| 8d1aadeb8acc72ba7e54ae0529313eccb31dc52f |
|
22-Dec-2017 |
Mark Andrews <marka@isc.org> |
silence clang static analysis
(cherry picked from commit f933be6d452986a657626fa774ad72f10b6f827f) |
| 1848d38f441ebf70ab21f6151bc3487a92d25b63 |
|
07-Dec-2017 |
Mark Andrews <marka@isc.org> |
4843. [bug] dnssec-signzone free hashlist on exit. [RT #46791]
(cherry picked from commit 8444b4856a608fe36530c8828231cd1a8c982fe3) |
| ad9772c559c6aa42f8930f4acf1a2d833a08040a |
|
17-Oct-2017 |
Michał Kępień <m <michal@isc.org> |
[v9_11] Doxygen fixes and cleanups
4773. [doc] Fixed generating Doxygen documentation for functions
annotated using certain macros. Miscellaneous
Doxygen-related cleanups. [RT #46276]
(cherry picked from commit 2361003a887a09a07c393716d470370126bb5ff9) |
| ad1317338af79edad878c9c3e4361798503310ba |
|
03-Oct-2017 |
Mark Andrews <marka@isc.org> |
4748. [cleanup] Sprintf to snprintf coversions. [RT #46132]
(cherry picked from commit a009d03a1abf73c8146c1696ce1100e62c3b9dbb) |
| bd911976d51f102751848568ccf56592fd5f6d77 |
|
14-Sep-2017 |
Tinderbox User <tbox@isc.org> |
update copyright notice / whitespace |
| d8402e191abf34e33ca07aba044d62e68e27653b |
|
14-Sep-2017 |
Mark Andrews <marka@isc.org> |
fix filenamelen so it has the buffer length rather than buffer length - 1
(cherry picked from commit 21c12d0107a3c261ae211021791dc58c96f46203) |
| 7cd594b8427fe742d44295790ba367e1de22a47d |
|
13-Sep-2017 |
Evan Hunt <each@isc.org> |
[master] cleanup strcat/strcpy
4722. [cleanup] Clean up uses of strcpy() and strcat() in favor of
strlcpy() and strlcat() for safety. [RT #45981]
(cherry picked from commit 114f95089c4db619ee723e4146639700afa17b5e) |
| cc51cd2d2076e33117c60c9effcb8caccde4983b |
|
19-Oct-2016 |
Witold Krecicki <wpk@isc.org> |
4487. [test] Make system tests work on Windows. [RT #42931] |
| 0c27b3fe77ac1d5094ba3521e8142d9e7973133f |
|
27-Jun-2016 |
Mark Andrews <marka@isc.org> |
4401. [misc] Change LICENSE to MPL 2.0. |
| b7f3400f3b34fee8e29ac4a43f62c153b42b3200 |
|
29-Jan-2016 |
Tinderbox User <tbox@isc.org> |
update copyright notice / whitespace |
| 832ab79d1f8bc4edf638780b306888da30ac3a1e |
|
28-Jan-2016 |
Mark Andrews <marka@isc.org> |
4305. [bug] dnssec-signzone was not removing unnecessary rrsigs
from the zone's apex. [RT #41483] |
| 420a43c8d8028992a4e9c170022f97bfac689025 |
|
18-Aug-2015 |
Evan Hunt <each@isc.org> |
[master] timing safe memory comparisons
4183. [cleanup] Use timing-safe memory comparisons in cryptographic
code. Also, the timing-safe comparison functions have
been renamed to avoid possible confusion with
memcmp(). [RT #40148] |
| e53e202ef3b51c58fb9abe0d15e3829a970b00e7 |
|
28-May-2015 |
Mark Andrews <marka@isc.org> |
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537] |
| 598b502695802c3d4e23316b85368e54f39f5cab |
|
27-May-2015 |
Mark Andrews <marka@isc.org> |
4127. [protocol] CDS and CDNSKEY need to be signed by the key signing
key as per RFC 7344, Section 4.1. [RT #37215] |
| 29d52c001ff976561669375cf0c866b815a90c49 |
|
03-Mar-2015 |
Mark Andrews <marka@isc.org> |
4081. [cleanup] Use dns_rdatalist_init consistently. [RT #38759] |
| af669cb4fd7ecfb67ed145b176e5e764b249573b |
|
27-Feb-2015 |
Mark Andrews <marka@isc.org> |
4074. [cleanup] Cleaned up more warnings from gcc -Wshadow. [RT #38708] |
| c110d61b173a68420d19858abb80285be0dc1120 |
|
21-Jan-2015 |
Tinderbox User <tbox@isc.org> |
update copyright notice / whitespace |
| 11463c0ac24692e229ec87f307f5e7df3c0a7e10 |
|
20-Jan-2015 |
Evan Hunt <each@isc.org> |
[master] clean up gcc -Wshadow warnings
4039. [cleanup] Cleaned up warnings from gcc -Wshadow. [RT #37381] |
| eeb13c7cd2ddde29b8605b9444451ea6e235e06a |
|
22-Aug-2014 |
Evan Hunt <each@isc.org> |
[master] don't clear signatures from zone cuts
3922. [bug] When resigning, dnssec-signzone was removing
all signatures from delegation nodes. It now
retains DS and (if applicable) NSEC signatures.
[RT #36946] |
| 42782931073786f98d3d0a617351db40066949a4 |
|
15-Jun-2014 |
Mukund Sivaraman <muks@isc.org> |
[10686] Add version printing option to various BIND utilites
Squashed commit of the following:
commit 95effe9b2582a7eb878ccb8cb9ef51dfc5bbfde7
Author: Evan Hunt <each@isc.org>
Date: Tue Jun 10 16:52:45 2014 -0700
[rt10686] move version() to dnssectool.c
commit df205b541d1572ea5306a5f671af8b54b9c5c770
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:38:31 2014 +0530
Rearrange order of cases
commit cfd30893f2540bf9d607e1fd37545ea7b441e0d0
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:38:08 2014 +0530
Add version printer to dnssec-verify
commit a625ea338c74ab5e21634033ef87f170ba37fdbe
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:32:19 2014 +0530
Add version printer to dnssec-signzone
commit d91e1c0f0697b3304ffa46fccc66af65591040d9
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:26:01 2014 +0530
Add version printer to dnssec-settime
commit 46fc8775da3e13725c31d13e090b406d69b8694f
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:25:48 2014 +0530
Fix docbook
commit 8123d2efbd84cdfcbc70403aa9bb27b96921bab2
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:20:17 2014 +0530
Add version printer to dnssec-revoke
commit d0916420317d3e8c69cf1b37d2209ea2d072b913
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:17:54 2014 +0530
Add version printer to dnssec-keygen
commit 93b0bd5ebc043298dc7d8f446ea543cb40eaecf8
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:14:11 2014 +0530
Add version printer to dnssec-keyfromlabel
commit 07001bcd9ae2d7b09dd9e243b0ab35307290d05d
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:13:39 2014 +0530
Update usage help output, docbook
commit 85cdd702f41c96fbc767fc689d1ed97fe1f3a926
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:07:18 2014 +0530
Add version printer to dnssec-importkey
commit 9274fc61e38205aad561edf445940b4e73d788dc
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 21:01:53 2014 +0530
Add version printer to dnssec-dsfromkey
commit bf4605ea2d7282e751fd73489627cc8a99f45a90
Author: Mukund Sivaraman <muks@isc.org>
Date: Tue Jun 10 20:49:22 2014 +0530
Add -V to nsupdate usage output |
| b4ba66ba1e36a6d8236d20be55273ce663819d69 |
|
30-Apr-2014 |
Evan Hunt <each@isc.org> |
[master] "dnssec-signzone -N date"
3827. [func] "dnssec-signzone -N date" updates serial number
to the current date in YYYYMMDDNN format.
[RT #35800] |
| acbb301e648b82fcc38b876a44403cf0fe539cc9 |
|
13-Mar-2014 |
Evan Hunt <each@isc.org> |
[master] better error output when initializing pkcs11
3786. [func] Provide more detailed error codes when using
native PKCS#11. "pkcs11-tokens" now fails robustly
rather than asserting when run against an HSM with
an incomplete PCKS#11 API implementation. [RT #35479] |
| b454c0319685041db3f3e8fd7671e1b364fd20c5 |
|
04-Mar-2014 |
Evan Hunt <each@isc.org> |
[master] use ANSI prototypes, clean up some casts |
| 35f6a21f5f8114542c050bfcb484b39ce513d4bd |
|
19-Feb-2014 |
Evan Hunt <each@isc.org> |
[master] max-zone-ttl
3746. [func] New "max-zone-ttl" option enforces maximum
TTLs for zones. If loading a zone containing a
higher TTL, the load fails. DDNS updates with
higher TTLs are accepted but the TTL is truncated.
(Note: Currently supported for master zones only;
inline-signing slaves will be added.) [RT #38405] |
| a165a17a81ff3285f4f4d79785fafb465e626183 |
|
07-Feb-2014 |
Evan Hunt <each@isc.org> |
[master] dnssec-keygen fixes
3730. [cleanup] Added "never" as a synonym for "none" when
configuring key event dates in the dnssec tools.
[RT #35277]
3729. [bug] dnssec-kegeyn could set the publication date
incorrectly when only the activation date was
specified on the command line. [RT #35278] |
| ba751492fcc4f161a18b983d4f018a1a52938cb9 |
|
15-Jan-2014 |
Evan Hunt <each@isc.org> |
[master] native PKCS#11 support
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031] |
| 431a83fb29482c5170b3e4026e59bb14849a6707 |
|
10-Jan-2014 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
| e851ea826066ac5a5b01c2c23218faa0273a12e8 |
|
09-Jan-2014 |
Evan Hunt <each@isc.org> |
[master] replace memcpy() with memmove().
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120] |
| de77dcc2c1a578ba43072608763bbab38e9cf15e |
|
12-Dec-2013 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
| 0bbe3273a224aa07b6af4165a26fd26d6f30c0ad |
|
11-Dec-2013 |
Evan Hunt <each@isc.org> |
[master] dnssec-signzone -Q
3686. [func] "dnssec-signzone -Q" drops signatures from keys
that are still published but no longer active.
