ralph
8b19239862
- Qname minimisation default changed to yes.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4685 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-05-17 10:33:19 +00:00
ralph
c42f53614d
- Set trust-anchor-signaling default to yes
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4360 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 10:17:25 +00:00
wouter
7dd4463598
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
...
DS records. NSEC3 is not disabled.
- fake-sha1 test option; print warning if used. To make unit tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4043 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 13:18:08 +00:00
ralph
263909cc1b
Add DSA support for OpenSSL 1.1
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3954 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-12-07 12:58:47 +00:00
wouter
7073948a03
- Fix unit tests for openssl 1.1, with no DSA, by faking DSA, enabled
...
with the undocumented switch 'fake-dsa'. It logs a warning.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3909 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-10-26 07:38:00 +00:00
wouter
8e6ee27eda
- separate ldns into core ldns inside ldns/ subdirectory. No more
...
--with-ldns is needed and unbound does not rely on libldns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:09:26 +00:00
wouter
fa30bf953f
- Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2397 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-03-01 12:48:45 +00:00
wouter
9cfff4e70d
- Return NXDOMAIN after chain of CNAMEs ends at name-not-found.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2208 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-08-05 14:31:52 +00:00
wouter
55b1c9928d
Fixup for problems with do-ip6: no and only ipv6 addresses.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1353 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-17 12:47:34 +00:00
wouter
71700f6a04
- Fixup rrset security updates overwriting 2181 trust status.
...
This makes validated to be insecure data just as worthless as
nonvalidated data, and 2181 rules prevent cache overwrites to them.
- Fix assertion fail on bogus key handling.
- dnssec lameness detection works on first query at trust apex.
- NS queries get proper cache and dnssec lameness treatment.
- fixup compilation without pthreads on linux.
- NS queries are done after every referral.
validator is used on those NS records (if anchors enabled).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1185 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-12 10:13:57 +00:00
wouter
3c4a5828e9
Fixup tests.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@673 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-10 09:33:27 +00:00
wouter
20434e30e3
NSEC3 test and fix for bitmap protection code.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@637 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-25 08:33:14 +00:00