ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
Files
76cf72e65a7ff23d3ad10dc917d58d7520e1d44e
bind9/lib/dns
History
Matthijs Mekking 76cf72e65a Correctly initialize old key with state file 
The 'key_init()' function is used to initialize a state file for keys
that don't have one yet. This can happen if you are migrating from a
'auto-dnssec' or 'inline-signing' to a 'dnssec-policy' configuration.

It did not look at the "Inactive" and "Delete" timing metadata and so
old keys left behind in the key directory would also be considered as
a possible active key. This commit fixes this and now explicitly sets
the key goal to OMNIPRESENT for keys that have their "Active/Publish"
timing metadata in the past, but their "Inactive/Delete" timing
metadata in the future. If the "Inactive/Delete" timing metadata is
also in the past, the key goal is set to HIDDEN.

If the "Inactive/Delete" timing metadata is in the past, also the
key states are adjusted to either UNRETENTIVE or HIDDEN, depending on
how far in the past the metadata is set.
2021-02-03 08:36:01 +01:00
..
include
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
rdata
Add comment about cookie sizes
2020-11-26 20:48:46 +00:00
tests
Print warning when falling back to increment soa serial method
2020-12-11 10:48:28 +01:00
win32
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
.gitignore
…
acl.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
adb.c
Simplify the EDNS buffer size logic for DNS Flag Day 2020
2020-10-05 16:21:21 +02:00
badcache.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
byaddr.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
cache.c
Remove the option 'cleaning-interval'
2021-01-19 10:12:40 +01:00
callbacks.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
catz.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
client.c
The dns_message_create() cannot fail, change the return to void
2020-09-29 08:22:08 +02:00
clientinfo.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
compress.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
db.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
dbiterator.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
diff.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dispatch.c
Silence cppcheck 2.2 false positive in udp_recv()
2020-11-25 12:45:47 +01:00
dlz.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
dns64.c
add dns_dns64_findprefix
2020-11-25 08:25:29 +11:00
dnsrps.c
Add stale-refresh-time option
2020-11-11 12:53:23 -03:00
dnssec.c
Publish CDS/CDNSKEY Delete Records
2020-12-23 09:02:11 +01:00
dnstap.c
The dns_message_create() cannot fail, change the return to void
2020-09-29 08:22:08 +02:00
dnstap.proto
…
ds.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_api.c
Add function to see if dst key uses kasp
2020-12-23 09:02:11 +01:00
dst_internal.h
Add function to see if dst key uses kasp
2020-12-23 09:02:11 +01:00
dst_openssl.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_parse.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_parse.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_pkcs11.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dst_result.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
dyndb.c
Use libuv's shared library handling capabilities
2020-10-28 15:48:58 +01:00
ecs.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
fixedname.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
forward.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
gen-unix.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gen-win32.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gen.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
geoip2.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gssapi_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
gssapictx.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
hmac_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ipkeylist.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
iptable.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
journal.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
kasp.c
Fix signatures-validity config option
2021-01-12 10:54:48 +00:00
key.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
keydata.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
keymgr.c
Correctly initialize old key with state file
2021-02-03 08:36:01 +01:00
keytable.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
lib.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
log.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
lookup.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
Makefile.am
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
master.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
masterdump.c
rndc dumpdb -expired: print when RRsets expired
2020-09-23 16:09:26 +02:00
message.c
Check that sig0 name is the root.
2020-09-30 13:24:29 +00:00
name.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ncache.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
nsec3.c
Detect NSEC3 salt collisions
2020-11-26 10:43:59 +01:00
nsec.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
nta.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
openssl_link.c
Refactor TLSDNS module to work with libuv/ssl directly
2021-01-25 09:19:22 +01:00
openssldh_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
opensslecdsa_link.c
Make opensslecdsa_parse use fromlabel
2021-01-26 15:01:26 +01:00
openssleddsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
opensslrsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
order.c
Allow "order none" in "rrset-order" rules
2020-10-02 08:41:43 +02:00
peer.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11ecdsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11eddsa_link.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
pkcs11rsa_link.c
Fix misplaced declaration
2020-12-01 10:46:58 +11:00
private.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rbt.c
Reformat sources using clang-format-11
2020-12-08 18:36:23 +01:00
rbtdb.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
rbtdb.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rcode.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdata.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdatalist_p.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdatalist.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdataset.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdatasetiter.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rdataslab.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
request.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
resolver.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
result.c
Add NSEC3PARAM unit test, refactor zone.c
2020-11-26 10:43:59 +01:00
rootns.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rpz.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
rriterator.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
rrl.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
sdb.c
Add stale-refresh-time option
2020-11-11 12:53:23 -03:00
sdlz.c
Add stale-refresh-time option
2020-11-11 12:53:23 -03:00
soa.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ssu_external.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
ssu.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
stats.c
Update comments to have binary notation
2020-09-29 10:36:07 +10:00
tcpmsg.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
time.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
timer.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
tkey.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
transport.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
tsec.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
tsig_p.h
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
tsig.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
ttl.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
update.c
Treat dnssec-policy "none" as a builtin zone
2020-12-23 09:02:11 +01:00
validator.c
Handle DNS_R_NCACHENXRRSET in fetch_callback_{dnskey,validator}()
2020-10-30 00:17:24 +11:00
view.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
xfrin.c
implement xfrin via XoT
2021-01-29 12:07:38 +01:00
zone_p.h
Add NSEC3PARAM unit test, refactor zone.c
2020-11-26 10:43:59 +01:00
zone.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00
zonekey.c
update all copyright headers to eliminate the typo
2020-09-14 16:20:40 -07:00
zoneverify.c
Optimise dnssec-verify
2021-01-28 11:07:03 +11:00
zt.c
Cleanup redundant isc_rwlock_init() result checks
2021-02-03 12:22:33 +11:00