[RT #34990] |
| 53f70575bd76aab18905efa48e4023144a97a191 |
|
06-Dec-2013 |
Mark Andrews <marka@isc.org> |
silence compiler warnings |
| c3c8823fed039b3a2b8e5ca8bc2f3301d1dd840e |
|
03-Dec-2013 |
Mark Andrews <marka@isc.org> |
3681. [port] Update the Windows build system to support feature
selection and WIN64 builds. This is a work in
progress. [RT #34160] |
| b5f4cc132e91afb1217f4aa79424793c0e11c09a |
|
04-Sep-2013 |
Mark Andrews <marka@isc.org> |
3641. [bug] Handle changes to sig-validity-interval settings
better. [RT #34625] |
| b7e40659efd6cf6f5e6b3b1f904f16f74efb0d16 |
|
14-Jun-2013 |
Evan Hunt <each@isc.org> |
[master] rebuild resigning heaps when loading map files
3597. [bug] Ensure automatic-resigning heaps are reconstructed
when loading zones in map format. [RT #33381] |
| c9611b45736af157e2993c6ef852e55e8e24ca83 |
|
24-Jan-2013 |
Evan Hunt <each@isc.org> |
[master] change "fast" to "map"
3475. [cleanup] Changed name of 'map' zone file format (previously
'fast'). [RT #32458] |
| 3aaa526a94c80c31c16d44f0f6482984725860f1 |
|
24-Jan-2013 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
| 9a0dd99a757c469d9530acd5cb11789b3b0af5ce |
|
23-Jan-2013 |
Evan Hunt <each@isc.org> |
[master] fix incorrect nsec3 check
- check for NSEC3 in empty nodes when not due to optout delegations
- fixed typo in output ("Bad record NSEC record")
- incidentally fixed an error in signzone that caused an
incorrect warning about missing DNSKEYs when using -S
and -3 together
3473. [bug] dnssec-signzone/verify could incorrectly report
an error condition due to an empty node above an
opt-out delegation lacking an NSEC3. [RT #32072] |
| 040dc292364361b8ad3b549a275b712920afe4dc |
|
10-Dec-2012 |
Mark Andrews <marka@isc.org> |
throw fatal error on realloc failure |
| 4b3d727d96fc3ee3a0c12c716f14163adfcf1fed |
|
25-Oct-2012 |
Evan Hunt <each@isc.org> |
[master] remove spurious signatures from glue
3404. [bug] dnssec-signzone: When re-signing a zone, remove
RRSIG and NSEC records from nodes that used to be
in-zone but are now below a zone cut. [RT #31556] |
| 41bbb34bc20f189af62e7047ce42822615417f15 |
|
03-Oct-2012 |
Evan Hunt <each@isc.org> |
fix coverity issues
3388. [bug] Fixed several Coverity warnings. [RT #30996] |
| 82f37b2665776f49b327103831de2ab2787e7636 |
|
12-Sep-2012 |
Mark Andrews <marka@isc.org> |
use binary mode for raw/fast |
| ad127d839d2e7aa542939a8a336691407e23397e |
|
25-Jun-2012 |
Mark Andrews <marka@isc.org> |
3341. [func] New "dnssec-verify" command checks a signed zone
to ensure correctness of signatures and of NSEC/NSEC3
chains. [RT #23673] |
| 3b398443f0dca316ba7a6e057ba2d1b8ab4ddf70 |
|
22-Jun-2012 |
Tinderbox User <tbox@isc.org> |
update copyright notice |
| 7829fad4093f2c1985b1efb7cea00287ff015d2b |
|
20-Jun-2012 |
ckb <ckb@isc.org> |
merging fast format zone files
Conflicts:
.gitignore
bin/named/zoneconf.c
bin/tests/.gitignore
bin/tests/system/autosign/tests.sh
bin/tests/system/masterformat/clean.sh
bin/tests/system/masterformat/ns1/compile.sh
bin/tests/system/masterformat/tests.sh
configure
lib/dns/db.c
lib/dns/include/dns/db.h
lib/dns/include/dns/types.h
lib/dns/master.c
lib/dns/masterdump.c
lib/dns/rbt.c
lib/dns/rbtdb.c
lib/dns/sdb.c
lib/dns/sdlz.c
lib/dns/tests/.cvsignore
lib/dns/tests/Makefile.in
lib/dns/win32/libdns.def
lib/dns/xfrin.c
lib/dns/zone.c
lib/export/dns/Makefile.in
lib/isc/include/isc/file.h
lib/isc/unix/file.c
lib/isc/win32/file.c
lib/isccfg/namedconf.c |
| f30785f506a522ed6a5e394af2bb13b6f883927e |
|
22-Dec-2011 |
Evan Hunt <each@isc.org> |
3252. [bug] When master zones using inline-signing were
updated while the server was offline, the source
zone could fall out of sync with the signed
copy. They can now resynchronize. [RT #26676] |
| b11fd361199a059419947113bc5daaebbb2492e0 |
|
09-Dec-2011 |
Mark Andrews <marka@isc.org> |
move declaration to start of block |
| b4d8192d210290112e07b0e22b491c45c50ba696 |
|
08-Dec-2011 |
Evan Hunt <each@isc.org> |
3241. [func] Extended the header of raw-format master files to
include the serial number of the zone from which
they were generated, if different (as in the case
of inline-signing zones). This is to be used in
inline-signing zones, to track changes between the
unsigned and signed versions of the zone, which may
have different serial numbers.
(Note: raw zonefiles generated by this version of
BIND are no longer compatble with prior versions.
To generate a backward-compatible raw zonefile
using dnssec-signzone or named-compilezone, specify
output format "raw=0" instead of simply "raw".)
[RT #26587] |
| 0237221b8af11a64480d9a1c2946bd7fe41af85a |
|
08-Nov-2011 |
Automatic Updater <source@isc.org> |
update copyright notice |
| d9eebc08497af272b2d44c07f4eb85153dec4253 |
|
08-Nov-2011 |
Evan Hunt <each@isc.org> |
3211. [func] dnssec-signzone: "-f -" prints to stdout; "-O full"
option prints in single-line-per-record format.
[RT #20287] |
| 653a78de956fc92049c6ec15a654b65a61aea2a1 |
|
11-Oct-2011 |
Evan Hunt <each@isc.org> |
3165. [bug] dnssec-signzone could generate new signatures when
resigning, even when valid signatures were already
present. [RT #26025] |
| 3d73f493d09e66a466bebe504322d0f3cf86fce0 |
|
20-Jul-2011 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 96ade2bc52912bed2656a42c751edfabbcd650e6 |
|
19-Jul-2011 |
Mark Andrews <marka@isc.org> |
3134. [bug] Improve the accuracy of dnssec-signzone's signing
statistics. [RT #16030] |
| 79ce3a9e82384cc31fd6b86be8f3d1474fcfd9f4 |
|
10-Jun-2011 |
Evan Hunt <each@isc.org> |
3128. [func] Inserting an NSEC3PARAM via dynamic update in an
auto-dnssec zone that has not been signed yet
will cause it to be signed with the specified NSEC3
parameters when keys are activated. The
NSEC3PARAM record will not appear in the zone until
it is signed, but the parameters will be stored.
[RT #23684] |
| be847331456855e4e2e8e71fde1efd68a04557ca |
|
07-May-2011 |
Evan Hunt <each@isc.org> |
3110. [bug] dnssec-signzone: Wrong error message could appear
when attempting to sign with no KSK. [RT #24369] |
| 485522d7e17da517fe91c21c642c8526c3ffb14c |
|
06-May-2011 |
Evan Hunt <each@isc.org> |
3108. [cleanup] dnssec-signzone: Clarified some error and
warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
code (use -P instead). [RT #20852]
3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852] |
| c2255e861421bb4cf5b1565b4872490d433f0bda |
|
22-Mar-2011 |
Evan Hunt <each@isc.org> |
Fixed a bug that was exposed by change #3085. |
| dff7e384917b6c4d9eefa38b606cb69ccf7bf845 |
|
21-Mar-2011 |
Evan Hunt <each@isc.org> |
initialize delset |
| 35f1a4fc935ad0f05a23d5a6cfba17f5913fdcc1 |
|
21-Mar-2011 |
Evan Hunt <each@isc.org> |
3085. [func] New '-R' option in dnssec-signzone forces removal
of signatures which have not yet expired but
were generated by a key that no longer exists.
[RT #22471] |
| 649452635065426fcc08b99b351db904939a6580 |
|
11-Mar-2011 |
Mark Andrews <marka@isc.org> |
3070. [bug] dnssec-signzone potential NULL pointer dereference.
[RT #20256] |
| 0874abad14e3e9ecfc3dc1a1a2b9969f2f027724 |
|
11-Mar-2011 |
Mark Andrews <marka@isc.org> |
3069. [cleanup] Silence warnings messages from clang static analysis.
[RT #20256] |
| cf39976b894c5aa6079a85076bfd46f91a9419a2 |
|
10-Mar-2011 |
Francis Dupont <fdupont@isc.org> |
while(1) -> for(;;) (cf 23588) |
| 0e27506ce3135f9bd49e12564ad0e15256135118 |
|
06-Mar-2011 |
Automatic Updater <source@isc.org> |
update copyright notice |
| eff7f78bc65f30efd87a398e66084ddab72799d3 |
|
05-Mar-2011 |
Mark Andrews <marka@isc.org> |
3061. [func] New option "dnssec-signzone -D", only write out
generated DNSSEC records. [RT #22896] |
| 26a7306397fe65c0dd4d8c4cbfb9a1a812c23f03 |
|
05-Mar-2011 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 61271cdee65f3313e98f382b07e6674861d9020a |
|
04-Mar-2011 |
Evan Hunt <each@isc.org> |
3060. [func] New option "dnssec-signzone -X <date>" allows
specification of a separate expiration date
for DNSKEY RRSIGs and other RRSIGs. [RT #22141] |
| c8175ece69d986ccd0671bc4d2571b247dfae177 |
|
02-Mar-2011 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 2f09e7c3fc25c0e5028593a24531d636845c3e42 |
|
24-Feb-2011 |
Mark Andrews <marka@isc.org> |
3041. [bug] dnssec-signzone failed to generate new signatures on
ttl changes. [RT #23330] |
| 6e13ffa21813940f09389f2e9a2d14e7dd3516d9 |
|
04-Jun-2010 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 675cc80975eb7d15e0d9f1d5f424baafaf189fde |
|
03-Jun-2010 |
Mark Andrews <marka@isc.org> |
2911. [bug] dnssec-signzone didn't handle out of zone records well.
