git.ipfire.org Git - thirdparty/bind9.git/commit

]> git.ipfire.org Git - thirdparty/bind9.git/commit

projects / thirdparty / bind9.git / commit

author	Ondřej Surý <ondrej@isc.org>
	Mon, 28 Apr 2025 15:22:18 +0000 (17:22 +0200)
committer	Ondřej Surý <ondrej@isc.org>
	Tue, 20 May 2025 22:50:08 +0000 (00:50 +0200)
commit	8171bf01ed3ff415eb86c4e2bfbe57fa127044ec
tree	5aa75bdc2dc670b9e3caba76efee9f0748fd313c	tree \| snapshot
parent	841b25fb6230cec266dbf79b2c1d5849b302a8d3	commit \| diff

Deprecate max-rsa-exponent-size, always use 4096 instead

The `max-rsa-exponent-size` could limit the exponents of the RSA
public keys during the DNSSEC verification. Instead of providing
a cryptic (not cryptographic) knob, hardcode the max exponent to
be 4096 (the theoretical maximum for DNSSEC).

26 files changed:

bin/dnssec/dnssec-cds.c		diff \| blob \| blame \| history
bin/dnssec/dnssec-signzone.c		diff \| blob \| blame \| history
bin/named/server.c		diff \| blob \| blame \| history
bin/tests/system/rsabigexponent/ns1/sign.sh		diff \| blob \| blame \| history
bin/tests/system/rsabigexponent/ns3/named.conf.in	[deleted file]	blob \| blame \| history
bin/tests/system/rsabigexponent/setup.sh		diff \| blob \| blame \| history
bin/tests/system/rsabigexponent/tests_rsabigexponent.py		diff \| blob \| blame \| history
doc/arm/reference.rst		diff \| blob \| blame \| history
lib/dns/dnssec.c		diff \| blob \| blame \| history
lib/dns/dst_api.c		diff \| blob \| blame \| history
lib/dns/dst_internal.h		diff \| blob \| blame \| history
lib/dns/gssapi_link.c		diff \| blob \| blame \| history
lib/dns/hmac_link.c		diff \| blob \| blame \| history
lib/dns/include/dns/dnssec.h		diff \| blob \| blame \| history
lib/dns/include/dns/view.h		diff \| blob \| blame \| history
lib/dns/include/dst/dst.h		diff \| blob \| blame \| history
lib/dns/opensslecdsa_link.c		diff \| blob \| blame \| history
lib/dns/openssleddsa_link.c		diff \| blob \| blame \| history
lib/dns/opensslrsa_link.c		diff \| blob \| blame \| history
lib/dns/tsig.c		diff \| blob \| blame \| history
lib/dns/validator.c		diff \| blob \| blame \| history
lib/dns/zone.c		diff \| blob \| blame \| history
lib/dns/zoneverify.c		diff \| blob \| blame \| history
lib/ns/query.c		diff \| blob \| blame \| history
tests/dns/dst_test.c		diff \| blob \| blame \| history
tests/dns/rsa_test.c		diff \| blob \| blame \| history

Mirror of https://gitlab.isc.org/isc-projects/bind9.git

RSS Atom