Commits · 29fe922b1408fd038a6012297b4bd1c4fada85c3 · nanahira / Dnsmasq

02 Mar, 2014 7 commits
- Can have local DS records (trust anchors). · 29fe922b
  Simon Kelley authored Mar 01, 2014
  
  29fe922b
- Mass edit of INSECURE->BOGUS returns for server failure/bad input. · 87070192
  Simon Kelley authored Mar 01, 2014
  
  87070192
- Don't cache secure replies which we've messsed with. · d1fbb77e
  Simon Kelley authored Mar 01, 2014
  
  d1fbb77e
- Tweak tuning params. · 1fbe4d2f
  Simon Kelley authored Mar 01, 2014
  
  1fbe4d2f
- Handle replies with no answers and no NS in validate_reply. · 0575610f
  Simon Kelley authored Mar 01, 2014
  
  0575610f
- Don't free blockdata for negative DS cache entries. · e3f14558
  Simon Kelley authored Mar 01, 2014
  
  e3f14558
- Fix off-by-one overwrite. · bd9b3cf5
  Simon Kelley authored Mar 01, 2014
  
  bd9b3cf5
01 Mar, 2014 2 commits
- Tidy. · 14db4212
  Simon Kelley authored Mar 01, 2014
  
  14db4212
- Check that unsigned replies come from unsigned zones if --dnssec-check-unsigned set. · 00a5b5d4
  Simon Kelley authored Feb 28, 2014
  
  00a5b5d4
27 Feb, 2014 1 commit
- Negative caching for DS records. · b8eac191
  Simon Kelley authored Feb 27, 2014
  
  b8eac191
26 Feb, 2014 2 commits
- Return INSECURE when validation fails with proved non-existent DS. · b47b04c8
  Simon Kelley authored Feb 25, 2014
  
  b47b04c8
- Strip DNSSEC RRs when query doesn't have DO bit set. · 613ad15d
  Simon Kelley authored Feb 25, 2014
  
  613ad15d
25 Feb, 2014 3 commits
- Speeling. · 24187530
  Simon Kelley authored Feb 24, 2014
  
  24187530
- Code cleanup. · a857daa3
  Simon Kelley authored Feb 24, 2014
  
  a857daa3
- An NSEC record cannot attest to its own non-existance! · f01d7be6
  Simon Kelley authored Feb 24, 2014
  
  f01d7be6
24 Feb, 2014 1 commit
- Check signer name in RRSIGs. · d387380a
  Simon Kelley authored Feb 23, 2014
  
  d387380a
23 Feb, 2014 2 commits
- Bugfix for last commit. · f2e4c277
  Simon Kelley authored Feb 23, 2014
  
  f2e4c277
- NSEC3 validation. First pass. · 5107ace1
  Simon Kelley authored Feb 23, 2014
  
  5107ace1
20 Feb, 2014 3 commits
- Add --servers-file option. · 7b1eae4f
  Simon Kelley authored Feb 20, 2014
  
  7b1eae4f
- Omit ECC from DNSSEC if nettle library is old. · c152dc84
  Simon Kelley authored Feb 19, 2014
  
  c152dc84
- More server cleanup. · 7bcca006
  Simon Kelley authored Feb 19, 2014
  
  7bcca006
19 Feb, 2014 1 commit
- Cleanup of server reading code, preparation, for dynamic reading from files. · d68c2ca2
  Simon Kelley authored Feb 18, 2014
  
  d68c2ca2
18 Feb, 2014 1 commit
- --rev-server option. Syntactic sugar for PTR queries. · de73a497
  Simon Kelley authored Feb 17, 2014
  
  de73a497
14 Feb, 2014 4 commits
- Log BOGUS validation result when upstream sends SERVFAIL. · e3ec15af
  Simon Kelley authored Feb 13, 2014
  
  e3ec15af
- TYpo. · dac74312
  Simon Kelley authored Feb 13, 2014
  
  dac74312
- No CD in forwarded queries unless dnssec-debug for TCP too. · 2ecd9bd5
  Simon Kelley authored Feb 13, 2014
  
  2ecd9bd5
- Don't mess with the TTL of DNSSEC RRs. · a0ab18f6
  Simon Kelley authored Feb 13, 2014
  
  a0ab18f6
13 Feb, 2014 1 commit
- Add RFC-6605 ECDSA DNSSEC verification. · ebe95a83
  Simon Kelley authored Feb 13, 2014
  
  ebe95a83
11 Feb, 2014 4 commits
- Use DS records as trust anchors, not DNSKEYs. · ee415867
  Simon Kelley authored Feb 11, 2014
```
This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.
```
  ee415867
- Further tidying of AD and DO bit handling. · 83349b8a
  Simon Kelley authored Feb 10, 2014
  
  83349b8a
- Handle validation when more one key is needed. · 7fa836e1
  Simon Kelley authored Feb 10, 2014
  
  7fa836e1
- Fix Byte-order botch: broke DNSSEC on big-endian platforms. · 1633e308
  Simon Kelley authored Feb 10, 2014
  
  1633e308
10 Feb, 2014 1 commit
- Fix DNSSEC caching problems: incomplete RRSIG RRsets. · c8ca33f8
  Simon Kelley authored Feb 10, 2014
  
  c8ca33f8
07 Feb, 2014 1 commit
- AD bit in queries handled as RFC6840 p5.7 · e243c072
  Simon Kelley authored Feb 06, 2014
  
  e243c072
06 Feb, 2014 4 commits
- Add trust-anchors file to Debian package. · da4f3722
  Simon Kelley authored Feb 06, 2014
  
  da4f3722
- Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch. · 610e782a
  Simon Kelley authored Feb 06, 2014
  
  610e782a
- DNSSEC config in example file. · 854cf269
  Simon Kelley authored Feb 06, 2014
  
  854cf269
- Protect against malicious DNS replies with very large RRsets. · bb201c21
  Simon Kelley authored Feb 06, 2014
  
  bb201c21
05 Feb, 2014 2 commits
- Make RR work when returning A/AAAA records and an RRSIG. · 12fae49f
  Simon Kelley authored Feb 04, 2014
  
  12fae49f
- Updated version of contrib/try-all-ns · fd372273
  Jesse Glick authored Feb 04, 2014
  
  fd372273