git.ipfire.org Git - thirdparty/bind9.git/commit

]> git.ipfire.org Git - thirdparty/bind9.git/commit

projects / thirdparty / bind9.git / commit

author	Ondřej Surý <ondrej@sury.org>
	Sun, 21 Jul 2019 18:26:49 +0000 (14:26 -0400)
committer	Ondřej Surý <ondrej@sury.org>
	Sun, 21 Jul 2019 19:16:28 +0000 (15:16 -0400)
commit	a912f31398bacd79a27966fb2f767901805e8234
tree	65948e79b8dfe1f8e9bab10209eb7bd6feba3ef6	tree \| snapshot
parent	afa81ee4e4e863fa646177947c55e8c6b1475f47	commit \| diff

Add new default siphash24 cookie algorithm, but keep AES as legacy

This commit changes the BIND cookie algorithms to match
draft-sury-toorop-dnsop-server-cookies-00. Namely, it changes the Client Cookie
algorithm to use SipHash 2-4, adds the new Server Cookie algorithm using SipHash
2-4, and changes the default for the Server Cookie algorithm to be siphash24.

Add siphash24 cookie algorithm, and make it keep legacy aes as

19 files changed:

bin/named/config.c		diff \| blob \| blame \| history
bin/named/named.conf.docbook		diff \| blob \| blame \| history
bin/named/server.c		diff \| blob \| blame \| history
bin/tests/system/cookie/bad-cookie-badaes.conf	[moved from bin/tests/system/cookie/good-cookie-sha1.conf with 80% similarity]	diff \| blob \| blame \| history
bin/tests/system/cookie/bad-cookie-badsiphash24.conf	[moved from bin/tests/system/cookie/bad-cookie-badsha256.conf with 81% similarity]	diff \| blob \| blame \| history
bin/tests/system/cookie/good-cookie-aes.conf	[moved from bin/tests/system/cookie/bad-cookie-badsha1.conf with 80% similarity]	diff \| blob \| blame \| history
bin/tests/system/cookie/good-cookie-siphash24.conf	[moved from bin/tests/system/cookie/good-cookie-sha256.conf with 78% similarity]	diff \| blob \| blame \| history
bin/tests/system/cookie/ns4/named.conf.in		diff \| blob \| blame \| history
bin/tests/system/cookie/ns5/named.conf.in		diff \| blob \| blame \| history
bin/tests/system/cookie/ns6/named.conf.in		diff \| blob \| blame \| history
bin/tests/system/cookie/tests.sh		diff \| blob \| blame \| history
configure		diff \| blob \| blame \| history
doc/misc/options		diff \| blob \| blame \| history
lib/bind9/check.c		diff \| blob \| blame \| history
lib/dns/resolver.c		diff \| blob \| blame \| history
lib/isc/include/isc/util.h		diff \| blob \| blame \| history
lib/isccfg/namedconf.c		diff \| blob \| blame \| history
lib/ns/client.c		diff \| blob \| blame \| history
lib/ns/include/ns/types.h		diff \| blob \| blame \| history

Mirror of https://gitlab.isc.org/isc-projects/bind9.git

RSS Atom