clones/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2024-09-21 06:37:08 +00:00
Code Issues Packages Projects Releases Wiki Activity
7,789 Commits 27 Branches 196 Tags 104 MiB
master
Commit Graph

596 Commits

Author SHA1 Message Date
Wouter Wijngaards
e0b639accd More vallog reason. Doxygen. 
git-svn-id: file:///svn/unbound/trunk@1869 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-08 06:35:14 +00:00
Wouter Wijngaards
ce45cbda6d - moved version number to 1.4.0 because of 1.3.4 release with only 
the NSEC3 patch.
	- val-log-level: 2 shows extended error information for validation
	  failures, but still one (longish) line per failure.  For example:
	  validation failure <example.com. DNSKEY IN>: signature expired from
	  192.0.2.4 for trust anchor example.com. while building chain of trust
	  validation failure <www.example.com. A IN>: no signatures from
	  192.0.2.6 for key example.com. while building chain of trust



git-svn-id: file:///svn/unbound/trunk@1868 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 16:45:47 +00:00
Wouter Wijngaards
6f37df3b92 Fix trunk. 
git-svn-id: file:///svn/unbound/trunk@1866 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 14:00:56 +00:00
Wouter Wijngaards
1a02ab895b Fix check for signatures. 
git-svn-id: file:///svn/unbound/trunk@1864 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 12:56:57 +00:00
Wouter Wijngaards
5ff6b1c5fb retry mode: empty non terminal. 
git-svn-id: file:///svn/unbound/trunk@1862 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 08:53:09 +00:00
Wouter Wijngaards
4d49d792c3 retry mode: DNSKEY. 
git-svn-id: file:///svn/unbound/trunk@1861 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 08:22:27 +00:00
Wouter Wijngaards
5d2e8e8e97 Retry mode, DS and prime. 
git-svn-id: file:///svn/unbound/trunk@1860 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 07:52:02 +00:00
Wouter Wijngaards
455c3d130d Data retry on validation failure. 
git-svn-id: file:///svn/unbound/trunk@1859 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-06 08:31:47 +00:00
Wouter Wijngaards
0679bf6502 Fix autotrust-5011 file used from libunbound (no probing by itself because 
it may not have the processor whenever it likes).


git-svn-id: file:///svn/unbound/trunk@1857 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-02 08:08:44 +00:00
Wouter Wijngaards
71959c05df review fixes. 
git-svn-id: file:///svn/unbound/trunk@1855 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-28 14:52:53 +00:00
Wouter Wijngaards
1c75281303 Read iana root multiline and prevent integer underflow. 
git-svn-id: file:///svn/unbound/trunk@1854 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-28 13:14:01 +00:00
Wouter Wijngaards
5007a44e52 review fixes 
git-svn-id: file:///svn/unbound/trunk@1853 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-25 15:20:29 +00:00
Wouter Wijngaards
2043463b6a review nits 
git-svn-id: file:///svn/unbound/trunk@1852 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-25 11:16:43 +00:00
Wouter Wijngaards
c467aabbf1 review comments 
git-svn-id: file:///svn/unbound/trunk@1850 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-23 15:15:41 +00:00
Wouter Wijngaards
ee1c4c1cce Failure handling for 5011. 
git-svn-id: file:///svn/unbound/trunk@1848 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-23 09:05:44 +00:00
Wouter Wijngaards
1f7304d146 revocation of trust anchors works. 
git-svn-id: file:///svn/unbound/trunk@1846 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-22 14:04:43 +00:00
Wouter Wijngaards
9dc9f0a8e8 rfc5011 and algorithm rollover 
git-svn-id: file:///svn/unbound/trunk@1845 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-22 12:20:21 +00:00
Wouter Wijngaards
d0cef76cff Pick up revocations even if not normally validly signed. 
git-svn-id: file:///svn/unbound/trunk@1842 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-18 10:13:06 +00:00
Wouter Wijngaards
82b8ddc9bb autotrust tests and fixes. 
git-svn-id: file:///svn/unbound/trunk@1841 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-18 07:49:29 +00:00
Wouter Wijngaards
b322353d8b remove printf format warning 
git-svn-id: file:///svn/unbound/trunk@1825 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-10 13:41:01 +00:00
Wouter Wijngaards
dcb11b2ee4 Fixup TTL too large bug for bogus responses. 
git-svn-id: file:///svn/unbound/trunk@1822 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-10 10:01:36 +00:00
Wouter Wijngaards
3f68f01313 - autotrust testbound scenarios. 
- autotrust fix that failure count is written to file.
        - autotrust fix that keys may become valid after add holddown time
          alone, before the probe returns.


git-svn-id: file:///svn/unbound/trunk@1819 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-07 14:34:29 +00:00
Wouter Wijngaards
e46441787c source IP from python and doxygen fixes. 
git-svn-id: file:///svn/unbound/trunk@1813 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-03 14:51:38 +00:00
Wouter Wijngaards
e5cab7b264 document last change 
git-svn-id: file:///svn/unbound/trunk@1805 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-03 09:29:54 +00:00
Wouter Wijngaards
8e2ef1caeb - TRAFFIC keyword for testbound. Simplifies test generation. 
${range lower val upper} to check probe timeout values.
- test with 5011-prepublish rollover and revocation.
- fix revocation of RR for autotrust, stray exclamation mark.


