townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

568 Commits

Author SHA1 Message Date
wouter
c40c35cbf6 fixup nss compile with file url. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2841 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-08 15:04:07 +00:00
wouter
ead09f3a23 fixup nss svn path. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2840 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-08 14:52:43 +00:00
wouter
baba323084 Fixup use of netcat. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2839 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-08 14:51:04 +00:00
wouter
6f1f755508 Compile test for libnss and libunbound compile mode, runs on check in. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2838 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-02-08 14:28:40 +00:00
wouter
3e363e5236 - updated fwd_zero for newer nc. Updated common.sh for newer netstat. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2825 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-28 13:30:46 +00:00
wouter
269aee148c update test for new requirements. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2809 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-17 11:58:30 +00:00
wouter
e3c901233a fixup test and test name check. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2805 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 15:37:54 +00:00
wouter
afb056f487 - Test that unbound can handle a CNAME at an intermediate node in 
the chain of trust (where it seeks a DS record).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2803 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 12:25:48 +00:00
wouter
6f200f25f0 - Test that unbound-control checks client credentials. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2802 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-03 10:58:31 +00:00
wouter
2267b8b267 - Tested that unbound implements the RFC5155 Technical Errata id 3441. 
Unbound already implements insecure classification of an empty
  nonterminal in NSEC3 optout zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2800 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-02 14:42:20 +00:00
matje
aae7a518bf Fix validation for responses with CNAME and wildcard expanded CNAME in 
ANSWER section.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2777 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-29 14:06:00 +00:00
wouter
1caf700c2e - fix bogus nodata cname chain not reported as bogus by validator, 
(Thanks Peter van Dijk).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2727 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-27 13:38:00 +00:00
wouter
4a9e53af6f - Fix bug#452 and another assertion failure in mesh.c, makes 
assertions in mesh.c resist duplicates.  Fixes DS NS search to
  not generate duplicate sub queries.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2718 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-20 13:08:19 +00:00
wouter
28727b8b02 - new approach to NS fetches for DS lookup that works with 
cornercases, and is more robust and considers forwarders.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2646 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-21 15:01:01 +00:00
wouter
e5d9f18a1c - fix to locate nameservers for DS lookup with NS fetches. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2645 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-19 15:44:21 +00:00
wouter
276300a61a - forward-first option. Tries without forward if a query fails. 
Also stub-first option that is similar.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2637 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-03-01 13:16:40 +00:00
wouter
5a7af9871a Fix prefetch and stickyness. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2632 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-16 11:04:53 +00:00
wouter
4c9275628a - Fix sticky NS (ghost domain problem) if prefetch is yes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2619 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-14 11:06:44 +00:00
wouter
ee86f47893 fix unit test to be more reliable on slower systems. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2615 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-10 14:09:39 +00:00
wouter
92c844ad08 - unit test fix for nomem_cnametopos.rpl race condition. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2614 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-10 12:54:27 +00:00
wouter
c8396f3878 - Fix timeouts to keep track of query type, A, AAAA and other, if 
another has caused timeout blacklist, different type can still probe.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2613 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-10 12:17:25 +00:00
wouter
27329b8cc9 - implement draft-ietf-dnsext-ecdsa-04; which is in IETF LC; This 
implementation is experimental at this time and not recommended
  for use on the public internet (the protocol numbers have not
  been assigned).  Needs recent ldns with --enable-ecdsa.
