]> git.ipfire.org Git - thirdparty/systemd.git/history - src/resolve/resolved-dns-dnssec.c
resolved: refuse validating wildcard RRs for SOA, NSEC3, DNAME
[thirdparty/systemd.git] / src / resolve / resolved-dns-dnssec.c
2016-01-13  Lennart Poetteringresolved: refuse validating wildcard RRs for SOA, NSEC3...
2016-01-13  Lennart Poetteringresolved: properly handles RRs in domains beginning...
2016-01-13  Lennart Poetteringresolved: optimize dnssec_verify_rrset() a bit
2016-01-13  Lennart Poetteringresolved: allocate bounded strings on stack instead...
2016-01-13  Lennart Poetteringresolved: consider inverted RRSIG validity intervals...
2016-01-12  Lennart PoetteringMerge pull request #2131 from evverx/regenerate-m4...
2016-01-12  Lennart PoetteringMerge pull request #2147 from vcaputo/sd-event-measure...
2016-01-12  Lennart PoetteringMerge pull request #2290 from vcaputo/normalize-log...
2016-01-11  Tom GundersenMerge pull request #2289 from poettering/dnssec13
2016-01-11  Lennart Poetteringresolved: properly look for NSEC/NSEC3 RRs when getting...
2016-01-11  Lennart Poetteringresolved: split up nsec3_hashed_domain() into two calls
2016-01-11  Lennart Poetteringresolved: drop flags unused parameter from nsec3_is_good
2016-01-11  Lennart Poetteringbasic: introduce generic ascii_strlower_n() call and...
2016-01-11  Lennart Poetteringresolved: use dns_answer_size() where appropriate to...
2016-01-11  Lennart Poetteringresolved: rename suffix_rr → zone_rr
2016-01-11  Lennart Poetteringresolved: fix NSEC3 iterations limit to what RFC5155...
2016-01-08  Daniel MackMerge pull request #2287 from dandedrick/journal-gatewa...
2016-01-07  Daniel MackMerge pull request #2285 from evverx/fix-test-resolve
2016-01-07  Lennart PoetteringMerge pull request #2284 from teg/resolved-cname-2
2016-01-07  Tom GundersenMerge pull request #2276 from poettering/dnssec12
2016-01-06  Lennart Poetteringupdate DNSSEC TODO 2276/head
2016-01-06  Daniel MackMerge pull request #2137 from fbuihuu/fstab-gen-fix...
2016-01-06  Daniel MackMerge pull request #2261 from evverx/fix-test-rlimit...
2016-01-06  Daniel MackMerge pull request #2243 from evverx/add-regression...
2016-01-05  Lennart Poetteringupdate DNSSEC TODO
2016-01-05  Lennart Poetteringresolved,networkd: add a per-interface DNSSEC setting
2016-01-05  Lennart Poetteringresolved: rename "downgrade-ok" mode to "allow-downgrade"
2016-01-05  Tom GundersenMerge pull request #2269 from poettering/dnssec11
2016-01-05  Lennart Poetteringresolved: when caching negative responses, honour NSEC...
2016-01-04  Lennart Poetteringupdate DNSSEC TODO
2016-01-04  Lennart Poetteringresolved: partially implement RFC5011 Trust Anchor...
2016-01-04  Lennart Poetteringresolved: fix DNSSEC canonical ordering logic
2016-01-04  Martin PittMerge pull request #2248 from APokorny/detect-touchscre...
2016-01-03  Lennart Poetteringresolved: never authenticate RRsets with revoked keys
2016-01-03  Lennart Poetteringresolved: print a log message when we ignore an NSEC3...
2016-01-03  Lennart PoetteringMerge pull request #2245 from ssahani/socket1
2016-01-03  Lennart PoetteringMerge pull request #2254 from kelemeng/master
2016-01-03  Lennart PoetteringMerge pull request #2255 from teg/resolved-fixes-2
2016-01-03  Tom GundersenMerge pull request #2256 from poettering/dnssec10
2016-01-03  Lennart Poetteringresolved: add negative trust anchro support, and add...
2016-01-03  Tom Gundersenresolved: dnssec - properly take wildcards into account... 2255/head
2016-01-03  Tom Gundersenresolved: dnssec - factor out hashed domain generation
2016-01-03  Tom Gundersenresolved: don't conclude NODATA if CNAME exists
2016-01-02  Lennart Poetteringresolved: don't accept NSEC3 iteration fields unbounded
2016-01-01  Tom Gundersenresolved: dnssec - add reference to the algorithm we...
2016-01-01  Tom Gundersenresolved: dnssec - prepend hashed labels to zone name
2016-01-01  Tom Gundersenresolved: dnssec - rename some variables
2016-01-01  Tom Gundersenresoled: dnssec - don't refuse to verify answer due...
