9 Commits

Author	SHA1	Message	Date
Matthijs Mekking	4d1ed1283a	Also ignore configured revoked trusted anchors	2019-03-19 17:14:18 +01:00
Matthijs Mekking	1d45ad8f39	Ignore trust anchors using disabled algorithm ... More specifically: ignore configured trusted and managed keys that match a disabled algorithm. The behavioral change is that associated responses no longer SERVFAIL, but return insecure.	2019-03-19 17:14:18 +01:00
Evan Hunt	885a3d208e	remove "dnssec-enable" from all system tests	2019-03-14 23:30:13 -07:00
Matthijs Mekking	6d976b37c1	Add dnssec-signzone tests with unsupported alg ... dnssec-signzone should sign a zonefile that contains a DNSKEY record with an unsupported algorithm.	2018-12-19 12:54:31 +01:00
Mark Andrews	7e4b82103b	check that DNSKEY and other occluded data are excluded from the delegating bitmap	2018-12-14 12:48:55 +11:00
Mark Andrews	06e218c421	verify that dnssec-signzone generates NSEC3 records with DNAME at the apex	2018-12-09 23:12:41 -05:00
Ondřej Surý	843d389661	Update license headers to not include years in copyright in all applicable files	2018-02-23 10:12:02 +01:00
Evan Hunt	0c559199bf	final cleanup ... - add CHANGES note - update copyrights and license headers - add -j to the make commands in .gitlab-ci.yml to take advantage of parallelization in the gitlab CI process	2018-02-22 22:58:15 -08:00
Evan Hunt	c032c54dda	parallelize most system tests	2018-02-22 15:29:02 -08:00