WEBDIENSTE/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-08-29 11:19:43 +02:00
Code Issues Packages Projects Releases Wiki Activity
2,025 Commits 29 Branches 215 Tags
560f4aab030dba45ef24f9ac4ababfdbbae034e7
Commit Graph
50 Commits
Author SHA1 Message Date
Wouter Wijngaards bec7e7a552 Fix validation of queries with wildcard names (*.example). 
git-svn-id: file:///svn/unbound/trunk@2070 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-08 13:22:29 +00:00
Wouter Wijngaards 6888c78e1e Fix for Roy. 
git-svn-id: file:///svn/unbound/trunk@1982 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-02-15 10:49:03 +00:00
Wouter Wijngaards c68aebb3d7 - Fix SOA excluded from negative DS responses. Reported by Hauke 
Lampe.  The negative cache did not include proper SOA records for
	  negative qtype DS responses which makes BIND barf on it, such
	  responses are now only used internally.
	- Fix negative cache lookup of closestencloser check of DS type bit.



git-svn-id: file:///svn/unbound/trunk@1932 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-09 14:55:19 +00:00
Wouter Wijngaards c56fdce932 Fixup unsigned CNAME to signed CNAME detection of signatures. 
git-svn-id: file:///svn/unbound/trunk@1905 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-16 13:34:03 +00:00
Wouter Wijngaards bf8bc06860 Fix autotrust initialised with DS. 
git-svn-id: file:///svn/unbound/trunk@1884 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-02 13:56:14 +00:00
Wouter Wijngaards f42d27e1a2 - Made new validator error string available from libunbound for 
applications.  It is in result->why_bogus, a zero-terminated string.
	  unbound-host prints it by default if a result is bogus.
	  Also the errinf is public in module_qstate (for other modules).
	Binary API different. bumped library ABI version.


git-svn-id: file:///svn/unbound/trunk@1874 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-08 17:05:53 +00:00
Wouter Wijngaards a909fa9a3a neater explanation for unsigned or signatureless negative DS replies. 
git-svn-id: file:///svn/unbound/trunk@1870 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-08 06:57:23 +00:00
Wouter Wijngaards ce45cbda6d - moved version number to 1.4.0 because of 1.3.4 release with only 
the NSEC3 patch.
	- val-log-level: 2 shows extended error information for validation
	  failures, but still one (longish) line per failure.  For example:
	  validation failure <example.com. DNSKEY IN>: signature expired from
	  192.0.2.4 for trust anchor example.com. while building chain of trust
	  validation failure <www.example.com. A IN>: no signatures from
	  192.0.2.6 for key example.com. while building chain of trust



git-svn-id: file:///svn/unbound/trunk@1868 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 16:45:47 +00:00
Wouter Wijngaards 5d2e8e8e97 Retry mode, DS and prime. 
git-svn-id: file:///svn/unbound/trunk@1860 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 07:52:02 +00:00
Wouter Wijngaards a8dccbdd40 autotrust 
git-svn-id: file:///svn/unbound/trunk@1765 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-17 15:58:27 +00:00
Wouter Wijngaards 21e791248f autotrust work 
git-svn-id: file:///svn/unbound/trunk@1760 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-13 15:32:04 +00:00
Wouter Wijngaards edae0ad954 More lenient. 
git-svn-id: file:///svn/unbound/trunk@1692 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-30 13:20:02 +00:00
Wouter Wijngaards 41e589b08b Fixup trust anchor algorithm check. 
git-svn-id: file:///svn/unbound/trunk@1532 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-18 13:07:48 +00:00
Wouter Wijngaards 265c199445 Fixup negative TTLs Attila Nagy has reported. 
git-svn-id: file:///svn/unbound/trunk@1306 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-16 13:12:32 +00:00
Wouter Wijngaards 13a68aac89 Fix for SHA256 DS downgrade. And test of resistance. 
git-svn-id: file:///svn/unbound/trunk@1273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-30 10:42:02 +00:00
Wouter Wijngaards 62fc91f7f1 threadsafe rrset counter. 
git-svn-id: file:///svn/unbound/trunk@1240 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-17 07:13:31 +00:00
Wouter Wijngaards 636f742ef0 extended statistics. 
git-svn-id: file:///svn/unbound/trunk@1239 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-16 14:08:38 +00:00
Wouter Wijngaards 05cd134de9 Do not mark additional section items bogus. 
git-svn-id: file:///svn/unbound/trunk@1222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-02 14:35:13 +00:00
Wouter Wijngaards b2710818d4 Faster due to time-sharing. 
git-svn-id: file:///svn/unbound/trunk@966 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-19 13:12:23 +00:00
Wouter Wijngaards 09e18ffdbb fixup validator classification of root referrals. 
git-svn-id: file:///svn/unbound/trunk@936 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-08 12:24:01 +00:00
Wouter Wijngaards 849026931b move around debug levels. 
git-svn-id: file:///svn/unbound/trunk@929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-07 09:46:49 +00:00
Wouter Wijngaards fcac316d63 coverity run fixes. 
git-svn-id: file:///svn/unbound/trunk@803 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-12-04 17:54:14 +00:00
Wouter Wijngaards 9ade3e4811 nonRD fix. 
git-svn-id: file:///svn/unbound/trunk@786 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-28 12:06:32 +00:00
Wouter Wijngaards 2c2eaecc6c nonRD fix. 
git-svn-id: file:///svn/unbound/trunk@785 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-28 11:02:01 +00:00
Wouter Wijngaards 6f49c2fe55 regional nicer, remove region-allocator. 
git-svn-id: file:///svn/unbound/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-18 20:31:43 +00:00
Wouter Wijngaards 75792c34dc fixup insecure glue on referrals. 
git-svn-id: file:///svn/unbound/trunk@688 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-17 15:48:54 +00:00
Wouter Wijngaards be0bdf0260 fixup test, less logging. 
git-svn-id: file:///svn/unbound/trunk@687 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-17 14:49:12 +00:00
Wouter Wijngaards e8bcec4529 print validator classification type. 
update plan items.