[RT #21367] |
| 3ee13712120f9bfbd7e752978acbeeecd6c920f2 |
|
06-Jan-2010 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 564d6871323ee7fb04014584e311ea1bc5898242 |
|
05-Jan-2010 |
Evan Hunt <each@isc.org> |
missing newline in dnssec-signzone usage |
| 4b6dc226f78862286daa69fba761eac9fd5da16a |
|
04-Dec-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 3d17a3ba61a303d5c4d9867068d0fbe9f24d2988 |
|
04-Dec-2009 |
Mark Andrews <marka@isc.org> |
2801. [func] Detect and report records that are different according
to DNSSEC but are sematically equal according to plain
DNS. Apply plain DNS comparisons rather than DNSSEC
comparisons when processing UPDATE requests.
dnssec-signzone now removes such semantically duplicate
records prior to signing the RRset.
named-checkzone -r {ignore|warn|fail} (default warn)
named-compilezone -r {ignore|warn|fail} (default warn)
named.conf: check-dup-records {ignore|warn|fail}; |
| ce3b2c5189e874f1c45d699cfb4f30fc7a8cd604 |
|
25-Nov-2009 |
Evan Hunt <each@isc.org> |
2788. [bug] dnssec-signzone could sign with keys that were
not requested [RT #20625] |
| d312bc5d81cff8fc156b62c970334b52227ee854 |
|
24-Nov-2009 |
Evan Hunt <each@isc.org> |
2785. [bug] Revoked keys could fail to self-sign [RT #20652] |
| cef109efa70b55ec1cd3ed706a9607ba1c3382d5 |
|
23-Nov-2009 |
Evan Hunt <each@isc.org> |
2780. [bug] dnssec-keygen -A none didn't properly unset the
activation date in all cases. [RT #20648]
2779. [bug] Dynamic key revokation could fail. [RT #20644]
2778. [bug] dnssec-signzone could fail when a key was revoked
without deleting the unrevoked version. [RT #20638] |
| 00295e065080e0b9856d00b15976d1ed5d280cbf |
|
16-Nov-2009 |
Evan Hunt <each@isc.org> |
2768. [bug] dnssec-signzone: -S no longer implies -g [RT #20568] |
| 2162c1ed3dbf02459e753f7f407bc6dfc24b0bee |
|
03-Nov-2009 |
Mark Andrews <marka@isc.org> |
add missing period |
| e3b59e4af757d4b26ecb96e65f9953488283c216 |
|
27-Oct-2009 |
Evan Hunt <each@isc.org> |
Minor cleanup in dnssec-* tools |
| 63d5a6f680864b58b8eddc58dfa9957e19abf084 |
|
27-Oct-2009 |
Mark Andrews <marka@isc.org> |
2736. [func] Improve the performance of NSEC signed zones with
more than a normal amount of glue below a delegation.
[RT #20191] |
| e8831e51c162f5961fcf1d89f68acd9336cf8a83 |
|
27-Oct-2009 |
Evan Hunt <each@isc.org> |
2735. [bug] dnssec-signzone could fail to read keys
that were specified on the command line with
full paths, but weren't in the current
directory. [RT #20421] |
| 8f0502e922120f27207fbf6b6dda18f1112e486c |
|
24-Oct-2009 |
Evan Hunt <each@isc.org> |
2728. [bug] dnssec-keygen, dnssec-keyfromlabel and
dnssec-signzone now warn immediately if asked to
write into a nonexistent directory. [RT #20278] |
| ef9ee92543d06967beb4591805b4ffd4020dd659 |
|
14-Oct-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 19ac4707eeeab9e04d1de0efecf13e342a532cee |
|
13-Oct-2009 |
Evan Hunt <each@isc.org> |
changes needed for win32 build |
| 97639003b0992b5f30ce82bdcc2fcd9d621ff09c |
|
13-Oct-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 77b8f88f144928eddcca144c348d6ef53e7d5c43 |
|
12-Oct-2009 |
Evan Hunt <each@isc.org> |
2712. [func] New 'auto-dnssec' zone option allows zone signing
to be fully automated in zones configured for
dynamic DNS. 'auto-dnssec allow;' permits a zone
to be signed by creating keys for it in the
key-directory and using 'rndc sign <zone>'.
'auto-dnssec maintain;' allows that too, plus it
also keeps the zone's DNSSEC keys up to date
according to their timing metadata. [RT #19943] |
| 3727725bb7d63605b68a644060857013d563b67f |
|
10-Oct-2009 |
Evan Hunt <each@isc.org> |
2710. [func] New 'dnssec-signzone -x' flag and 'dnskey-ksk-only'
zone option cause a zone to be signed with only KSKs
signing the DNSKEY RRset, not ZSKs. This reduces
the size of a DNSKEY answer. [RT #20340] |
| 315a1514a58dbb1ca563445313d67c1cf664d248 |
|
09-Oct-2009 |
Evan Hunt <each@isc.org> |
2709. [func] Added some data fields, currently unused, to the
private key file format, to allow implementation
of explicit key rollover in a future release
without impairing backward or forward compatibility.
[RT #20310] |
| 8b78c993cb475cc94e88560941b28c37684789d9 |
|
05-Oct-2009 |
Francis Dupont <fdupont@isc.org> |
explicit engine rt20230a |
| 121079934564d8cedaec267dbfb6597bb784303e |
|
03-Oct-2009 |
Evan Hunt <each@isc.org> |
Add /* NOTREACHED */ comments |
| a93a66f61872a92ef4a272ca998aaff954ab4fed |
|
30-Sep-2009 |
Evan Hunt <each@isc.org> |
2794. [bug] Reduce default NSEC3 iterations from 100 to 10.
[RT #19970] |
| debd489a44363870f96f75818e89ec27d3cab736 |
|
29-Sep-2009 |
Francis Dupont <fdupont@isc.org> |
noreturn RT #20257 |
| 627f3e0805e2ee948e1f8c42f2251084aac388e9 |
|
26-Sep-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 1e3c9961bb12a68aad1f4739b5f1bbb644ff1f7c |
|
25-Sep-2009 |
Evan Hunt <each@isc.org> |
Move dns_rdataset_init() call earlier so "goto cleanup" won't trigger
an assert in dns_rdataset_isassociated(). (This is trivial, I'm going
to commit without review.) |
| fb596cc9af28ab5bf71c6796ebd1809654307a08 |
|
25-Sep-2009 |
Evan Hunt <each@isc.org> |
2691. [func] dnssec-signzone: retain the existing NSEC or NSEC3
chain when re-signing a previously-signed zone.
Use -u to modify NSEC3 parameters or switch
between NSEC and NSEC3. [RT #20304] |
| 63a18001052c56b8ca0a8ca97066bc4e1ed6f7ee |
|
24-Sep-2009 |
Evan Hunt <each@isc.org> |
Fix several problems introduced by rt19943 |
| d48690af7a64a064f6a3c8c507ad99e54105d1e1 |
|
24-Sep-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 53c22b8e0da67ca756ca309d5f84db9c189cd0a2 |
|
23-Sep-2009 |
Evan Hunt <each@isc.org> |
2685. [bug] Fixed dnssec-signzone -S handling of revoked keys.
Also, added warnings when revoking a ZSK, as this is
not defined by protocol (but is legal). [RT #19943] |
| 4d0e2cf9b9ffcf5941b347e6bea084a12455e388 |
|
23-Sep-2009 |
Mark Andrews <marka@isc.org> |
2684. [bug] dnssec-signzone should clean the old NSEC chain when
signing with NSEC3 and vica versa. [RT #20301] |
| 011d0b7dc81e51ac5ea150935c1d9613212b58cf |
|
23-Sep-2009 |
Mark Andrews <marka@isc.org> |
2683. [bug] dnssec-signzone should clean out old NSEC3 chains when
the NSEC3 parameters used to sign the zone change.
[RT #20246] |
| eab9975bcf5830a73f18ed8f320ae18ea32775ee |
|
02-Sep-2009 |
Evan Hunt <each@isc.org> |
2668. [func] Several improvements to dnssec-* tools, including:
- dnssec-keygen and dnssec-settime can now set key
metadata fields 0 (to unset a value, use "none")
- dnssec-revoke sets the revocation date in
addition to the revoke bit
- dnssec-settime can now print individual metadata
fields instead of always printing all of them,
and can print them in unix epoch time format for
use by scripts
[RT #19942] |
| 307d2084502eddc7ce921e5ce439aec3531d90e0 |
|
01-Sep-2009 |
Tatuya JINMEI 神明達哉 <ji <jinmei@isc.org> |
2660. [func] Add a new set of DNS libraries for non-BIND9
applications. See README.libdns. [RT #19369] |
| 813b34ebecba1293ccfb91e52e3c69d5c819073d |
|
14-Aug-2009 |
Evan Hunt <each@isc.org> |
2650. [bug] Assertion failure in dnssec-signzone when trying
to read keyset-* files. [RT #20075] |
| 50eab6c2aa2433d3a84693b8bbea19789d6e4236 |
|
13-Aug-2009 |
Mark Andrews <marka@isc.org> |
silence compiler warnings |
| 99a0cd0236939d387935bfd783219c2f20178f04 |
|
21-Jul-2009 |
Mark Andrews <marka@isc.org> |
fix comment |
| 520cea04a257e6009d855ddeb20f8d3a46cee22c |
|
21-Jul-2009 |
Mark Andrews <marka@isc.org> |
2627. [func] Rationalize dnssec-signzone's signwithkey() calling.
