Commit Graph
474 Commits
Author SHA1 Message Date
Automatic Updater a08946269c update copyright notice 2010-06-03 23:47:49 +00:00
Mark Andrews 463e599d1e 2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367]
2010-06-03 03:38:53 +00:00
Automatic Updater a3ade17cb9 regen v9_6 2010-05-19 02:06:11 +00:00
Automatic Updater 7aca55cd83 regen 2010-01-16 01:55:32 +00:00
Automatic Updater 9feb8eda57 update copyright notice 2010-01-15 23:47:34 +00:00
Automatic Updater 763250ea4e regen 2010-01-15 20:35:07 +00:00
Evan Hunt 3f39cbcc76 2838. [func] Backport support for SHA-2 DNSSEC algorithms,
RSASHA256 and RSASHA512, from BIND 9.7.  (This
			incorporates changes 2726 and 2738 from that
			release branch.) [RT #20871]
2010-01-15 19:38:54 +00:00
Automatic Updater d889e9701a update copyright notice 2010-01-11 23:47:22 +00:00
Francis Dupont 6720b9fe94 Prevent Linux spurious warnings about fwrite(). [RT #20812] 2010-01-11 11:02:32 +00:00
Automatic Updater f1ff7b7b8b regen 2009-12-03 05:06:40 +00:00
Automatic Updater 0bbfdc2806 update copyright notice 2009-12-03 04:49:32 +00:00
Mark Andrews 50331a1a93 2659. [doc] Clarify dnssec-keygen doc: key name must match zone
name for DNSSEC keys. [RT #19938]
2009-12-03 04:30:39 +00:00
Automatic Updater 9b6701361e regen 2009-11-07 01:56:12 +00:00
Evan Hunt b514948e9d 2755. [doc] Clarify documentation of keyset- files in
dnssec-signzone man page. [RT #19810]
2009-11-06 21:36:22 +00:00
Automatic Updater ef2dfb76b9 update copyright notice 2009-11-03 23:47:46 +00:00
Mark Andrews 5f5bb6cba2 line wrap 2009-11-03 01:39:31 +00:00
Mark Andrews 961ff176c2 line wrap cleanup 2009-11-03 01:17:40 +00:00
Automatic Updater ca31221f5b update copyright notice 2009-09-23 23:47:15 +00:00
Mark Andrews ee73600181 2684. [bug] dnssec-signzone should clean the old NSEC chain when
signing with NSEC3 and vica versa. [RT #20301]
2009-09-23 14:06:42 +00:00
Mark Andrews f2445757f1 2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
the NSEC3 parameters used to sign the zone change.
                        [RT #20246]
2009-09-23 07:08:01 +00:00
Automatic Updater c33527c0d2 update copyright notice 2009-09-04 23:46:58 +00:00
Mark Andrews 42e5782189 ALG_FORMATSIZE -> 20 2009-09-04 02:38:33 +00:00
Mark Andrews 23cb85e6e6 2637. [func] Rationalize dnssec-signzone's signwithkey() calling.
[RT #19959]
2009-07-21 03:33:05 +00:00
Automatic Updater 76728b8bc6 regen 2009-07-11 01:55:23 +00:00
Mark Andrews ee93a63b2f missing unsigned 2009-06-24 01:26:32 +00:00
Automatic Updater 8fa3d35e1b regen 2009-06-23 01:53:58 +00:00
Automatic Updater 6e67205ba7 update copyright notice 2009-06-22 23:47:18 +00:00
Mark Andrews e6be77a26c 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-22 05:05:01 +00:00
Tatuya JINMEI 神明達哉 dc653165b0 2613. [bug] Option argument validation was missing for
dnssec-dsfromkey. [RT #19828]
2009-06-17 23:41:58 +00:00
Automatic Updater 0aa00c0fbe regen 2009-06-10 01:54:15 +00:00
Evan Hunt 2d7fc2d5a6 added "known bugs" section to dnssec-signzone man page, edited
KNOWN-DEFECTS a bit
2009-06-09 01:47:19 +00:00
Automatic Updater 4b24acd9f1 update copyright notice 2009-06-08 23:47:00 +00:00
Evan Hunt 4d6469ffd8 Back out dnssec-signzone fix for 9.6.1 2009-06-08 22:23:07 +00:00
Automatic Updater b3def9bbf7 regen 2009-06-07 01:53:42 +00:00
Jeremy Reed d9cf22cc5a Please bump date on manpage. So we know we aren't using 2000 docs.
For -P: clean up sentence and clarify that the option skips the tests.

(This is for RT19653. No CHANGES entry added for this minor fix.)

This is v9_6, okayed in RT19653.
2009-06-06 01:46:54 +00:00
Mark Andrews b13b64028b missing unsigned 2009-06-05 06:56:40 +00:00
Mark Andrews e5e510dbab fix up merge 2009-06-04 03:11:31 +00:00
Automatic Updater 91c526913b regen 2009-06-04 03:07:24 +00:00
Automatic Updater c441671e8f update copyright notice 2009-06-04 02:56:14 +00:00
Mark Andrews 5fa0c17a78 2608. [func] Perform post signing verification checks in
dnssec-signzone.  These can be disabled with -P.

                        The post sign verification test ensures that for each
                        algorithm in use there is at least one non revoked
                        self signed KSK key.  That all revoked KSK keys are
                        self signed.  That all records in the zone are signed
                        by the algorithm.  [RT #19653]
2009-06-04 02:41:54 +00:00
Mark Andrews c5daf291bc 2567. [bug] dst__privstruct_writefile() could miss write errors.
write_public_key() could miss write errors.
                        dnssec-dsfromkey could miss write errors.
                        [RT #19360]
2009-03-02 02:56:13 +00:00
Automatic Updater f0071326b6 update copyright notice 2009-02-17 23:47:15 +00:00
Mark Andrews 3b14986bdf 2559. [bug] dnssec-dsfromkey could compute bad DS records when
reading from a K* files.  [RT #19357]
2009-02-17 00:18:27 +00:00
Mark Andrews d7900926bf spelling 2009-01-18 23:25:18 +00:00
Automatic Updater c0ea6ba330 update copyright notice 2009-01-06 23:47:26 +00:00
Francis Dupont 0f5bed2b20 dnssec-signzone needs strtoul() - 19129 2009-01-06 09:13:05 +00:00
Mark Andrews 8bf0c05627 2515. [port] win32: build dnssec-dsfromkey and dnssec-keyfromlabel.
[RT #19063]
2008-12-14 21:14:54 +00:00
Mark Andrews c4c6e5094b dnssec-dsfromkey 2008-12-01 04:20:22 +00:00
Mark Andrews 50df1ec60a 2495. [bug] Tighten RRSIG checks. [RT #18795] 2008-11-14 22:53:46 +00:00
Automatic Updater b27ce68bae regen 2008-11-08 01:11:47 +00:00