Mark Andrews
|
9991accfe2
|
sync options string with reality
|
2004-01-05 05:14:51 +00:00 |
|
Mark Andrews
|
185fd22738
|
1541. [func] NSEC now uses new bitmap format.
|
2003-12-13 04:20:44 +00:00 |
|
Mark Andrews
|
94be8e357c
|
1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap.
|
2003-10-01 04:10:26 +00:00 |
|
Mark Andrews
|
93d6dfaf66
|
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
|
2003-09-30 06:00:40 +00:00 |
|
Mark Andrews
|
492c2a9c24
|
nxt_setbit() could generate bad bit masks
setting the DS bit in the NXT record would result in a bad signature
being generated.
|
2003-04-17 03:45:49 +00:00 |
|
Mark Andrews
|
b0c15bd979
|
1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
from SOA MINIMUM.
1414. [func] Support for KSK flag.
|
2003-01-18 02:40:59 +00:00 |
|
Mark Andrews
|
bf7f253e30
|
1413. [func] Explictly request the (re-)generation of DS records from
keysets (dnssec-signzone -g).
developer: marka
reviewer: explorer
|
2003-01-18 00:24:09 +00:00 |
|
Mark Andrews
|
93e353425a
|
1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
dnssec-signkey now report their version in the
usage message.
|
2002-12-03 05:01:34 +00:00 |
|
Michael Graff
|
4411b9b6e7
|
pull down rt3507 (work by Mark, checked by me)
|
2002-11-12 21:52:44 +00:00 |
|
Mark Andrews
|
9977600381
|
1396. [func] dnssec-signzone: adjust the default signing time by
1 hour to allow for clock skew.
|
2002-11-04 00:16:05 +00:00 |
|
Mark Andrews
|
c54c1eaf26
|
1251. [func] Generate DNSSEC wildcard proofs.
|
2002-07-19 03:50:42 +00:00 |
|
Mark Andrews
|
8d77066ba0
|
1342. [bug] dnssec-signzone usage message was misleading.
1341. [bug] If the last RRset in a zone is glue, dnssec-signzone
would incorrectly duplicate its output and sign it.
|
2002-07-01 07:37:38 +00:00 |
|
Mark Andrews
|
0b09763c35
|
1328. [func] DS (delegation signer) support.
|
2002-06-17 04:01:37 +00:00 |
|
Mark Andrews
|
a7038d1a05
|
copyrights
|
2002-02-20 03:35:59 +00:00 |
|
Brian Wellington
|
6c62c34a5b
|
signing the root zone didn't work.
|
2002-02-05 05:16:11 +00:00 |
|
Brian Wellington
|
e57e32e575
|
restructuring - build the nxt chain independently from the signing process
|
2001-12-08 00:38:40 +00:00 |
|
Brian Wellington
|
8740bb8af0
|
remove #defines that shouldn't be there.
|
2001-12-07 01:55:42 +00:00 |
|
Andreas Gustafsson
|
1f1d36a87b
|
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
|
2001-11-30 01:59:49 +00:00 |
|
Brian Wellington
|
6785447aaf
|
use dns_diff_applysilently
|
2001-11-29 00:39:07 +00:00 |
|
Brian Wellington
|
47b4920f08
|
add the undocumented -S (simple output format) option
|
2001-11-15 00:51:23 +00:00 |
|
Brian Wellington
|
08e4f1ac94
|
oops, inadvertantly checked in a change here.
|
2001-11-14 22:14:19 +00:00 |
|
Brian Wellington
|
b493dfe8bc
|
Add bind9_getaddresses(), a consistent version of the get_address function
from dig/host/nslookup, nsupdate, and rndc. This should make it
easier to have the various programs support multiple addresses for a hostname.
|
2001-11-14 22:08:38 +00:00 |
|
Brian Wellington
|
5fc04b8135
|
add an assertion check (which will never be triggered)
|
2001-10-26 21:08:03 +00:00 |
|
Brian Wellington
|
b9043a19e2
|
missing ISC_TF
|
2001-10-22 23:49:13 +00:00 |
|
Brian Wellington
|
05a1fd6093
|
more minor cleanup
|
2001-10-18 22:36:52 +00:00 |
|
Brian Wellington
|
f6132a5038
|
minor code restructure
|
2001-10-18 00:40:50 +00:00 |
|
Andreas Gustafsson
|
94ce9c52fb
|
Improve error messages printed by dnssec tools when compiled
without crypto support (patch from Olafur)
|
2001-10-04 23:48:16 +00:00 |
|
Brian Wellington
|
39504d4517
|
remove dead code, consolidate dupliacted code.