[RT #19959] |
| 938dfe6dcde8faf57fffa245a76e37dce596380c |
|
20-Jul-2009 |
Francis Dupont <fdupont@isc.org> |
re-indent (to be finished) |
| 9edd523c2295757f1e1c5e93ea369cae892f0754 |
|
19-Jul-2009 |
Evan Hunt <each@isc.org> |
more win32 build fixes |
| 553ead32ff5b00284e574dcabc39115d4d74ec66 |
|
19-Jul-2009 |
Evan Hunt <each@isc.org> |
2636. [func] Simplify zone signing and key maintenance with the
dnssec-* tools. Major changes:
- all dnssec-* tools now take a -K option to
specify a directory in which key files will be
stored
- DNSSEC can now store metadata indicating when
they are scheduled to be published, acttivated,
revoked or removed; these values can be set by
dnssec-keygen or overwritten by the new
dnssec-settime command
- dnssec-signzone -S (for "smart") option reads key
metadata and uses it to determine automatically
which keys to publish to the zone, use for
signing, revoke, or remove from the zone
[RT #19816] |
| ce773a54f9d96d9105c46c69d7dbe179973c8c45 |
|
24-Jun-2009 |
Mark Andrews <marka@isc.org> |
missing unsigned |
| 996b4d8982e26bdb6d5d8021c523eea4da126339 |
|
10-Jun-2009 |
Mark Andrews <marka@isc.org> |
fix bad test to determine if both ksk's and zsk's are present. [RT #19802] |
| 988023d8bc2634a733c5501babbd6f50c31045b5 |
|
05-Jun-2009 |
Mark Andrews <marka@isc.org> |
missing unsigned |
| 9f4702d025c41cdb71ae575b8f781c8f2afd7146 |
|
05-Jun-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 97573334cba6337caf154514180d0ffe98a85ed1 |
|
04-Jun-2009 |
Mark Andrews <marka@isc.org> |
fix up bad merge |
| 39844d471080b2de4f8bb9d81f7e136ef80f0ae2 |
|
04-Jun-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 2534a73a5914470f7ffe00663b6bbaff5e411e57 |
|
04-Jun-2009 |
Mark Andrews <marka@isc.org> |
2608. [func] Perform post signing verification checks in
dnssec-signzone. These can be disabled with -P.
The post sign verification test ensures that for each
algorithm in use there is at least one non revoked
self signed KSK key. That all revoked KSK keys are
self signed. That all records in the zone are signed
by the algorithm. [RT #19653] |
| ddac1a2b9822b00aa936ef24c6d971f4a1407532 |
|
07-May-2009 |
Francis Dupont <fdupont@isc.org> |
reserve -F |
| 86e018c2bcad84b06865f46b56e1f8a459be86be |
|
17-Jan-2009 |
Francis Dupont <fdupont@isc.org> |
spelling |
| 0cfbb9285a96f1355e5a3bd458624eaed2f16846 |
|
07-Jan-2009 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 1879dbe0d962f6f929417b02bf07f64ed41b1aab |
|
06-Jan-2009 |
Francis Dupont <fdupont@isc.org> |
dnssec-signzone needs strtoul() - 19129 |
| 50df1ec60af410fca6b7a85d5c85e8f31bb13bc3 |
|
14-Nov-2008 |
Mark Andrews <marka@isc.org> |
2495. [bug] Tighten RRSIG checks. [RT #18795] |
| dd14c953a8a42b60ea86a2a630529014fc3d14dd |
|
26-Sep-2008 |
Mark Andrews <marka@isc.org> |
unsigned constants |
| 6098d364b690cb9dabf96e9664c4689c8559bd2e |
|
24-Sep-2008 |
Mark Andrews <marka@isc.org> |
2448. [func] Add NSEC3 support. [RT #15452] |
| 177bcb466ba55485da65017a2f5b0293a1925ee0 |
|
03-Jun-2008 |
Automatic Updater <source@isc.org> |
update copyright notice |
| d87ad693fc0e91168da01f887cc6ae318b6b7f3e |
|
02-Jun-2008 |
Mark Andrews <marka@isc.org> |
2377. [bug] Address race condition in dnssec-signzone. [RT #18142] |
| 271c4c7ffafeb0bda21278af6cac4535c0193f18 |
|
28-Aug-2007 |
Automatic Updater <source@isc.org> |
update copyright notice |
| ec5347e2c775f027573ce5648b910361aa926c01 |
|
19-Jun-2007 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 0f8c9b5eed7e8714ceb7d6d3675555df9c5f6350 |
|
21-May-2007 |
Mark Andrews <marka@isc.org> |
2191. [func] named-checkzone now allows dumping to stdout (-).
named-checkconf now has -h for help.
named-checkzone now has -h for help.
Better handling of '-?' for usage summaries.
[RT #16707] |
| 1415fce15f6e7f3a02d2c13911f5c85ee762134d |
|
19-May-2007 |
Automatic Updater <source@isc.org> |
update copyright notice |
| 9860862cedd41ffaf69e7806e8f8959263552721 |
|
18-May-2007 |
Mark Andrews <marka@isc.org> |
2183. [bug] dnssec-signzone didn't handle offline private keys
well. [RT #16832] |
| 2dafa707cc9af9cca66d68c1d2c3af0c768c2900 |
|
31-Aug-2006 |
Mark Andrews <marka@isc.org> |
2078. [bug] dnssec-checkzone output style "default" was badly
named. It is now called "relative". [RT #16326]
2077. [bug] 'dnssec-signzone -O raw' wasn't outputing the
complete signed zone. [RT #16326] |
| 6ed53e5949d9fcd9715b440015b56e5a896d63df |
|
13-Apr-2006 |
David Hankins <dhankins@isc.org> |
2011. [func] dnssec-signzone can now update the SOA record of
the signed zone, either as an increment or as the
system time(). [RT #15633] |
| c5387e694299c41361660e54f23e89c7da3ede1d |
|
22-Feb-2006 |
Mark Andrews <marka@isc.org> |
1987. [func] DS/DLV SHA256 digest algorithm support. [RT #15608] |
| 9d3acb28cd20fed39d98e1271df435b1d99bdd44 |
|
07-Feb-2006 |
Mark Andrews <marka@isc.org> |
Fix a signal race condition with the following change.
1980. [func] dnssec-signzone: output the SOA record as the
first record in the signed zone. [RT #15758] |
| e0fe05b5ae82ef72d4c6b93aa0e83e8d3994d830 |
|
04-Feb-2006 |
Mark Andrews <marka@isc.org> |
update copyright notice |
| 2a35dc09d6c14f4041116766c0f7b60f41be0c9e |
|
03-Feb-2006 |
Mark Andrews <marka@isc.org> |
1980. [func] dnssec-signzone: output the SOA record as the
first record in the signed zone. [RT #15758] |
| 2674e1a455d4f71de09b2b60e7a8304b9a305588 |
|
30-Nov-2005 |
Mark Andrews <marka@isc.org> |
1940. [bug] Fixed a number of error conditions reported by
Coverity. |
| 16ee4fe11bad616a76c79e9f626a7e04a88ef4ab |
|
14-Oct-2005 |
Mark Andrews <marka@isc.org> |
1930. [port] HPUX: ia64 support. [RT #15473]
1929. [port] FreeBSD: extend use of PTHREAD_SCOPE_SYSTEM. |
| ed6ca94ad75353d5344e2a456e7a8beb480a351f |
|
18-Sep-2005 |
Mark Andrews <marka@isc.org> |
finetune isc_thread_key implementation [RT #15408] |
| fb827ed6df9a473770fb69a75a455b4ad0d14f52 |
|
18-Jul-2005 |
Mark Andrews <marka@isc.org> |
9.4/HEAD sync |
| e174044290953a2499f574e35cc9c22ba126a303 |
|
28-Jun-2005 |
Mark Andrews <marka@isc.org> |
1817. [func] Add support for additional zone file formats for
improving loading performance. The masterfile-format
option in named.conf can be used to specify a
non-default format. A separate command
named-compilezone was provided to generate zone files
in the new format. Additionally, the -I and -O options
for dnssec-signzone specify the input and output
formats. |
| ab023a65562e62b85a824509d829b6fad87e00b1 |
|
27-Apr-2005 |
Rob Austein <sra@isc.org> |
1851. [doc] Doxygen comment markup. [RT #11398] |
| 6e8a8077faf96d8da0b6cf738913f5f1f86e4008 |
|
22-Mar-2005 |
Mark Andrews <marka@isc.org> |
1840. [func] dnssec-signzone can now randomize signature endtimes
(dnssec-signzone -j jitter). [RT #13609] |
| 9f069b277116b82ba72346221e8a573197ed43a6 |
|
17-Mar-2005 |
Mark Andrews <marka@isc.org> |
update copyright notice |
| 24efdccd68d157b400bf68926798bc8f3f71c24c |
|
16-Mar-2005 |
Mark Andrews <marka@isc.org> |
1835. [bug] Update dnssec-signzone's usage message. [RT #13657] |
| 797944723c8de672430cc59c11bf4eeacd913649 |
|
16-Mar-2005 |
Mark Andrews <marka@isc.org> |
1803. [bug] dnssec-signzone sometimes failed to remove old
RRSIGs. [RT #13483] |
| 40e7c805a8f38ad9b20dd6c688496fc09fc971c2 |
|
25-Oct-2004 |
Mark Andrews <marka@isc.org> |
1740. [bug] Replace rbt's hash algorithm as it performed badly
with certain zones. [RT #12729] |
| 16a68807e13caea3183a41a5292f1b3f48b81a26 |
|
28-Aug-2004 |
Mark Andrews <marka@isc.org> |
1704. [port] lwres needed a snprintf() implementation for
platforms without snprintf(). Add missing
"#include <isc/print.h>". [RT #12321] |
| 30b41c205cec69f7bde2d9afb16557b6c1e7a531 |
|
20-Aug-2004 |
Mark Andrews <marka@isc.org> |
1699. [bug] dnssec-signzone can generate "not exact" errors
when resigning. [RT #12281] |
| 5e4346a4f9f9ed474d20a4ff05f1bbcb47f9342d |
|
11-Aug-2004 |
Mark Andrews <marka@isc.org> |
1696. [bug] dnssec-signzone failed to clean out nodes that
consisted of only NSEC and RRSIG records.