- fix memory leak in errorcase for DSA signatures.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2606 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-08 13:22:44 +00:00
wouter
23acd425f0 - Fix validation failures (like: validation failure xx: no NSEC3 
closest encloser from yy for DS zz. while building chain of trust,
         because of a bug in the TTL-fix in 1.4.15, it picked the wrong rdata
         for an NSEC3.  Now it does not change rdata, and fixes TTL.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2599 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-02-01 11:18:07 +00:00
wouter
25fbc19b64 - Fix bug #425: unbound reports wrong TTL in reply, it reports a TTL 
that would be permissible by the RFCs but it is not the TTL in the
  cache.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2581 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-01-10 09:42:32 +00:00
wouter
a4c3aed0f8 - Fix parse error on negative SOA RRSIGs if badly ordered in the packet. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2573 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-12-15 13:37:13 +00:00
wouter
f626575941 fix exit code of remote-threaded.post. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2552 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-11 14:33:39 +00:00
wouter
5b6c722315 unit test for SSL upstream. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2543 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-11-09 13:20:30 +00:00
wouter
8762da8720 infra cache consolidated and stores per zone, IP. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2525 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-10-26 15:46:23 +00:00
wouter
44008de0f5 Fix validation of qtype ANY responses with CNAMEs (thanks Cathy Zhang and Luo Ce). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2477 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-08-22 12:02:50 +00:00
wouter
b05d47d4a5 - Fix wildcard expansion no-data reply under an optout NSEC3 zone is 
validated as insecure, reported by Jia Li (lijia@cnnic.cn).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2461 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-07-11 09:03:18 +00:00
wouter
f7ad48b8ca - Fix TTL of SOA so negative TTL is separately cached from normal TTL. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2416 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-05-10 12:34:47 +00:00
wouter
b25dcb3a41 - iana portlist updated. 
- queries with CD flag set cause DNSSEC validation, but the answer is
  not withheld if it is bogus.  Thus, unbound will retry if it is bad
  and curb the TTL if it is bad, thus protecting the cache for use by
  downstream validators.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2409 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-04-08 13:58:41 +00:00
wouter
a7e8b9b507 fix test 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2408 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-29 10:38:59 +00:00
wouter
fa30bf953f - Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2397 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-03-01 12:48:45 +00:00
wouter
305d01e195 version 3 for common.sh 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2395 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-23 15:17:49 +00:00
wouter
cc0601deb5 common.sh to version 2. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2392 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-18 16:11:21 +00:00
wouter
e82024f8d0 use common functionality file. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2390 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-11 12:30:42 +00:00
wouter
51bdc5a082 - Added regression test for addition of a .net DS to the root, and 
cache effects with different TTL for glue and DNSKEY.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2387 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-02-07 12:07:46 +00:00
wouter
e40c702c96 - Fix so a changed NS RRset does not get moved name stuck on old 
server, for type NS the TTL is not increased.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2373 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-14 13:56:25 +00:00
wouter
fb7fa5c347 - Fix prefetch so it does not get stuck on old server for moved names. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-13 10:13:01 +00:00
wouter
3925e949de - Fix insecure CNAME sequence marked as secure, reported by Bert Hubert. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2369 be551aaa-1e26-0410-a405-d3ace91eadb9
 2011-01-11 12:32:29 +00:00
wouter
323d94a758 test and cleanup. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2360 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-22 09:41:38 +00:00
wouter
d0d27bd296 - fix validation in this case: CNAME to nodata for co-hosted opt-in 
NSEC3 insecure delegation, was bogus, fixed to be insecure.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2355 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-17 10:05:56 +00:00
wouter
6ec3338023 - feature typetransparent localzone, does not block other RR types. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2350 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-12-02 12:39:33 +00:00
wouter
72de97c816 Fix storage of noEDNS in the infra cache. 
iana portlist updated.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2348 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-30 12:55:48 +00:00
wouter
b5252fabaa harden-below-nxdomain option taken from draft-vixie-dnsext-resimprove. 
