Brian Wellington
63bf060be4
dst_key_iszonekey() checks that the key's protocol is DNSSEC or ANY.
...
Remove this check from the validator, and remove more redundant constants
from dst.h
2000-04-12 15:52:12 +00:00
Bob Halley
b65c8325a7
If the user has specified auth-nxdomain, do not warn about the default
...
being changed.
Fix typo.
2000-04-12 02:04:03 +00:00
Bob Halley
738b9aa3de
isc_task_create() API change
2000-04-12 01:41:21 +00:00
Bob Halley
f80ea74e19
isc_task_create() API change; attach to mctx
2000-04-12 01:37:41 +00:00
Bob Halley
a0f9edd9a4
attach to memory context
2000-04-12 01:35:59 +00:00
Bob Halley
823ed8c082
isc_mem_destroy_check is now isc_mem_setdestroycheck
2000-04-12 01:25:07 +00:00
Andreas Gustafsson
1723fbf70a
use the UNUSED() macro
2000-04-11 23:15:30 +00:00
Andreas Gustafsson
ecfe4a3490
validator_log() logged garbage after RR type
2000-04-11 22:17:49 +00:00
Brian Wellington
538fea1c91
Added back some code lost by the logging patch, made the keyvalidated event
...
handler actually work in the easy case.
2000-04-11 20:59:37 +00:00
Andreas Gustafsson
1b1e1fda46
logging
2000-04-11 20:35:37 +00:00
Andreas Gustafsson
b4b4adc097
added convenience function dns_name_format() for use in formatting
...
log messages
2000-04-11 19:11:46 +00:00
Andreas Gustafsson
5646eb8cd1
use dns_name_format()
2000-04-11 19:08:32 +00:00
Andreas Gustafsson
230bc05e7e
added DNS_LOGCATEGORY_DNSSEC and DNS_LOGMODULE_VALIDATOR
2000-04-11 18:17:35 +00:00
Brian Wellington
d0e69984a9
dnssec verification of cached sets was failing, since the ttl from the
...
rdataset was used instead of the ttl from the sig record. Also found
and fixed an unchecked memory allocation.
2000-04-11 18:04:35 +00:00
Brian Wellington
e7a8dfd296
If we mark an rdataset as secure, also mark the sigrdataset as secure.
2000-04-11 17:12:31 +00:00
Andreas Gustafsson
0f7045b0c4
moved a few more typedefs to <isc/types.h>: isc_region_t,
...
isc_textregion_t, isc_lex_t
2000-04-10 21:57:24 +00:00
Brian Wellington
2a05fa7535
dst_key_iszonekey() was incorrectly checking the 'name type' field of a key.
...
The constants added to dst.h for dst_key_iszonekey() duplicated constants
in dns/keyvalues.h, and are now gone.
2000-04-10 19:48:05 +00:00
Brian Wellington
17e81b39cd
TSIG signed incoming zone transfer works now.
2000-04-08 04:42:42 +00:00
Brian Wellington
dc3fc5830a
A couple minor bugs relating to TCP TSIG verification
2000-04-08 04:40:21 +00:00
Andreas Gustafsson
edcb93b49c
wired up view options: request-ixfr, provide-ixfr
2000-04-07 22:30:43 +00:00
Brian Wellington
3676eeb6ca
snapshot. Includes creating a new validator to validate pending KEYs.
2000-04-07 21:44:47 +00:00
Brian Wellington
f383cdfeb8
Moved the (lame) random number seeding code to the dst initialize routine,
...
since the openssl dsa code calls the openssl random functions directly,
not through dst_random_get.
2000-04-07 20:50:30 +00:00
James Brister
09c9fc94cf
Fixed a function name for style.
...
Fixed validation of keys used in server statement. Now they must truly be
defined before used. Ditto for in address match list element. Keys
referenced can be inside the enclosing view or at file scope.
2000-04-07 20:41:29 +00:00
Andreas Gustafsson
a25310fd1d
if the first RR in an incoming zone transfer was not an SOA,
...
we got an assertion failure
2000-04-07 19:41:07 +00:00
Andreas Gustafsson
913d4c761c
cosmetics
2000-04-07 18:30:11 +00:00
Andreas Gustafsson
e82d19b0c7
wired up view options: max-transfer-time-out, max-transfer-idle-out
2000-04-07 18:16:02 +00:00
James Brister
6abdc5c090
Changes necessary to support server statements inside a view statement.
