ralph
8b19239862
- Qname minimisation default changed to yes.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4685 be551aaa-1e26-0410-a405-d3ace91eadb9
2018-05-17 10:33:19 +00:00
ralph
c42f53614d
- Set trust-anchor-signaling default to yes
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4360 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-05 10:17:25 +00:00
wouter
7dd4463598
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
...
DS records. NSEC3 is not disabled.
- fake-sha1 test option; print warning if used. To make unit tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@4043 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 13:18:08 +00:00
wouter
8e6ee27eda
- separate ldns into core ldns inside ldns/ subdirectory. No more
...
--with-ldns is needed and unbound does not rely on libldns.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:09:26 +00:00
wouter
b05d47d4a5
- Fix wildcard expansion no-data reply under an optout NSEC3 zone is
...
validated as insecure, reported by Jia Li (lijia@cnnic.cn ).
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2461 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-11 09:03:18 +00:00
wouter
fa30bf953f
- Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2397 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-03-01 12:48:45 +00:00
wouter
2b05eb39ec
- Abide RFC5155 section 9.2: no AD flag for replies with NSEC3 optout.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2233 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-09-15 07:08:09 +00:00
wouter
ed906bd9cb
Test that AD flags and NSEC3 optout does what we say.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2230 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-09-14 09:11:19 +00:00