2016-01-01  Tom Gundersenresolved: dnssec - fix off-by-one in RSA key parsing
2016-01-01  Tom GundersenMerge pull request #2241 from poettering/dnssec9
2015-12-30  Martin PittMerge pull request #2229 from cjmayo/m500
2015-12-29  Lennart Poetteringresolved: NSEC3 hash algorithms are distinct from DS...
2015-12-29  Lennart Poetteringupdate DNSSEC TODO
2015-12-29  Lennart Poetteringresolved: add comments referencing various RFCs to...
2015-12-29  Lennart PoetteringMerge pull request #2233 from kinvolk/alban/cgroup2...
2015-12-28  Tom GundersenMerge pull request #2231 from phomes/resolve-misc2
2015-12-28  Zbigniew Jędrzejew... Merge pull request #2226 from jwilk/spelling
2015-12-28  Tom GundersenMerge pull request #2232 from poettering/dnssec8
2015-12-28  Lennart Poetteringresolved: update DNSSEC TODO 2232/head
2015-12-28  Lennart Poetteringresolved: use RRSIG expiry and original TTL for cache...
2015-12-28  Lennart Poetteringresolved: only keep a single list of supported signatur...
2015-12-28  Lennart Poetteringresolved: add ECDSA signature support
2015-12-28  Lennart Poetteringresolved: split out RSA-specific code from dnssec_verif...
2015-12-28  Lennart Poetteringresolved: simplify MD algorithm initialization a bit
2015-12-28  Lennart Poetteringresolved: add SHA384 digest support
2015-12-27  Thomas Hindoe Paab... resolve: remove unused variables
2015-12-27  Tom GundersenMerge pull request #2225 from poettering/dnssec7
2015-12-26  Lennart Poetteringresolved: add an automatic downgrade to non-DNSSEC...
2015-12-26  Lennart Poetteringresolved: if we accepted unauthenticated NSEC/NSEC3...
2015-12-26  Lennart Poetteringresolved: be stricter when searching for a DS RR for...
2015-12-26  Lennart Poetteringupdate DNSSEC TODO
2015-12-26  Lennart Poetteringresolved: tighten search for NSEC3 RRs a bit
2015-12-26  Lennart Poetteringresolved: when doing NSEC3 proof, first find right...
2015-12-26  Lennart Poetteringresolved: properly implement RRSIG validation of wildca...
2015-12-26  Lennart PoetteringMerge pull request #2224 from keszybz/analyze-verify...
2015-12-25  Zbigniew Jędrzejew... Merge pull request #2153 from evverx/fix-verify-for...
2015-12-23  Lennart PoetteringMerge pull request #2158 from keszybz/journal-decompression
2015-12-21  Lennart PoetteringMerge pull request #2202 from zonque/nameownerchanged 2218/head
2015-12-20  Tom GundersenMerge pull request #2190 from poettering/dnssec6
2015-12-18  Lennart Poetteringresolved: update TODO
2015-12-18  Lennart Poetteringresolved: add support NSEC3 proofs, as well as proofs...
2015-12-15  Daniel MackMerge pull request #2157 from keszybz/manager-status
2015-12-15  Daniel MackMerge pull request #2174 from yuwata/journal-remote-man
2015-12-15  Tom GundersenMerge pull request #2168 from poettering/dnssec5
2015-12-14  Lennart Poetteringresolved: update DNSSEC TODO 2168/head
2015-12-14  Lennart Poetteringresolved: add basic proof of non-existance support...
2015-12-14  Lennart Poetteringresolved: initialize libgcrypt before using it
2015-12-14  Lennart Poetteringresolved: rework how we get the gcrypt digest algorithm...
2015-12-11  Tom GundersenMerge pull request #2143 from poettering/dnssec4
2015-12-11  Lennart Poetteringresolved: rework dnssec validation results
2015-12-10  Daniel MackMerge pull request #2134 from jorgenschaefer/detect...
2015-12-10  Lennart PoetteringMerge pull request #2135 from zonque/resolved-mdns-3
2015-12-10  Tom GundersenMerge pull request #2129 from poettering/dnssec3
2015-12-10  Lennart PoetteringMerge pull request #2076 from keszybz/downgrade-masked...
2015-12-10  Lennart Poetteringresolved: chase DNSKEY/DS RRs when doing look-ups with...
2015-12-10  Lennart Poetteringresolved: when matching up DNSKEY and DS RRs, it's...
2015-12-10  Lennart Poetteringresolved: when matching up RRSIG and DNSKEY RRs, use...
2015-12-10  Lennart Poetteringresolved: fix sorting of RRsets
2015-12-10  Lennart Poetteringresolved: fix libgcrypt error checking
2015-12-10  Lennart PoetteringMerge pull request #2056 from evverx/expose-soft-limits...
next