git-svn-id: file:///svn/unbound/trunk@1804 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-02 13:11:52 +00:00
Wouter Wijngaards
415236c002 active probe 
git-svn-id: file:///svn/unbound/trunk@1802 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-01 14:47:57 +00:00
Wouter Wijngaards
0a35d358ee More lint. 
git-svn-id: file:///svn/unbound/trunk@1801 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-01 13:15:51 +00:00
Wouter Wijngaards
544b3f8428 lint and doc 
git-svn-id: file:///svn/unbound/trunk@1800 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-01 13:09:55 +00:00
Wouter Wijngaards
9f9edf9ce6 docs 
git-svn-id: file:///svn/unbound/trunk@1799 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-01 13:07:38 +00:00
Wouter Wijngaards
eb3eb4f250 randomise probe time. 
git-svn-id: file:///svn/unbound/trunk@1798 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-01 12:45:10 +00:00
Wouter Wijngaards
bad061a35a Empty callback. 
git-svn-id: file:///svn/unbound/trunk@1791 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-27 15:22:48 +00:00
Wouter Wijngaards
902323da2f autotrust probing and testbound with fake timer support. 
git-svn-id: file:///svn/unbound/trunk@1787 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-26 13:23:49 +00:00
Wouter Wijngaards
568253e4ff Fixup DS query handling. 
git-svn-id: file:///svn/unbound/trunk@1785 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-25 15:15:10 +00:00
Wouter Wijngaards
6b959f8043 remove debug print 
git-svn-id: file:///svn/unbound/trunk@1784 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-25 14:59:48 +00:00
Wouter Wijngaards
b8a2dfb2c9 revoke point handling 
git-svn-id: file:///svn/unbound/trunk@1777 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-25 10:02:17 +00:00
Wouter Wijngaards
d8e6209a2e Fixup memleak in unsupported algorithm checks at startup. 
git-svn-id: file:///svn/unbound/trunk@1774 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-25 06:51:00 +00:00
Wouter Wijngaards
6f1f6dafb5 autotrust test routines. 
git-svn-id: file:///svn/unbound/trunk@1771 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-24 14:40:25 +00:00
Wouter Wijngaards
28be658942 debug routines and first brazilian prime has been done. 
git-svn-id: file:///svn/unbound/trunk@1770 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-21 15:27:23 +00:00
Wouter Wijngaards
ca94ca57b4 autotrust work 
git-svn-id: file:///svn/unbound/trunk@1769 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-20 11:49:33 +00:00
Wouter Wijngaards
0deef63323 autotrust state table updates. 
git-svn-id: file:///svn/unbound/trunk@1767 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-19 15:30:20 +00:00
Wouter Wijngaards
701b4ccdd6 autotrust event_update routine. 
git-svn-id: file:///svn/unbound/trunk@1766 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-18 15:36:46 +00:00
Wouter Wijngaards
a8dccbdd40 autotrust 
git-svn-id: file:///svn/unbound/trunk@1765 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-17 15:58:27 +00:00
Wouter Wijngaards
1cd84ce84e make better use of the cache. 
git-svn-id: file:///svn/unbound/trunk@1763 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-14 14:15:08 +00:00
Wouter Wijngaards
948567bea8 Fix bug in DLV. Iana portlist. 
git-svn-id: file:///svn/unbound/trunk@1762 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-14 13:58:54 +00:00
Wouter Wijngaards
ed67590f74 report RTT 
git-svn-id: file:///svn/unbound/trunk@1761 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-14 08:35:46 +00:00
Wouter Wijngaards
21e791248f autotrust work 
git-svn-id: file:///svn/unbound/trunk@1760 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-13 15:32:04 +00:00
Wouter Wijngaards
3251765048 autotrust work 
git-svn-id: file:///svn/unbound/trunk@1758 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-12 15:26:47 +00:00
Wouter Wijngaards
5ecf670277 lint 
git-svn-id: file:///svn/unbound/trunk@1757 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-11 14:25:34 +00:00
Wouter Wijngaards
538ca28828 OpenSSL config() and small memory leak. No more ENGINE_load_gost(). 
git-svn-id: file:///svn/unbound/trunk@1750 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-07 15:23:35 +00:00
Wouter Wijngaards
1f4222aa94 GOST support with --enable-gost. 
git-svn-id: file:///svn/unbound/trunk@1747 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-06 13:38:55 +00:00
Wouter Wijngaards
b97dbd3c8f Fix for Roland, tell why the error happens. 
git-svn-id: file:///svn/unbound/trunk@1740 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-03 08:46:26 +00:00
Wouter Wijngaards
72aa0bad92 Log option for bogus only. 
git-svn-id: file:///svn/unbound/trunk@1734 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-07-20 14:22:29 +00:00
Wouter Wijngaards
f73ce55c6e nicer error message 
git-svn-id: file:///svn/unbound/trunk@1733 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-07-20 13:31:45 +00:00
Wouter Wijngaards
edae0ad954 More lenient. 
git-svn-id: file:///svn/unbound/trunk@1692 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-30 13:20:02 +00:00
