Ralph Dolmans
ac9b95ca0c
- Set trust-anchor-signaling default to yes
...
git-svn-id: file:///svn/unbound/trunk@4360 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 10:17:25 +00:00
Wouter Wijngaards
05215e8e7d
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
...
DS records. NSEC3 is not disabled.
- fake-sha1 test option; print warning if used. To make unit tests.
git-svn-id: file:///svn/unbound/trunk@4043 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 13:18:08 +00:00
Ralph Dolmans
4f487cf746
Add DSA support for OpenSSL 1.1
...
git-svn-id: file:///svn/unbound/trunk@3954 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-12-07 12:58:47 +00:00
Wouter Wijngaards
27182d614b
- Fix unit tests for openssl 1.1, with no DSA, by faking DSA, enabled
...
with the undocumented switch 'fake-dsa'. It logs a warning.
git-svn-id: file:///svn/unbound/trunk@3909 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-10-26 07:38:00 +00:00
Wouter Wijngaards
1c3c7294e6
- Tested that unbound implements the RFC5155 Technical Errata id 3441.
...
Unbound already implements insecure classification of an empty
nonterminal in NSEC3 optout zone.
git-svn-id: file:///svn/unbound/trunk@2800 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-02 14:42:20 +00:00