Default off (for now), as some older software that gives nxdomain for ENT
would be incompatible.  But that would only happen in the reverse tree, and
such software (nonDNSSEC) may go out of style, so in the future a default yes
could be possible.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2347 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-18 08:49:15 +00:00
wouter
49067d5c18 - implement draft-vixie-dnsext-resimprove-00, we stop on NXDOMAIN. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2345 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-17 10:02:34 +00:00
wouter
7df2b532a4 - Be lenient and accept imgw.pl malformed packet (like BIND). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2339 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-08 18:32:55 +00:00
wouter
cfd3ebb5a4 Test DS and CNAME in cache. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2336 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-05 15:45:53 +00:00
wouter
39c1a28aa9 detect nc version 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2334 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-04 15:20:11 +00:00
wouter
8eb6c67069 Fix test to work on ubuntu. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2333 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-11-04 15:16:13 +00:00
wouter
206d95e87a - Fix validation failure for parent and child on same server with an 
insecure childzone and a CNAME from parent to child.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2321 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-29 13:10:26 +00:00
wouter
ec37b20c16 Uses curl to check if the icann cert file has been updated on the website. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2297 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-18 13:25:30 +00:00
wouter
76fcf3bcfa unbound-anchor works on vista. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2292 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-14 14:55:38 +00:00
wouter
dfcb568377 less verbose on output. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2290 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-14 09:18:20 +00:00
wouter
fc57d16d98 - Fix bug when DLV below a trust-anchor that uses NSEC3 optout where 
the zone has a secure delegation hosted on the same server did not
         verify as secure (it was insecure by mistake).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-11 12:21:19 +00:00
wouter
f846bfd4b1 Fix out-of-order XML element parse, zone name check and newline filter for unbound-anchor XML parse. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2274 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 15:01:49 +00:00
wouter
bb10bf693a test update and nicer text output for unbound-anchor 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 13:55:16 +00:00
wouter
456ac9f0e7 fix test 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2272 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 12:26:20 +00:00
wouter
33d8166041 no override time, works on Minix and not needed for the tpkg. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2271 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 12:14:05 +00:00
wouter
594bd74284 Test for unbound-anchor. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2268 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-10-01 11:31:35 +00:00
wouter
1126f57dab Updated net check. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2260 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 12:51:05 +00:00
wouter
a6c8d88b41 unbound-anchor work, -P option and test tpkg. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2259 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-28 12:30:38 +00:00
wouter
06b97ca356 - bug#329: in example.conf show correct ipv4 link-local 169.254/16. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2244 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-24 07:04:37 +00:00
wouter
db4944a21d - Algorithm rollover operational reality intrudes, for trust-anchor, 
5011-store, and DLV-anchor if one key matches it's good enough.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2235 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-16 13:40:26 +00:00
wouter
2b05eb39ec - Abide RFC5155 section 9.2: no AD flag for replies with NSEC3 optout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2233 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-15 07:08:09 +00:00
wouter
ed906bd9cb Test that AD flags and NSEC3 optout does what we say. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2230 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-14 09:11:19 +00:00
wouter
66d2b51494 - bug#327: Fix for cannot access stub zones until the root is primed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2228 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-09-13 09:25:52 +00:00
wouter
1acd6be484 - make test more portable (make longtest needs special support programs, 
ldns, wdiff, dig, port-numbers).
  - moved not-always-portable testbound scripts to names .crpl.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2214 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-16 12:59:37 +00:00
wouter
9cfff4e70d - Return NXDOMAIN after chain of CNAMEs ends at name-not-found. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2208 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-05 14:31:52 +00:00
wouter
5e735bd18a turn of valgrind debug 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2207 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-08-04 19:02:25 +00:00
wouter
c9e13c5160 - iana portlist updated. 