Wouter Wijngaards
d453b4a43b More lenient checks. 
git-svn-id: file:///svn/unbound/trunk@1691 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-30 12:50:57 +00:00
Wouter Wijngaards
7bd415ffdd Removed debug prints. 
git-svn-id: file:///svn/unbound/trunk@1690 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-30 08:24:19 +00:00
Wouter Wijngaards
b6406cae1e Better wrongly truncated check. And debug statements. 
git-svn-id: file:///svn/unbound/trunk@1687 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-29 10:15:27 +00:00
Wouter Wijngaards
efee0803d0 debugprint for wrongly_truncated 
git-svn-id: file:///svn/unbound/trunk@1685 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-29 08:52:58 +00:00
Wouter Wijngaards
4d97a3a400 documentation 
git-svn-id: file:///svn/unbound/trunk@1679 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-19 11:40:44 +00:00
Wouter Wijngaards
e0bc4f2c97 extremely lenient for truncated positive replies 
git-svn-id: file:///svn/unbound/trunk@1670 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-18 10:59:59 +00:00
Wouter Wijngaards
3898abde02 Fixup DLV lookups and pickup responses from cache. 
git-svn-id: file:///svn/unbound/trunk@1657 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-15 13:27:53 +00:00
Wouter Wijngaards
6451748967 Remove REVOKE flag support. 
git-svn-id: file:///svn/unbound/trunk@1639 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-08 08:29:17 +00:00
Wouter Wijngaards
38ec4f4777 Fixup bad free. 
git-svn-id: file:///svn/unbound/trunk@1635 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-03 07:57:19 +00:00
Wouter Wijngaards
4b449309e5 rsasha256 and rsasha512 not enabled by default. 
git-svn-id: file:///svn/unbound/trunk@1631 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-02 09:04:16 +00:00
Wouter Wijngaards
3b386055c7 RSASHA256 implicitly means NSEC3 support. 
git-svn-id: file:///svn/unbound/trunk@1593 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-09 14:51:17 +00:00
Wouter Wijngaards
5a9dcd323d remove empty line 
git-svn-id: file:///svn/unbound/trunk@1592 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-07 15:02:57 +00:00
Wouter Wijngaards
1e1ac9900a signature clock skew code. 
git-svn-id: file:///svn/unbound/trunk@1590 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-06 14:09:33 +00:00
Wouter Wijngaards
d369a1ac48 RRSIG validation fixed after Stephane Bortzmeyer reported. 
git-svn-id: file:///svn/unbound/trunk@1565 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-30 09:35:48 +00:00
Wouter Wijngaards
97a73402fc inverse trust anchor. 
git-svn-id: file:///svn/unbound/trunk@1533 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-18 14:02:46 +00:00
Wouter Wijngaards
41e589b08b Fixup trust anchor algorithm check. 
git-svn-id: file:///svn/unbound/trunk@1532 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-18 13:07:48 +00:00
Wouter Wijngaards
ce71720093 warn for bad trust anchors. 
git-svn-id: file:///svn/unbound/trunk@1487 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-02-19 09:01:39 +00:00
Wouter Wijngaards
b182b66e0e Do not validate with revoked keys. 
git-svn-id: file:///svn/unbound/trunk@1471 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-02-10 13:01:38 +00:00
Wouter Wijngaards
0b04be414e sun cc warnings 
git-svn-id: file:///svn/unbound/trunk@1439 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-15 10:34:18 +00:00
Wouter Wijngaards
c90fd40a5e fixes for suncc warnings 
git-svn-id: file:///svn/unbound/trunk@1438 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-15 10:29:17 +00:00
Wouter Wijngaards
8b860e8f12 removed debug print. 
git-svn-id: file:///svn/unbound/trunk@1424 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-09 15:17:39 +00:00
Wouter Wijngaards
e6c5255466 Wildcard support (from patch by Paul Wouters). 
git-svn-id: file:///svn/unbound/trunk@1413 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-07 12:24:34 +00:00
Wouter Wijngaards
c1ae463da5 chrooted include file fix 
git-svn-id: file:///svn/unbound/trunk@1411 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-06 15:47:15 +00:00
Wouter Wijngaards
865852d3f7 HINFO not downcased any more 
git-svn-id: file:///svn/unbound/trunk@1410 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-06 14:49:26 +00:00
Wouter Wijngaards
666b066bf6 fixup for DLV lookup higher NSEC examination bug. 
git-svn-id: file:///svn/unbound/trunk@1398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-12-18 10:14:30 +00:00
Wouter Wijngaards
c653b8424b Fixup for problems with do-ip6: no and only ipv6 addresses. 
git-svn-id: file:///svn/unbound/trunk@1353 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-17 12:47:34 +00:00
Wouter Wijngaards
5cfd778608 - unit test for negative cache, stress tests the refcounting. 
- fix for refcounting error that could cause fptr_wlist fatal exit
	  in the negative cache rbtree (upcoming 1.1 feature). (Thanks to 
	  Attila Nagy for testing).
	- nicer comments in cachedump about failed RR to string conversion.


