ralph
c42f53614d
- Set trust-anchor-signaling default to yes
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4360 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 10:17:25 +00:00
wouter
7dd4463598
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
...
DS records. NSEC3 is not disabled.
- fake-sha1 test option; print warning if used. To make unit tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4043 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 13:18:08 +00:00
ralph
263909cc1b
Add DSA support for OpenSSL 1.1
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3954 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-12-07 12:58:47 +00:00
wouter
7073948a03
- Fix unit tests for openssl 1.1, with no DSA, by faking DSA, enabled
...
with the undocumented switch 'fake-dsa'. It logs a warning.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3909 be551aaa-1e26-0410-a405-d3ace91eadb9
2016-10-26 07:38:00 +00:00
wouter
2267b8b267
- Tested that unbound implements the RFC5155 Technical Errata id 3441.
...
Unbound already implements insecure classification of an empty
nonterminal in NSEC3 optout zone.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2800 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-01-02 14:42:20 +00:00
