Matthijs Mekking dc6dafdad1 Ignore max-zone-ttl on dnssec-policy insecure ...

Allow larger TTL values in zones that go insecure. This is necessary
because otherwise the zone will not be loaded due to the max-zone-ttl
of P1D that is part of the current insecure policy.

In the keymgr.c code, default back to P1D if the max-zone-ttl is set
to zero.

2023-08-01 08:56:52 +02:00

..

include

Ignore max-zone-ttl on dnssec-policy insecure

2023-08-01 08:56:52 +02:00

rdata

…

.gitignore

…

acl.c

…

adb.c

Refactor dns_adb_create() to return void

2023-07-27 11:37:44 +02:00

badcache.c

Refactor dns_badcache to use cds_lfht lock-free hashtable

2023-07-31 15:51:15 +02:00

byaddr.c

…

cache.c

Refactor isc_stats_create() and its downstream users to return void

2023-07-27 11:37:44 +02:00

callbacks.c

…

catz.c

Use cds_lfht for updatenotify mechanism in dns_db unit

2023-07-31 18:11:34 +02:00

client.c

…

clientinfo.c

…

compress.c

…

db.c

Use cds_lfht for updatenotify mechanism in dns_db unit

2023-07-31 18:11:34 +02:00

dbiterator.c

…

diff.c

…

dispatch.c

use isc_loop_now() for dispentry timeouts

2023-07-19 15:32:21 +02:00

dlz.c

Refactor dns_zone_create() to return void

2023-07-27 11:37:44 +02:00

dns64.c

…

dnsrps.c

Give the rdataset->privateN fields more helpful names

2023-07-17 14:50:25 +02:00

dnssec.c

Update findzonekeys function name in log message

2023-06-14 09:08:56 +02:00

dnstap.c

Refactor isc_stats_create() and its downstream users to return void

2023-07-27 11:37:44 +02:00

dnstap.proto

…

ds.c

…

dst_api.c

get_key_struct() can no longer fail

2023-06-14 08:14:38 +00:00

dst_internal.h

…

dst_openssl.h

…

dst_parse.c

…

dst_parse.h

…

dyndb.c

…

ecs.c

…

fixedname.c

…

forward.c

…

gen.c

…

geoip2.c

…

gssapi_link.c

…

gssapictx.c

…

hmac_link.c

Emit deprecated warning for K* file pairs

2023-06-29 08:28:48 +10:00

ipkeylist.c

…

iptable.c

…

journal.c

…

kasp.c

Ignore max-zone-ttl on dnssec-policy insecure

2023-08-01 08:56:52 +02:00

key.c

Refactor KSK processing

2023-07-20 12:40:52 +02:00

keydata.c

…

keymgr.c

Ignore max-zone-ttl on dnssec-policy insecure

2023-08-01 08:56:52 +02:00

keytable.c

Give the rdataset->privateN fields more helpful names

2023-07-17 14:50:25 +02:00

log.c

…

Makefile.am

split out cache-specific functions

2023-07-17 14:50:25 +02:00

master.c

…

masterdump.c

…

message.c

convert TSIG keyring storage from RBT to hash table

2023-06-14 08:14:38 +00:00

name.c

…

ncache.c

Give the rdataset->privateN fields more helpful names

2023-07-17 14:50:25 +02:00

nsec3.c

…

nsec.c

…

nta.c

…

openssl_link.c

…

openssl_shim.c

…

openssl_shim.h

…

opensslecdsa_link.c

…

openssleddsa_link.c

…

opensslrsa_link.c

…

order.c

…

peer.c

…

private.c

…

qp_p.h

…

qp.c

Cleanup the __tsan_acquire/__tsan_release

2023-07-28 08:59:08 +02:00

rbt-cachedb.c

split out cache-specific functions

2023-07-17 14:50:25 +02:00

rbt-zonedb.c

Cleanup the __tsan_acquire/__tsan_release

2023-07-28 08:59:08 +02:00

rbt.c

…

rbtdb_p.h

split out cache-specific functions

2023-07-17 14:50:25 +02:00

rbtdb.c

fixup! Use cds_lfht for updatenotify mechanism in dns_db unit

2023-07-31 18:11:34 +02:00

rcode.c

…

rdata.c

Add new dns_rdatatype_iskeymaterial() function

2023-05-23 08:53:23 +02:00

rdatalist.c

Give the rdataset->privateN fields more helpful names

2023-07-17 14:50:25 +02:00

rdataset.c

move slab rdataset implementation to rdataslab.c

2023-07-17 14:50:25 +02:00

rdatasetiter.c

…

rdataslab.c

move slab rdataset implementation to rdataslab.c

2023-07-17 14:50:25 +02:00

remote.c

…

request.c

Pin dns_request to the associated loop

2023-07-28 09:01:22 +02:00

resconf.c

…

resolver.c

Refactor dns_badcache to use cds_lfht lock-free hashtable

2023-07-31 15:51:15 +02:00

result.c

Refactor how we map isc_result_t <-> dns_rcode_t

2023-06-15 15:32:04 +02:00

rootns.c

…

rpz.c

Use cds_lfht for updatenotify mechanism in dns_db unit

2023-07-31 18:11:34 +02:00

rriterator.c

…

rrl.c

…

sdlz.c

clean up unused dns_db methods

2023-07-17 14:50:25 +02:00

soa.c

…

ssu_external.c

…

ssu.c

…

stats.c

Refactor isc_stats_create() and its downstream users to return void

2023-07-27 11:37:44 +02:00

tests

…

time.c

…

tkey.c

Return REFUSED if GSSAPI is not configured

2023-07-28 14:37:32 +10:00

transport.c

…

tsig_p.h

remove dns__tsig_algallocated()

2023-06-14 08:14:38 +00:00

tsig.c

rename 'ret' to 'result'

2023-06-14 08:14:38 +00:00

ttl.c

…

update.c

Tiny refactor revoked key check

2023-07-20 12:44:19 +02:00

validator.c

Refactor dns_badcache to use cds_lfht lock-free hashtable

2023-07-31 15:51:15 +02:00

view.c

Refactor dns_badcache to use cds_lfht lock-free hashtable

2023-07-31 15:51:15 +02:00

xfrin.c

Mark a primary as unreachable on timed out in xfin

2023-07-22 08:17:11 +10:00

zone_p.h

Obsolete dnssec-dnskey-kskonly update-check-ksk

2023-07-20 12:40:54 +02:00

zone.c

Use cds_lfht for updatenotify mechanism in dns_db unit

2023-07-31 18:11:34 +02:00

zonekey.c

…

zoneverify.c

…

zt.c

…