[RT #12154] |
| cc3aafe737334d444781f8a34ffaf459e075bb9a |
|
11-Jun-2004 |
Mark Andrews <marka@isc.org> |
1659. [cleanup] Cleanup some messages that were referring to KEY vs
DNSKEY, NXT vs NSEC and SIG vs RRSIG.
1658. [func] Update dnssec-keygen to default to KEY for HMAC-MD5
and DH. Tighten which options apply to KEY and
DNSKEY records. |
| 42b48d11ca7b296324d7a8a98cdbf0070b0deb1d |
|
15-Apr-2004 |
Mark Andrews <marka@isc.org> |
hide ((isc_event_t **) (void *)) cast using a macro, ISC_EVENT_PTR. |
| 50105afc551903541608b11851d73278b23579a3 |
|
10-Mar-2004 |
Mark Andrews <marka@isc.org> |
1589. [func] DNSSEC lookaside validation.
enable-dnssec -> dnssec-enable |
| af5073d03288a53b646ec3b807ac25ced64d7879 |
|
05-Mar-2004 |
Mark Andrews <marka@isc.org> |
update copyrights |
| dafcb997e390efa4423883dafd100c975c4095d6 |
|
05-Mar-2004 |
Mark Andrews <marka@isc.org> |
update copyright notice |
| daa73eae708d568d453e6082e0890d35886a9e0f |
|
03-Feb-2004 |
Mark Andrews <marka@isc.org> |
silence punned messages |
| 35541328a8c18ba1f984300dfe30ec8713c90031 |
|
14-Jan-2004 |
Mark Andrews <marka@isc.org> |
1558. [func] New DNSSEC 'disable-algorithms'. Support entry into
child zones for which we don't have a supported
algorithm. Such child zones are treated as unsigned.
1557. [func] Implement missing DNSSEC tests for
* NOQNAME proof with wildcard answers.
* NOWILDARD proof with NXDOMAIN.
Cache and return NOQNAME with wildcard answers. |
| 9991accfe206eaf19b05140c10cc8f03c4bfc80a |
|
05-Jan-2004 |
Mark Andrews <marka@isc.org> |
sync options string with reality |
| 185fd227381269568e193147a98f292210a16f2c |
|
13-Dec-2003 |
Mark Andrews <marka@isc.org> |
1541. [func] NSEC now uses new bitmap format. |
| 94be8e357c37c843027e899bb277a314ea828a4c |
|
01-Oct-2003 |
Mark Andrews <marka@isc.org> |
1519. [bug] dnssec-signzone:nsec_setbit() computed the wrong
length of the new bitmap. |
| 93d6dfaf66258337985427c86181f01fc51f0bb4 |
|
30-Sep-2003 |
Mark Andrews <marka@isc.org> |
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. |
| 492c2a9c243a8e2f94f443a2736d6480031b1312 |
|
17-Apr-2003 |
Mark Andrews <marka@isc.org> |
nxt_setbit() could generate bad bit masks
setting the DS bit in the NXT record would result in a bad signature
being generated. |
| b0c15bd9792112fb47f6d956e580e4369e92f4e7 |
|
18-Jan-2003 |
Mark Andrews <marka@isc.org> |
1415. [func] DS TTL now derived from NS ttl. NXT TTL now derived
from SOA MINIMUM.
1414. [func] Support for KSK flag. |
| bf7f253e306d0ced8ae24d7a0598773950da11f4 |
|
18-Jan-2003 |
Mark Andrews <marka@isc.org> |
1413. [func] Explictly request the (re-)generation of DS records from
keysets (dnssec-signzone -g).
developer: marka
reviewer: explorer |
| 93e353425a81da7793dde3776f4caca658f57c11 |
|
03-Dec-2002 |
Mark Andrews <marka@isc.org> |
1403. [func] dnssec-signzone, dnssec-keygen, dnssec-makekeyset
dnssec-signkey now report their version in the
usage message. |
| 4411b9b6e77df22df8f033dc60ebe7e65990ce15 |
|
12-Nov-2002 |
Michael Graff <mgraff@isc.org> |
pull down rt3507 (work by Mark, checked by me) |
| 99776003811a413457a2c35a808ad860df877d24 |
|
04-Nov-2002 |
Mark Andrews <marka@isc.org> |
1396. [func] dnssec-signzone: adjust the default signing time by
1 hour to allow for clock skew. |
| c54c1eaf26d5a7fc123c4af3712353156a766df1 |
|
19-Jul-2002 |
Mark Andrews <marka@isc.org> |
1251. [func] Generate DNSSEC wildcard proofs. |
| 8d77066ba0feb1353a7c85f929c365c5103f3976 |
|
01-Jul-2002 |
Mark Andrews <marka@isc.org> |
1342. [bug] dnssec-signzone usage message was misleading.
1341. [bug] If the last RRset in a zone is glue, dnssec-signzone
would incorrectly duplicate its output and sign it. |
| 0b09763c354ec91fb352b6b4cea383bd0195b2d8 |
|
17-Jun-2002 |
Mark Andrews <marka@isc.org> |
1328. [func] DS (delegation signer) support. |
| a7038d1a0513c8e804937ebc95fc9cb3a46c04f5 |
|
20-Feb-2002 |
Mark Andrews <marka@isc.org> |
copyrights |
| 6c62c34a5b18ccec24cf3298a9ffbd45e899a4d8 |
|
05-Feb-2002 |
Brian Wellington <source@isc.org> |
signing the root zone didn't work. |
| e57e32e57571c3417f47adb29b96952bee5d4880 |
|
08-Dec-2001 |
Brian Wellington <source@isc.org> |
restructuring - build the nxt chain independently from the signing process |
| 8740bb8af0ee870a13410b161c55fe59a3689572 |
|
07-Dec-2001 |
Brian Wellington <source@isc.org> |
remove #defines that shouldn't be there. |
| 1f1d36a87b65186d9f89aac7f456ab1fd2a39ef6 |
|
30-Nov-2001 |
Andreas Gustafsson <source@isc.org> |
Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable |
| 6785447aaffb8e8f99405a8e64455b29a7c9fab9 |
|
29-Nov-2001 |
Brian Wellington <source@isc.org> |
use dns_diff_applysilently |
| 47b4920f08c8567aef68a861bb2aeca31f147e31 |
|
15-Nov-2001 |
Brian Wellington <source@isc.org> |
add the undocumented -S (simple output format) option |
| 08e4f1ac944b1d67ba0dde32946d942a67675856 |
|
14-Nov-2001 |
Brian Wellington <source@isc.org> |
oops, inadvertantly checked in a change here. |
| b493dfe8bce94b05efc0f161238d32f1234c5670 |
|
14-Nov-2001 |
Brian Wellington <source@isc.org> |
Add bind9_getaddresses(), a consistent version of the get_address function
from dig/host/nslookup, nsupdate, and rndc. This should make it
easier to have the various programs support multiple addresses for a hostname. |
| 5fc04b813547281b898f3effa4d6ef5c5b700613 |
|
26-Oct-2001 |
Brian Wellington <source@isc.org> |
add an assertion check (which will never be triggered) |
| b9043a19e20ccf8871c5fc7626d0c7f14c20d541 |
|
23-Oct-2001 |
Brian Wellington <source@isc.org> |
missing ISC_TF |
| 05a1fd60930eef7e94e7575b574fd1fc85454466 |
|
19-Oct-2001 |
Brian Wellington <source@isc.org> |
more minor cleanup |
| f6132a503837146e055cfc39c154191ba269ac64 |
|
18-Oct-2001 |
Brian Wellington <source@isc.org> |
minor code restructure |
| 94ce9c52fbb6aa7cc2f6d91669a2b7d3bf90fc17 |
|
05-Oct-2001 |
Andreas Gustafsson <source@isc.org> |
Improve error messages printed by dnssec tools when compiled
without crypto support (patch from Olafur) |
| 39504d4517eaab72095aa538121bac937634550c |
|
21-Sep-2001 |
Brian Wellington <source@isc.org> |
remove dead code, consolidate dupliacted code. |
| 87647e12e906dcfea482e695c7912adee8cbcf71 |
|
21-Sep-2001 |
Brian Wellington <source@isc.org> |
more minor cleanups |
| 3bf31a5161c61ba881b3d5f66805233738b475f9 |
|
20-Sep-2001 |
Brian Wellington <source@isc.org> |
misc cleanup |
| 2f734e0a7e518c89c2b2b179714b8885b7626b3a |
|
20-Sep-2001 |
Andreas Gustafsson <source@isc.org> |
sizeof style |
| 56ae0ccb872f39eba0754eb5f1ad76bcff579449 |
|
18-Sep-2001 |
Brian Wellington <source@isc.org> |
minor cleanup |
| 3f543c371fff724d1fb05eb564f732476e946b5b |
|
06-Sep-2001 |
Brian Wellington <source@isc.org> |
981. [func] The dnssec tools can now take multiple '-r randomfile'
arguments. |
| a9c57ae2217b4870b60904443ddb6a208e460c17 |
|
22-Jul-2001 |
Danny Mayer <source@isc.org> |
Bug fixes to support win32 |
| 1ba1b5242e5ca32f865f134bbdca1a9d064b3ea5 |
|
10-May-2001 |
Brian Wellington <source@isc.org> |
pass DST_TYPE_PUBLIC | DST_TYPE_PRIVATE when both the public and private key
should be read. |
| bdfb3735ac763c55a3c05732cab53e4be09313cf |
|
08-May-2001 |
Brian Wellington <source@isc.org> |
check for DNS_R_SEENINCLUDE |
| c9c630ee8444c4812ccd8c54cf08a4cf6c0275b9 |
|
31-Mar-2001 |
Brian Wellington <source@isc.org> |
If signing a zone fails, remove the partial file. [RT #1131] |
| bb74e8ce7bb324ef248d029b2b6ba293ac9403f3 |
|
31-Mar-2001 |
Brian Wellington <source@isc.org> |
output the signed data into a temp file, then rename at the end. |
| 70d08aea0a693c6ca62c2f7bb33bfddf9e427601 |
|
30-Mar-2001 |
Brian Wellington <source@isc.org> |
800. [bug] dnssec-signzone produced incorrect statistics for
large zones. [RT #1133] |
| 45e22378fc8fc87fb96391ffd23d4402fe003dc0 |
|
28-Mar-2001 |
Brian Wellington <source@isc.org> |
dns_name_tofilenametext() now downcases the name, which means the callers
don't need to. |
