Commit Graph
331 Commits
Author SHA1 Message Date
Mark Andrews 494576ce20 1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
allow parallel make to succeed.
2004-12-09 01:41:25 +00:00
Mark Andrews 344027f57e 1769. [port] win32: change compiler flags /MTd ==> /MDd,
/MT ==> /MD.
2004-11-18 00:37:01 +00:00
Mark Andrews 3d75a3aef3 1769. [port] win32: change compiler flags /MTd ==> /MDd,
/MT ==> /MD.
2004-11-18 00:30:31 +00:00
Mark Andrews 40e7c805a8 1740. [bug] Replace rbt's hash algorithm as it performed badly
with certain zones. [RT #12729]
2004-10-25 01:27:54 +00:00
Mark Andrews 16a68807e1 1704. [port] lwres needed a snprintf() implementation for
platforms without snprintf().  Add missing
                        "#include <isc/print.h>". [RT #12321]
2004-08-28 06:20:14 +00:00
Mark Andrews 2cd182921e regen 2004-08-23 00:05:48 +00:00
Mark Andrews 30b41c205c 1699. [bug] dnssec-signzone can generate "not exact" errors
when resigning. [RT #12281]
2004-08-20 00:47:40 +00:00
Mark Andrews 5e4346a4f9 1696. [bug] dnssec-signzone failed to clean out nodes that
consisted of only NSEC and RRSIG records.
                        [RT #12154]
2004-08-11 08:55:47 +00:00
Mark Andrews 9f7d51ee32 1688. [bug] LDFLAGS was not supported. 2004-07-20 07:13:43 +00:00
Mark Andrews f6d93187a1 regen 2004-06-11 03:03:14 +00:00
Mark Andrews cc3aafe737 1659. [cleanup] Cleanup some messages that were referring to KEY vs
DNSKEY, NXT vs NSEC and SIG vs RRSIG.

1658.   [func]          Update dnssec-keygen to default to KEY for HMAC-MD5
                        and DH.  Tighten which options apply to KEY and
                        DNSKEY records.
2004-06-11 01:12:40 +00:00
Mark Andrews 6564bfdd88 regen 2004-06-03 04:12:38 +00:00
Mark Andrews 17cb8353e9 update corpauthor 2004-06-03 02:22:35 +00:00
Mark Andrews 42b48d11ca hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. 2004-04-15 01:58:25 +00:00
Mark Andrews 61e1dc26d6 regen 2004-04-07 00:57:04 +00:00
Mark Andrews e3f6b4d219 regen 2004-04-06 22:04:52 +00:00
Mark Andrews 1fa26403d7 copyright 2004-03-16 05:22:33 +00:00
Mark Andrews 50105afc55 1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable
2004-03-10 02:19:58 +00:00
Mark Andrews 0707a8c04f regen 2004-03-05 12:40:39 +00:00
Mark Andrews 8a66318e41 regen / copyright update 2004-03-05 08:32:21 +00:00
Mark Andrews 9016767f4e update copyrights 2004-03-05 05:54:38 +00:00
Mark Andrews af5073d032 update copyrights 2004-03-05 05:48:29 +00:00
Mark Andrews dafcb997e3 update copyright notice 2004-03-05 05:14:21 +00:00
Mark Andrews 8dcabaace1 regen 2004-03-04 12:22:04 +00:00
Mark Andrews f9cdef0ba5 regen 2004-02-27 21:01:25 +00:00
Mark Andrews 74cb99072c 1573. [port] linux: update to libtool 1.5.2 so that
"make install DESTDIR=/xx" works with
                        "configure --with-libtool".  [RT #9941]
2004-02-24 01:41:28 +00:00
Mark Andrews daa73eae70 silence punned messages 2004-02-03 00:59:05 +00:00
Mark Andrews 35541328a8 1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
                        algorithm.  Such child zones are treated as unsigned.

1557.   [func]          Implement missing DNSSEC tests for
                        * NOQNAME proof with wildcard answers.
                        * NOWILDARD proof with NXDOMAIN.
                        Cache and return NOQNAME with wildcard answers.
2004-01-14 02:06:51 +00:00
Mark Andrews 9991accfe2 sync options string with reality 2004-01-05 05:14:51 +00:00
Mark Andrews 185fd22738 1541. [func] NSEC now uses new bitmap format. 2003-12-13 04:20:44 +00:00
Mark Andrews 0f98d5c83e repeated words 2003-11-02 22:49:10 +00:00
Mark Andrews 94be8e357c 1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap.
2003-10-01 04:10:26 +00:00
Mark Andrews 3970098dcd regen documentation 2003-09-30 06:13:33 +00:00
Mark Andrews 93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews 5eb91bd90e silence compiler warnings (HPUX/11i) 2003-07-25 00:01:16 +00:00
Mark Andrews 492c2a9c24 nxt_setbit() could generate bad bit masks
setting the DS bit in the NXT record would result in a bad signature
being generated.
2003-04-17 03:45:49 +00:00
Mark Andrews b587e1d83f spelling 2003-02-07 01:13:13 +00:00
Mark Andrews b0c15bd979 1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
from SOA MINIMUM.

1414.   [func]          Support for KSK flag.
2003-01-18 02:40:59 +00:00
Mark Andrews bf7f253e30 1413. [func] Explictly request the (re-)generation of DS records from
keysets (dnssec-signzone -g).
developer: marka
reviewer: explorer
2003-01-18 00:24:09 +00:00
Mark Andrews f4cbe536b1 cygwin support 2002-12-27 03:29:37 +00:00
Mark Andrews 93e353425a 1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
dnssec-signkey now report their version in the
                        usage message.
2002-12-03 05:01:34 +00:00
Michael Graff 4411b9b6e7 pull down rt3507 (work by Mark, checked by me) 2002-11-12 21:52:44 +00:00
Mark Andrews 9977600381 1396. [func] dnssec-signzone: adjust the default signing time by
1 hour to allow for clock skew.
2002-11-04 00:16:05 +00:00
Mark Andrews c54c1eaf26 1251. [func] Generate DNSSEC wildcard proofs. 2002-07-19 03:50:42 +00:00
Mark Andrews 8d77066ba0 1342. [bug] dnssec-signzone usage message was misleading.
1341.   [bug]           If the last RRset in a zone is glue, dnssec-signzone
                        would incorrectly duplicate its output and sign it.
2002-07-01 07:37:38 +00:00
Mark Andrews 0b09763c35 1328. [func] DS (delegation signer) support. 2002-06-17 04:01:37 +00:00
Mark Andrews e1cbf95aec regen 2002-02-20 04:31:44 +00:00
Mark Andrews a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Brian Wellington 6c62c34a5b signing the root zone didn't work. 2002-02-05 05:16:11 +00:00
Brian Wellington 2ca556300b 1180. [func] dnssec-keygen should always generate keys with
protocol 3 (DNSSEC), since it's less confusing
			that way.
2002-01-21 10:13:20 +00:00