git-svn-id: file:///svn/unbound/trunk@1342 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-11 11:54:06 +00:00
Wouter Wijngaards
6c7416128c fixup memleaks. 
git-svn-id: file:///svn/unbound/trunk@1331 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-05 10:38:22 +00:00
Wouter Wijngaards
0d01be50bc detection of sha256 and sha512 by testing if functionality was compiled 
into openssl.


git-svn-id: file:///svn/unbound/trunk@1328 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-03 16:06:12 +00:00
Wouter Wijngaards
8a32f9003b - RSASHA256_NSEC3 and RSASHA512_NSEC3 algos are supported. 
- updated ldns tarball (with those algos).



git-svn-id: file:///svn/unbound/trunk@1327 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-03 15:42:07 +00:00
Wouter Wijngaards
7176710b7f Fixup b32 compat for Mac OSX linker. 
git-svn-id: file:///svn/unbound/trunk@1323 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-03 14:38:03 +00:00
Wouter Wijngaards
1b1694a959 More verbose on signer name error. 
git-svn-id: file:///svn/unbound/trunk@1322 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-23 10:54:03 +00:00
Wouter Wijngaards
e5c52a7032 less log 
git-svn-id: file:///svn/unbound/trunk@1310 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-20 09:11:17 +00:00
Wouter Wijngaards
265c199445 Fixup negative TTLs Attila Nagy has reported. 
git-svn-id: file:///svn/unbound/trunk@1306 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-16 13:12:32 +00:00
Wouter Wijngaards
b6696c1342 nsec3 negative cache works. 
git-svn-id: file:///svn/unbound/trunk@1292 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-09 15:06:35 +00:00
Wouter Wijngaards
bfb4e20f43 max iterations for neg cache. 
git-svn-id: file:///svn/unbound/trunk@1291 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-09 13:06:06 +00:00
Wouter Wijngaards
c73c662fce work on nsec3 negative cache for qtype DS . 
git-svn-id: file:///svn/unbound/trunk@1290 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-08 14:42:46 +00:00
Wouter Wijngaards
45afaf3e08 nsec negative DS. 
git-svn-id: file:///svn/unbound/trunk@1289 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-08 10:04:27 +00:00
Wouter Wijngaards
c04451cc58 working on negative DS 
git-svn-id: file:///svn/unbound/trunk@1288 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-07 15:22:32 +00:00
Wouter Wijngaards
cb659ab13b fixup SHA256 algorithm set routine 
git-svn-id: file:///svn/unbound/trunk@1279 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-02 09:05:20 +00:00
Wouter Wijngaards
5e1193f19d SHA256 support. 
git-svn-id: file:///svn/unbound/trunk@1275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-30 13:06:07 +00:00
Wouter Wijngaards
2e5c620f2c doxygen, detect SHA256 support for test. 
git-svn-id: file:///svn/unbound/trunk@1274 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-30 11:35:48 +00:00
Wouter Wijngaards
13a68aac89 Fix for SHA256 DS downgrade. And test of resistance. 
git-svn-id: file:///svn/unbound/trunk@1273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-30 10:42:02 +00:00
Wouter Wijngaards
cf4b56d883 add remove local data and local zone with remote control 
(ldns-testpkts sync with ldns trunk).


git-svn-id: file:///svn/unbound/trunk@1261 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-19 14:49:29 +00:00
Wouter Wijngaards
62fc91f7f1 threadsafe rrset counter. 
git-svn-id: file:///svn/unbound/trunk@1240 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-17 07:13:31 +00:00
Wouter Wijngaards
636f742ef0 extended statistics. 
git-svn-id: file:///svn/unbound/trunk@1239 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-16 14:08:38 +00:00
Wouter Wijngaards
05cd134de9 Do not mark additional section items bogus. 
git-svn-id: file:///svn/unbound/trunk@1222 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-09-02 14:35:13 +00:00
Wouter Wijngaards
21cd9936d8 dlv negative cache size option. 
git-svn-id: file:///svn/unbound/trunk@1213 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-27 13:02:22 +00:00
Wouter Wijngaards
d60b281055 more test DLV. 
git-svn-id: file:///svn/unbound/trunk@1203 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-22 10:06:14 +00:00
Wouter Wijngaards
a7cfe2bf65 Test DLV anchor. 
git-svn-id: file:///svn/unbound/trunk@1202 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-21 14:58:39 +00:00
Wouter Wijngaards
a39a7704af DLV negative cache works. 
git-svn-id: file:///svn/unbound/trunk@1200 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-21 10:43:45 +00:00
Wouter Wijngaards
a61d10f715 Negative cache code. 
git-svn-id: file:///svn/unbound/trunk@1199 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-20 13:31:06 +00:00
Wouter Wijngaards
a4e4f424d1 negative cache work for DLV 
git-svn-id: file:///svn/unbound/trunk@1198 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-19 15:27:31 +00:00
Wouter Wijngaards
bcec1a7593 negative cache design. 
git-svn-id: file:///svn/unbound/trunk@1197 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-18 15:00:17 +00:00
Wouter Wijngaards
87fe8871b0 doxygen. 
git-svn-id: file:///svn/unbound/trunk@1193 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-15 14:00:08 +00:00
Wouter Wijngaards
55f7bbc051 negative cache design. 
git-svn-id: file:///svn/unbound/trunk@1192 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-15 13:31:16 +00:00
Wouter Wijngaards
8e39c9c1cb basic DLV works. 
iana port update.



git-svn-id: file:///svn/unbound/trunk@1191 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-15 10:55:09 +00:00
Wouter Wijngaards
7549bddfda DLV work 
git-svn-id: file:///svn/unbound/trunk@1190 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-14 15:16:50 +00:00
Wouter Wijngaards
44f5800da9 proper handling of empty files and neater code. 
git-svn-id: file:///svn/unbound/trunk@1189 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-13 15:18:39 +00:00
Wouter Wijngaards
4cf4659a1d dlv anchor file and chroot. 
git-svn-id: file:///svn/unbound/trunk@1188 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-13 14:46:33 +00:00
Wouter Wijngaards
080d9d6540 - ldns snapshot r2699 taken (includes DLV type). 
- DLV work, config file element, trust anchor read in.



git-svn-id: file:///svn/unbound/trunk@1187 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-13 14:30:35 +00:00
Wouter Wijngaards
1e4e8cb68a - Fixup rrset security updates overwriting 2181 trust status. 
This makes validated to be insecure data just as worthless as
	  nonvalidated data, and 2181 rules prevent cache overwrites to them.
	- Fix assertion fail on bogus key handling.
	- dnssec lameness detection works on first query at trust apex.
	- NS queries get proper cache and dnssec lameness treatment.
	- fixup compilation without pthreads on linux.
	- NS queries are done after every referral.
	  validator is used on those NS records (if anchors enabled).




