ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
27,156 Commits 589 Branches 805 Tags
af021f136e277a4eec00a1a31d159a17f3e3cd85
Commit Graph
15 Commits
Author SHA1 Message Date
Michał Kępień 6d8a514ecb Treat records below a DNAME as out-of-zone data 
DNAME records indicate bottom of zone and thus no records below a DNAME
should be DNSSEC-signed or included in NSEC(3) chains.  Add a helper
function, has_dname(), for detecting DNAME records at a given node.
Prevent signing DNAME-obscured records.  Check that DNAME-obscured
records are not signed.

(cherry picked from commit ff7015a0f8)
 2018-06-13 12:58:27 +02:00
Evan Hunt 8b205089b7 update file headers to remove copyright years 2018-03-14 16:40:20 -07:00
Evan Hunt 442c1530a3 final cleanup 
- update Kyuafiles to match Atffiles
- copyrights
- CHANGES note

(cherry picked from commit 86e00cbb71)
(cherry picked from commit 80834b5b90)
 2018-03-09 16:17:56 -08:00
Evan Hunt 167fa161d1 parallelize most system tests 
(cherry picked from commit c032c54dda)
(cherry picked from commit 2b81f322cb)
 2018-02-23 13:23:31 -08:00
Tinderbox User 296f5969a8 update copyright notice / whitespace 2017-08-14 23:49:57 +00:00
Michał Kępień cbb33c87f4 [v9_11] Make dnssec-verify suggest using -o when appropriate 
4679.	[cleanup]	Suggest using -o when dnssec-verify finds a SOA record
			not at top of zone and -o is not used. [RT #45519]

(cherry picked from commit 877c264edc)
 2017-08-14 14:02:20 +02:00
Mark Andrews 0c27b3fe77 4401. [misc] Change LICENSE to MPL 2.0. 2016-06-27 14:56:38 +10:00
Tinderbox User dce54b9b5c update copyright notice / whitespace 2016-06-14 23:45:25 +00:00
Mark Andrews 3635d8f910 do not overflow exit status. [RT #42643] 2016-06-14 13:48:39 +10:00
Tinderbox User 3aaa526a94 update copyright notice 2013-01-23 23:45:55 +00:00
Evan Hunt 9a0dd99a75 [master] fix incorrect nsec3 check 
- check for NSEC3 in empty nodes when not due to optout delegations
    - fixed typo in output ("Bad record NSEC record")
    - incidentally fixed an error in signzone that caused an
      incorrect warning about missing DNSKEYs when using -S
      and -3 together

3473.	[bug]		dnssec-signzone/verify could incorrectly report
			an error condition due to an empty node above an
			opt-out delegation lacking an NSEC3. [RT #32072]
 2013-01-23 14:56:00 -08:00
Mark Andrews bf8267aa45 reverse bad copyright update 2012-06-29 11:39:47 +10:00
Tinderbox User 247bf37860 update copyright notice 2012-06-29 01:22:18 +00:00
Tinderbox User da5d53fb14 update copyright notice 2012-06-26 23:45:56 +00:00
Mark Andrews ad127d839d 3341. [func] New "dnssec-verify" command checks a signed zone 
to ensure correctness of signatures and of NSEC/NSEC3
                        chains. [RT #23673]
 2012-06-25 13:57:32 +10:00