| 7d7215baf845937786f3ceb64b582e3aeaa58a2c |
|
28-Mar-2001 |
Brian Wellington <source@isc.org> |
Add dns_name_tofilenametext(), and use it in the dnssec tools. |
| d566e8ea7b2f38bafd439ccf744cd41de14345a6 |
|
28-Mar-2001 |
Brian Wellington <source@isc.org> |
open databases with the root as origin when possible. |
| b03c1bf72f6df000e7c5f7ee83c6874ab5ccfb01 |
|
23-Mar-2001 |
Brian Wellington <source@isc.org> |
Make sure to create all keyset- and signedkey- files with downcased names;
downcase names before looking for signedkey- files in dnssec-signzone. |
| b43d1c1f4646bdd934b5469f223406d75a4be55b |
|
13-Jan-2001 |
Brian Wellington <source@isc.org> |
Don't die if a child's key is in the zone and a signedkey file is present. |
| 7dec36c225ad044a6546a4e232888f3412c030a8 |
|
12-Jan-2001 |
Brian Wellington <source@isc.org> |
677. [bug] dnssec-signzone would occasionally use the wrong ttl
for database operations and fail. [RT #643] |
| 499b34cea04a46823d003d4c0520c8b03e8513cb |
|
09-Jan-2001 |
Brian Wellington <source@isc.org> |
copyright update |
| 5ccb842cdacee18e803af8b48d15faf65bc3ea15 |
|
15-Dec-2000 |
Andreas Gustafsson <source@isc.org> |
lined up columns in signing performance statistics output
and made all the lines use colons consistently |
| 7e044d736791bd8ef06f26269490bbe6c16993a0 |
|
15-Dec-2000 |
Andreas Gustafsson <source@isc.org> |
fixed several bugs in signing performance statistics printing |
| cbd600f1bacf4c7fa1183792778840589f4bec20 |
|
15-Dec-2000 |
Andreas Gustafsson <source@isc.org> |
spacing |
| acc63b06d9e4e2137950dabddcccd17d8b336ca0 |
|
15-Dec-2000 |
Olafur Gudmundsson <source@isc.org> |
[615] dnssec-signzone did not like child signed keysets with multiple
signatures. (coredump)
[616] After consulting with Andreas I added some more timing statistics
when statistics are requesed. |
| 31874cf824bd97f8fb3c30cc8dea3f568cd601d0 |
|
12-Dec-2000 |
Brian Wellington <source@isc.org> |
Print the version of dnssec-signzone in a comment in the signed zone. |
| 88a6fef4944a00d8350ffd8b64ef58c694b8335e |
|
12-Dec-2000 |
Mark Andrews <marka@isc.org> |
init dns_rdata_t's |
| 253f774e358dba38742a484426a4cadf4f248817 |
|
11-Dec-2000 |
Brian Wellington <source@isc.org> |
608. [func] dnssec-signzone now adds a comment to the zone
with the time the file was signed. |
| 78838d3e0cd62423c23de5503910e01884d2104b |
|
11-Dec-2000 |
Brian Wellington <source@isc.org> |
8 space -> tab conversion |
| 911ed0d3bee586b3bec42cb6c376d5cc6c0e1e24 |
|
09-Dec-2000 |
Brian Wellington <source@isc.org> |
Split journal.[ch] into journal.[ch] and diff.[ch] |
| aeab5415545197ced136c89a2d554a14cc72ca6a |
|
08-Dec-2000 |
Brian Wellington <source@isc.org> |
(void) , not () |
| 64ee08a3550c81cf450fab4ee0f92ae262b89b74 |
|
07-Dec-2000 |
Brian Wellington <source@isc.org> |
If there are no signing keys, don't make sure that the SIG bit is turned on
when building NXTs. |
| c9d7e543d0da2996d1cc52d3c5920141df49a4ec |
|
07-Dec-2000 |
Brian Wellington <source@isc.org> |
597. [func] dnssec-signzone is now multithreaded. |
| dd380f3dca52893e00340e1d27f91cac4eb6aa19 |
|
06-Dec-2000 |
Brian Wellington <source@isc.org> |
removed cruft that caused a memory leak |
| b585f0373ce76877812f67cc4706627a6a746b6f |
|
09-Nov-2000 |
Brian Wellington <source@isc.org> |
dnssec-signzone prints warnings if loading a child's signkey file fails. |
| 82f4c5bc902220553d0f2d290ea9f54b74eec36d |
|
31-Oct-2000 |
Brian Wellington <source@isc.org> |
- print the names of the files generated, expand the usages a bit
- add -d directory option to dnssec-signzone |
| 368b37b616234fce3d23099eb180f1dd38e1fb62 |
|
31-Oct-2000 |
Mark Andrews <marka@isc.org> |
dns_rdata_invalidate -> dns_rdata_reset |
| c5c77ccbe1398f55e86dc2e4471204d5510acab2 |
|
29-Oct-2000 |
Brian Wellington <source@isc.org> |
Redo the dns_rdata_init() stuff again. |
| 3af66745d8e5f51e2423d58b4f42e2cd632b8fb8 |
|
28-Oct-2000 |
Brian Wellington <source@isc.org> |
Use the nxt rdatastruct instead of an ugly hack. |
| 3568cef90badeda771eb7e63a1e3797f234464e0 |
|
28-Oct-2000 |
Brian Wellington <source@isc.org> |
Use the SOA TTL as the TTL for NXT records, not the SOA minimum value. |
| ecc8ad58225ddef66a6932e835b20a32e2d93550 |
|
27-Oct-2000 |
Brian Wellington <source@isc.org> |
changes to stats printing |
| babe5bc58ad43acdce2158f8a9f01b64750cbd36 |
|
27-Oct-2000 |
Brian Wellington <source@isc.org> |
The initialize/invalidate rdata changes weren't made in all places. |
| 18d1a4ea336b14fd91003dd5d73c14869b0e1c16 |
|
27-Oct-2000 |
Brian Wellington <source@isc.org> |
fix the case when keys are not specified on the command line |
| 469f328aa0265463db317e88681ec1556295df31 |
|
27-Oct-2000 |
Brian Wellington <source@isc.org> |
- added statistics gathering
- work when keys specified on the command line are in a different directory
- misc cleanup |
| c03bb27f0675a6e60ceea66b451548e8481bc05c |
|
25-Oct-2000 |
Mark Andrews <marka@isc.org> |
532. [func] Implement DNS UPDATE pseudo records using
DNS_RDATA_UPDATE flag.
531. [func] Rdata really should be initalized before being
assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
dns_rdata_clone(), dns_rdata_fromregion()),
check that it is. |
| 5e589b5356a4125b5af32605dead82ab8b467c88 |
|
20-Oct-2000 |
Mark Andrews <marka@isc.org> |
Uninitalised link fixes, batch 1. |
| b20ee662a7c847c9ef7b96ab9e5e34543efe5c0d |
|
17-Oct-2000 |
Mark Andrews <marka@isc.org> |
521. [bug] Detect master files which contain $INCLUDE and always
reload. [RT #196]
new result code DNS_R_SEENINCLUDE
dns_master_load* can now return DNS_R_SEENINCLUDE |
| db503b6dafb75e38a189d163a69daa68fc4f45b3 |
|
27-Sep-2000 |
Brian Wellington <source@isc.org> |
logging changes. |
| 356fdd607372a024c8ce9927dabad0ef9c28aa40 |
|
12-Sep-2000 |
Brian Wellington <source@isc.org> |
missing initializer |
| 1f8f904ad612e372bf34d88fce28c59ac5e54574 |
|
12-Sep-2000 |
Brian Wellington <source@isc.org> |
Added support for non-IN classes. |
| 66f5b00c37e17ffaa829b82afb8549bca21f80e1 |
|
08-Sep-2000 |
Brian Wellington <source@isc.org> |
Some of the resigning policies were a bit strange. |
| 42848e71bc9d1496420bc60d9aa52407a7401266 |
|
08-Sep-2000 |
Brian Wellington <source@isc.org> |
Move some shared code to the shared file. |
| 4b9384f20d71c79f55f9f904131abc4c90438436 |
|
07-Sep-2000 |
Brian Wellington <source@isc.org> |
Print a warning if attempting to sign a zone with no keys. Fail if the
zone's signedkey file has keys that don't match the zone. |
| 4fc4813eb3bb3c4b0fbcb4b3052ef162d2a1ca04 |
|
14-Aug-2000 |
Brian Wellington <source@isc.org> |
Remove all non-threadsafe functions (in the non-threaded programs). |
| 924fbebfbe77eda7240d4638abe410234295782f |
|
12-Aug-2000 |
Brian Wellington <source@isc.org> |
more cleanup |
| b4d8cb6bf78a7735db9da12eb8c3c07782c91151 |
|
12-Aug-2000 |
Brian Wellington <source@isc.org> |
Large sections rewritten to use dns_diff_t instead of rdatalists/rdatasets.
This should remove any possible problems relating to database modifications
while iterators are active. |
| c7d63ae5a4e9bef9dbd2f11809b4e4ecdf3083cc |
|
11-Aug-2000 |
Brian Wellington <source@isc.org> |
Remove support for the zone status bit, since the proposal no longer exists. |
| cdde861f12093487c09122ca740d44a4c570c683 |
|
11-Aug-2000 |
Brian Wellington <source@isc.org> |
Chage 'key id' to 'key tag' in a few places |
| e8892697f98b9154cd390c13205b75d1f038fd4d |
|
03-Aug-2000 |
Brian Wellington <source@isc.org> |
Incrementally write the signed zone instead of adding all of the SIG
records to the database and using dns_db_dump. |
| 3fe99b84d6e61a4b3bc00fe391fa746c8e76c004 |
|
03-Aug-2000 |
Brian Wellington <source@isc.org> |
removed cruft |
| 9805b668b7f473494cd0cd7fe04e61571ac9015a |
|
02-Aug-2000 |
David Lawrence <source@isc.org> |
isc_buffer_putmem() takes an unsigned char as its second argument but a literal
string is of type char, so a couple of different OSs were complaining.
The 2nd parameter to isc_buffer_putmem() should probably be a const void *,
but rather than deal with changing the API and whatever that implies
with regard to versioning and whatever else, I have instead worked around
the issue by using isc_buffer_putuint8() to add a NUL to the buffer in
the two places that isc_buffer_putmem(&b, "", 1) was used. |
| aabfa856aaa78e3f2db9a1b727f9b72cdd6e7a08 |
|
02-Aug-2000 |
Brian Wellington <source@isc.org> |
Memory could be leaked if an improper signed keyset was seen. |
| 40f53fa8d9c6a4fc38c0014495e7a42b08f52481 |
|
01-Aug-2000 |
David Lawrence <source@isc.org> |
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace. |
| 36e0c379080343a0272dc076b7d7795ded04ee1d |
|
01-Aug-2000 |
Brian Wellington <source@isc.org> |
359. [bug] dnssec-signzone occasionally signed glue records. |
| 90fc267992241a9d6adcae478666726d23c97326 |
|
31-Jul-2000 |
David Lawrence <source@isc.org> |
needs <dns/fixedname.h> now that it rdatastruct.h does not provide it |
| 529a6b5224d751504027293a766a4c8b81241869 |
|
31-Jul-2000 |
Brian Wellington <source@isc.org> |
358. [cleanup] Rename the intermediate files used by the dnssec
programs. |
| 9c3531d72aeaad6c5f01efe6a1c82023e1379e4d |
|
23-Jun-2000 |
David Lawrence <source@isc.org> |
add RCS id string |
| ad4cf977d0e28475d7ad8533b40997cdb5a25ca9 |
|
22-Jun-2000 |
Brian Wellington <source@isc.org> |
Reset the callback sources, so keyboard input will be prompted for each
time it's needed. |
| 417bd845e5f72c6cdefcdb5d1c53d591f9337885 |
|
22-Jun-2000 |
Brian Wellington <source@isc.org> |
Lots of miscellaneous cleanup |
| 7f35bf8e1702d751e949390d93b0b9cbb8fda8a2 |
|
12-Jun-2000 |
Brian Wellington <source@isc.org> |
-p for pseudorandom |
| 3d3e7bce59e3552a821373862a9bf6fc961a347a |
|
10-Jun-2000 |
Brian Wellington <source@isc.org> |
Add '-r randomfile' option to all tools |
| 79d91e915023ffa5fac1bb2f91f19210bb18407c |
|
10-Jun-2000 |
Brian Wellington <source@isc.org> |
Use the entropy api |
| f85aab2e1a371d4575eaaf03bf926c116b4c791e |
|
09-Jun-2000 |
Andreas Gustafsson <source@isc.org> |
joint copyright ISC 1999,2000 / NAI |
| a6733246eafeb43755ce6d7ec3627ac4209cbccb |
|
07-Jun-2000 |
Mark Andrews <marka@isc.org> |
240. [func] databases now come in three flavours: zone, cache
and stub. |
| b3ef06344abad0105be99b622e615dcbd87911e1 |
|
07-Jun-2000 |
Brian Wellington <source@isc.org> |
DST API updates |
| 83b32cc34259ef7935c6272f0da7b5920e843e78 |
|
02-Jun-2000 |
Brian Wellington <source@isc.org> |
print memory stats when verbose>10 |
| 7efc8c3f692fc3226c00ce8bdc1b90eb06562352 |
|
01-Jun-2000 |
David Lawrence <source@isc.org> |
Megacommit of many files.
Mostly, several functions that take pointers as arguments, almost
always char * pointers, had those pointers qualified with "const".
Those that returned pointers to previously const-qualified arguments
had their return values qualified as const. Some structure members
were qualified as const to retain that attribute from the variables
from which they were assigned.
Minor other ISC style cleanups. |
| 923d87d9f4bb3068a0db63ef54a547ec31004029 |
|
25-May-2000 |
David Lawrence <source@isc.org> |
use ISC_TF() to return an isc_boolean_t from an expression |
| b1d234eb75e2804e09d89178a76df39c321db51b |
|
25-May-2000 |
Brian Wellington <source@isc.org> |
The dnssec tools properly use the logging subsystem and share more code. |
| a9bc95f22ef2dd4a12e79be99412c9f18b814a5d |
|
25-May-2000 |
Brian Wellington <source@isc.org> |
dst now stores the key name as a dns_name_t, not a char *. |
| ed019cabc1cc75d4412010c331876e4ae5080a4d |
|
24-May-2000 |
David Lawrence <source@isc.org> |
fixed lines > 79 columns wide |
| fa0ad4bc0eae1e3f1a3f669231a6dc5cc0a3b943 |
|
24-May-2000 |
Andreas Gustafsson <source@isc.org> |
updated comments |
| 5c3e730c227b611c6e547ccd9fc14d66c2423502 |
|
24-May-2000 |
Andreas Gustafsson <source@isc.org> |
include program name in log messages printed through
the logging system |
| d6a2af163f61cad7ab014a9dd5dc0f35920b1ed3 |
|
24-May-2000 |
David Lawrence <source@isc.org> |
added missing prototype for usage().
wrapped long lines.
removed unused stack variable "byte" from set_bit in dnssec-signzone.
UNUSED(verbose) for yet-to-be-used variable in dnssec-keygen.
argument to return should be in parentheses. |
| c50936eb40263b65ebf6afe4e6556e2dc67c10e4 |
|
19-May-2000 |
Brian Wellington <source@isc.org> |
changed dst_key_free() prototype, misc. dst cleanup |
| 6a6b556d9de5d9120f2933f59965391bcef3e30c |
|
19-May-2000 |
David Lawrence <source@isc.org> |
gcc (ANSI?) won't inline a variable arg function, but there wasn't much point
to inlining fatal() anyway. |
| acd5445e00f9c142fe22d38f36d3f60477e5dffa |
|
19-May-2000 |
Brian Wellington <source@isc.org> |
use the new names in program output |
| 245d9f25a767be585dad02075ea2fb671f5c0b64 |
|
18-May-2000 |
Brian Wellington <source@isc.org> |
better wildcard warning |
| e021965f291bd76d32de291310e64078dfab4c77 |
|
18-May-2000 |
Brian Wellington <source@isc.org> |
Null keys were improperly generated. |
| 7a152bdae33caae47eb48a291eb0ccb346ce7934 |
|
17-May-2000 |
Brian Wellington <source@isc.org> |
Use a database to store the zone, not a zone object. |
| 6a285c816d1c5f82afbcc92f7f5928ce8e9f9ffa |
|
16-May-2000 |
Brian Wellington <source@isc.org> |
better error reporting and miscellaneous cleanup |
| 3de75141d2e042a1db4c58b397ea4fc905cecf6e |
|
16-May-2000 |
Brian Wellington <source@isc.org> |
Modified commandline parameters |
| 1a69a1a78cfaa86f3b68bbc965232b7876d4da2a |
|
08-May-2000 |
David Lawrence <source@isc.org> |
Megacommit of dozens of files.
Cleanup of redundant/useless header file inclusion.
ISC style lint, primarily for function declarations and standalone
comments -- ie, those that appear on a line without any code, which
should be written as follows:
/*
* This is a comment.
*/ |
| 2e6c9767515e10c801ac57a60bd45eeb71ed59a3 |
|
06-May-2000 |
Andreas Gustafsson <source@isc.org> |
include severity level in log messages printed on stderr |
| b4780360a4c383076f1668922dcb0f8419f3e87f |
|
06-May-2000 |
Andreas Gustafsson <source@isc.org> |
log dns library warnings to stderr even when not verbose;
do not prefix stderr messages with time stamp |
| c90f5e8d1edbd5c277f2ee320167a12a30ba7c7b |
|
03-May-2000 |
Michael Graff <mgraff@isc.org> |
Split dns_log_init() into dns_log_init() which sets up module and category names, and dns_log_setcontext() which sets the logging context. Call isc_log_setcontext(), dns_log_init(), and dns_log_setcontext(). |
| 6ba0a8a5e7c3a8fba18cdac329582321ac34ea5e |
|
03-May-2000 |
Andreas Gustafsson <source@isc.org> |
eliminated compiler warnings on alpha |
| 09f22ac5b09e70bc526015f37168ba33e21ea91f |
|
02-May-2000 |
David Lawrence <source@isc.org> |
Redundant header work, mostly removing <dns/result.h> from installed
headers and adding it to source files that need it. |
| ebff64a8bd799130b089fa719c9ab001844de5f5 |
|
01-May-2000 |
Michael Graff <mgraff@isc.org> |
add a ; after a goto label, since it needs a statement after it.