git-svn-id: file:///svn/unbound/trunk@1185 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-12 10:13:57 +00:00
Wouter Wijngaards
9d068a12f5 fixup DS test for apex validation of NODATA. 
git-svn-id: file:///svn/unbound/trunk@1177 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-08-05 10:54:27 +00:00
Wouter Wijngaards
995b01a9b7 bugfix to DS qtype from client. 
git-svn-id: file:///svn/unbound/trunk@1170 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-07-30 21:38:37 +00:00
Wouter Wijngaards
6acc20abf4 fixup for type DS queries from clients when trustanchor for that name exists. 
git-svn-id: file:///svn/unbound/trunk@1148 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-07-15 09:45:50 +00:00
Wouter Wijngaards
f9fd2676f9 DSA signature compatibility. 
git-svn-id: file:///svn/unbound/trunk@1053 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-04-15 19:51:28 +00:00
Wouter Wijngaards
c858743222 Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ... 
git-svn-id: file:///svn/unbound/trunk@1052 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-04-15 18:01:14 +00:00
Wouter Wijngaards
9ab79dc0dc DSA test 
git-svn-id: file:///svn/unbound/trunk@1051 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-04-15 15:19:25 +00:00
Wouter Wijngaards
3fced109b9 Check sig type for DSA. 
git-svn-id: file:///svn/unbound/trunk@1043 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-04-14 15:57:52 +00:00
Wouter Wijngaards
77e7e73a32 Jelte found DSA sig solution, copied from ldns to fit into unbound validator. 
git-svn-id: file:///svn/unbound/trunk@1042 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-04-14 15:34:09 +00:00
Wouter Wijngaards
f3cfe6ed9c - setup speec_cache for need-ldns-testns in dotests. 
- check number of queued replies on incoming queries to avoid overload
         on that account.
       - fptr whitelist checks are not disabled in optimize mode.



git-svn-id: file:///svn/unbound/trunk@971 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-20 07:18:42 +00:00
Wouter Wijngaards
b2710818d4 Faster due to time-sharing. 
git-svn-id: file:///svn/unbound/trunk@966 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-19 13:12:23 +00:00
Wouter Wijngaards
09e18ffdbb fixup validator classification of root referrals. 
git-svn-id: file:///svn/unbound/trunk@936 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-08 12:24:01 +00:00
Wouter Wijngaards
f3525b2081 log level 2. 
git-svn-id: file:///svn/unbound/trunk@930 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-07 11:04:56 +00:00
Wouter Wijngaards
849026931b move around debug levels. 
git-svn-id: file:///svn/unbound/trunk@929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-02-07 09:46:49 +00:00
Wouter Wijngaards
0e1b3fb3e0 chroot checks for roothints and anchor files. 
git-svn-id: file:///svn/unbound/trunk@910 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-01-30 11:21:20 +00:00
Wouter Wijngaards
0bdfbccbdc please doxygen. 
git-svn-id: file:///svn/unbound/trunk@898 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-01-25 10:41:17 +00:00
Wouter Wijngaards
76a31aacd3 test for ancillary data and fixes for lint and doxygen. 
git-svn-id: file:///svn/unbound/trunk@848 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-01-15 10:10:22 +00:00
Wouter Wijngaards
f187e1da7e fptrwlist and remove oldhack with islocked param. 
git-svn-id: file:///svn/unbound/trunk@805 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-12-04 21:34:53 +00:00
Wouter Wijngaards
fcac316d63 coverity run fixes. 
git-svn-id: file:///svn/unbound/trunk@803 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-12-04 17:54:14 +00:00
Wouter Wijngaards
9ade3e4811 nonRD fix. 
git-svn-id: file:///svn/unbound/trunk@786 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-28 12:06:32 +00:00
Wouter Wijngaards
2c2eaecc6c nonRD fix. 
git-svn-id: file:///svn/unbound/trunk@785 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-28 11:02:01 +00:00
Wouter Wijngaards
99a9914605 No downcasing for NSEC and RRSIG 
git-svn-id: file:///svn/unbound/trunk@754 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-19 08:55:19 +00:00
Wouter Wijngaards
a06131872d Harden dnssec stripped zones. 
git-svn-id: file:///svn/unbound/trunk@730 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-01 15:32:27 +00:00
Wouter Wijngaards
734abf9323 Fixup of reload bug. 
git-svn-id: file:///svn/unbound/trunk@726 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-11-01 09:48:20 +00:00
Wouter Wijngaards
633daf4bc7 dnssec lame detection. 
git-svn-id: file:///svn/unbound/trunk@714 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-22 15:25:37 +00:00
Wouter Wijngaards
63aa7463e8 ISO C 
git-svn-id: file:///svn/unbound/trunk@712 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-22 09:14:29 +00:00
Wouter Wijngaards
086b257b1d - lex fix 
- unsecure validation neater
- const cast warning removal


