633 Commits
Author SHA1 Message Date
Automatic Updater 2628293c6e regen HEAD 2011-11-08 01:14:50 +00:00
Automatic Updater 0237221b8a update copyright notice 2011-11-07 23:46:50 +00:00
Evan Hunt d9eebc0849 3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
option prints in single-line-per-record format.
			[RT #20287]
2011-11-07 23:16:31 +00:00
Automatic Updater 77dccf2a5d regen HEAD 2011-11-05 01:14:51 +00:00
Evan Hunt d7be2b79ed 3198. [doc] Clarified that dnssec-settime can alter keyfile
permissions. [RT #24866]
2011-11-03 20:21:37 +00:00
Automatic Updater e839bf134f regen HEAD 2011-10-26 01:14:53 +00:00
Mark Andrews b1c6de5456 3177. [func] 'rndc keydone', remove the indicator record that
named has finished signing the zone with the
                        corresponding key.  [RT #26206]
2011-10-25 01:54:22 +00:00
Mark Andrews f49d12edf8 remove redundant assignment and variable 2011-10-21 03:55:33 +00:00
Automatic Updater 12bfbed87c regen HEAD 2011-10-21 01:14:51 +00:00
Automatic Updater dfc015bc7e update copyright notice 2011-10-20 23:46:51 +00:00
Mark Andrews 1946c596b4 3174. [bug] Always compute to revoked key tag from scratch.
[RT #24711]
2011-10-20 21:20:02 +00:00
Evan Hunt 653a78de95 3165. [bug] dnssec-signzone could generate new signatures when
resigning, even when valid signatures were already
			present. [RT #26025]
2011-10-11 19:26:06 +00:00
Evan Hunt ab6c20f978 fix whitespace 2011-09-03 05:51:29 +00:00
Mark Andrews 3a63259484 3143. [bug] Silence clang compiler warnings. [RT #25174] 2011-08-18 04:52:35 +00:00
Automatic Updater 3d73f493d0 update copyright notice 2011-07-19 23:47:48 +00:00
Mark Andrews 96ade2bc52 3134. [bug] Improve the accuracy of dnssec-signzone's signing
statistics. [RT #16030]
2011-07-19 04:09:27 +00:00
Evan Hunt 79ce3a9e82 3128. [func] Inserting an NSEC3PARAM via dynamic update in an
auto-dnssec zone that has not been signed yet
			will cause it to be signed with the specified NSEC3
			parameters when keys are activated.  The
			NSEC3PARAM record will not appear in the zone until
			it is signed, but the parameters will be stored.
			[RT #23684]
2011-06-10 01:51:09 +00:00
Evan Hunt 6b95b91c61 3122. [cleanup] dnssec-settime: corrected usage message. [RT #24664] 2011-06-02 20:24:45 +00:00
Evan Hunt be84733145 3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369]
2011-05-07 00:31:13 +00:00
Evan Hunt 485522d7e1 3108. [cleanup] dnssec-signzone: Clarified some error and
warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
			code (use -P instead). [RT #20852]

3107.	[bug]		dnssec-signzone: Report the correct number of ZSKs
			when using -x. [RT #20852]
2011-05-06 21:08:33 +00:00
Automatic Updater 795a316ec5 regen HEAD 2011-03-28 01:14:35 +00:00
Mark Andrews 2ae23f7fc6 </para> -> <para> 2011-03-27 06:39:59 +00:00
Mark Andrews fdc2d31c00 </para>-><para> 2011-03-25 03:08:44 +00:00
Automatic Updater 06140f733a update copyright notice 2011-03-24 23:47:48 +00:00
Mark Andrews 0a82492610 3089. [func] dnssec-dsfromkey now supports reading keys from
standard input "dnssec-dsfromkey -f -". [RT# 20662]
2011-03-24 02:10:23 +00:00
Evan Hunt c2255e8614 Fixed a bug that was exposed by change #3085. 2011-03-22 03:19:38 +00:00
Automatic Updater 7717ec7a6a regen HEAD 2011-03-22 01:14:27 +00:00
Evan Hunt dff7e38491 initialize delset 2011-03-21 16:17:57 +00:00
Evan Hunt 10a759cee6 3086. [bug] Running dnssec-settime -f on an old-style key will
now force an update to the new key format even if no
			other change has been specified, using "-P now -A now"
			as default values.  [RT #22474]
2011-03-21 15:56:35 +00:00
Evan Hunt 35f1a4fc93 3085. [func] New '-R' option in dnssec-signzone forces removal
of signatures which have not yet expired but
			were generated by a key that no longer exists.
			[RT #22471]
2011-03-21 07:26:47 +00:00
Mark Andrews f79a36eeed silence: 'ttl' might be used uninitialized 2011-03-18 02:16:43 +00:00
Automatic Updater a3f8c8e207 regen HEAD 2011-03-18 01:14:34 +00:00
Automatic Updater 207cee019e update copyright notice 2011-03-17 23:47:30 +00:00
Evan Hunt 61bcc23203 3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
dnssec-keyfromlabel sets the default TTL of the
			key.  When possible, automatic signing will use that
			TTL when the key is published.  [RT #23304]
2011-03-17 01:40:40 +00:00
Automatic Updater c1aef54e14 update copyright notice 2011-03-12 04:59:49 +00:00
Mark Andrews 6494526350 3070. [bug] dnssec-signzone potential NULL pointer dereference.
[RT #20256]
2011-03-11 12:37:01 +00:00
Mark Andrews 0874abad14 3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256]
2011-03-11 06:11:27 +00:00
Francis Dupont cf39976b89 while(1) -> for(;;) (cf 23588) 2011-03-10 13:37:21 +00:00
Automatic Updater be6c1c5061 regen HEAD 2011-03-06 01:14:21 +00:00
Automatic Updater 0e27506ce3 update copyright notice 2011-03-05 23:52:31 +00:00
Mark Andrews eff7f78bc6 3061. [func] New option "dnssec-signzone -D", only write out
generated DNSSEC records. [RT #22896]
2011-03-05 06:35:41 +00:00
Automatic Updater 60a900e83b regen HEAD 2011-03-05 01:14:22 +00:00
Automatic Updater 26a7306397 update copyright notice 2011-03-04 23:47:47 +00:00
Evan Hunt 61271cdee6 3060. [func] New option "dnssec-signzone -X <date>" allows
specification of a separate expiration date
			for DNSKEY RRSIGs and other RRSIGs. [RT #22141]
2011-03-04 22:20:21 +00:00
Automatic Updater c8175ece69 update copyright notice 2011-03-01 23:48:07 +00:00
Mark Andrews 2f09e7c3fc 3041. [bug] dnssec-signzone failed to generate new signatures on
ttl changes. [RT #23330]
2011-02-24 03:04:43 +00:00
Automatic Updater 79cf9524b1 regen HEAD 2011-02-04 01:14:16 +00:00
Automatic Updater 784a904bd0 update copyright notice 2011-02-03 12:18:12 +00:00
Mark Andrews 5cfe4bcb0a 3017. [doc] dnssec-keyfromlabel -I was not properly documented.
[RT #22887]
2011-02-03 12:01:44 +00:00
Automatic Updater 0e9e255d16 regen HEAD 2010-12-24 01:14:21 +00:00