2000-04-07 17:40:43 +00:00
Brian Wellington
b5debbe212
snapshot. Sends a fetch when a KEY isn't present and would partially handle
...
a successful response if it got one. Starts the validator with an
event to avoid deadlock in the resolver.
2000-04-07 17:36:40 +00:00
Brian Wellington
48ba496518
Uncomment the dnssec validator related code that compiles. Without a
...
way to fill in the security roots tree, this code will not be called
yet in practice.
2000-04-07 17:34:28 +00:00
Andreas Gustafsson
cb284e7bd4
wired up view options: transfer-source, transfer-source-v6
2000-04-07 17:27:22 +00:00
Brian Wellington
b80a8db9f9
Added DNS_EVENT_VALIDATORSTART
2000-04-07 17:15:35 +00:00
James Brister
616ee4a3f7
Changes to support keys inside views.
2000-04-07 13:35:06 +00:00
Michael Graff
6324997211
add attributes (line singleton, exlcusive, meta, etc) to rdata C files, and
...
build a table of them using gen.c. This means the names are stored twice,
but that will change in the near future. This will speed up number to text
conversions for rdatatypes, and I plan on speeding up text->number as
well, soon.
2000-04-07 03:54:52 +00:00
Andreas Gustafsson
2e91b1f3d4
configuring zone acl from default view caused assertion failure
2000-04-07 00:51:32 +00:00
Andreas Gustafsson
a672bfbee4
wired up view options: allow-query, allow-recursion, allow-transfer
2000-04-06 23:59:19 +00:00
Andreas Gustafsson
93c786e092
cleared up some DNS_R_CONTINUE/DNS_R_WAIT confusion;
...
commented get_dst_key()
2000-04-06 23:09:01 +00:00
Michael Graff
4195904998
s/DNS_R_/ISC_R_/ change for some codes.
2000-04-06 22:03:35 +00:00
Michael Graff
c1a2cfef7f
s/DNS_R_/ISC_R_/ change for some codes. Mostly documentation in these files.
2000-04-06 20:59:29 +00:00
Andreas Gustafsson
66e2dd5001
wired up view options: recursion, auth-nxdomain, transfer-format
2000-04-06 20:25:48 +00:00
James Brister
a38ea1c635
Change some accessor names.
2000-04-06 20:13:07 +00:00
James Brister
f46678fb6c
Name change to some accessors.
...
Parse lame-ttl in options block
Parse allow-update-forwarding in options block
parse transfer-format in view statment
2000-04-06 20:12:26 +00:00
James Brister
d6dc9759d2
More logging of unimplemented functions.
...
Change to ipmatchlist accessors (use attach/detach)
macro-ize ipmatchlist field accessors
2000-04-06 20:10:56 +00:00
James Brister
c47baa985c
Name change to two config file functions.
2000-04-06 20:08:34 +00:00
David Lawrence
5d4f11b265
The RBT now maintains a parent pointer at each node.
2000-04-06 18:47:07 +00:00
James Brister
3a49917729
Support new optional class on a view declaration.
2000-04-06 10:35:27 +00:00
James Brister
5e3d37f84a
Many new view-specific fields.
2000-04-06 09:50:13 +00:00
James Brister
03f18a3c14
Three new options fields: lame-ttl min-roots serial-queries.
2000-04-06 09:49:19 +00:00
James Brister
2b3d9824cb
Support many new values in a view statement.
2000-04-06 09:46:53 +00:00
James Brister
3e3cdbc52b
Some DNS_R_ to ISC_R_ replacements.
2000-04-06 09:45:39 +00:00
James Brister
2aac82553d
Support lame-ttl, min-roots and treat-cr-as-space in options.
...
Support auth-nxdomain
recursion query-source query-source-v6 transfer-source
transfer-source-v6 max-transfer-time-out max-transfer-idle-out
transfer-format request-ixfr privide-ixfr cleaning-interval
fetch-glue notify rfc2308-type1 lame-ttl max-ncache-ttl
min-roots
in views
2000-04-06 09:43:12 +00:00