git-svn-id: file:///svn/unbound/trunk@702 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-19 08:03:08 +00:00
Wouter Wijngaards
6f49c2fe55 regional nicer, remove region-allocator. 
git-svn-id: file:///svn/unbound/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-18 20:31:43 +00:00
Wouter Wijngaards
75792c34dc fixup insecure glue on referrals. 
git-svn-id: file:///svn/unbound/trunk@688 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-17 15:48:54 +00:00
Wouter Wijngaards
be0bdf0260 fixup test, less logging. 
git-svn-id: file:///svn/unbound/trunk@687 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-17 14:49:12 +00:00
Wouter Wijngaards
108539c94c fixup crashy. 
git-svn-id: file:///svn/unbound/trunk@685 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-17 14:22:14 +00:00
Wouter Wijngaards
a4d4d0fe3a no debug on low verbosity. 
git-svn-id: file:///svn/unbound/trunk@684 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-17 14:10:46 +00:00
Wouter Wijngaards
24d1ed15c4 please gcc more. 
git-svn-id: file:///svn/unbound/trunk@663 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-05 13:02:50 +00:00
Wouter Wijngaards
8e55996b7c function pointer whitelist for module operations. completing fptr work. 
git-svn-id: file:///svn/unbound/trunk@661 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-05 12:42:25 +00:00
Wouter Wijngaards
2a547a35a7 function pointer whitelists on data types. 
git-svn-id: file:///svn/unbound/trunk@660 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-05 11:41:12 +00:00
Wouter Wijngaards
41e847df18 security audit changes. 
git-svn-id: file:///svn/unbound/trunk@657 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-04 15:10:11 +00:00
Wouter Wijngaards
d4614cf1ce fixup cname out of unsec zone. 
git-svn-id: file:///svn/unbound/trunk@655 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-03 13:33:23 +00:00
Wouter Wijngaards
a740dfe195 Fixup and test. 
git-svn-id: file:///svn/unbound/trunk@654 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-03 12:20:55 +00:00
Wouter Wijngaards
a73089c5f0 loopfix. 
git-svn-id: file:///svn/unbound/trunk@653 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-10-03 08:36:47 +00:00
Wouter Wijngaards
fd3293a0ee NSEC3 tests, and fixup for qtype ANY wildcard proof. 
git-svn-id: file:///svn/unbound/trunk@638 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-25 09:39:32 +00:00
Wouter Wijngaards
0f7ced491e NSEC3 test and fix for bitmap protection code. 
git-svn-id: file:///svn/unbound/trunk@637 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-25 08:33:14 +00:00
Wouter Wijngaards
931efbbaa0 Fixup and test for nonrec loop case. 
git-svn-id: file:///svn/unbound/trunk@634 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-21 20:30:04 +00:00
Wouter Wijngaards
74468b2edb debug 
git-svn-id: file:///svn/unbound/trunk@633 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-21 15:45:32 +00:00
Wouter Wijngaards
a81e19a6eb Fixup alloc in wrong region. 
git-svn-id: file:///svn/unbound/trunk@628 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-21 13:34:44 +00:00
Wouter Wijngaards
62e37fe3ee quick fixup 
git-svn-id: file:///svn/unbound/trunk@626 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-20 12:46:19 +00:00
Wouter Wijngaards
c6e92c19b2 more liberal for ANS ENT bug. Fixup DS ENT handling too. 
git-svn-id: file:///svn/unbound/trunk@625 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-20 12:31:35 +00:00
Wouter Wijngaards
9865f38f69 Fixup for a wildcarded NSEC with empty nonterminal query. 
git-svn-id: file:///svn/unbound/trunk@624 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-20 11:37:15 +00:00
Wouter Wijngaards
8959cd47a8 NSEC rdata not lowercased. 
git-svn-id: file:///svn/unbound/trunk@623 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-19 12:34:42 +00:00
Wouter Wijngaards
e8bcec4529 print validator classification type. 
update plan items.


git-svn-id: file:///svn/unbound/trunk@619 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-18 12:33:51 +00:00
Wouter Wijngaards
c4392dd54c wildcard nsec3 tests. 
git-svn-id: file:///svn/unbound/trunk@618 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-18 08:28:35 +00:00
Wouter Wijngaards
748bfb0b0e more nsec3 tests. 
git-svn-id: file:///svn/unbound/trunk@617 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-17 14:52:14 +00:00
Wouter Wijngaards
6510d8f20a namerror nsec3 proof works. 
git-svn-id: file:///svn/unbound/trunk@616 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-17 14:03:35 +00:00
Wouter Wijngaards
c7d15770c1 nsec3 hash function unit test. 
git-svn-id: file:///svn/unbound/trunk@615 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-17 09:25:54 +00:00
Wouter Wijngaards
7987b687dc NSEC3. 
git-svn-id: file:///svn/unbound/trunk@613 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-14 11:15:42 +00:00
Wouter Wijngaards
b22e1d4273 Use nsec3s_seen flag for speedup. 
git-svn-id: file:///svn/unbound/trunk@612 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-13 15:11:25 +00:00
Wouter Wijngaards
92198b3624 if no NSEC3 present, skip validation. 
git-svn-id: file:///svn/unbound/trunk@611 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-13 15:09:58 +00:00
Wouter Wijngaards
facde2ca10 nsec3 work, prove name error. 
git-svn-id: file:///svn/unbound/trunk@610 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-13 15:02:33 +00:00
Wouter Wijngaards
d85debfae4 nsec3 work. 
git-svn-id: file:///svn/unbound/trunk@609 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-12 14:16:46 +00:00
Wouter Wijngaards
26f9ea8942 nsec3 work. 
git-svn-id: file:///svn/unbound/trunk@607 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-11 18:18:16 +00:00
Wouter Wijngaards
149ff1cd5a please older gcc. 
git-svn-id: file:///svn/unbound/trunk@604 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-06 09:16:43 +00:00
Wouter Wijngaards
08bf892be6 port. 
git-svn-id: file:///svn/unbound/trunk@603 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-06 09:14:13 +00:00
Wouter Wijngaards
cb3044c09d wildcard NSECs. 
git-svn-id: file:///svn/unbound/trunk@596 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-05 12:58:25 +00:00
Wouter Wijngaards
f52b202747 trust anchor denial test. 
git-svn-id: file:///svn/unbound/trunk@594 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-05 11:47:09 +00:00
Wouter Wijngaards
d45774fe03 wildcard DNAME detect 
git-svn-id: file:///svn/unbound/trunk@585 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-04 12:57:40 +00:00
Wouter Wijngaards
0e11cd160d DNAME synthesis and validation fixups. 
git-svn-id: file:///svn/unbound/trunk@584 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-04 12:44:43 +00:00
Wouter Wijngaards
bb67a404fb tests, cleanup tmp when testbound fails, fixup referral glue cleanup. 
git-svn-id: file:///svn/unbound/trunk@583 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-04 11:31:29 +00:00
Wouter Wijngaards
8351afe61a cname nxdomain fixup. 
git-svn-id: file:///svn/unbound/trunk@576 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-09-03 09:13:27 +00:00
Wouter Wijngaards
49bb418691 Nodata tests. 
git-svn-id: file:///svn/unbound/trunk@572 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-31 12:35:41 +00:00
Wouter Wijngaards
fd7af10ff6 please lint. 
git-svn-id: file:///svn/unbound/trunk@570 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-31 07:56:00 +00:00
Wouter Wijngaards
f304a2a459 can read bind-style config files for trust anchor information. 
git-svn-id: file:///svn/unbound/trunk@569 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-31 07:44:16 +00:00
Wouter Wijngaards
fceea2bcd5 bind config trusted keys read work. 
git-svn-id: file:///svn/unbound/trunk@568 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-30 15:36:23 +00:00
Wouter Wijngaards
45297772c9 crypto cleanups at exit. 
git-svn-id: file:///svn/unbound/trunk@567 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-30 13:38:52 +00:00
Wouter Wijngaards
a22a3b1669 Memory cleanup. 
- caught bad free of un-alloced data in worker_send error case.
       - memory accounting for key cache (trust anchors and temporary cache).
       - memory accounting fixup for outside network tcp pending waits.
       - memory accounting fixup for outside network tcp callbacks.
       - memory accounting for iterator fixed storage.
       - key cache size and slabs config options.


