2014-03-27 |
Simon Kelley | Ensure ->sentto is valid for DNSSEC forwards. Otherwise... |
tree | commitdiff |
2014-03-27 |
Simon Kelley | Cache stats availble in CHAOS .bind domain. |
tree | commitdiff |
2014-03-26 |
Simon Kelley | Terminate DS-search when reaching the root via cache... |
tree | commitdiff |
2014-03-25 |
Simon Kelley | SERVFAIL is an expected error return, don't try all... |
tree | commitdiff |
2014-03-25 |
Tomas Hozza | Handle failure of hash_questions() |
tree | commitdiff |
2014-03-25 |
Tomas Hozza | Memory leak in error path. |
tree | commitdiff |
2014-03-24 |
Simon Kelley | Reorder sanity checks on UDP packet reception, to cope... |
tree | commitdiff |
2014-03-22 |
Simon Kelley | Ignore DNS queries from port 0: http://www.ietf.org... |
tree | commitdiff |
2014-03-22 |
Andy | Tidy uid defines. |
tree | commitdiff |
2014-03-21 |
Simon Kelley | Fix DNSSEC crash retrying to IPv6 server. |
tree | commitdiff |
2014-03-20 |
Simon Kelley | Initialise uid when creating CNAME cache record. |
tree | commitdiff |
2014-03-20 |
Simon Kelley | Make --quiet-dhcp apply to DHCPDISCOVER when client... |
tree | commitdiff |
2014-03-18 |
Simon Kelley | Tidy and fix cache->uid handling. |
tree | commitdiff |
2014-03-17 |
Andy | Ensure next_uid() can never return 0. |
tree | commitdiff |
2014-03-16 |
Simon Kelley | Handle integer overflow in uid counter. Fixes rare... |
tree | commitdiff |
2014-03-12 |
Simon Kelley | Warn about non-local queries once only for UDP. |
tree | commitdiff |
2014-03-06 |
Simon Kelley | OPT_LOCAL_SERVICE needs up-to-date interface list too. |
tree | commitdiff |
2014-03-05 |
Simon Kelley | Set --local-service in Debian package startup. |
tree | commitdiff |
2014-03-05 |
Simon Kelley | --local-service. Default protection from DNS amplificat... |
tree | commitdiff |
2014-03-03 |
Simon Kelley | Compiler warning. |
tree | commitdiff |
2014-03-02 |
Simon Kelley | KEYBLOCK LEN better as a multiple of 8. |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Can have local DS records (trust anchors). |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Mass edit of INSECURE->BOGUS returns for server failure... |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Don't cache secure replies which we've messsed with. |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Tweak tuning params. |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Handle replies with no answers and no NS in validate_reply. |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Don't free blockdata for negative DS cache entries. |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Fix off-by-one overwrite. |
tree | commitdiff |
2014-03-01 |
Simon Kelley | Tidy. |
tree | commitdiff |
2014-02-28 |
Simon Kelley | Check that unsigned replies come from unsigned zones... |
tree | commitdiff |
2014-02-27 |
Simon Kelley | Negative caching for DS records. |
tree | commitdiff |
2014-02-25 |
Simon Kelley | Return INSECURE when validation fails with proved non... |
tree | commitdiff |
2014-02-25 |
Simon Kelley | Strip DNSSEC RRs when query doesn't have DO bit set. |
tree | commitdiff |
2014-02-24 |
Simon Kelley | Speeling. |
tree | commitdiff |
2014-02-24 |
Simon Kelley | Code cleanup. |
tree | commitdiff |
2014-02-24 |
Simon Kelley | An NSEC record cannot attest to its own non-existance! |
tree | commitdiff |
2014-02-23 |
Simon Kelley | Check signer name in RRSIGs. |
tree | commitdiff |
2014-02-23 |
Simon Kelley | Bugfix for last commit. |
tree | commitdiff |
2014-02-23 |
Simon Kelley | NSEC3 validation. First pass. |
tree | commitdiff |
2014-02-20 |
Simon Kelley | Add --servers-file option. |
tree | commitdiff |
2014-02-19 |
Simon Kelley | Omit ECC from DNSSEC if nettle library is old. |
tree | commitdiff |
2014-02-19 |
Simon Kelley | More server cleanup. |
tree | commitdiff |
2014-02-18 |
Simon Kelley | Cleanup of server reading code, preparation, for dynami... |
tree | commitdiff |
2014-02-17 |
Simon Kelley | --rev-server option. Syntactic sugar for PTR queries. |
tree | commitdiff |
2014-02-13 |
Simon Kelley | Log BOGUS validation result when upstream sends SERVFAIL. |
tree | commitdiff |
2014-02-13 |
Simon Kelley | TYpo. |
tree | commitdiff |
2014-02-13 |
Simon Kelley | No CD in forwarded queries unless dnssec-debug for... |
tree | commitdiff |
2014-02-13 |
Simon Kelley | Don't mess with the TTL of DNSSEC RRs. |
tree | commitdiff |
2014-02-13 |
Simon Kelley | Add RFC-6605 ECDSA DNSSEC verification. |
