]> git.ipfire.org Git - thirdparty/bind9.git/commit
Add new siphash24 DNS Cookie algorithm
authorOndřej Surý <ondrej@sury.org>
Sun, 21 Jul 2019 18:26:49 +0000 (14:26 -0400)
committerOndřej Surý <ondrej@sury.org>
Mon, 22 Jul 2019 13:06:03 +0000 (09:06 -0400)
commita0f4e6d27e3f177fd26fac07610f84369ad37bc9
tree0daf94f133e29f4c8737b7ba9e2bd7d38317360c
parent825497f5086071f77718ca6a292813cc8c523ba1
Add new siphash24 DNS Cookie algorithm

This commit changes the BIND cookie algorithms to match
draft-sury-toorop-dnsop-server-cookies-00.  Namely, it changes the Client Cookie
algorithm to use SipHash 2-4, adds the new Server Cookie algorithm using SipHash
2-4.  The change doesn't make the SipHash 2-4 to be the default algorithm, this
is up to the operator.

(cherry picked from commit 196b342bc900352e25ed8e67ce4dffc152b5ce7e)
22 files changed:
bin/named/client.c
bin/named/include/named/types.h
bin/named/named.conf.docbook
bin/named/server.c
bin/tests/system/cookie/bad-cookie-badaes.conf [new file with mode: 0644]
bin/tests/system/cookie/bad-cookie-badsiphash24.conf [new file with mode: 0644]
bin/tests/system/cookie/good-cookie-aes.conf [new file with mode: 0644]
bin/tests/system/cookie/good-cookie-siphash24.conf [new file with mode: 0644]
bin/tests/system/cookie/ns4/named.conf.in
bin/tests/system/cookie/ns5/named.conf.in
bin/tests/system/cookie/ns6/named.conf.in
bin/tests/system/cookie/tests.sh
config.h.in
config.h.win32
configure
configure.ac
doc/misc/options
lib/bind9/check.c
lib/dns/resolver.c
lib/isccfg/namedconf.c
util/copyrights
win32utils/Configure