ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity
Files
bb1c40e0a33d4288a66fcad81a76a5bfc813848c
bind9/lib/dns
T
History
Aram Sargsyan 4b80324f51 Don't trust a placeholder KEYDATA record 
When named starts it creates an empty KEYDATA record in the managed-keys
zone as a placeholder, then schedules a key refresh. If key refresh
fails for some reason (e.g. connectivity problems), named will load the
placeholder key into secroots as a trusted key during the next startup,
which will break the chain of trust, and named will never recover from
that state until managed-keys.bind and managed-keys.bind.jnl files are
manually deleted before (re)starting named again.

Before calling load_secroots(), check that we are not dealing with a
placeholder.

(cherry picked from commit 354ae2d7e3)
2022-11-01 10:49:51 +00:00
..
include
Replace alg_totext with dst_hmac_algorithm_totext
2022-09-27 16:55:33 +02:00
rdata
Add support for 'dohpath' to SVCB (and HTTPS)
2022-10-04 15:32:22 +11:00
.gitignore
…
acl.c
Add isc_rwlock around dns_aclenv .localhost and .localnets member
2022-04-26 14:21:57 +02:00
adb.c
Lock the address entry bucket when dumping ADB namehook
2022-08-12 15:55:41 -07:00
badcache.c
…
byaddr.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
cache.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
callbacks.c
…
catz.c
Check that primary key names have not changed
2022-09-27 22:19:37 +10:00
client.c
Add synth-from-dnssec namespaces for keytable entries
2022-07-07 07:47:45 +10:00
clientinfo.c
…
compress.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
db.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
dbiterator.c
…
diff.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
dispatch.c
remove unnecessary assertion in dns_dispatch_connect()
2022-07-14 19:27:24 -07:00
dlz.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
dns64.c
Add isc_rwlock around dns_aclenv .localhost and .localnets member
2022-04-26 14:21:57 +02:00
dnsrps.c
…
dnssec.c
Add the ability specify the signing / verification time
2022-09-26 16:30:36 +02:00
dnstap.c
dnstap query_message field was erroneously set with responses
2022-08-31 15:24:00 -07:00
dnstap.proto
…
ds.c
…
dst_api.c
Replace alg_totext with dst_hmac_algorithm_totext
2022-09-27 16:55:33 +02:00
dst_internal.h
Check if key metadata is modified before writing
2022-05-16 10:37:23 +02:00
dst_openssl.h
…
dst_parse.c
…
dst_parse.h
…
dyndb.c
…
ecs.c
…
fixedname.c
…
forward.c
Cleanup dns_fwdtable_delete()
2022-06-09 10:52:04 +00:00
gen.c
…
geoip2.c
…
gssapi_link.c
…
gssapictx.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
hmac_link.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
ipkeylist.c
…
iptable.c
…
journal.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
kasp.c
Store built-in dnssec-policies in defaultconf
2022-06-28 14:36:38 +02:00
key.c
…
keydata.c
…
keymgr.c
Nit changes in keymgr and kasp
2022-06-28 14:36:53 +02:00
keytable.c
Add synth-from-dnssec namespaces for keytable entries
2022-07-07 07:47:45 +10:00
log.c
…
lookup.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
Makefile.am
Update libdns_la_LIBADD rather than libdns_la_LDFLAGS
2022-07-13 10:46:37 +10:00
master.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
masterdump.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
message.c
Stop passing mctx to dns_rdata_tostruct as it is unnecessary for SIG
2022-09-26 12:01:44 +02:00
name.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
ncache.c
Update the rdataset->trust field in ncache.c:rdataset_settrust
2022-04-19 09:44:09 +10:00
nsec3.c
nsec3.c: Add a missing dns_db_detachnode() call
2022-08-23 12:04:08 +02:00
nsec.c
Wait with NSEC3 during a DNSSEC policy change
2022-08-22 19:21:39 +02:00
nta.c
…
openssl_link.c
Add ENGINE_init and ENGINE_finish calls
2022-09-23 14:05:16 +10:00
openssl_shim.c
…
openssl_shim.h
…
openssldh_link.c
Do not use OSSL_PARAM when engine API is compiled
2022-09-23 14:07:14 +10:00
opensslecdsa_link.c
Remove engine related parts for OpenSSL 3.0
2022-09-23 14:07:21 +10:00
openssleddsa_link.c
Free ctx on invalid siglen
2022-09-08 11:55:29 +02:00
opensslrsa_link.c
Check BN_dup results in rsa_check
2022-09-28 09:49:04 +10:00
order.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
peer.c
…
private.c
Increase the BUFSIZ-long buffers
2022-07-15 21:16:51 +02:00
rbt.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
rbtdb.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
rbtdb.h
…
rcode.c
…
rdata.c
Additional safety check for negative array index
2022-04-29 11:46:22 +10:00
rdatalist_p.h
…
rdatalist.c
…
rdataset.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
rdatasetiter.c
…
rdataslab.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
request.c
merge dns_request_createvia() into dns_request_create()
2022-09-15 16:49:04 -07:00
resolver.c
Match prefetch eligibility behavior with ARM
2022-10-21 10:22:29 +00:00
result.c
…
rootns.c
…
rpz.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
rriterator.c
…
rrl.c
Fix RRL responses-per-second bypass using wildcard names
2022-09-08 09:36:50 +02:00
sdb.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
sdlz.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
soa.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
ssu_external.c
…
ssu.c
Add isc_rwlock around dns_aclenv .localhost and .localnets member
2022-04-26 14:21:57 +02:00
stats.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
tests
Move all the unit tests to /tests/<libname>/
2022-05-31 12:06:00 +02:00
time.c
…
tkey.c
Fix tkey.c:buildquery() function's error handling
2022-08-17 08:36:07 +00:00
transport.c
Rename "hostname" to "remote-hostname" within "tls"
2022-05-03 17:42:43 +03:00
tsec.c
…
tsig_p.h
…
tsig.c
Add the ability specify the signing / verification time
2022-09-26 16:30:36 +02:00
ttl.c
…
update.c
…
validator.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
view.c
De-duplicate __FILE__, __LINE__
2022-10-17 16:00:26 +01:00
xfrin.c
CID 352848: split xfrin_start() and remove dead code
2022-06-15 17:02:45 +03:00
zone_p.h
…
zone.c
Don't trust a placeholder KEYDATA record
2022-11-01 10:49:51 +00:00
zonekey.c
…
zoneverify.c
Remove use of the inline keyword used as suggestion to compiler
2022-03-25 08:42:18 +01:00
zt.c
…