W.C.A. Wijngaards 81a19ebeb3 - Fix that a signed wildcard NSEC, is checked before use, ...

so it does not allow insecure DS proofs inappropriately.
  Thanks to Qifan Zhang, Palo Alto Networks, for the report.

2026-06-16 10:09:00 +02:00

..

autotrust.c

- Fix that a half-written trust anchor file does not crash

2026-06-16 09:45:10 +02:00

autotrust.h

- Expose if a query (or a subquery) was ratelimited (not src IP

2018-08-03 14:00:46 +00:00

val_anchor.c

- Fix that fast_reload does not terminate the server for

2026-06-15 16:31:37 +02:00

val_anchor.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

val_kcache.c

Review for #759:

2023-07-19 15:20:44 +02:00

val_kcache.h

Review for #759:

2023-07-19 15:20:44 +02:00

val_kentry.c

Review for #759:

2023-07-19 15:20:44 +02:00

val_kentry.h

Review for #759:

2023-07-19 15:20:44 +02:00

val_neg.c

- Fix negative cache NSEC3 nodata proof, to use the correct

2026-06-03 14:40:17 +02:00

val_neg.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

val_nsec3.c

- Fix CVE-2026-42923, Degradation of service with unbounded NSEC3

2026-05-20 10:20:02 +02:00

val_nsec3.h

- Fix CVE-2026-42923, Degradation of service with unbounded NSEC3

2026-05-20 10:20:02 +02:00

val_nsec.c

- Fix that a signed wildcard NSEC, is checked before use,

2026-06-16 10:09:00 +02:00

val_nsec.h

- Fix that validation reason failure that uses string print uses

2024-07-08 15:29:20 +02:00

val_secalgo.c

- Fix DNSSEC validation with libnettle for noncanonical RSA

2026-05-15 16:20:52 +02:00

val_secalgo.h

zonemd, digest code calls, secalgo openssl sha384 and sha512.

2020-10-09 11:19:31 +02:00

val_sigcrypt.c

- Fix that validation canonicalization of domain names

2026-06-03 14:48:06 +02:00

val_sigcrypt.h

- Fix header comment about EDE reference in validator/val_sigcrypt.h.

2025-12-01 16:04:41 +01:00

val_utils.c

- Fix that validator caps number of ANY RRsets it can

2026-05-27 13:38:10 +02:00

val_utils.h

- Fix that validator caps number of ANY RRsets it can

2026-05-27 13:38:10 +02:00

validator.c

- Fix that validator caps number of ANY RRsets it can

2026-05-27 13:38:10 +02:00

validator.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00