Matthijs Mekking c499478321 Clear dnssec-sign stats for removed keys ...

Clear the key slots for dnssec-sign statistics for keys that are
removed. This way, the number of slots will stabilize to the maximum
key usage in a zone and will not grow every time a key rollover is
triggered.

(cherry picked from commit de15e07800)

2021-08-24 09:51:45 +02:00

..

include

Clear dnssec-sign stats for removed keys

2021-08-24 09:51:45 +02:00

rdata

Reject zero length ALPN elements in fromwire

2021-08-19 18:59:29 +10:00

tests

Reject zero length ALPN elements in fromwire

2021-08-19 18:59:29 +10:00

win32

Clear dnssec-sign stats for removed keys

2021-08-24 09:51:45 +02:00

.gitignore

…

acl.c

…

adb.c

…

badcache.c

…

byaddr.c

…

cache.c

Allow resetting hash table size limits for DNS DBs

2021-06-17 17:17:37 +02:00

callbacks.c

…

catz.c

…

client.c

properly initialise resarg->lock

2021-04-19 14:32:53 +02:00

clientinfo.c

…

compress.c

…

db.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

dbiterator.c

…

dbtable.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

diff.c

…

dispatch.c

Silence cppcheck 2.2 false positive in udp_recv()

2020-11-25 13:21:58 +01:00

dlz.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

dns64.c

…

dnsrps.c

Add stale-refresh-time option

2020-11-11 15:59:56 -03:00

dnssec.c

Use isdigit instead of checking character range

2021-05-05 18:23:53 +02:00

dnstap.c

Address theoretical resource leak in dns_dt_open()

2021-02-23 09:41:15 +11:00

dnstap.proto

…

ds.c

…

dst_api.c

Fix bug in dst_key_copymetadata

2021-08-11 15:18:10 +02:00

dst_internal.h

Protect dst key metadata with lock

2021-07-01 14:48:47 +02:00

dst_openssl.h

…

dst_parse.c

Add key metadata for DS published/withdrawn

2021-07-01 14:48:23 +02:00

dst_parse.h

…

dst_pkcs11.h

…

dst_result.c

…

dyndb.c

hacks to get dyndb working without libtool

2021-05-14 12:52:48 +02:00

ecdb.c

…

ecs.c

…

fixedname.c

…

forward.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

gen-unix.h

…

gen-win32.h

…

gen.c

…

geoip2.c

…

gssapi_link.c

Stop including <gssapi.h> from <dst/gssapi.h> header

2021-02-16 12:08:21 +11:00

gssapictx.c

Free resources when gss_accept_sec_context() fails

2021-04-08 10:41:08 +02:00

hmac_link.c

…

ipkeylist.c

…

iptable.c

…

journal.c

Order the diff from dns_db_diffx so that deletes proceed adds

2021-07-23 09:20:25 +10:00

kasp.c

Add purge-keys config option

2021-02-23 09:18:55 +01:00

key.c

…

keydata.c

…

keymgr.c

Migrate a single key to CSK with dnssec-policy

2021-08-23 10:36:42 +02:00

keytable.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

Kyuafile

…

lib.c

…

log.c

…

lookup.c

…

Makefile.in

Remove custom ISC SPNEGO implementation

2021-04-01 10:42:32 +02:00

mapapi

…

master.c

…

masterdump.c

Pause the dbiterator when dumping the zone to the disk

2021-06-04 11:32:31 +02:00

message.c

Update the source code formatting using clang-format-12

2021-06-13 08:19:44 +02:00

name.c

Use dns_name_copynf() with dns_message_gettempname() when needed

2021-05-22 07:17:01 +02:00

ncache.c

…

nsec3.c

Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure

2021-04-30 11:16:45 +02:00

nsec.c

…

nta.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

openssl_link.c

Remove TLSDNS, TLS and HTTP protocols from netmgr

2021-05-14 12:52:48 +02:00

openssldh_link.c

…

opensslecdsa_link.c

Make opensslecdsa_parse use fromlabel

2021-01-26 15:04:59 +01:00

openssleddsa_link.c

…

opensslrsa_link.c

…

order.c

Allow "order none" in "rrset-order" rules

2020-10-02 08:50:51 +02:00

peer.c

…

pkcs11.c

…

pkcs11ecdsa_link.c

…

pkcs11eddsa_link.c

…

pkcs11rsa_link.c

Fix misplaced declaration

2020-12-01 23:19:20 +11:00

portlist.c

…

private.c

…

rbt.c

Allow resetting hash table size limits for DNS DBs

2021-06-17 17:17:37 +02:00

rbtdb.c

Don't use stale nodes when looking up a zonecut

2021-08-16 19:32:16 +02:00

rbtdb.h

…

rcode.c

Use isdigit instead of checking character range

2021-05-05 18:23:53 +02:00

rdata.c

Parse and print HTTPS and SVCB records

2021-08-18 14:59:29 +10:00

rdatalist_p.h

…

rdatalist.c

…

rdataset.c

…

rdatasetiter.c

…

rdataslab.c

…

request.c

…

resolver.c

use a fixedname buffer in dns_message_gettempname()

2021-05-22 07:13:57 +02:00

result.c

Parse and print HTTPS and SVCB records

2021-08-18 14:59:29 +10:00

rootns.c

…

rpz.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

rriterator.c

…

rrl.c

…

sdb.c

Add stale-refresh-time option

2020-11-11 15:59:56 -03:00

sdlz.c

Add stale-refresh-time option

2020-11-11 15:59:56 -03:00

soa.c

…

ssu_external.c

…

ssu.c

…

stats.c

Clear dnssec-sign stats for removed keys

2021-08-24 09:51:45 +02:00

tcpmsg.c

…

time.c

…

timer.c

…

tkey.c

Use dns_name_copynf() with dns_message_gettempname() when needed

2021-05-22 07:17:01 +02:00

tsec.c

…

tsig_p.h

…

tsig.c

Use dns_name_copynf() with dns_message_gettempname() when needed

2021-05-22 07:17:01 +02:00

ttl.c

…

update.c

Lock kasp when looking for zone keys

2021-05-20 09:52:53 +02:00

validator.c

Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure

2021-04-30 11:16:45 +02:00

version.c

Use -release instead of -version-info for internal library SONAMEs

2021-01-25 15:28:09 +01:00

view.c

Don't freeze / thaw non-explict in-view zones

2021-08-12 04:19:44 +00:00

xfrin.c

use a fixedname buffer in dns_message_gettempname()

2021-05-22 07:13:57 +02:00

zone_p.h

Add NSEC3PARAM unit test, refactor zone.c

2020-11-26 14:15:05 +00:00

zone.c

Clear dnssec-sign stats for removed keys

2021-08-24 09:51:45 +02:00

zonekey.c

…

zoneverify.c

Silence untrusted loop bound on nsec3param.iterations

2021-07-12 12:16:29 +10:00

zt.c

Don't freeze / thaw non-explict in-view zones

2021-08-12 04:19:44 +00:00