Commit Graph

471 Commits

Author SHA1 Message Date
Automatic Updater
7aca55cd83 regen 2010-01-16 01:55:32 +00:00
Automatic Updater
9feb8eda57 update copyright notice 2010-01-15 23:47:34 +00:00
Automatic Updater
763250ea4e regen 2010-01-15 20:35:07 +00:00
Evan Hunt
3f39cbcc76 2838. [func] Backport support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512, from BIND 9.7.  (This
			incorporates changes 2726 and 2738 from that
			release branch.) [RT #20871]
2010-01-15 19:38:54 +00:00
Automatic Updater
d889e9701a update copyright notice 2010-01-11 23:47:22 +00:00
Francis Dupont
6720b9fe94 Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 11:02:32 +00:00
Automatic Updater
f1ff7b7b8b regen 2009-12-03 05:06:40 +00:00
Automatic Updater
0bbfdc2806 update copyright notice 2009-12-03 04:49:32 +00:00
Mark Andrews
50331a1a93 2659. [doc] Clarify dnssec-keygen doc: key name must match zone
name for DNSSEC keys. [RT #19938]
2009-12-03 04:30:39 +00:00
Automatic Updater
9b6701361e regen 2009-11-07 01:56:12 +00:00
Evan Hunt
b514948e9d 2755. [doc] Clarify documentation of keyset- files in
dnssec-signzone man page. [RT #19810]
2009-11-06 21:36:22 +00:00
Automatic Updater
ef2dfb76b9 update copyright notice 2009-11-03 23:47:46 +00:00
Mark Andrews
5f5bb6cba2 line wrap 2009-11-03 01:39:31 +00:00
Mark Andrews
961ff176c2 line wrap cleanup 2009-11-03 01:17:40 +00:00
Automatic Updater
ca31221f5b update copyright notice 2009-09-23 23:47:15 +00:00
Mark Andrews
ee73600181 2684. [bug] dnssec-signzone should clean the old NSEC chain when
signing with NSEC3 and vica versa. [RT #20301]
2009-09-23 14:06:42 +00:00
Mark Andrews
f2445757f1 2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
the NSEC3 parameters used to sign the zone change.
                        [RT #20246]
2009-09-23 07:08:01 +00:00
Automatic Updater
c33527c0d2 update copyright notice 2009-09-04 23:46:58 +00:00
Mark Andrews
42e5782189 ALG_FORMATSIZE -> 20 2009-09-04 02:38:33 +00:00
Mark Andrews
23cb85e6e6 2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
[RT #19959]
2009-07-21 03:33:05 +00:00
Automatic Updater
76728b8bc6 regen 2009-07-11 01:55:23 +00:00
Mark Andrews
ee93a63b2f missing unsigned 2009-06-24 01:26:32 +00:00
Automatic Updater
8fa3d35e1b regen 2009-06-23 01:53:58 +00:00
Automatic Updater
6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews
e6be77a26c 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-22 05:05:01 +00:00
Tatuya JINMEI 神明達哉
dc653165b0 2613. [bug] Option argument validation was missing for
dnssec-dsfromkey. [RT #19828]
2009-06-17 23:41:58 +00:00
Automatic Updater
0aa00c0fbe regen 2009-06-10 01:54:15 +00:00
Evan Hunt
2d7fc2d5a6 added "known bugs" section to dnssec-signzone man page, edited
KNOWN-DEFECTS a bit
2009-06-09 01:47:19 +00:00
Automatic Updater
4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt
4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Automatic Updater
b3def9bbf7 regen 2009-06-07 01:53:42 +00:00
Jeremy Reed
d9cf22cc5a Please bump date on manpage. So we know we aren't using 2000 docs.
For -P: clean up sentence and clarify that the option skips the tests.

(This is for RT19653. No CHANGES entry added for this minor fix.)

This is v9_6, okayed in RT19653.
2009-06-06 01:46:54 +00:00
Mark Andrews
b13b64028b missing unsigned 2009-06-05 06:56:40 +00:00
Mark Andrews
e5e510dbab fix up merge 2009-06-04 03:11:31 +00:00
Automatic Updater
91c526913b regen 2009-06-04 03:07:24 +00:00
Automatic Updater
c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews
5fa0c17a78 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:41:54 +00:00
Mark Andrews
c5daf291bc 2567. [bug] dst__privstruct_writefile() could miss write errors.
write_public_key() could miss write errors.
                        dnssec-dsfromkey could miss write errors.
                        [RT #19360]
2009-03-02 02:56:13 +00:00
Automatic Updater
f0071326b6 update copyright notice 2009-02-17 23:47:15 +00:00
Mark Andrews
3b14986bdf 2559. [bug] dnssec-dsfromkey could compute bad DS records when
reading from a K* files.  [RT #19357]
2009-02-17 00:18:27 +00:00
Mark Andrews
d7900926bf spelling 2009-01-18 23:25:18 +00:00
Automatic Updater
c0ea6ba330 update copyright notice 2009-01-06 23:47:26 +00:00
Francis Dupont
0f5bed2b20 dnssec-signzone needs strtoul() - 19129 2009-01-06 09:13:05 +00:00
Mark Andrews
8bf0c05627 2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
[RT #19063]
2008-12-14 21:14:54 +00:00
Mark Andrews
c4c6e5094b dnssec-dsfromkey 2008-12-01 04:20:22 +00:00
Mark Andrews
50df1ec60a 2495. [bug] Tighten RRSIG checks. [RT #18795] 2008-11-14 22:53:46 +00:00
Automatic Updater
b27ce68bae regen 2008-11-08 01:11:47 +00:00
Automatic Updater
9807318c04 update copyright notice 2008-11-07 23:47:18 +00:00
Jeremy Reed
cf58feee56 Capitalize month name (since this is English and to be consistent)
for the date of the document.
2008-11-07 13:54:11 +00:00
Jeremy Reed
832fb12cfe Put RR in parentheses in the description.
Add missing "d" for "generated".
2008-11-07 13:50:15 +00:00