]> git.ipfire.org Git - people/ms/dnsmasq.git/history - src/dnssec.c
Check that unsigned replies come from unsigned zones if --dnssec-check-unsigned set.
[people/ms/dnsmasq.git] / src / dnssec.c
2014-02-28  Simon KelleyCheck that unsigned replies come from unsigned zones...
2014-02-27  Simon KelleyNegative caching for DS records.
2014-02-25  Simon KelleyReturn INSECURE when validation fails with proved non...
2014-02-25  Simon KelleyStrip DNSSEC RRs when query doesn't have DO bit set.
2014-02-24  Simon KelleySpeeling.
2014-02-24  Simon KelleyCode cleanup.
2014-02-24  Simon KelleyAn NSEC record cannot attest to its own non-existance!
2014-02-23  Simon KelleyCheck signer name in RRSIGs.
2014-02-23  Simon KelleyBugfix for last commit.
2014-02-23  Simon KelleyNSEC3 validation. First pass.
2014-02-20  Simon KelleyAdd --servers-file option.
2014-02-19  Simon KelleyOmit ECC from DNSSEC if nettle library is old.
2014-02-13  Simon KelleyLog BOGUS validation result when upstream sends SERVFAIL.
2014-02-13  Simon KelleyAdd RFC-6605 ECDSA DNSSEC verification.
2014-02-10  Simon KelleyFix Byte-order botch: broke DNSSEC on big-endian platforms.
2014-02-10  Simon KelleyFix DNSSEC caching problems: incomplete RRSIG RRsets.
2014-02-06  Simon KelleyFix stack-smashing crash in DNSSEC. Thanks to Henk...
2014-02-06  Simon KelleyProtect against malicious DNS replies with very large...
2014-02-04  Simon KelleyLinking stuff. Latest Debian/Ubuntu don't automatically...
2014-02-03  Simon KelleyNasty cache failure and memory leak with DNSSEC.
2014-02-01  Simon KelleyValidate Ooops.
2014-01-26  Simon KelleyCode tidy.
2014-01-26  Simon KelleyRemove --dnssec-permissive, pointless if we don't set...
2014-01-25  Simon KelleyFix to last commit.
2014-01-25  Simon KelleyReplace CRC32 with SHA1 for spoof detection in DNSSEC...
2014-01-25  Simon KelleyRRSIG answer logging.
2014-01-25  Simon Kelley--dnssec-debug
2014-01-25  Simon KelleyMore DNSSEC caching logic, and avoid repeated validatio...
2014-01-24  Simon KelleyRRSIGS for PTR records from cache.
2014-01-23  Simon KelleyMore DNSSEC cache readout.
2014-01-22  Simon KelleyCache RRSIGS.
2014-01-22  Simon KelleyCaching of DNSSEC records.
2014-01-21  Simon KelleyFix loop in RR sort.
2014-01-21  Simon KelleyFix to hostname_cmp, and update to canonicalisation...
2014-01-21  Simon KelleyRationalise hostname_cmp()
2014-01-20  Simon KelleyNSEC proof-of-non-existence.
2014-01-19  Simon KelleyDon't validate error returns.
2014-01-16  Simon KelleyUDP retries for DNSSEC
2014-01-16  Simon KelleyFix SEGV and failure to validate on x86_64.
2014-01-15  Simon KelleyMerge branch 'master' of ssh://central/var/cache/git...
2014-01-13  Simon KelleySwap crypto library from openSSL to nettle.
2014-01-12  Simon KelleyMerge branch 'master' of ssh://central/var/cache/git...
2014-01-10  Simon KelleyFurthet tweak to RRset sort.
2014-01-09  Simon KelleyRFC 4035 5.3.2 wildcard label rules.
2014-01-09  Simon KelleyDNSSEC consolidation.
2014-01-08  Simon KelleyHandle digest lengths greater than 1 block.
2014-01-08  Simon KelleyRationalise DNS packet-buffer size calculations.
2014-01-08  Simon KelleyFirst functional DNSSEC - highly alpha.