tree | commitdiff |
2014-02-11 |
Simon Kelley | Use DS records as trust anchors, not DNSKEYs. |
tree | commitdiff |
2014-02-10 |
Simon Kelley | Further tidying of AD and DO bit handling. |
tree | commitdiff |
2014-02-10 |
Simon Kelley | Handle validation when more one key is needed. |
tree | commitdiff |
2014-02-10 |
Simon Kelley | Fix Byte-order botch: broke DNSSEC on big-endian platforms. |
tree | commitdiff |
2014-02-10 |
Simon Kelley | Fix DNSSEC caching problems: incomplete RRSIG RRsets. |
tree | commitdiff |
2014-02-06 |
Simon Kelley | AD bit in queries handled as RFC6840 p5.7 |
tree | commitdiff |
2014-02-06 |
Simon Kelley | Fix stack-smashing crash in DNSSEC. Thanks to Henk... |
tree | commitdiff |
2014-02-06 |
Simon Kelley | Protect against malicious DNS replies with very large... |
tree | commitdiff |
2014-02-04 |
Simon Kelley | Make RR work when returning A/AAAA records and an RRSIG. |
tree | commitdiff |
2014-02-04 |
Simon Kelley | Linking stuff. Latest Debian/Ubuntu don't automatically... |
tree | commitdiff |
2014-02-03 |
Simon Kelley | Format tweak. |
tree | commitdiff |
2014-02-03 |
Simon Kelley | Log NXDOMAIN correctly. |
tree | commitdiff |
2014-02-03 |
Simon Kelley | Return configured DNSKEYs even though we don't have... |
tree | commitdiff |
2014-02-03 |
Simon Kelley | Nasty cache failure and memory leak with DNSSEC. |
tree | commitdiff |
2014-02-01 |
Simon Kelley | Validate Ooops. |
tree | commitdiff |
2014-01-31 |
Simon Kelley | Blockdata fixes and tuning. |
tree | commitdiff |
2014-01-31 |
Simon Kelley | Blockdata leak. |
tree | commitdiff |
2014-01-31 |
Simon Kelley | copy-n-paste error. |
tree | commitdiff |
2014-01-31 |
Simon Kelley | Anounce DNSSEC at startup. |
tree | commitdiff |
2014-01-31 |
Simon Kelley | Init ->dependent field in frec allocation. |
tree | commitdiff |
2014-01-31 |
Simon Kelley | Compiler warning. |
tree | commitdiff |
2014-01-28 |
Simon Kelley | Crash in cache code when compiled with HAVE_DNSSEC. |
tree | commitdiff |
2014-01-27 |
Simon Kelley | Trivial format fix. |
tree | commitdiff |
2014-01-26 |
Simon Kelley | Code tidy. |
tree | commitdiff |
2014-01-26 |
Simon Kelley | Don't mark answers as DNSEC validated if DNS-doctored. |
tree | commitdiff |
2014-01-26 |
Simon Kelley | Exclude CRC code in DNSSEC build - replaced with SHA1. |
tree | commitdiff |
2014-01-26 |
Simon Kelley | Remove --dnssec-permissive, pointless if we don't set... |
tree | commitdiff |
2014-01-25 |
Simon Kelley | Fix to last commit. |
tree | commitdiff |
2014-01-25 |
Simon Kelley | Replace CRC32 with SHA1 for spoof detection in DNSSEC... |
tree | commitdiff |
2014-01-25 |
Simon Kelley | Get AA flag right in DNSSEC answers from cache. |
tree | commitdiff |
2014-01-25 |
Simon Kelley | RRSIG answer logging. |
tree | commitdiff |
2014-01-25 |
Simon Kelley | Class specifier in --dnskey, instead of hardwiring... |
tree | commitdiff |
2014-01-25 |
Simon Kelley | --dnssec-debug |
tree | commitdiff |
2014-01-25 |
Simon Kelley | More DNSSEC caching logic, and avoid repeated validatio... |
tree | commitdiff |
2014-01-24 |
Simon Kelley | RRSIGS for PTR records from cache. |
tree | commitdiff |
2014-01-24 |
Simon Kelley | Tweak. |
tree | commitdiff |
2014-01-23 |
Simon Kelley | RRSIGs in DS and DNSKEY cached answers. |
tree | commitdiff |
2014-01-23 |
Simon Kelley | More DNSSEC cache readout. |
tree | commitdiff |
2014-01-23 |
Simon Kelley | Compiler warning. |
tree | commitdiff |
2014-01-23 |
Simon Kelley | Compiler warning. |
tree | commitdiff |
2014-01-22 |
Simon Kelley | remove redundant headerage |
tree | commitdiff |
2014-01-22 |
Simon Kelley | Cache RRSIGS. |
tree | commitdiff |
2014-01-22 |
Simon Kelley | Caching of DNSSEC records. |
tree | commitdiff |
2014-01-22 |
Jonas Gorski | Tweak definition of a permanent IPv6 address on Linux. |
tree | commitdiff |
2014-01-22 |
Simon Kelley | Handle time_t wraparound more sanely. |
tree | commitdiff |
2014-01-21 |
Simon Kelley | Fix loop in RR sort. |
tree | commitdiff |
2014-01-21 |
Simon Kelley | bug fix, avoids infinite loop in forwarding code. |
tree | commitdiff |
2014-01-21 |
Simon Kelley | Fix to hostname_cmp, and update to canonicalisation... |
tree | commitdiff |
2014-01-21 |
Simon Kelley | Rationalise hostname_cmp() |
tree | commitdiff |
2014-01-21 |
Simon Kelley | Provide for static library linking. |
tree | commitdiff |
2014-01-20 |
Simon Kelley | NSEC proof-of-non-existence. |
tree | commitdiff |
next |