Commits · ee4158678a5c5281cbbf38cd8f36b98df6d1b159 · nanahira / Dnsmasq

11 Feb, 2014 4 commits
- Use DS records as trust anchors, not DNSKEYs. · ee415867
  Simon Kelley authored Feb 11, 2014
```
This allows us to query for the root zone DNSKEY RRset and validate
it, thus automatically handling KSK rollover.
```
  ee415867
- Further tidying of AD and DO bit handling. · 83349b8a
  Simon Kelley authored Feb 10, 2014
  
  83349b8a
- Handle validation when more one key is needed. · 7fa836e1
  Simon Kelley authored Feb 10, 2014
  
  7fa836e1
- Fix Byte-order botch: broke DNSSEC on big-endian platforms. · 1633e308
  Simon Kelley authored Feb 10, 2014
  
  1633e308
10 Feb, 2014 1 commit
- Fix DNSSEC caching problems: incomplete RRSIG RRsets. · c8ca33f8
  Simon Kelley authored Feb 10, 2014
  
  c8ca33f8
07 Feb, 2014 1 commit
- AD bit in queries handled as RFC6840 p5.7 · e243c072
  Simon Kelley authored Feb 06, 2014
  
  e243c072
06 Feb, 2014 4 commits
- Add trust-anchors file to Debian package. · da4f3722
  Simon Kelley authored Feb 06, 2014
  
  da4f3722
- Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch. · 610e782a
  Simon Kelley authored Feb 06, 2014
  
  610e782a
- DNSSEC config in example file. · 854cf269
  Simon Kelley authored Feb 06, 2014
  
  854cf269
- Protect against malicious DNS replies with very large RRsets. · bb201c21
  Simon Kelley authored Feb 06, 2014
  
  bb201c21
05 Feb, 2014 4 commits
- Make RR work when returning A/AAAA records and an RRSIG. · 12fae49f
  Simon Kelley authored Feb 04, 2014
  
  12fae49f
- Updated version of contrib/try-all-ns · fd372273
  Jesse Glick authored Feb 04, 2014
  
  fd372273
- Linking stuff. Latest Debian/Ubuntu don't automatically link gmp. · b98d22c1
  Simon Kelley authored Feb 04, 2014
  
  b98d22c1
- Make DNSEC default, add build-depends for same, bump version. · 160f6507
  Simon Kelley authored Feb 04, 2014
  
  160f6507
04 Feb, 2014 5 commits
- CHANGLEOG for DNSSEC. · 613d6c52
  Simon Kelley authored Feb 04, 2014
  
  613d6c52
- Format tweak. · 81a883fd
  Simon Kelley authored Feb 03, 2014
  
  81a883fd
- Log NXDOMAIN correctly. · 40b695c1
  Simon Kelley authored Feb 03, 2014
  
  40b695c1
- Return configured DNSKEYs even though we don't have RRSIGS for them. · 5f938534
  Simon Kelley authored Feb 03, 2014
  
  5f938534
- Nasty cache failure and memory leak with DNSSEC. · 8d718cbb
  Simon Kelley authored Feb 03, 2014
  
  8d718cbb
01 Feb, 2014 2 commits
- Validate Ooops. · f6a2b793
  Simon Kelley authored Feb 01, 2014
  
  f6a2b793
- Blockdata fixes and tuning. · 82e3f45a
  Simon Kelley authored Jan 31, 2014
  
  82e3f45a
31 Jan, 2014 5 commits
- Blockdata leak. · 072e81b3
  Simon Kelley authored Jan 31, 2014
  
  072e81b3
- copy-n-paste error. · 1d97ac4f
  Simon Kelley authored Jan 31, 2014
  
  1d97ac4f
- Anounce DNSSEC at startup. · db737466
  Simon Kelley authored Jan 31, 2014
  
  db737466
- Init ->dependent field in frec allocation. · 97bc798b
  Simon Kelley authored Jan 31, 2014
  
  97bc798b
- Compiler warning. · edc231bc
  Simon Kelley authored Jan 31, 2014
  
  edc231bc
30 Jan, 2014 1 commit
- Add a file containing current root trust anchors, for convenience. · b85e092e
  Simon Kelley authored Jan 30, 2014
  
  b85e092e
28 Jan, 2014 5 commits
- Crash in cache code when compiled with HAVE_DNSSEC. · 583043f5
  Simon Kelley authored Jan 28, 2014
  
  583043f5
- Allow use of COPTS in Debian rules invokation for nefarious purposes. · 8f6213cc
  Simon Kelley authored Jan 28, 2014
  
  8f6213cc
- Debian package with DNSSEC now possible. · 00ec693d
  Simon Kelley authored Jan 28, 2014
```
DNSSEC will eventually become opt-out and when that happens
I'll add libnettle build-depends. For now, build with

fakeroot debian/rules DEB_BUILD_OPTIONS=usednssec

to get DNSSEC support.
```
  00ec693d
- Man page entries for DNSSEC flags. · 70b4a818
  Simon Kelley authored Jan 27, 2014
  
  70b4a818
- Trivial format fix. · 7c28612a
  Simon Kelley authored Jan 27, 2014
  
  7c28612a
27 Jan, 2014 2 commits
- Code tidy. · 6f468103
  Simon Kelley authored Jan 26, 2014
  
  6f468103
- Don't mark answers as DNSEC validated if DNS-doctored. · 6938f347
  Simon Kelley authored Jan 26, 2014
  
  6938f347
26 Jan, 2014 6 commits
- Exclude CRC code in DNSSEC build - replaced with SHA1. · 17fb9ea7
  Simon Kelley authored Jan 26, 2014
  
  17fb9ea7
- Remove --dnssec-permissive, pointless if we don't set CD upstream. · 7d23a66f
  Simon Kelley authored Jan 26, 2014
  
  7d23a66f
- Fix to last commit. · 703c7ff4
  Simon Kelley authored Jan 25, 2014
  
  703c7ff4
- Replace CRC32 with SHA1 for spoof detection in DNSSEC builds. · 8a9be9e4
  Simon Kelley authored Jan 25, 2014
  
  8a9be9e4
- Get AA flag right in DNSSEC answers from cache. · c92f0083
  Simon Kelley authored Jan 25, 2014
  
  c92f0083
- RRSIG answer logging. · b5dbfd14
  Simon Kelley authored Jan 25, 2014
  
  b5dbfd14