Matthijs Mekking d0db5c07f8 Fix algorithm rollover bug wrt keytag conflicts ...

If there is an algorithm rollover and two keys of different algorithm
share the same keytags, then there is a possibility that if we check
that a key matches a specific state, we are checking against the wrong
key.

Fix this by not only checking for matching key id but also key
algorithm.

(cherry picked from commit f37eb33f29)

2024-08-22 12:58:00 +00:00

..

include

Retrieve RRSIG from SKR

2024-08-22 10:17:08 +00:00

rdata

Use clang-format-19 to update formatting

2024-08-22 08:16:03 +00:00

.gitignore

…

acl.c

…

adb.c

Do not update find.result_v4 and find.result_v6

2024-07-31 06:20:45 +00:00

badcache.c

…

byaddr.c

…

cache.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

callbacks.c

add setup/commit functions to rdatacallbacks

2024-03-08 15:36:56 -08:00

catz.c

Reconfigure catz member zones during named reconfiguration

2024-08-13 16:57:50 +02:00

client.c

make "max_restarts" a configurable value

2024-08-07 21:12:34 +00:00

clientinfo.c

…

compress.c

…

db_p.h

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

db.c

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

dbiterator.c

…

diff.c

add setup/commit functions to rdatacallbacks

2024-03-08 15:36:56 -08:00

dispatch.c

Always call the TCP dispatch connected callbacks asynchronously

2024-03-04 16:34:14 +01:00

dlz.c

…

dns64.c

…

dnsrps.c

improve node reference counting

2024-03-08 15:36:56 -08:00

dnssec.c

Don't read private key files for offline KSKs

2024-08-22 10:17:08 +00:00

dnstap.c

Emit and read correct DoT and DoH dnstap entries

2024-04-26 16:12:29 +03:00

dnstap.proto

Update the dnstap protobuf definition

2024-04-26 16:08:46 +03:00

ds.c

…

dst_api.c

Merge tag 'v9.19.21'

2024-02-14 13:24:56 +01:00

dst_internal.h

…

dst_openssl.h

…

dst_parse.c

…

dst_parse.h

…

dyndb.c

…

ecs.c

…

fixedname.c

…

forward.c

reduce memory consumption of the remaining QP databases

2024-03-14 10:25:07 -07:00

gen.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-02-08 08:01:58 +01:00

geoip2.c

…

gssapi_link.c

…

gssapictx.c

…

hmac_link.c

…

ipkeylist.c

…

iptable.c

…

journal.c

…

kasp.c

Add offline-ksk option

2024-08-22 10:17:08 +00:00

key.c

…

keydata.c

…

keymgr.c

Fix algorithm rollover bug wrt keytag conflicts

2024-08-22 12:58:00 +00:00

keystore.c

Replace keystore attach/detach with ISC_REFCOUNT_IMPL/ISC_REFCOUNT_DECL

2024-01-25 15:37:40 +01:00

keytable.c

reduce memory consumption of the remaining QP databases

2024-03-14 10:25:07 -07:00

log.c

…

Makefile.am

Add code to store SKR

2024-08-22 10:17:08 +00:00

master.c

Remove infinite loop on ISC_R_NOFILE

2024-05-07 10:01:12 +10:00

masterdump.c

Fix yaml output

2024-08-01 03:48:08 +00:00

message.c

Remove unnecessary operations

2024-08-02 06:42:59 +00:00

name.c

include the nodenames when calculating memory to purge

2024-04-30 12:50:01 -07:00

nametree.c

get foundname from the node

2024-04-30 12:50:01 -07:00

ncache.c

Use atomic operations to access the trust byte in ncache data

2024-04-17 17:14:34 +02:00

nsec3.c

…

nsec.c

…

nta.c

complete removal of isc_loop_current()

2024-04-02 10:35:56 +02:00

openssl_link.c

Use EXIT_SUCCESS and EXIT_FAILURE

2024-02-08 08:01:58 +01:00

openssl_shim.c

…

openssl_shim.h

…

opensslecdsa_link.c

…

openssleddsa_link.c

…

opensslrsa_link.c

…

order.c

…

peer.c

…

private.c

…

probes.d

…

qp_p.h

…

qp.c

Rewrite qp fix_iterator()

2024-05-16 09:49:41 +00:00

qpcache_p.h

rename qpdb to qpcache

2024-03-08 15:36:56 -08:00

qpcache.c

Be smarter about refusing to add many RR types to the database

2024-07-01 12:48:51 +02:00

qpzone_p.h

stub dns_qpmulti-based zone database implementation

2024-03-06 20:57:31 -08:00

qpzone.c

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

rbt-cachedb.c

Add a limit to the number of RR types for single name

2024-06-10 16:55:09 +02:00

rbt-zonedb.c

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

rbt.c

Reduce lock contention during RBTDB tree pruning

2024-02-29 11:23:03 +01:00

rbtdb_p.h

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

rbtdb.c

Fix the glue table in the QP and RBT zone databases

2024-08-05 14:43:18 +00:00

rcode.c

…

rdata.c

Properly reject zero length ALPN in commatxt_fromtext

2024-08-01 01:10:48 +00:00

rdatalist.c

…

rdataset.c

…

rdatasetiter.c

…

rdataslab.c

Use clang-format-19 to update formatting

2024-08-22 08:16:03 +00:00

remote.c

…

request.c

Restore dns_requestmgr_shutdown re-entrancy

2024-02-07 09:52:32 +11:00

resconf.c

Address CID 486326: Memory - corruptions (OVERRUN)

2024-02-13 09:21:49 +11:00

resolver.c

Don't skip the counting if fcount_incr() is called with force==true (v2)

2024-08-13 16:08:12 +02:00

result.c

…

rootns.c

add a compile-time option to select default zone and cache DB

2024-03-06 10:49:02 +01:00

rpz.c

use a thread-local variable to get the current running loop

2024-04-02 10:35:56 +02:00

rriterator.c

…

rrl.c

Update sources to Clang 18 formatting

2024-04-23 13:11:52 +02:00

sdlz.c

dns_name_dupwithoffsets() cannot fail

2024-04-10 22:51:07 -04:00

skr.c

Implement SKR import

2024-08-22 10:17:08 +00:00

soa.c

…

ssu_external.c

…

ssu.c

Add missing period to generated IPv4 6to4 name

2024-08-01 06:41:47 +00:00

stats.c

…

tests

…

time.c

…

tkey.c

…

transport.c

…

tsig_p.h

…

tsig.c

…

ttl.c

…

update.c

Disable some behavior in offline-ksk mode

2024-08-22 10:17:08 +00:00

validator.c

apply max-recursion-queries quota to validator queries

2024-08-07 21:12:34 +00:00

view.c

make "max_restarts" a configurable value

2024-08-07 21:12:34 +00:00

xfrin.c

Make dns_xfrin_shutdown() safe to run from a different loop

2024-08-01 17:04:27 +00:00

zone_p.h

…

zone.c

Disable some behavior in offline-ksk mode

2024-08-22 10:17:08 +00:00

zonekey.c

…

zoneverify.c

Properly build the NSEC/NSEC3 type bit map

2024-05-16 10:27:49 +10:00

zt.c

use dns_qp_getname() where possible

2024-04-30 12:50:01 -07:00