Matthijs Mekking 65f58d68f0 Relax zone_cdscheck function ...

If we have a CDS or CDNSKEY we at least need to have a DNSKEY with the
same algorithm published and signing the CDS RRset. Same for CDNSKEY
of course.

This relaxes the zone_cdscheck function, because before the CDS or
CDNSKEY had to match a DNSKEY, now only the algorithm has to match.

This allows a provider in a multisigner model to update the CDS/CDNSKEY
RRset in the zone that is served by the other provider.

(cherry picked from commit 577bf913b9)

2021-07-15 09:26:16 +02:00

..

include

Add checkds code

2021-07-01 14:48:23 +02:00

rdata

Handle placeholder KEYDATA record

2021-07-01 15:01:05 +10:00

tests

Fix unchecked returns of dns_name_fromtext

2021-07-12 02:40:25 +00:00

win32

Fix windows build

2021-07-01 14:48:47 +02:00

.gitignore

…

acl.c

…

adb.c

…

badcache.c

…

byaddr.c

…

cache.c

Allow resetting hash table size limits for DNS DBs

2021-06-17 17:17:37 +02:00

callbacks.c

…

catz.c

…

client.c

properly initialise resarg->lock

2021-04-19 14:32:53 +02:00

clientinfo.c

…

compress.c

…

db.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

dbiterator.c

…

dbtable.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

diff.c

…

dispatch.c

Silence cppcheck 2.2 false positive in udp_recv()

2020-11-25 13:21:58 +01:00

dlz.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

dns64.c

…

dnsrps.c

Add stale-refresh-time option

2020-11-11 15:59:56 -03:00

dnssec.c

Use isdigit instead of checking character range

2021-05-05 18:23:53 +02:00

dnstap.c

Address theoretical resource leak in dns_dt_open()

2021-02-23 09:41:15 +11:00

dnstap.proto

…

ds.c

…

dst_api.c

Protect dst key metadata with lock

2021-07-01 14:48:47 +02:00

dst_internal.h

Protect dst key metadata with lock

2021-07-01 14:48:47 +02:00

dst_openssl.h

…

dst_parse.c

Add key metadata for DS published/withdrawn

2021-07-01 14:48:23 +02:00

dst_parse.h

…

dst_pkcs11.h

…

dst_result.c

…

dyndb.c

hacks to get dyndb working without libtool

2021-05-14 12:52:48 +02:00

ecdb.c

…

ecs.c

…

fixedname.c

…

forward.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

gen-unix.h

…

gen-win32.h

…

gen.c

…

geoip2.c

…

gssapi_link.c

Stop including <gssapi.h> from <dst/gssapi.h> header

2021-02-16 12:08:21 +11:00

gssapictx.c

Free resources when gss_accept_sec_context() fails

2021-04-08 10:41:08 +02:00

hmac_link.c

…

ipkeylist.c

…

iptable.c

…

journal.c

Silence tainted scalar on rdlen

2021-07-12 10:45:42 +10:00

kasp.c

Add purge-keys config option

2021-02-23 09:18:55 +01:00

key.c

…

keydata.c

…

keymgr.c

Add checkds log notice

2021-07-01 14:48:23 +02:00

keytable.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

Kyuafile

…

lib.c

…

log.c

…

lookup.c

…

Makefile.in

Remove custom ISC SPNEGO implementation

2021-04-01 10:42:32 +02:00

mapapi

…

master.c

…

masterdump.c

Pause the dbiterator when dumping the zone to the disk

2021-06-04 11:32:31 +02:00

message.c

Update the source code formatting using clang-format-12

2021-06-13 08:19:44 +02:00

name.c

Use dns_name_copynf() with dns_message_gettempname() when needed

2021-05-22 07:17:01 +02:00

ncache.c

…

nsec3.c

Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure

2021-04-30 11:16:45 +02:00

nsec.c

…

nta.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

openssl_link.c

Remove TLSDNS, TLS and HTTP protocols from netmgr

2021-05-14 12:52:48 +02:00

openssldh_link.c

…

opensslecdsa_link.c

Make opensslecdsa_parse use fromlabel

2021-01-26 15:04:59 +01:00

openssleddsa_link.c

…

opensslrsa_link.c

…

order.c

…

peer.c

…

pkcs11.c

…

pkcs11ecdsa_link.c

…

pkcs11eddsa_link.c

…

pkcs11rsa_link.c

Fix misplaced declaration

2020-12-01 23:19:20 +11:00

portlist.c

…

private.c

…

rbt.c

Allow resetting hash table size limits for DNS DBs

2021-06-17 17:17:37 +02:00

rbtdb.c

Use POSIX tolower(), toupper() and isupper() functions

2021-06-23 11:50:11 +02:00

rbtdb.h

…

rcode.c

Use isdigit instead of checking character range

2021-05-05 18:23:53 +02:00

rdata.c

Make calling generic rdata methods consistent

2021-04-13 01:54:29 +00:00

rdatalist_p.h

…

rdatalist.c

…

rdataset.c

…

rdatasetiter.c

…

rdataslab.c

…

request.c

…

resolver.c

use a fixedname buffer in dns_message_gettempname()

2021-05-22 07:13:57 +02:00

result.c

Add NSEC3PARAM unit test, refactor zone.c

2020-11-26 14:15:05 +00:00

rootns.c

…

rpz.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00

rriterator.c

…

rrl.c

…

sdb.c

Add stale-refresh-time option

2020-11-11 15:59:56 -03:00

sdlz.c

Add stale-refresh-time option

2020-11-11 15:59:56 -03:00

soa.c

…

ssu_external.c

…

ssu.c

…

stats.c

…

tcpmsg.c

…

time.c

…

timer.c

…

tkey.c

Use dns_name_copynf() with dns_message_gettempname() when needed

2021-05-22 07:17:01 +02:00

tsec.c

…

tsig_p.h

…

tsig.c

Use dns_name_copynf() with dns_message_gettempname() when needed

2021-05-22 07:17:01 +02:00

ttl.c

…

update.c

Lock kasp when looking for zone keys

2021-05-20 09:52:53 +02:00

validator.c

Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure

2021-04-30 11:16:45 +02:00

version.c

Use -release instead of -version-info for internal library SONAMEs

2021-01-25 15:28:09 +01:00

view.c

Initialize checknames field in dns_view_create()

2021-02-23 16:45:36 +01:00

xfrin.c

use a fixedname buffer in dns_message_gettempname()

2021-05-22 07:13:57 +02:00

zone_p.h

Add NSEC3PARAM unit test, refactor zone.c

2020-11-26 14:15:05 +00:00

zone.c

Relax zone_cdscheck function

2021-07-15 09:26:16 +02:00

zonekey.c

…

zoneverify.c

Silence untrusted loop bound on nsec3param.iterations

2021-07-12 12:16:29 +10:00

zt.c

Cleanup redundant isc_rwlock_init() result checks

2021-02-08 15:13:49 +11:00