- Fix validation of qtype DNSKEY when a key-cache entry exists but
  no rr-cache entry is used (it expired or prefetch), it then goes
  back up to the DS or trust-anchor to validate the DNSKEY.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2189 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-09 15:00:35 +00:00
wouter
4a181655d6 testbound uses UTC timezone. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2186 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-07-06 10:44:03 +00:00
wouter
10747c9f68 Fix for lame reply corner case. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2168 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-25 08:32:51 +00:00
wouter
719e9cdf92 test to make sure unbound deals with capitals in signer name like bind does 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2167 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-24 07:06:17 +00:00
wouter
a7696cb817 - Fix assertion failure reported by Kai Storbeck from XS4ALL, the 
assertion was wrong.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2155 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-16 15:05:22 +00:00
wouter
a2d3f0bbcc more last resort lookup options. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2139 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-03 15:06:50 +00:00
wouter
01f0fc3aff more more testcases 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2136 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-03 10:07:58 +00:00
wouter
fe6503be38 - Fix storage of negative parent glue if that last resort fails. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2127 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-06-01 09:33:25 +00:00
wouter
7fe8c97a14 - fix parentside from cache to be marked dispreferred for bad names. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2125 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 14:39:45 +00:00
wouter
36c5a3f000 - parentside names are dispreferred but not said to be dnssec-lame. 
- parentside check for cached newname glue.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2122 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 13:03:58 +00:00
wouter
1e3e59c54c - Fix AD flag handling, it could in some cases mistakenly copy the AD 
flag from upstream servers.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2120 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-31 07:36:01 +00:00
wouter
348f5baad7 parent-child misconfigured data lookup. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2119 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-28 14:15:29 +00:00
wouter
8896e7d841 - Fix resolution for domains like safesvc.com.cn. If the iterator 
can not recurse further and it finds the delegation in a state
         where it would otherwise have rejected it outhand if so received
         from a cache lookup, then it can try to ask higherup (with loop
         protection).
       - Fix comments in iter_utils:dp_is_useless.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2114 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-05-19 12:59:27 +00:00
wouter
a1cfb1baa7 - autotrust anchor file can be initialized with a ZSK key as well. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2100 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 13:00:48 +00:00
wouter
f335d4f2c4 - fix retry sequence if prime hints are recursion-lame. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2099 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-27 11:10:35 +00:00
wouter
84a1dcfbd0 - More strict scrubber (Thanks to George Barwood for the idea): 
NS set must be pertinent to the query (qname subdomain nsname).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2096 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-26 13:40:37 +00:00
wouter
1c1bb2f5b2 - Fix local-zone type redirect that did not use the query name for 
the answer rrset.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2092 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-23 14:03:09 +00:00
wouter
1c9cd68374 Fix tests to have answers for the more tenacious lookups. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2091 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-23 10:11:10 +00:00
wouter
a74435bf95 - Fix validation failure for qtype ANY caused by a RRSIG parse failure. 
The validator error message was 'no signatures from ...'.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2087 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-22 15:01:02 +00:00
wouter
b0c38ce1a4 GOST algorithm number 12. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2079 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-15 11:29:43 +00:00
wouter
18abe25cbf - Fix chain of trust with CNAME at an intermediate step, for the DS 
processing proof.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2075 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-09 14:28:32 +00:00
wouter
8f5b52f095 Fix validation of queries with wildcard names (*.example). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2071 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-08 13:22:35 +00:00
wouter
cc89cee01f GOST support. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2065 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-06 12:15:19 +00:00
wouter
be521bfaaa - Fix EDNS probe for .de DNSSEC testbed failure, where the infra 
cache timeout coincided with a server update, the current EDNS 
	  backoff is less sensitive, and does not cache the backoff unless 
	  the backoff actually works and the domain is not expecting DNSSEC.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2064 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-04-06 08:35:50 +00:00
wouter
87d9c4ec51 Fix bug#301. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2057 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-22 09:38:06 +00:00
wouter
d9533ba01c fix fwd_ancil for platforms that do not support the option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2051 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-19 13:44:02 +00:00
wouter
29cd0b841a Fixup pymod thread test to not call valgrind. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2033 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-12 12:48:52 +00:00
wouter
b9f98901a6 Fix python if threaded. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2032 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-12 12:44:44 +00:00
wouter
006f633e2b Add ipv6 stub test. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2020 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-10 12:36:59 +00:00
wouter
76852e4b9f Skip RRSIGs on 5011 init. Make install makes all. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1997 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-03-01 10:26:42 +00:00
wouter
4f32ae270c - Fix scrubber bug that potentially let NS records through. Reported 
by Amanda Constant.
