Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Support
Keyboard shortcuts
?
Submit feedback
Sign in / Register
Toggle navigation
D
Dnsmasq
Project overview
Project overview
Details
Activity
Releases
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Locked Files
Issues
0
Issues
0
List
Boards
Labels
Service Desk
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Security & Compliance
Security & Compliance
Dependency List
License Compliance
Packages
Packages
List
Container Registry
Analytics
Analytics
CI / CD
Code Review
Insights
Issues
Repository
Value Stream
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
nanahira
Dnsmasq
Commits
15379ea1
Commit
15379ea1
authored
Dec 21, 2015
by
Simon Kelley
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Log signature algo with DNSKEY and DS, also digest with DS.
parent
efef497b
Changes
3
Show whitespace changes
Inline
Side-by-side
Showing
3 changed files
with
14 additions
and
9 deletions
+14
-9
src/cache.c
src/cache.c
+1
-1
src/dnsmasq.h
src/dnsmasq.h
+4
-2
src/dnssec.c
src/dnssec.c
+9
-6
No files found.
src/cache.c
View file @
15379ea1
...
...
@@ -1580,7 +1580,7 @@ void log_query(unsigned int flags, char *name, struct all_addr *addr, char *arg)
if
(
addr
)
{
if
(
flags
&
F_KEYTAG
)
sprintf
(
daemon
->
addrbuff
,
arg
,
addr
->
addr
.
keytag
);
sprintf
(
daemon
->
addrbuff
,
arg
,
addr
->
addr
.
log
.
keytag
,
addr
->
addr
.
log
.
algo
,
addr
->
addr
.
log
.
digest
);
else
{
#ifdef HAVE_IPV6
...
...
src/dnsmasq.h
View file @
15379ea1
...
...
@@ -256,8 +256,10 @@ struct all_addr {
struct
in6_addr
addr6
;
#endif
/* for log_query */
unsigned
int
keytag
;
/* for cache_insert if RRSIG, DNSKEY, DS */
struct
{
unsigned
short
keytag
,
algo
,
digest
;
}
log
;
/* for cache_insert of DNSKEY, DS */
struct
{
unsigned
short
class
,
type
;
}
dnssec
;
...
...
src/dnssec.c
View file @
15379ea1
...
...
@@ -1115,11 +1115,12 @@ int dnssec_validate_by_ds(time_t now, struct dns_header *header, size_t plen, ch
}
else
{
a
.
addr
.
keytag
=
keytag
;
a
.
addr
.
log
.
keytag
=
keytag
;
a
.
addr
.
log
.
algo
=
algo
;
if
(
verify_func
(
algo
))
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DNSKEY keytag %u"
);
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DNSKEY keytag %
hu, algo %h
u"
);
else
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DNSKEY keytag %u (not supported)"
);
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DNSKEY keytag %
hu, algo %h
u (not supported)"
);
recp1
->
addr
.
key
.
keylen
=
rdlen
-
4
;
recp1
->
addr
.
key
.
keydata
=
key
;
...
...
@@ -1241,11 +1242,13 @@ int dnssec_validate_ds(time_t now, struct dns_header *header, size_t plen, char
}
else
{
a
.
addr
.
keytag
=
keytag
;
a
.
addr
.
log
.
keytag
=
keytag
;
a
.
addr
.
log
.
algo
=
algo
;
a
.
addr
.
log
.
digest
=
digest
;
if
(
hash_find
(
ds_digest_name
(
digest
))
&&
verify_func
(
algo
))
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DS keytag %u"
);
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DS keytag %
hu, algo %hu, digest %h
u"
);
else
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DS keytag %u (not supported)"
);
log_query
(
F_NOEXTRA
|
F_KEYTAG
|
F_UPSTREAM
,
name
,
&
a
,
"DS keytag %
hu, algo %hu, digest %h
u (not supported)"
);
crecp
->
addr
.
ds
.
digest
=
digest
;
crecp
->
addr
.
ds
.
keydata
=
key
;
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment