tcarpay and GitHub
df229db074
Merge branch 'master' into features/rfc8914-ede
2021-12-15 13:07:01 +01:00
TCY16
ea1a5f35e4
add todo for tests and fix EDE codes for DNSKEY missing
2021-12-15 12:29:11 +01:00
TCY16
65ee2f2c39
finish up adding validator EDEs and other TODOs and fix tests with more specific EDE codes
2021-12-06 14:19:28 +01:00
W.C.A. Wijngaards
c6c54f9de4
- Fix validator debug output about DS support, print correct algorithm.
2021-12-06 13:12:44 +01:00
Wouter Wijngaards and GitHub
9645228f03
Merge pull request #570 from rex4539/typos
...
Fix typos
2021-11-29 11:39:48 +01:00
TCY16
0572870592
change do_ede to be local-zone specific and add places for more EDE codes
2021-11-19 11:27:13 +01:00
Tom Carpay
787d7a5952
Merge branch 'master' into features/rfc8914-ede
2021-11-15 14:48:35 +00:00
c5a1e87f75
Remove wrongly added EDE comments
...
Co-authored-by: Wouter Wijngaards <wcawijngaards@users.noreply.github.com >
2021-11-15 13:03:26 +01:00
Dimitris Apostolou
c21d6af617
Fix typos
2021-11-13 16:56:15 +02:00
TCY16
f5b586dbdc
add potential EDE spots
2021-11-08 11:50:57 +01:00
TCY16
8205c87a96
complete renaming of the modules edns list
2021-11-08 11:50:29 +01:00
Tom Carpay
89d7476539
split edns_data.opt_list in opt_list_in and opt_list_out
...
opt_list_in for parsed (incoming) edns options, and
opt_list_out for outgoing (to be encoded) edns options
2021-11-01 12:48:40 +00:00
Tom Carpay
3e6eeb504d
Modules have their own outgoing ends options list
...
But nothing happens with it yet
2021-10-27 13:48:49 +00:00
TCY16
8a6b3f088b
add DNSKEY EDE code
2021-10-08 15:54:10 +02:00
TCY16
86e8050352
add EDE responses to unittests
2021-10-01 14:46:29 +02:00
Tom Carpay
5617de6867
Answer LDNS_EDE_RRSIGS_MISSING for normal answers with missing signatures
2021-09-15 10:15:35 +00:00
TCY16
3576033b62
add possible EDE spots
2021-09-15 11:17:04 +02:00
Tom Carpay
a664e8cec4
First step towards specific EDE DNSSEC errors
2021-09-14 07:45:51 +00:00
W.C.A. Wijngaards
60663c766a
Review fixup for keyraw pkey function use.
2021-08-02 13:39:48 +02:00
W.C.A. Wijngaards
ca00814e67
- Prepare for OpenSSL 3.0.0 provider API usage, move the sldns
...
keyraw functions to produce EVP_PKEY results.
2021-08-02 13:33:32 +02:00
W.C.A. Wijngaards
a7eaf6364d
- Fix from lint for ignored return value.
2021-07-16 17:46:04 +02:00
W.C.A. Wijngaards
e4e0eaa63e
Analysis workflow, fix ctime formatting for autotrust and testbound.
2021-06-25 15:11:10 +02:00
W.C.A. Wijngaards
79209823ac
- Fix a number of warnings reported by the gcc analyzer.
2021-06-18 18:12:26 +02:00
Florian Obser
d4314cad33
Make VAL_MAX_RESTART_COUNT configurable.
...
unbound tries very hard (up to 6 authoritative servers) to find a
validating answer. This is not always desirable, for example on high
latency links.
2021-05-08 16:56:32 +02:00
W.C.A. Wijngaards
e217bb48ad
- Remove case fallthrough from deprecate-rsa-1024 code.
2021-05-07 17:06:09 +02:00
W.C.A. Wijngaards
59ea44322e
- Add ./configure --with-deprecate-rsa-1024 that turns off RSA 1024.
2021-05-07 14:28:20 +02:00
George Thessalonikefs
e9a5f5ab3f
- Add more logging for out-of-memory cases.
2021-05-04 15:39:06 +02:00
W.C.A. Wijngaards
b7a633fdc0
Merge branch 'master' into zonemd
2021-02-04 16:08:11 +01:00
Willem Toorop
48ecf95108
Merge branch 'master' into features/padding
2021-01-22 10:29:50 +01:00
W.C.A. Wijngaards
42d7cdb7d5
zonemd, region freed, and qstate not used when not in a query, and nsec
...
and nsec3 bitmap checks.
2020-10-14 14:46:59 +02:00
W.C.A. Wijngaards
1dc4d7a9f6
zonemd, harden result length for unsupported algo in nettle digest final.
2020-10-09 14:40:26 +02:00
W.C.A. Wijngaards
5e477e8a31
Merge branch 'master' into zonemd
2020-10-09 14:32:24 +02:00
W.C.A. Wijngaards
fca884a7e6
- Fix warning in libnss compile, nss_buf2dsa is not used without DSA.
2020-10-09 14:31:55 +02:00
W.C.A. Wijngaards
6cb0c4c61d
zonemd, libnss implementation and libnettle implementation. Both succeed
...
on unit tests.
2020-10-09 14:30:56 +02:00
W.C.A. Wijngaards
eb4932a463
zonemd, digest code calls, secalgo openssl sha384 and sha512.
2020-10-09 11:19:31 +02:00
W.C.A. Wijngaards
3163a93121
zonemd, loop over zone and canonicalize data, test call in unit test.
2020-10-06 17:07:24 +02:00
W.C.A. Wijngaards
dd59521e52
dlv removal, remove from comments and unused code in iterator and validator
2020-08-04 17:17:48 +02:00
W.C.A. Wijngaards
f78f6a3b29
dlv removal, remove from tests and validator state machine
2020-08-04 09:15:45 +02:00
W.C.A. Wijngaards
c0c722cd97
DLV removal
2020-08-04 09:05:09 +02:00
W.C.A. Wijngaards
ff50993f36
- Fix add missing DSA header, for compilation without deprecated
...
OpenSSL APIs.
2020-07-08 11:43:50 +02:00
Willem Toorop
4f78b37c61
Down- and upstream padding a la RFC7830 & RFC8467
2020-04-02 18:34:03 +02:00
Willem Toorop
d4dcdba07e
Cleanup nettle_ecc_point when verifying for ...
...
... ECDSA256 with libnettle
2020-03-02 12:27:45 +01:00
W.C.A. Wijngaards
57bbbfc0e6
- Fix #170 : Fix gcc undefined sanitizer signed integer overflow
...
warning in signature expiry RFC1982 serial number arithmetic.
2020-02-27 15:22:35 +01:00
W.C.A. Wijngaards
2916cfb3b0
- Fix with libnettle make test with dsa disabled.
2020-02-12 11:15:24 +01:00
W.C.A. Wijngaards
2c4be0c201
- Fix crash after reload where a stats lookup could reference old key
...
cache and neg cache structures.
2020-01-14 15:18:52 +01:00
Florian Obser
da6ac0c4ff
Use passed in neg and key cache if non-NULL.
...
With this the neg and key caches can be shared between multiple
libunbound contexts.
The msg and rrset caches already allowed this since context_finalize()
did not touch those if they are already available and have the correct
size.
Care must be taken to properly unhook the caches from the validator
environment before calling ub_ctx_delete() otherwise one risks double
free or use after free bugs.
2019-12-19 13:20:34 +01:00
W.C.A. Wijngaards
5a00b31f86
- Fix text around serial arithmatic used for RRSIG times to refer
...
to correct RFC number.
2019-12-03 12:58:09 +01:00
W.C.A. Wijngaards
3a49e683ed
- Fix Enum Name not Used, reported by X41 D-Sec.
2019-11-20 14:22:06 +01:00
W.C.A. Wijngaards
3907876eac
- Fix Unrequired Checks, reported by X41 D-Sec.
2019-11-20 14:05:54 +01:00
W.C.A. Wijngaards
fcd9b34bb5
- Fix Useless memset() in validator, reported by X41 D-Sec.
2019-11-20 14:02:58 +01:00