2013-12-31  Simon Kelleybackup
2013-12-18  Simon KelleyMerge branch 'master' into dnssec
2013-12-12  Simon KelleyMerge branch 'master' into dnssec
2013-12-12  Simon KelleyMerge branch 'master' into dnssec
2013-12-12  Simon KelleyCommit to allow master merge.
2013-11-17  Simon KelleyMerge branch 'master' into dnssec
2013-11-15  Simon KelleyMerge branch 'master' into dnssec
2013-11-14  Simon KelleyMerge branch 'master' into dnssec
2013-10-25  Simon KelleyMerge branch 'master' into dnssec
2013-08-20  Giovanni BajoAdd copyright banners
2013-08-20  Simon KelleyDon't fight over namespace with re-implementation of...
2013-08-20  Giovanni BajoAgain make errors greppable.
2013-08-20  Giovanni BajoMake testsuite errors greppable.
2013-08-20  Giovanni BajoImplement RSA-MD5.
2013-08-20  Giovanni BajoSimplify abstraction of verification algorithms (it...
2013-08-20  Giovanni BajoUntangle digestalg from verifyalg; better separation...
2013-08-20  Giovanni BajoSince extract_name() does not convert to lowercase...
2013-08-20  Giovanni BajoParse and match DS records.
2013-08-20  Giovanni BajoGenericize verifyalg_add_data_domain() (rename to conve...
2013-08-20  Giovanni BajoAdd rdata description for MX.
2013-08-20  Giovanni BajoDescribe SOA rdata section.
2013-08-20  Giovanni BajoSimplify verifyalg_add_rdata() with new canonicalizatio...
2013-08-20  Giovanni BajoSimplify rrset_canonical_order() with new canonicalizat...
2013-08-20  Giovanni BajoAdd rdata canonicalization functions.
2013-08-20  Giovanni BajoFix a bug in rdlen update while decompressing a name
2013-08-20  Giovanni BajoFix the macro names.
2013-08-20  Giovanni BajoFix rrset_canonical_order() to correct handle canonical...
2013-08-20  Giovanni BajoStart refactoring for correct handling of domain wire...
2013-08-20  Giovanni Bajoverifyalg_add_data_domain: fix for root domain ("").
2013-08-20  Giovanni BajoCanonicalize NS records.
2013-08-20  Giovanni BajoProcess RRSIGs also in authority and additional sections.
2013-08-20  Giovanni BajoReformat some code (no semantic difference).
2013-08-20  Giovanni BajoStart implementing canonicalization of RDATA wire formats.
2013-08-20  Giovanni BajoSilence a few warnings.
2013-08-20  Giovanni BajoConvert to C-style comments.
2013-08-20  Giovanni BajoFix a validation bug when owner != signer.
2013-08-20  Giovanni BajoImprove logging message.
2013-08-20  Giovanni BajoFix a bug in extract_name_no_compression.
2013-08-20  Giovanni BajoBugfix: domain names must go through hash function...
2013-08-20  Giovanni BajoBugfix: rdata flags must go through hash function in...
2013-08-20  Giovanni Bajoverify() function must take a keydata chained buffer...
2013-08-20  Giovanni BajoMove helper functions to common header file.
2013-08-20  Giovanni BajoAdd a FIXME for missing logic.
2013-08-20  Giovanni BajoRework the loop a little (no functionality changes)
2013-08-20  Giovanni BajoCall valg verify functions (unimplemented for now)
2013-08-20  Giovanni BajoInsert all DNSKEY/DS records into cache in one transaction.
2013-08-20  Giovanni BajoChange some logging messages.
2013-08-20  Giovanni BajoSkip non-signing keys
2013-08-20  Giovanni BajoPostpone RRSIG processing after all DNSKEY/DS have...
2013-08-20  Giovanni BajoBefore using a key for validation, also verify that...
2013-08-20  Giovanni BajoFix argument in dnssec_parsekey() call.
2013-08-20  Giovanni BajoStart parsing DNSKEY records and insert them into cache.
next