81 Commits
Author SHA1 Message Date
Mark Andrews 98c575983b 1654. [bug] isc_result_totext() contained array bounds read
error.

1653.   [func]          Add key type checking to dst_key_fromfilename(),
                        DST_TYPE_KEY should be used to read TSIG, TKEY and
                        SIG(0) keys.

1652.   [bug]           TKEY still uses KEY.
2004-06-11 00:31:01 +00:00
Mark Andrews 511621255e 1528. [cleanup] Simplify some dns_name_ functions based on the
deprecation of bitstring labels.

1527.  [cleanup]       Reduce the number of gettimeofday() calls without
                       losing necessary timer granularity.
2004-03-08 21:06:29 +00:00
Mark Andrews a821d5fa3d DNSSEC bis merge from HEAD:
1581.  [func]          Disable DNSSEC support by default.  To enable
                       DNSSEC specify "enable-dnssec yes;" in named.conf.

1565.  [bug]           CD flag should be copied to outgoing queries unless
                       the query is under a secure entry point in which case
                       CD should be set.

1558.  [func]          New DNSSEC 'disable-algorithms'.  Support entry into
                       child zones for which we don't have a supported
                       algorithm.  Such child zones are treated as unsigned.

1557.  [func]          Implement missing DNSSEC tests for
                       * NOQNAME proof with wildcard answers.
                       * NOWILDARD proof with NXDOMAIN.
                       Cache and return NOQNAME with wildcard answers.

1541.  [func]          NSEC now uses new bitmap format.

1519.  [bug]           dnssec-signzone:nsec_setbit() computed the wrong
                       length of the new bitmap.

1516.  [func]          Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2004-03-08 02:08:05 +00:00
Mark Andrews cbdd3a318b update lib copyrights 2004-03-06 08:15:48 +00:00
Mark Andrews 69acffbb19 sync with HEAD 2003-10-14 03:48:11 +00:00
Mark Andrews fbfcbe90e2 1181. [func] Add the "key-directory" configuration statement,
which allows the server to look for online signing
                        keys in alternate directories.
2003-08-13 01:41:34 +00:00
Mark Andrews 9052beb238 pullup
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2003-08-11 05:28:23 +00:00
Mark Andrews f4d86cfcea update_copyrights 2003-07-22 04:03:54 +00:00
Mark Andrews 704b358bb0 pullup:
1399.   [bug]           Use serial number arithmetic when testing SIG
                        timestamps. [RT #4268]
2003-05-12 05:52:09 +00:00
Mark Andrews a914318b06 1334. [bug] When signing/verifying rdatasets, duplicate rdatas
need to be suppressed.
2002-08-02 05:08:49 +00:00
Mark Andrews 73d7583d98 update copyrights 2002-02-08 03:57:47 +00:00
Mark Andrews 8a4f85e204 pullup:
1188.   [bug]           Dynamic updates of a signed zone would fail if
                        some of the zone private keys were unavailable.
2002-01-23 03:19:03 +00:00
Brian Wellington ba9e9a88c8 The last change didn't compile due to faulty cut&paste. 2001-06-08 22:48:28 +00:00
Brian Wellington 3b6bcedffe 891. [bug] Return an error when a SIG(0) signed response to
an unsigned query is seen.  This should actually
			do the verification, but it's not currently
			possible. [RT #1391]
2001-06-08 19:37:29 +00:00
Brian Wellington cbb781f277 uninitialized variable 2001-05-29 22:54:07 +00:00
Brian Wellington a62b21afd3 DST_TYPE_PUBLIC|DST_TYPE_PRIVATE 2001-05-10 06:05:54 +00:00
Brian Wellington 3840dba289 Comment a particularly subtle bit of code. 2001-05-02 00:03:12 +00:00
Brian Wellington 05183bbc4f Signing with a large key didn't work since the static output buffer was too
small; use a dynamic buffer instead.  Also, comment a section
2001-05-02 00:02:28 +00:00
Brian Wellington 8c3989000a 810. [bug] The signer name in SIG records was not properly
downcased when signing/verifying records. [RT #1186]
2001-04-17 17:20:27 +00:00
Brian Wellington b8a85202af 786. [bug] When signing/verifying data, names were not properly
downcased.
2001-03-23 03:51:04 +00:00
Brian Wellington d03fd76636 add a cast [RT #1013] 2001-03-12 22:39:36 +00:00
Brian Wellington 18d110413c Move dns_dnssec_iszonekey to dns_zonekey_iszonekey, to make the rbtdb not
require all of dst to be linked in.
2001-01-17 01:22:20 +00:00
Brian Wellington 499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Brian Wellington abfbf760f3 650. [bug] SIG(0) records were being generated and verified
incorrectly. [RT #606]
2001-01-04 00:10:13 +00:00
Brian Wellington 8d6fe3f388 Pointers to regions are silly. Use regions instead. This removes 1 small
allocation per query.
2001-01-03 20:42:10 +00:00
Brian Wellington 78838d3e0c 8 space -> tab conversion 2000-12-11 19:24:30 +00:00
Mark Andrews 368b37b616 dns_rdata_invalidate -> dns_rdata_reset 2000-10-31 03:22:05 +00:00
Mark Andrews c03bb27f06 532. [func] Implement DNS UPDATE pseudo records using
DNS_RDATA_UPDATE flag.

