Commits · 00a5b5d477568789a4caa2580200f13488fb5d0a · nanahira / Dnsmasq

01 Mar, 2014 1 commit
- Check that unsigned replies come from unsigned zones if --dnssec-check-unsigned set. · 00a5b5d4
  Simon Kelley authored Feb 28, 2014
  
  00a5b5d4
27 Feb, 2014 1 commit
- Negative caching for DS records. · b8eac191
  Simon Kelley authored Feb 27, 2014
  
  b8eac191
26 Feb, 2014 2 commits
- Return INSECURE when validation fails with proved non-existent DS. · b47b04c8
  Simon Kelley authored Feb 25, 2014
  
  b47b04c8
- Strip DNSSEC RRs when query doesn't have DO bit set. · 613ad15d
  Simon Kelley authored Feb 25, 2014
  
  613ad15d
25 Feb, 2014 3 commits
- Speeling. · 24187530
  Simon Kelley authored Feb 24, 2014
  
  24187530
- Code cleanup. · a857daa3
  Simon Kelley authored Feb 24, 2014
  
  a857daa3
- An NSEC record cannot attest to its own non-existance! · f01d7be6
  Simon Kelley authored Feb 24, 2014
  
  f01d7be6
24 Feb, 2014 1 commit
- Check signer name in RRSIGs. · d387380a
  Simon Kelley authored Feb 23, 2014
  
  d387380a
23 Feb, 2014 2 commits
- Bugfix for last commit. · f2e4c277
  Simon Kelley authored Feb 23, 2014
  
  f2e4c277
- NSEC3 validation. First pass. · 5107ace1
  Simon Kelley authored Feb 23, 2014
  
  5107ace1
20 Feb, 2014 3 commits
- Add --servers-file option. · 7b1eae4f
  Simon Kelley authored Feb 20, 2014
  
  7b1eae4f
- Omit ECC from DNSSEC if nettle library is old. · c152dc84
  Simon Kelley authored Feb 19, 2014
  
  c152dc84
- More server cleanup. · 7bcca006
  Simon Kelley authored Feb 19, 2014
  
  7bcca006
19 Feb, 2014 1 commit
- Cleanup of server reading code, preparation, for dynamic reading from files. · d68c2ca2
  Simon Kelley authored Feb 18, 2014
  
  d68c2ca2
18 Feb, 2014 1 commit
- --rev-server option. Syntactic sugar for PTR queries. · de73a497
  Simon Kelley authored Feb 17, 2014
  
  de73a497
14 Feb, 2014 4 commits
- Log BOGUS validation result when upstream sends SERVFAIL. · e3ec15af
  Simon Kelley authored Feb 13, 2014
  
  e3ec15af
- TYpo. · dac74312
  Simon Kelley authored Feb 13, 2014
  
  dac74312
- No CD in forwarded queries unless dnssec-debug for TCP too. · 2ecd9bd5
  Simon Kelley authored Feb 13, 2014
  
  2ecd9bd5
- Don't mess with the TTL of DNSSEC RRs. · a0ab18f6
  Simon Kelley authored Feb 13, 2014
  
  a0ab18f6
13 Feb, 2014 1 commit
- Add RFC-6605 ECDSA DNSSEC verification. · ebe95a83
  Simon Kelley authored Feb 13, 2014
  
  ebe95a83
11 Feb, 2014 4 commits
- Use DS records as trust anchors, not DNSKEYs. · ee415867
  Simon Kelley authored Feb 11, 2014
```
This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.
```
  ee415867
- Further tidying of AD and DO bit handling. · 83349b8a
  Simon Kelley authored Feb 10, 2014
  
  83349b8a
- Handle validation when more one key is needed. · 7fa836e1
  Simon Kelley authored Feb 10, 2014
  
  7fa836e1
- Fix Byte-order botch: broke DNSSEC on big-endian platforms. · 1633e308
  Simon Kelley authored Feb 10, 2014
  
  1633e308
10 Feb, 2014 1 commit
- Fix DNSSEC caching problems: incomplete RRSIG RRsets. · c8ca33f8
  Simon Kelley authored Feb 10, 2014
  
  c8ca33f8
07 Feb, 2014 1 commit
- AD bit in queries handled as RFC6840 p5.7 · e243c072
  Simon Kelley authored Feb 06, 2014
  
  e243c072
06 Feb, 2014 4 commits
- Add trust-anchors file to Debian package. · da4f3722
  Simon Kelley authored Feb 06, 2014
  
  da4f3722
- Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch. · 610e782a
  Simon Kelley authored Feb 06, 2014
  
  610e782a
- DNSSEC config in example file. · 854cf269
  Simon Kelley authored Feb 06, 2014
  
  854cf269
- Protect against malicious DNS replies with very large RRsets. · bb201c21
  Simon Kelley authored Feb 06, 2014
  
  bb201c21
05 Feb, 2014 4 commits
- Make RR work when returning A/AAAA records and an RRSIG. · 12fae49f
  Simon Kelley authored Feb 04, 2014
  
  12fae49f
- Updated version of contrib/try-all-ns · fd372273
  Jesse Glick authored Feb 04, 2014
  
  fd372273
- Linking stuff. Latest Debian/Ubuntu don't automatically link gmp. · b98d22c1
  Simon Kelley authored Feb 04, 2014
  
  b98d22c1
- Make DNSEC default, add build-depends for same, bump version. · 160f6507
  Simon Kelley authored Feb 04, 2014
  
  160f6507
04 Feb, 2014 5 commits
- CHANGLEOG for DNSSEC. · 613d6c52
  Simon Kelley authored Feb 04, 2014
  
  613d6c52
- Format tweak. · 81a883fd
  Simon Kelley authored Feb 03, 2014
  
  81a883fd
- Log NXDOMAIN correctly. · 40b695c1
  Simon Kelley authored Feb 03, 2014
  
  40b695c1
- Return configured DNSKEYs even though we don't have RRSIGS for them. · 5f938534
  Simon Kelley authored Feb 03, 2014
  
  5f938534
- Nasty cache failure and memory leak with DNSSEC. · 8d718cbb
  Simon Kelley authored Feb 03, 2014
  
  8d718cbb
01 Feb, 2014 1 commit
- Validate Ooops. · f6a2b793
  Simon Kelley authored Feb 01, 2014
  
  f6a2b793