git-svn-id: file:///svn/unbound/trunk@566 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-30 12:45:19 +00:00
Wouter Wijngaards
de6d807e3d no convert to der for DSA signatures 
signature test.


git-svn-id: file:///svn/unbound/trunk@564 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-29 14:27:04 +00:00
Wouter Wijngaards
824ceffedb verbosity detail gives validation failures, but not boring algorithm logs. 
git-svn-id: file:///svn/unbound/trunk@560 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 15:07:52 +00:00
Wouter Wijngaards
e839035a7a doc fixup. 
git-svn-id: file:///svn/unbound/trunk@559 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 14:14:20 +00:00
Wouter Wijngaards
3d832f5dca Small speedup. 
git-svn-id: file:///svn/unbound/trunk@558 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 14:13:32 +00:00
Wouter Wijngaards
459039cf08 Faster verification. 
git-svn-id: file:///svn/unbound/trunk@557 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 13:54:55 +00:00
Wouter Wijngaards
60470b186e permissive mode feature. 
git-svn-id: file:///svn/unbound/trunk@556 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 11:53:27 +00:00
Wouter Wijngaards
c988905aa4 enforce signature TTLs 
git-svn-id: file:///svn/unbound/trunk@555 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 10:26:16 +00:00
Wouter Wijngaards
af2b300529 No offtree signing. 
git-svn-id: file:///svn/unbound/trunk@554 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 09:47:17 +00:00
Wouter Wijngaards
0e90c03e95 Referral validation. 
git-svn-id: file:///svn/unbound/trunk@553 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-28 09:39:43 +00:00
Wouter Wijngaards
f9cc9481e2 validator also computes insecure and indeterminate for rrsets and stores 
that.


git-svn-id: file:///svn/unbound/trunk@551 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-27 14:55:06 +00:00
Wouter Wijngaards
542b812690 do not cache nonRD replies in msg cache, the rrset cache is used for that. 
store verification status in rrset cache to enable security for nonRD
replies and also speed up processing.


git-svn-id: file:///svn/unbound/trunk@550 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-27 13:46:05 +00:00
Wouter Wijngaards
87fafec48a DS and DNSKEY not from additional synthesis. Nicer signature expiration errors. 
git-svn-id: file:///svn/unbound/trunk@546 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-24 13:14:23 +00:00
Wouter Wijngaards
a490e8777f Fixup. 
git-svn-id: file:///svn/unbound/trunk@545 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-24 12:24:07 +00:00
Wouter Wijngaards
3a422ba496 prettier proof routines. 
git-svn-id: file:///svn/unbound/trunk@544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-24 10:36:15 +00:00
Wouter Wijngaards
6890f55d17 refuse unsigned authority section. clean additional section as option. 
git-svn-id: file:///svn/unbound/trunk@543 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-24 09:44:29 +00:00
Wouter Wijngaards
b54a0400ab CNAME validation. 
git-svn-id: file:///svn/unbound/trunk@542 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-23 15:23:45 +00:00
Wouter Wijngaards
a7001366a1 review change. 
git-svn-id: file:///svn/unbound/trunk@541 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-22 14:29:24 +00:00
Wouter Wijngaards
a084af819c bogus ttl fixed value, config item. 
git-svn-id: file:///svn/unbound/trunk@540 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-22 12:13:52 +00:00
Wouter Wijngaards
272096d611 Returns and caches validated replies. 
git-svn-id: file:///svn/unbound/trunk@536 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-21 13:12:10 +00:00
Wouter Wijngaards
834a8fc30f any response validation. 
git-svn-id: file:///svn/unbound/trunk@535 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-21 07:58:55 +00:00
Wouter Wijngaards
0f9ae7acd8 nxdomain validation. 
git-svn-id: file:///svn/unbound/trunk@534 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-20 14:27:11 +00:00
Wouter Wijngaards
5605f8d003 nodata validation. 
git-svn-id: file:///svn/unbound/trunk@533 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-20 13:39:58 +00:00
Wouter Wijngaards
1b42a51048 VALIDATE state and positive response validation. 
git-svn-id: file:///svn/unbound/trunk@532 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-20 12:31:12 +00:00
Wouter Wijngaards
3f8b0b1cfe handle DNSKEY response state. 
git-svn-id: file:///svn/unbound/trunk@531 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-20 08:10:57 +00:00
Wouter Wijngaards
453df0c66c nsec work, canonical compare routine and tests. 
git-svn-id: file:///svn/unbound/trunk@530 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-17 14:25:42 +00:00
Wouter Wijngaards
cedeaa8316 ds2ke and nsec work. 
git-svn-id: file:///svn/unbound/trunk@529 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-17 11:41:49 +00:00
Wouter Wijngaards
9ddbb430ef findkey state. 
git-svn-id: file:///svn/unbound/trunk@528 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-16 15:06:40 +00:00
Wouter Wijngaards
24aad68487 fixup canon compare. Include full AXFR data in signature test. 
git-svn-id: file:///svn/unbound/trunk@526 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-16 10:05:52 +00:00
Wouter Wijngaards
e4aa70b4c5 key prime, DS test. 
git-svn-id: file:///svn/unbound/trunk@525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-16 09:33:35 +00:00
Wouter Wijngaards
ce290651d0 unit test will fail, but this fixes canonical order in unbound, waiting 
for ldns fix.


