David Lawrence
11c4f6b687
Reversed the sense of my earlier change to hmacmd5 key generation that
...
required good entropy only when 'param' (to dst_key_generate) was non-zero.
Since the default was always to require good entropy, that default behavior
has been restored and now a non-zero param means that pseudorandom is ok.
2001-05-31 18:34:51 +00:00
David Lawrence
719f0c0028
A trivial change (added a blank line) so I could add the comment I
...
*wanted* to add on the last check-in.
The second argument to hmacmd5_generate is no longer unused, it is a flag
to say whether good entropy is needed or not. This change was approved
by Brian. The control channel key generator needed it to be able to do
its job all on-the-fly.
2001-05-31 10:49:28 +00:00
David Lawrence
d744418e64
hmac_link.c
2001-05-31 10:47:17 +00:00
David Lawrence
25efbc557e
set the permissions on a symmetric keyfile before anything is written to it,
...
rather than after it is closed
2001-05-31 10:45:32 +00:00
Brian Wellington
6d28d54e6f
be more tolerant of blank lines
2001-05-31 00:38:07 +00:00
Brian Wellington
0716b32560
remove unnecessary const
2001-05-21 22:10:23 +00:00
Brian Wellington
177ede307a
minor internal reorganization (yes, this will all become clear at some point)
2001-05-10 19:07:18 +00:00
Brian Wellington
4bd95a4965
fix a cut-and-paste-o and a warning
2001-05-10 04:50:28 +00:00
Brian Wellington
8e4da48fa7
consolidated duplicated code for filename mangling, removed sanity checks that
...
weren't.
2001-05-09 23:04:50 +00:00
Andreas Gustafsson
a08f7f4a6c
frombuffer() was declared 'static' but defined
...
without 'static'
2001-05-04 17:57:33 +00:00
Brian Wellington
daad43e5a4
802. [bug] DNSSEC key tags were computed incorrectly in almost
...
all cases. [RT #1146 ]
2001-04-04 02:02:58 +00:00
Brian Wellington
45e22378fc
dns_name_tofilenametext() now downcases the name, which means the callers
...
don't need to.
2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8
Add dns_name_tofilenametext(), and use it in the dnssec tools.
2001-03-27 22:57:48 +00:00
Brian Wellington
27422dd5db
typo [RT #1094 ]
2001-03-21 20:45:55 +00:00
Brian Wellington
b3eac7c50c
#include <config.h>
2001-03-04 18:38:13 +00:00
Brian Wellington
2cb74c5bc5
741. [port] Support openssl-engine. [RT #709 ]
2001-02-14 20:57:15 +00:00
Brian Wellington
3d60fe9baf
740. [port] Handle openssl library mismatches slightly better.
2001-02-14 20:26:48 +00:00
Brian Wellington
b3936096b8
fix get_key_struct() definition
2001-01-27 04:33:18 +00:00
Brian Wellington
46c3b3f6e1
isc_uint16_t -> dns_keytag_t in many places; dns_keytable_findkeynode
...
was casting incorrectly. [RT #664 ]
2001-01-24 02:23:02 +00:00
Brian Wellington
0f537d1c63
+ 708. [bug] When building with --with-openssl, the openssl headers
...
+ included should not be used. [RT #702 ]
+
2001-01-24 01:34:14 +00:00
Brian Wellington
6ec4990544
copyright update
2001-01-18 02:00:59 +00:00
Brian Wellington
5d0cca62ee
Renamed keyid.c to key.c, and moved in a bunch of other functions that don't
...
depend on crypto.
2001-01-17 01:08:08 +00:00
Brian Wellington
d7483d67f7
Move dst_region_computeid into a new file dst/keyid.c, so that all of the
...
dnssec code doesn't need to be linked in by using rdata routines.
2001-01-17 00:33:37 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Brian Wellington
523dd6a979
669. [func] dnssec-keygen now makes the public key file
...
non-world-readable for symmetric keys. [RT #403 ]
2001-01-09 00:53:06 +00:00
Andreas Gustafsson
8998ed8481
added UNUSED() macro
2000-12-18 21:09:42 +00:00
David Lawrence
d9135464f2
Stop multiple warnings on IRIX about some bitfiddling being done on
...
a long integer to stuff it into a four byte character array big endianwise.
2000-12-06 23:12:10 +00:00
Olafur Gudmundsson
09ceae8853
keygen coredumps if rsa key is not generated due to lack of randomness
2000-12-05 21:11:18 +00:00
Brian Wellington
425c9c3720
remove unused variable warnings
2000-12-04 23:39:05 +00:00
Brian Wellington
5af0b591fd
lib/dns/sec/openssl/th-lock.c was useless.
2000-12-04 23:21:42 +00:00
Brian Wellington
704d6eeab1
591. [bug] Work around non-reentrancy in openssl by disabling
...
precomputation in keys.
2000-12-04 23:06:37 +00:00
Mark Andrews
9b2e198580
Silence compiler
2000-11-28 04:46:00 +00:00
Brian Wellington
292ef406c6
Calling RSA_check_key() requires entropy, which may not be present. Remove
...
the call.
2000-11-22 00:11:30 +00:00
Brian Wellington
cffe50abf6
Lots of copyright updates
2000-11-18 03:01:17 +00:00
David Lawrence
2197bdf6b1
fixed prototype for static build_SYS_str_reasons()
2000-11-15 23:19:05 +00:00
David Lawrence
5ed0ffc1f7
clean up const warnings
2000-11-15 22:38:51 +00:00
Brian Wellington
ebfcb6cf66
550. [func] Support unknown rdata types and classes.
2000-11-09 23:55:05 +00:00
Brian Wellington
ed239db49c
Allow keys to be referred to as 'Kname.+id+alg.' (with a trailing dot), since
...
file completion often produces strings of that form.
2000-11-01 00:17:18 +00:00
Mark Andrews
c03bb27f06
532. [func] Implement DNS UPDATE pseudo records using
...
DNS_RDATA_UPDATE flag.
531. [func] Rdata really should be initalized before being
assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
dns_rdata_clone(), dns_rdata_fromregion()),
check that it is.
2000-10-25 04:26:57 +00:00
Brian Wellington
6177fc9897
A lot of files generated by libtool were not properly ignored.
2000-10-16 23:44:25 +00:00
Brian Wellington
568c0c0c10
forgot to add these files
2000-10-07 00:45:13 +00:00
Brian Wellington
4ed956c5c0
current snapshot of gss-tsig code. I'd be surprised if this works with
...
w2k, but a bind9 client and server can talk.
2000-10-06 17:08:15 +00:00
Brian Wellington
bda3efe854
reordered include files
2000-09-27 00:06:34 +00:00
Brian Wellington
a06c40460a
fix a potential buffer overflow when writing keys to disk.
2000-09-25 23:19:39 +00:00
Andreas Gustafsson
922e6a3c2a
478. [bug] "make install" failed if the directory specified with
...
--prefix did not already exist.
2000-09-20 19:06:16 +00:00
Brian Wellington
140c1a485b
remove warnings
2000-09-18 19:36:59 +00:00
Brian Wellington
eacc8996e0
The included openssl rsa code didn't work
2000-09-18 19:25:00 +00:00
Brian Wellington
206c4ad41e
More header files needed for rsa
2000-09-16 01:35:02 +00:00
Brian Wellington
4e37e5b5ee
empty unions don't compile everywhere.
2000-09-16 01:34:30 +00:00
Brian Wellington
a9dedf80e6
oops, missed this one.
2000-09-16 01:22:55 +00:00
David Lawrence
Mark Andrews