]> git.ipfire.org Git - thirdparty/unbound.git/commit
- Fixup rrset security updates overwriting 2181 trust status.
authorWouter Wijngaards <wouter@nlnetlabs.nl>
Tue, 12 Aug 2008 10:13:57 +0000 (10:13 +0000)
committerWouter Wijngaards <wouter@nlnetlabs.nl>
Tue, 12 Aug 2008 10:13:57 +0000 (10:13 +0000)
commit1e4e8cb68aad0670fee7fba7db9d94758aad8dea
treeeacb8d99adf0ebdc388525937aef700cecce05ac
parent0d8ce6f07519c55df6623c8ac2010ce078900b4d
- Fixup rrset security updates overwriting 2181 trust status.
  This makes validated to be insecure data just as worthless as
  nonvalidated data, and 2181 rules prevent cache overwrites to them.
- Fix assertion fail on bogus key handling.
- dnssec lameness detection works on first query at trust apex.
- NS queries get proper cache and dnssec lameness treatment.
- fixup compilation without pthreads on linux.
- NS queries are done after every referral.
  validator is used on those NS records (if anchors enabled).

git-svn-id: file:///svn/unbound/trunk@1185 be551aaa-1e26-0410-a405-d3ace91eadb9
123 files changed:
doc/Changelog
iterator/iter_utils.c
iterator/iterator.c
services/cache/rrset.c
testdata/fetch_glue.rpl
testdata/fetch_glue_cname.rpl
testdata/iter_cname_double.rpl
testdata/iter_cname_nx.rpl
testdata/iter_cname_qnamecopy.rpl
testdata/iter_cycle.rpl
testdata/iter_cycle_noh.rpl
testdata/iter_dnsseclame_ds.rpl
testdata/iter_dnsseclame_ds_ok.rpl
testdata/iter_dnsseclame_ta.rpl
testdata/iter_dnsseclame_ta_ok.rpl
testdata/iter_donotq127.rpl
testdata/iter_emptydp.rpl
testdata/iter_emptydp_for_glue.rpl
testdata/iter_lame_aaaa.rpl
testdata/iter_lame_noaa.rpl
testdata/iter_lamescrub.rpl
testdata/iter_ns_spoof.rpl [new file with mode: 0644]
testdata/iter_primenoglue.rpl
testdata/iter_ranoaa_lame.rpl
testdata/iter_recurse.rpl
testdata/iter_req_qname.rpl
testdata/iter_resolve.rpl
testdata/iter_scrub_cname_an.rpl
testdata/iter_scrub_dname_insec.rpl
testdata/iter_scrub_dname_sec.rpl
testdata/nomem_cnametopos.rpl
testdata/trust_cname_chain.rpl
testdata/val_adbit.rpl
testdata/val_anchor_nx.rpl
testdata/val_anchor_nx_nosig.rpl
testdata/val_ans_dsent.rpl
testdata/val_ans_nx.rpl
testdata/val_any.rpl
testdata/val_any_dname.rpl
testdata/val_cname_loop1.rpl
testdata/val_cname_loop2.rpl
testdata/val_cname_loop3.rpl
testdata/val_cnamenx_dblnsec.rpl
testdata/val_cnamenx_rcodenx.rpl
testdata/val_cnameqtype.rpl
testdata/val_cnametodname.rpl
testdata/val_cnametodnametocnametopos.rpl
testdata/val_cnametonodata.rpl
testdata/val_cnametonx.rpl
testdata/val_cnametopos.rpl
testdata/val_cnametoposnowc.rpl
testdata/val_cnametoposwc.rpl
testdata/val_cnamewctonodata.rpl
testdata/val_cnamewctonx.rpl
testdata/val_cnamewctoposwc.rpl
testdata/val_dnametoolong.rpl
testdata/val_dnametopos.rpl
testdata/val_dnametoposwc.rpl
testdata/val_dnamewc.rpl
testdata/val_entds.rpl
testdata/val_faildnskey.rpl
testdata/val_faildnskey_ok.rpl
testdata/val_mal_wc.rpl
testdata/val_noadwhennodo.rpl
testdata/val_nodata.rpl
testdata/val_nodata_ent.rpl
testdata/val_nodata_entwc.rpl
testdata/val_nodata_failsig.rpl
testdata/val_nodata_hasdata.rpl
testdata/val_nodata_zonecut.rpl
testdata/val_nodatawc.rpl
testdata/val_nodatawc_badce.rpl
testdata/val_nodatawc_nodeny.rpl
testdata/val_nodatawc_one.rpl
testdata/val_nokeyprime.rpl
testdata/val_nsec3_b1_nameerror.rpl
testdata/val_nsec3_b1_nameerror_noce.rpl
testdata/val_nsec3_b1_nameerror_nonc.rpl
testdata/val_nsec3_b1_nameerror_nowc.rpl
testdata/val_nsec3_b21_nodataent.rpl
testdata/val_nsec3_b21_nodataent_wr.rpl
testdata/val_nsec3_b2_nodata.rpl
testdata/val_nsec3_b2_nodata_nons.rpl
testdata/val_nsec3_b3_optout.rpl
testdata/val_nsec3_b3_optout_noce.rpl
testdata/val_nsec3_b3_optout_nonc.rpl
testdata/val_nsec3_b4_wild.rpl
testdata/val_nsec3_b4_wild_wr.rpl
testdata/val_nsec3_b5_wcnodata.rpl
testdata/val_nsec3_b5_wcnodata_noce.rpl
testdata/val_nsec3_b5_wcnodata_nonc.rpl
testdata/val_nsec3_b5_wcnodata_nowc.rpl
testdata/val_nsec3_cname_ds.rpl
testdata/val_nsec3_cname_par.rpl
testdata/val_nsec3_cname_sub.rpl
testdata/val_nsec3_iter_high.rpl
testdata/val_nsec3_nodatawccname.rpl
testdata/val_nsec3_nods.rpl
testdata/val_nsec3_nods_badopt.rpl
testdata/val_nsec3_nods_soa.rpl
testdata/val_nsec3_wcany.rpl
testdata/val_nsec3_wcany_nodeny.rpl
testdata/val_nx.rpl
testdata/val_nx_nodeny.rpl
testdata/val_nx_nowc.rpl
testdata/val_nx_nsec3_collision.rpl
testdata/val_nx_nsec3_params.rpl
testdata/val_positive.rpl
testdata/val_positive_nosigs.rpl
testdata/val_positive_wc.rpl
testdata/val_positive_wc_nodeny.rpl
testdata/val_qds_badanc.rpl
testdata/val_qds_oneanc.rpl
testdata/val_qds_twoanc.rpl
testdata/val_refer_unsignadd.rpl
testdata/val_referd.rpl
testdata/val_referglue.rpl
testdata/val_secds.rpl
testdata/val_unsec_cname.rpl
testdata/val_unsecds.rpl
testdata/val_unsecds_qtypeds.rpl
util/iana_ports.inc
validator/validator.c