|
2001-09-21 00:17:01 +00:00 |
|
Brian Wellington
|
87647e12e9
|
more minor cleanups
|
2001-09-21 00:02:20 +00:00 |
|
Brian Wellington
|
3bf31a5161
|
misc cleanup
|
2001-09-20 21:51:05 +00:00 |
|
Andreas Gustafsson
|
2f734e0a7e
|
sizeof style
|
2001-09-19 23:08:24 +00:00 |
|
Brian Wellington
|
56ae0ccb87
|
minor cleanup
|
2001-09-18 21:43:19 +00:00 |
|
Brian Wellington
|
3f543c371f
|
981. [func] The dnssec tools can now take multiple '-r randomfile'
arguments.
|
2001-09-05 23:15:42 +00:00 |
|
Danny Mayer
|
a9c57ae221
|
Bug fixes to support win32
|
2001-07-22 06:09:42 +00:00 |
|
Brian Wellington
|
1ba1b5242e
|
pass DST_TYPE_PUBLIC | DST_TYPE_PRIVATE when both the public and private key
should be read.
|
2001-05-10 06:04:58 +00:00 |
|
Brian Wellington
|
bdfb3735ac
|
check for DNS_R_SEENINCLUDE
|
2001-05-08 03:20:42 +00:00 |
|
Brian Wellington
|
c9c630ee84
|
If signing a zone fails, remove the partial file. [RT #1131]
|
2001-03-31 02:12:26 +00:00 |
|
Brian Wellington
|
bb74e8ce7b
|
output the signed data into a temp file, then rename at the end.
|
2001-03-31 01:46:13 +00:00 |
|
Brian Wellington
|
70d08aea0a
|
800. [bug] dnssec-signzone produced incorrect statistics for
large zones. [RT #1133]
|
2001-03-30 18:02:34 +00:00 |
|
Brian Wellington
|
45e22378fc
|
dns_name_tofilenametext() now downcases the name, which means the callers
don't need to.
|
2001-03-27 23:43:15 +00:00 |
|
Brian Wellington
|
7d7215baf8
|
Add dns_name_tofilenametext(), and use it in the dnssec tools.
|
2001-03-27 22:57:48 +00:00 |
|
Brian Wellington
|
d566e8ea7b
|
open databases with the root as origin when possible.
|
2001-03-27 22:08:39 +00:00 |
|
Brian Wellington
|
b03c1bf72f
|
Make sure to create all keyset- and signedkey- files with downcased names;
downcase names before looking for signedkey- files in dnssec-signzone.
|
2001-03-23 03:59:00 +00:00 |
|
Brian Wellington
|
b43d1c1f46
|
Don't die if a child's key is in the zone and a signedkey file is present.
|
2001-01-12 23:36:03 +00:00 |
|
Brian Wellington
|
7dec36c225
|
677. [bug] dnssec-signzone would occasionally use the wrong ttl
for database operations and fail. [RT #643]
|
2001-01-12 01:38:21 +00:00 |
|
Brian Wellington
|
499b34cea0
|
copyright update
|
2001-01-09 22:01:04 +00:00 |
|
Andreas Gustafsson
|
5ccb842cda
|
lined up columns in signing performance statistics output
and made all the lines use colons consistently
|
2000-12-15 19:26:54 +00:00 |
|
Andreas Gustafsson
|
7e044d7367
|
fixed several bugs in signing performance statistics printing
|
2000-12-15 19:19:56 +00:00 |
|
Andreas Gustafsson
|
cbd600f1ba
|
spacing
|
2000-12-15 19:07:07 +00:00 |
|
Olafur Gudmundsson
|
acc63b06d9
|
[615] dnssec-signzone did not like child signed keysets with multiple
signatures. (coredump)
[616] After consulting with Andreas I added some more timing statistics
when statistics are requesed.
|
2000-12-15 05:58:08 +00:00 |
|