Brian should look at this section of code, since I believe it will leak
a reference to 'keyset' |
| abce4875c33782ea88253a92d6f6391b3be88995 |
|
28-Apr-2000 |
Brian Wellington <source@isc.org> |
Import the parent zone key signature, create null keys for unsigned children
or set the zone status bit for signed children. |
| b8dd48ecf83142f6ee7238cbd68fec455e527fc8 |
|
28-Apr-2000 |
Mark Andrews <marka@isc.org> |
119. [cleanup] structure definitions for generic rdata stuctures do
not have _generic_ in their names. |
| 364a82f7c25b62967678027043425201a5e5171a |
|
28-Apr-2000 |
Bob Halley <source@isc.org> |
include isc/util.h |
| a15583c68146644225dc1c1c5279c63db4685265 |
|
27-Apr-2000 |
Brian Wellington <source@isc.org> |
Conform to the dns_dnssec_verify api change |
| 6e49e91bd08778d7eae45a2229dcf41ed97cc636 |
|
27-Apr-2000 |
David Lawrence <source@isc.org> |
103. [func] libisc buffer API changes for <isc/buffer.h>:
Added:
isc_buffer_base(b) (pointer)
isc_buffer_current(b) (pointer)
isc_buffer_active(b) (pointer)
isc_buffer_used(b) (pointer)
isc_buffer_length(b) (int)
isc_buffer_usedlength(b) (int)
isc_buffer_consumedlength(b) (int)
isc_buffer_remaininglength(b) (int)
isc_buffer_activelength(b) (int)
isc_buffer_availablelength(b) (int)
Removed:
ISC_BUFFER_USEDCOUNT(b)
ISC_BUFFER_AVAILABLECOUNT(b)
isc_buffer_type(b)
Changed names:
isc_buffer_used(b, r) ->
isc_buffer_usedregion(b, r)
isc_buffer_available(b, r) ->
isc_buffer_available_region(b, r)
isc_buffer_consumed(b, r) ->
isc_buffer_consumedregion(b, r)
isc_buffer_active(b, r) ->
isc_buffer_activeregion(b, r)
isc_buffer_remaining(b, r) ->
isc_buffer_remainingregion(b, r)
Buffer types were removed, so the ISC_BUFFERTYPE_*
macros are no more, and the type argument to
isc_buffer_init and isc_buffer_allocate were removed.
isc_buffer_putstr is now void (instead of isc_result_t)
and requires that the caller ensure that there
is enough available buffer space for the string. |
| 419590499823ce15b5d2ad4fe71eaf04bd5a86c0 |
|
07-Apr-2000 |
Michael Graff <mgraff@isc.org> |
s/DNS_R_/ISC_R_/ change for some codes. |
| 2b71493ae644557c48a906f889ef50127f418b17 |
|
06-Mar-2000 |
Brian Wellington <source@isc.org> |
Add an option (-a) to attempt to verify generated signatures |
| 2e9fe863e176fef538f2fe4882507b4a668cbf44 |
|
01-Mar-2000 |
Brian Wellington <source@isc.org> |
Print a warning if we see a wildcard in a zone we're signing. |
| edcd1247ad7e81bb8b430e610d9718f64c70f05d |
|
26-Feb-2000 |
David Lawrence <source@isc.org> |
isc_log_create now has three parameters, the additional one used to
return an isc_logconfig_t. isc_log_cretechannel and isc_log_usechannel
now take an isc_logconfig_t instead of an isc_log_t; this is to address
reconfiguration in a multithreaded environment.
isc_logconfig_create, isc_logconfig_get, isc_logconfig_use and
isc_logconfig_destroy were added to work with the new isc_logconfig_t type.
isc_logregister_categories and dns_log_init are now both void rather than
returning isc_result_t. |
| 2d478b7049ae12dcd610e497424d85fc46de4a02 |
|
15-Feb-2000 |
Brian Wellington <source@isc.org> |
comments and logging changes |
| 46374d51a6e5ba4f371a0962b52d9a18eda18739 |
|
14-Feb-2000 |
Brian Wellington <source@isc.org> |
print usage in more situations, make usage fit in 24 lines |
| 75f839686987b3f2337fca3085fb592606a8254f |
|
08-Feb-2000 |
Brian Wellington <source@isc.org> |
Pass covers field to dns_db_deleterdataset |
| 201b17e55f32d0c92f5d0814713efc71ca11076a |
|
08-Feb-2000 |
Brian Wellington <source@isc.org> |
Determine the minimum ttl from the SOA and pass it into dns_buildnxt |
| 3aa0851a581f9c4e5b68256910ff98b97564363f |
|
05-Feb-2000 |
Brian Wellington <source@isc.org> |
more fixes relating to glue |
| f4e90d432311c3a31ba8e569a132afebbb3cf13e |
|
04-Feb-2000 |
Olafur Gudmundsson <source@isc.org> |
Memory leak plugged for log context |
| ca41b452ede6feaa9d8739ec3cae19389a7b0d03 |
|
04-Feb-2000 |
Bob Halley <source@isc.org> |
update copyrights |
| 14865492bc087af6dbf01cbab415c3d852dfbcf9 |
|
03-Feb-2000 |
Brian Wellington <source@isc.org> |
don't quit if dns_dnssec_findzonekeys returns ISC_R_NOTFOUND |
| 85a932c4f438ed66183a379af35ee4d894ea4640 |
|
03-Feb-2000 |
Olafur Gudmundsson <source@isc.org> |
enable logging from dns libraries |
| 78524085b583c1c28e272b8fce4b4e35852edf7a |
|
03-Feb-2000 |
Brian Wellington <source@isc.org> |
minor bugfixes |
| af9cc9f1337fcaac0b15698589980e3e8dec21ee |
|
01-Feb-2000 |
Brian Wellington <source@isc.org> |
ignore glue when generating SIGs and NXTs |
| b8df3e551a4b768b7c95af0d48231cdb4ee5ccab |
|
01-Feb-2000 |
Brian Wellington <source@isc.org> |
minor cleanups |
| b72b07e79bdcd81c81e2f8858b6882f6605cdfcd |
|
01-Feb-2000 |
Brian Wellington <source@isc.org> |
rename variables to avoid linker errors on aa |
| d875b1151dcaeec116f668bcfb0b266c06fbc7b2 |
|
31-Jan-2000 |
Mark Andrews <marka@isc.org> |
dns_zone_dump() -> dns_zone_dumptostream() |
| 587368b24760f9a23836d1b3920567cd62cc4bff |
|
28-Jan-2000 |
Brian Wellington <source@isc.org> |
couple of bug fixes, missed a few cases of verbosity-izing |
| a67fc7e1ff1e39ebf5e58a77b2ee413615ff1ff3 |
|
28-Jan-2000 |
Brian Wellington <source@isc.org> |
verbose option (-v) actually does something, infinite loop fix |
| 19a3e16a9d74a55abb172410d4121fbacdd0c800 |
|
28-Jan-2000 |
Brian Wellington <source@isc.org> |
Use zone routines to load/dump instead of db routines |
| 08af8bf5ade4131fe44926ad04fd489e64a620bb |
|
25-Jan-2000 |
Bob Halley <source@isc.org> |
conform to dns_db_addrdataset() API change |
| 58aaab3687aac838542ee4ef65a9c094a5d34ab0 |
|
17-Dec-1999 |
Michael Graff <mgraff@isc.org> |
isc_stdtime_get() now returns void, not isc_result_t. |
| 4a73cf8ee07ae396be20231ac252a24830f3c801 |
|
31-Oct-1999 |
Bob Halley <source@isc.org> |
update copyrights |
| 90adbb5f1cfeac900fecf654c9000d7f26c06b98 |
|
29-Oct-1999 |
Mark Andrews <marka@isc.org> |
Remove various "enumerated type mixed with another type" warnings.
More still to be removed.
#define ISC_TF(x) to covert logical result to isc_boolean_t |
| 86ff74ccf6d2892126752df452840aaedb90ff6a |
|
12-Oct-1999 |
Brian Wellington <source@isc.org> |
remove unsigned warning in signer |
| 41a28deee4576aa02367c1a680f37a474d0ef124 |
|
08-Oct-1999 |
Mark Andrews <marka@isc.org> |
Need to take address of signer. |
| 6a759e38699d133302d0df120d7afcd4af721951 |
|
06-Oct-1999 |
David Lawrence <source@isc.org> |
use isc_commandline_parse instead of getopt |
| 2637aa6ccd42281bce3b08a6069c56a50e791140 |
|
05-Oct-1999 |
Brian Wellington <source@isc.org> |
add trailing dot to origin, add missing allocation |
| 2c02fd5316dc9bb03a6fd77bf5a02949a23a8e9a |
|
01-Oct-1999 |
Brian Wellington <source@isc.org> |
parsing fixes, empty sig set fixes |
| 9b9a2770b1f60a47d141584078da330c5311f5ba |
|
30-Sep-1999 |
Brian Wellington <source@isc.org> |
fix silly infinite loop bug |
| 803e1f0c55c41abb3defdb6c29190e1b5a0f625b |
|
28-Sep-1999 |
Brian Wellington <source@isc.org> |
doc update, bug fixes |
| 4d8edd30dc6b10d2af891ae3ebba6742ec04ca57 |
|
27-Sep-1999 |
Brian Wellington <source@isc.org> |
correcty handle sigs in the future |
| bf5582ad4b2b464539059fba2806b546ec3c5caa |
|
24-Sep-1999 |
Brian Wellington <source@isc.org> |
First cut at 'real' signer. Not tested too much yet. |
| f690123c15ce847b78eb68ba842a94c88a8e5529 |
|
16-Sep-1999 |
Michael Graff <mgraff@isc.org> |
update copyright text |
| b18192fd96726bf2cf553bd0e209dfe231abb1d9 |
|
13-Sep-1999 |
Brian Wellington <source@isc.org> |
more immaterial key fixes |
| 3d452d43660bf364910d664df5329609062e9b1a |
|
13-Sep-1999 |
Brian Wellington <source@isc.org> |
better handling of immaterial signatures |
| ae83dbc8817912ebce47559b1010e2c3b7715715 |
|
09-Sep-1999 |
Andreas Gustafsson <source@isc.org> |
eliminate signed/unsigned warning on Alpha |
| 021de83ee3e6ebbde6ae20528d44de823c36e35a |
|
09-Sep-1999 |
Andreas Gustafsson <source@isc.org> |
build_nxt() and find_keys() are now library functions |
| 49f7148b1e61fc383c7d41081ca48b1255a0c143 |
|
08-Sep-1999 |
Brian Wellington <source@isc.org> |
if set is signed, resign with the same keys |
| 0b157747b398ab59f42f584adc70a6c97d771abe |
|
08-Sep-1999 |
Bob Halley <source@isc.org> |
findrdataset can now return a sig |
| b20de477c21b7a493fb7f56cdb97ba8bdd573273 |
|
07-Sep-1999 |
Brian Wellington <source@isc.org> |
multiple zone key support |
| f104fbbe4e868a039ed786c0087c0412ab6dd923 |
|
03-Sep-1999 |
Brian Wellington <source@isc.org> |
toy signer |