git-svn-id: file:///svn/unbound/trunk@523 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-15 14:09:00 +00:00
Wouter Wijngaards
1d29f79974 verify unit test. 
git-svn-id: file:///svn/unbound/trunk@522 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-15 13:18:32 +00:00
Wouter Wijngaards
927af50c81 please lint. 
git-svn-id: file:///svn/unbound/trunk@521 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-15 09:04:44 +00:00
Wouter Wijngaards
f06b1e8ef3 crypto verify routines. 
git-svn-id: file:///svn/unbound/trunk@520 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-15 08:39:00 +00:00
Wouter Wijngaards
448a9f414f fixups for memory. 
git-svn-id: file:///svn/unbound/trunk@512 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-14 13:15:36 +00:00
Wouter Wijngaards
0374d468c8 hinfo treatment. 
git-svn-id: file:///svn/unbound/trunk@510 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-13 11:53:24 +00:00
Wouter Wijngaards
2157540f35 makefile nicer in case flex is missing. 
canonical compare.


git-svn-id: file:///svn/unbound/trunk@509 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-13 10:27:44 +00:00
Wouter Wijngaards
749ee526e8 canonical sort. 
git-svn-id: file:///svn/unbound/trunk@508 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-10 15:12:06 +00:00
Wouter Wijngaards
5166d65ea2 debug override date config option. 
git-svn-id: file:///svn/unbound/trunk@505 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-09 15:16:25 +00:00
Wouter Wijngaards
45f95a18af rrsig checks. 
git-svn-id: file:///svn/unbound/trunk@502 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-09 09:58:04 +00:00
Wouter Wijngaards
8f58908f45 sigcrypt keyset processing 
git-svn-id: file:///svn/unbound/trunk@501 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-08 13:59:57 +00:00
Wouter Wijngaards
bdb519c5c1 use sigcrypt. 
git-svn-id: file:///svn/unbound/trunk@500 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-08 13:02:53 +00:00
Wouter Wijngaards
7726691af9 sigcrypt work. 
git-svn-id: file:///svn/unbound/trunk@499 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-08 11:45:54 +00:00
Wouter Wijngaards
eb5ab1f8e6 sigcrypt. 
git-svn-id: file:///svn/unbound/trunk@498 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-07 15:18:25 +00:00
Wouter Wijngaards
b2639ba961 val_util work. 
git-svn-id: file:///svn/unbound/trunk@497 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-07 14:30:01 +00:00
Wouter Wijngaards
c3a5bcb8d4 id number change 
git-svn-id: file:///svn/unbound/trunk@496 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-07 09:24:20 +00:00
Wouter Wijngaards
b24aac895f prime work. 
git-svn-id: file:///svn/unbound/trunk@494 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-06 15:56:12 +00:00
Wouter Wijngaards
188bfacd05 validator work. 
git-svn-id: file:///svn/unbound/trunk@493 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-06 12:57:29 +00:00
Wouter Wijngaards
4eaa855db9 dname isroot and dellabel 
git-svn-id: file:///svn/unbound/trunk@492 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-06 11:06:00 +00:00
Wouter Wijngaards
44560e40ea key cache. 
git-svn-id: file:///svn/unbound/trunk@491 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-06 09:34:58 +00:00
Wouter Wijngaards
1d83bb84ed key entry. 
git-svn-id: file:///svn/unbound/trunk@490 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-03 14:56:24 +00:00
Wouter Wijngaards
9ebbdbabd3 create rrsets for verification later. 
git-svn-id: file:///svn/unbound/trunk@489 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-03 14:12:28 +00:00
Wouter Wijngaards
eb1b1e6044 unit test trust anchor storage. 
git-svn-id: file:///svn/unbound/trunk@487 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-03 13:15:16 +00:00
Wouter Wijngaards
d48e17e1dd trust anchor storage and config. 
git-svn-id: file:///svn/unbound/trunk@486 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-03 11:51:20 +00:00
Wouter Wijngaards
fd3e3ed05b validator, trust anchors. 
git-svn-id: file:///svn/unbound/trunk@482 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-02 15:45:32 +00:00
Wouter Wijngaards
ce12d59957 validator work. 
git-svn-id: file:///svn/unbound/trunk@481 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-02 14:36:20 +00:00
Wouter Wijngaards
6849c1030b passing of control between modules. 
git-svn-id: file:///svn/unbound/trunk@479 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-02 12:13:08 +00:00
Wouter Wijngaards
2122b961d3 callbacks via module specific function for walk_supers. 
part of a move towards multiple modules for meshes.


git-svn-id: file:///svn/unbound/trunk@471 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-01 14:01:34 +00:00
Wouter Wijngaards
ac895c6d35 module configuration option. 
git-svn-id: file:///svn/unbound/trunk@468 be551aaa-1e26-0410-a405-d3ace91eadb9
 2007-08-01 11:17:30 +00:00