git-svn-id: file:///svn/unbound/trunk@619 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-18 12:33:51 +00:00
Wouter Wijngaards 0e11cd160d DNAME synthesis and validation fixups. 
git-svn-id: file:///svn/unbound/trunk@584 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-04 12:44:43 +00:00
Wouter Wijngaards 8351afe61a cname nxdomain fixup. 
git-svn-id: file:///svn/unbound/trunk@576 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-03 09:13:27 +00:00
Wouter Wijngaards de6d807e3d no convert to der for DSA signatures 
signature test.


git-svn-id: file:///svn/unbound/trunk@564 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-29 14:27:04 +00:00
Wouter Wijngaards 824ceffedb verbosity detail gives validation failures, but not boring algorithm logs. 
git-svn-id: file:///svn/unbound/trunk@560 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 15:07:52 +00:00
Wouter Wijngaards 459039cf08 Faster verification. 
git-svn-id: file:///svn/unbound/trunk@557 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 13:54:55 +00:00
Wouter Wijngaards 0e90c03e95 Referral validation. 
git-svn-id: file:///svn/unbound/trunk@553 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 09:39:43 +00:00
Wouter Wijngaards f9cc9481e2 validator also computes insecure and indeterminate for rrsets and stores 
that.


git-svn-id: file:///svn/unbound/trunk@551 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-27 14:55:06 +00:00
Wouter Wijngaards 542b812690 do not cache nonRD replies in msg cache, the rrset cache is used for that. 
store verification status in rrset cache to enable security for nonRD
replies and also speed up processing.


git-svn-id: file:///svn/unbound/trunk@550 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-27 13:46:05 +00:00
Wouter Wijngaards a490e8777f Fixup. 
git-svn-id: file:///svn/unbound/trunk@545 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-24 12:24:07 +00:00
Wouter Wijngaards 3a422ba496 prettier proof routines. 
git-svn-id: file:///svn/unbound/trunk@544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-24 10:36:15 +00:00
Wouter Wijngaards 6890f55d17 refuse unsigned authority section. clean additional section as option. 
git-svn-id: file:///svn/unbound/trunk@543 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-24 09:44:29 +00:00
Wouter Wijngaards b54a0400ab CNAME validation. 
git-svn-id: file:///svn/unbound/trunk@542 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-23 15:23:45 +00:00
Wouter Wijngaards a084af819c bogus ttl fixed value, config item. 
git-svn-id: file:///svn/unbound/trunk@540 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-22 12:13:52 +00:00
Wouter Wijngaards 272096d611 Returns and caches validated replies. 
git-svn-id: file:///svn/unbound/trunk@536 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-21 13:12:10 +00:00
Wouter Wijngaards 1b42a51048 VALIDATE state and positive response validation. 
git-svn-id: file:///svn/unbound/trunk@532 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-20 12:31:12 +00:00
Wouter Wijngaards cedeaa8316 ds2ke and nsec work. 
git-svn-id: file:///svn/unbound/trunk@529 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-17 11:41:49 +00:00
Wouter Wijngaards e4aa70b4c5 key prime, DS test. 
git-svn-id: file:///svn/unbound/trunk@525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-16 09:33:35 +00:00
Wouter Wijngaards 8f58908f45 sigcrypt keyset processing 
git-svn-id: file:///svn/unbound/trunk@501 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-08 13:59:57 +00:00
Wouter Wijngaards bdb519c5c1 use sigcrypt. 
git-svn-id: file:///svn/unbound/trunk@500 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-08 13:02:53 +00:00
Wouter Wijngaards eb5ab1f8e6 sigcrypt. 
git-svn-id: file:///svn/unbound/trunk@498 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-07 15:18:25 +00:00
Wouter Wijngaards b2639ba961 val_util work. 
git-svn-id: file:///svn/unbound/trunk@497 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-07 14:30:01 +00:00
Wouter Wijngaards 188bfacd05 validator work. 
git-svn-id: file:///svn/unbound/trunk@493 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-06 12:57:29 +00:00