Matthijs Mekking 4091177181 Verify new key files before running keymgr ...

Prior to running the keymgr, first make sure that existing keys
are present in the new keylist. If not, treat this as an operational
error where the keys are made offline (temporarily), possibly unwanted.

(cherry picked from commit 5fdad05a8a)

2024-10-14 13:54:09 +00:00

..

include

Revert "fix: chg: Improve performance when looking for the closest encloser"

2024-10-10 14:26:13 +02:00

rdata

Add the new record type WALLET (262)

2024-09-25 12:07:57 +00:00

.gitignore

…

acl.c

…

adb.c

Store static-stub addresses seperately in the adb

2024-10-01 15:30:17 +10:00

badcache.c

…

byaddr.c

…

cache.c

Add a limit to the number of RR types for single name

2024-06-10 18:50:06 +02:00

callbacks.c

…

catz.c

Reconfigure catz member zones during named reconfiguration

2024-08-09 08:52:25 +02:00

client.c

make "max_restarts" a configurable value

2024-08-07 15:36:15 -07:00

clientinfo.c

…

compress.c

…

db.c

Add a limit to the number of RR types for single name

2024-06-10 18:50:06 +02:00

dbiterator.c

…

diff.c

Log what change generated a 'not exact' error

2023-12-20 02:47:42 +11:00

dispatch.c

…

dlz.c

…

dns64.c

…

dnsrps.c

Add a limit to the number of RR types for single name

2024-06-10 18:50:06 +02:00

dnssec.c

Fix CDS/CDNSKEY is published logging

2024-01-17 10:05:20 +01:00

dnstap.c

…

dnstap.proto

…

ds.c

…

dst_api.c

Optimize selecting the signing key

2024-02-01 21:47:29 +01:00

dst_internal.h

…

dst_openssl.h

…

dst_parse.c

…

dst_parse.h

…

dyndb.c

…

ecs.c

…

fixedname.c

…

forward.c

…

gen.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-08-06 15:19:06 +02:00

geoip2.c

…

gssapi_link.c

…

gssapictx.c

…

hmac_link.c

…

ipkeylist.c

…

iptable.c

…

journal.c

…

kasp.c

Add signatures-jitter option

2024-04-18 15:00:07 +00:00

key.c

…

keydata.c

…

keymgr.c

Fix algorithm rollover bug wrt keytag conflicts

2024-08-22 10:15:02 +00:00

keytable.c

…

log.c

…

lookup.c

…

Makefile.am

…

master.c

Remove infinite loop on ISC_R_NOFILE

2024-05-07 01:06:14 +00:00

masterdump.c

Fix yaml output

2024-08-01 03:48:12 +00:00

message.c

Remove unnecessary operations

2024-08-02 06:43:03 +00:00

name.c

Use hashtable when parsing a message

2024-01-05 11:50:23 +01:00

ncache.c

Correctly set the value of covered in dns_ncache_current

2023-09-18 15:51:44 +10:00

nsec3.c

Don't delete the NSEC3PARAM immediately

2023-12-21 22:07:53 +11:00

nsec.c

…

nta.c

…

openssl_link.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-08-06 15:19:06 +02:00

openssl_shim.c

…

openssl_shim.h

…

openssldh_link.c

…

opensslecdsa_link.c

Check that buf is large enough

2023-09-01 14:06:27 +10:00

openssleddsa_link.c

Fix openssleddsa_isprivate

2024-08-19 23:38:18 +00:00

opensslrsa_link.c

Only declare 'engine' if it is used

2023-10-27 10:49:38 +11:00

order.c

…

peer.c

…

private.c

Update the source code formatting using clang-format-17

2023-10-18 09:02:57 +02:00

rbt.c

Reduce lock contention during RBTDB tree pruning

2024-02-29 12:39:26 +01:00

rbtdb.c

Revert "fix: chg: Improve performance when looking for the closest encloser"

2024-10-10 14:26:13 +02:00

rbtdb.h

…

rcode.c

Update code formatting

2024-09-11 11:47:10 +02:00

rdata.c

Properly reject zero length ALPN in commatxt_fromtext

2024-08-01 01:10:53 +00:00

rdatalist_p.h

…

rdatalist.c

…

rdataset.c

…

rdatasetiter.c

…

rdataslab.c

Add a limit to the number of RRs in RRSets

2024-06-10 18:50:03 +02:00

request.c

Prevent passing NULL to dns_dispatch_resume()

2024-05-15 21:24:24 +02:00

resolver.c

Store static-stub addresses seperately in the adb

2024-10-01 15:30:17 +10:00

result.c

…

rootns.c

Suppress reporting upcoming changes in root hints

2023-11-03 03:43:49 +11:00

rpz.c

…

rriterator.c

…

rrl.c

Update sources to Clang 18 formatting

2024-04-23 12:48:56 +00:00

sdb.c

Add a limit to the number of RR types for single name

2024-06-10 18:50:06 +02:00

sdlz.c

Add a limit to the number of RR types for single name

2024-06-10 18:50:06 +02:00

soa.c

…

ssu_external.c

…

ssu.c

Add missing period to generated IPv4 6to4 name

2024-08-02 00:09:17 +00:00

stats.c

Ineffective DbC protections

2023-12-06 09:01:05 +11:00

tests

…

time.c

…

tkey.c

…

transport.c

…

tsec.c

…

tsig_p.h

…

tsig.c

Address race in dns_tsigkey_find()

2024-01-05 11:19:58 +01:00

ttl.c

…

update.c

If kasp is not used, use legacy signature jitter

2024-04-18 15:00:07 +00:00

validator.c

apply max-recursion-queries quota to validator queries

2024-08-07 15:36:09 -07:00

view.c

Store static-stub addresses seperately in the adb

2024-10-01 15:30:17 +10:00

xfrin.c

allow IXFR-to-AXFR fallback on DNS_R_TOOMANYRECORDS

2024-09-10 14:54:57 +02:00

zone_p.h

…

zone.c

Verify new key files before running keymgr

2024-10-14 13:54:09 +00:00

zonekey.c

…

zoneverify.c

Properly build the NSEC/NSEC3 type bit map

2024-05-16 01:53:39 +00:00

zt.c

…