Ondřej Surý
843d389661
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
Evan Hunt
0c559199bf
final cleanup
...
- add CHANGES note
- update copyrights and license headers
- add -j to the make commands in .gitlab-ci.yml to take
advantage of parallelization in the gitlab CI process
2018-02-22 22:58:15 -08:00
Evan Hunt
c032c54dda
parallelize most system tests
2018-02-22 15:29:02 -08:00
Mark Andrews
09baa0cbb1
use 'grep -w' to reduce false negatives
2017-10-26 16:14:30 +11:00
Evan Hunt
9510de7849
[master] fix a test error in smartsign
2017-10-03 12:19:36 -07:00
Evan Hunt
e515fae2ae
[master] dnssec-signzone can now add sync records
...
4751. [func] "dnssec-signzone -S" can now automatically add parent
synchronization records (CDS and CDNSKEY) according
to key metadata set using the -Psync and -Dsync
options to dnssec-keygen and dnssec-settime.
[RT #46149 ]
2017-10-03 01:11:36 -07:00
Evan Hunt
45afdb2672
[master] remove default algorithm in dnssec-keygen
...
4594. [func] dnssec-keygen no longer uses RSASHA1 by default;
the signing algorithm must be specified on
the command line with the "-a" option. Signing
scripts that rely on the existing default behavior
will break; use "dnssec-keygen -a RSASHA1" to
repair them. (The goal of this change is to make
it easier to find scripts using RSASHA1 so they
can be changed in the event of that algorithm
being deprecated in the future.) [RT #44755 ]
2017-08-30 18:51:11 -07:00
Tinderbox User
7b665158e9
update copyright notice / whitespace
2017-01-13 23:45:35 +00:00
Mark Andrews
bcfaac260a
remove false negatives (add eol to grep patterns; add missing ret=0)
2017-01-13 15:59:52 +11:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Tinderbox User
dce54b9b5c
update copyright notice / whitespace
2016-06-14 23:45:25 +00:00
Mark Andrews
3635d8f910
do not overflow exit status. [RT #42643 ]
2016-06-14 13:48:39 +10:00
Evan Hunt
5efcb3a3e2
[master] fix test errors
...
- require 5.006_001
- cut off the least significant figures of rrsig dates before
comparison to avoid integer overflow
2014-02-17 08:40:02 -08:00
Tinderbox User
aa7b16ec2a
update copyright notice
2014-01-21 23:46:16 +00:00
Evan Hunt
d58e33bfab
[master] testcrypto.sh in system tests
...
3714. [test] System tests that need to test for cryptography
support before running can now use a common
"testcrypto.sh" script to do so. [RT #35213 ]
2014-01-20 16:08:09 -08:00
Mark Andrews
bf8267aa45
reverse bad copyright update
2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860
update copyright notice
2012-06-29 01:22:18 +00:00
Automatic Updater
09b46c3945
update copyright notice
2012-02-09 23:47:18 +00:00
Mark Andrews
77eca24a29
move keygeneration out of the timing critical section
2012-02-09 21:10:45 +00:00
Mark Andrews
46c7b71b4d
improve error diagnostics
2011-11-02 13:59:07 +00:00
Mark Andrews
ad94465154
improve failure reports
2011-10-25 03:57:08 +00:00
Mark Andrews
24ae404aca
'grep' -> 'grep -w' when checking for keyids
2011-10-13 03:55:01 +00:00
Mark Andrews
89d7808786
'grep' -> 'grep -w' when checking for keyids
2011-10-13 03:46:41 +00:00
Evan Hunt
b47c020d5c
3133. [bug] Change #3114 was incomplete. [RT #24577 ]
2011-07-08 01:43:26 +00:00
Scott Mann
07797bfb1f
fix RT 24561
2011-06-07 01:45:38 +00:00
Mark Andrews
ec564e401a
add debugging output on test failure
2011-05-31 13:52:06 +00:00
Scott Mann
5588b32695
This is a workaround fix for a problem in Solaris 10 (specifically on thing1)
...
for which a root cause has not yet been found. RT #24561 .
2011-05-30 15:13:49 +00:00
Evan Hunt
485522d7e1
3108. [cleanup] dnssec-signzone: Clarified some error and
...
warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
code (use -P instead). [RT #20852 ]
3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852 ]
2011-05-06 21:08:33 +00:00
Evan Hunt
61bcc23203
3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
...
dnssec-keyfromlabel sets the default TTL of the
key. When possible, automatic signing will use that
TTL when the key is published. [RT #23304 ]
2011-03-17 01:40:40 +00:00
Automatic Updater
0e27506ce3
update copyright notice
2011-03-05 23:52:31 +00:00
Evan Hunt
9a859983d7
3062. [func] Made several changes to enhance human readability
...
of DNSSEC data in dig output and in generated
zone files:
- DNSKEY record comments are more verbose, no
longer used in multiline mode only
- multiline RRSIG records reformatted
- multiline output mode for NSEC3PARAM records
- "dig +norrcomments" suppresses DNSKEY comments
- "dig +split=X" breaks hex/base64 records into
fields of width X; "dig +nosplit" disables this.
[RT #22820 ]
2011-03-05 19:39:07 +00:00
Evan Hunt
61271cdee6
3060. [func] New option "dnssec-signzone -X <date>" allows
...
specification of a separate expiration date
for DNSKEY RRSIGs and other RRSIGs. [RT #22141 ]
2011-03-04 22:20:21 +00:00
Mark Andrews
c6f4972c74
2943. [func] Add support to load new keys into managed zones
...
without signing immediately with "rndc loadkeys".
Add support to link keys with "dnssec-keygen -S"
and "dnssec-settime -S". [RT #21351 ]
2010-08-16 22:21:07 +00:00
Mark Andrews
f2ae969065
handle revoke changes
2010-05-06 11:28:20 +00:00
Evan Hunt
ecde9a1cd5
smartsign fails on slow machines. delay the timing-sensitive
...
dnssec-settime call as long as possible.
2010-01-19 15:54:45 +00:00
Automatic Updater
6bb1560124
update copyright notice
2010-01-18 23:48:40 +00:00
Evan Hunt
e11a0c114c
2841. [func] Added "smartsign" and improved "autosign" and
...
"dnssec" regression tests. [RT #20865 ]
2010-01-18 19:19:31 +00:00