries 2000-05-19 22:45:47 +00:00
Michael Sawyer
78ad076390 Fix typo in ifconfig script and add dnssec clean script 2000-05-17 23:15:32 +00:00
Michael Sawyer
d98372394f Addition of test suite. 2000-05-17 22:10:42 +00:00
Andreas Gustafsson
b04adaa782 simplified 2000-05-16 01:24:50 +00:00
Andreas Gustafsson
02b4e9aef2 be compatible with new dnssec tool command line argument
usage; bug fixes
2000-05-16 01:22:45 +00:00
Andreas Gustafsson
0e9dcd5480 added system tests 2000-05-15 22:53:15 +00:00