 531.   [func]          Rdata really should be initalized before being
                        assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
                        dns_rdata_clone(), dns_rdata_fromregion()),
                        check that it is.
2000-10-25 04:26:57 +00:00
Brian Wellington d1cbf71409 clean up suspicious looking and incorrect uses of dns_name_fromregion 2000-10-07 00:09:28 +00:00
Brian Wellington cc8a68d56f minor cleanup 2000-09-25 23:18:54 +00:00
Brian Wellington 5c29047792 minor dst api change 2000-09-12 09:59:28 +00:00
Andreas Gustafsson 70e2821036 additional consistency checking 2000-08-21 23:22:01 +00:00
Brian Wellington 16797b504e SIG(0) signing and verifying had an off by 2 error. 2000-08-21 17:48:46 +00:00
Brian Wellington 41654670e7 Added dns_dnssec_iszonekey() to determine if a KEY is a zone key without
the overhead of converting it to a dst key.
2000-08-10 02:00:35 +00:00
David Lawrence 40f53fa8d9 Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts.  Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
David Lawrence 65260de947 needs <dns/fixedname.h> now that it rdatastruct.h does not provide it 2000-07-31 20:53:56 +00:00
David Lawrence 15a4474541 word wrap copyright notice at column 70 2000-07-27 09:55:03 +00:00
Brian Wellington 969f24b04c dns_dnssec_verifymessage should make sure that it's verifying with the right
key (which should be the case anyway, but it never hurts to check).  Also
fix a memory leak and change a few _tostruct() calls to not allocate memory.
2000-07-25 17:12:00 +00:00
Brian Wellington b3ef06344a DST API updates 2000-06-06 22:01:49 +00:00
Brian Wellington 4fe8755480 Use the new DST API 2000-06-02 18:59:33 +00:00
David Lawrence 6d12fdf966 Megacommit of many files.
Mostly, several functions that take pointers as arguments, almost
always char * pointers, had those pointers qualified with "const".
Those that returned pointers to previously const-qualified arguments
had their return values qualified as const.  Some structure members
were qualified as const to retain that attribute from the variables
from which they were assigned.

The macro DE_CONST is used to deal with a handful of very special
places where something is qualified as const but really needs to have
its const qualifier removed.

rdata.c now defines macros for the prototypes of the basic rdata functions,
and all of the lib/dns/rdata/**/*.c files now use them.

Some minor integer-compatibility issues.  (IE, ~0x03 is a signed int,
so assigning it to an unsigned int should use a cast.  The type of an
enum member is int, so there are some conversion issues there, too.)

A pointers-to-function should not be cast to a pointer-to-object.

Variables should not be named for C reserved identifiers.

One or two set-but-not-used variables removed.

Minor other ISC style cleanups.
2000-06-01 18:26:56 +00:00
Brian Wellington 8c8b6b1ce5 include isc/buffer.h, dns/rdatastruct.h 2000-05-30 22:30:39 +00:00
Brian Wellington a9bc95f22e dst now stores the key name as a dns_name_t, not a char *. 2000-05-24 23:13:32 +00:00
Brian Wellington fa686a7235 removed more invalid _freestruct calls 2000-05-20 01:27:28 +00:00
Brian Wellington c50936eb40 changed dst_key_free() prototype, misc. dst cleanup 2000-05-19 00:20:59 +00:00
Brian Wellington 81ab85fd39 dst function name cleanup 2000-05-17 22:48:10 +00:00
Michael Sawyer 9b171934ef Change REQUIRE test to allow signing of root domain 2000-05-17 02:15:08 +00:00
David Lawrence 1a69a1a78c Megacommit of dozens of files.
Cleanup of redundant/useless header file inclusion.

ISC style lint, primarily for function declarations and standalone
comments -- ie, those that appear on a line without any code, which
should be written as follows:
   /*
    * This is a comment.
    */
2000-05-08 14:38:29 +00:00
David Lawrence 09f22ac5b0 Redundant header work, mostly removing <dns/result.h> from installed
headers and adding it to source files that need it.
2000-05-02 03:54:17 +00:00
Mark Andrews b8dd48ecf8 119. [cleanup] structure definitions for generic rdata stuctures do
not have _generic_ in their names.
2000-04-28 02:08:37 +00:00