]> git.ipfire.org Git - thirdparty/bind9.git/commit
Support for NSEC3 in dnssec-policy
authorMatthijs Mekking <matthijs@isc.org>
Tue, 13 Oct 2020 12:39:21 +0000 (14:39 +0200)
committerMatthijs Mekking <matthijs@isc.org>
Thu, 26 Nov 2020 09:43:27 +0000 (10:43 +0100)
commit114af58ee28329933e6d39f5f65fd75a63b3ff4a
tree76e3b4fe92d757bd71b18ffec3adace33075fbe4
parentf7ca96c8051cfbc3613fb845c63879e3e1370c5c
Support for NSEC3 in dnssec-policy

Implement support for NSEC3 in dnssec-policy.  Store the configuration
in kasp objects. When configuring a zone, call 'dns_zone_setnsec3param'
to queue an nsec3param event. This will ensure that any previous
chains will be removed and a chain according to the dnssec-policy is
created.

Add tests for dnssec-policy zones that uses the new 'nsec3param'
option, as well as changing to new values, changing to NSEC, and
changing from NSEC.
18 files changed:
bin/named/server.c
bin/named/zoneconf.c
bin/tests/system/Makefile.am
bin/tests/system/conf.sh.common
bin/tests/system/nsec3/clean.sh [new file with mode: 0644]
bin/tests/system/nsec3/ns3/named.conf.in [new file with mode: 0644]
bin/tests/system/nsec3/ns3/named2.conf.in [new file with mode: 0644]
bin/tests/system/nsec3/ns3/setup.sh [new file with mode: 0644]
bin/tests/system/nsec3/ns3/template.db.in [new file with mode: 0644]
bin/tests/system/nsec3/setup.sh [new file with mode: 0644]
bin/tests/system/nsec3/tests.sh [new file with mode: 0644]
lib/dns/include/dns/kasp.h
lib/dns/include/dns/types.h
lib/dns/kasp.c
lib/dns/win32/libdns.def.in
lib/dns/zone.c
lib/isccfg/kaspconf.c
util/copyrights