        - Also delete potential poison references from additional.
        - Fix: no classification of a forwarder as lame, throwaway instead.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1993 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-02-24 13:27:47 +00:00
wouter
5b27935db0 Fix for Roy. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1982 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-02-15 10:49:03 +00:00
wouter
26ab4d33f5 Retry in case of validation failure less, cached per-zone not per-query. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1981 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-02-12 15:24:42 +00:00
wouter
15d89fbf9e fixup lookup trouble for parent-child domains on the first query. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1961 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-20 13:11:54 +00:00
wouter
caa4f084e3 prefetch-key feature. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1956 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-13 13:33:18 +00:00
wouter
988cdf0808 work on prefetch: store the updated results in the cache. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1954 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-08 15:59:36 +00:00
wouter
f8d114b2cc Fix parent child disagreement handling and no-ipv6 present. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1953 be551aaa-1e26-0410-a405-d3ace91eadb9
 2010-01-08 12:47:27 +00:00
wouter
e88ebde547 unit test for negative cache DS response 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1940 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-15 10:00:55 +00:00
wouter
02d69146e3 Answer qclass=ANY. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1938 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-15 09:10:04 +00:00
wouter
170bc60cb6 Fix lookup of domains with parent-child zonecut data differences. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1929 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-08 13:37:59 +00:00
wouter
66ea551c7d test for bug#287 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1927 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-07 10:19:28 +00:00
wouter
4e5f711df1 Test for module-config "iterator" 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1925 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-12-01 08:12:12 +00:00
wouter
da8892f311 CLOSEST trust anchors tested with CNAME and NSEC3 optout. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1907 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-16 14:13:58 +00:00
wouter
a4575ae427 Fixup unsigned CNAME to signed CNAME detection of signatures. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1905 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-16 13:34:03 +00:00
wouter
66098406dd - unbound-host does not fail on type ANY. 
- Fixed wireparse failure to put RRSIGs together with data in some
	  long ANY mix cases, which fixes validation failures.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1903 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-13 14:51:36 +00:00
wouter
3e0c959ed8 Fix validation failure cnamenodata proof failed for hud.gov. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1902 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-13 10:10:05 +00:00
wouter
91b0796453 Fix crash bug with DLV and dnssec-retry for the domain registered in it. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1895 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-10 10:42:50 +00:00
wouter
a6dee29810 pylib for python in different location test updated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1890 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-05 12:03:54 +00:00
wouter
f79e307f33 GOST draft version -00 to -01 changes incorporated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1886 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-02 15:05:06 +00:00
wouter
ea27a69c13 Unit test for fixed autotrust init with DS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1885 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-11-02 14:30:46 +00:00
wouter
622609bde7 - moved version number to 1.4.0 because of 1.3.4 release with only 
the NSEC3 patch.
	- val-log-level: 2 shows extended error information for validation
	  failures, but still one (longish) line per failure.  For example:
	  validation failure <example.com. DNSKEY IN>: signature expired from
	  192.0.2.4 for trust anchor example.com. while building chain of trust
	  validation failure <www.example.com. A IN>: no signatures from
	  192.0.2.6 for key example.com. while building chain of trust



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1868 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 16:45:47 +00:00
wouter
98f810640e retry mode: empty non terminal. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1862 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 08:53:09 +00:00
wouter
6be18f21cc retry mode: DNSKEY. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1861 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 08:22:27 +00:00
wouter
404b2e7a85 Retry mode, DS and prime. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1860 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-07 07:52:02 +00:00
wouter
4ba1003f2c Data retry on validation failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1859 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-10-06 08:31:47 +00:00
wouter
d91b079298 Test of original autotrust formatted data. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1849 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-23 12:50:42 +00:00
wouter
b4a655b16e Failure handling for 5011. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1848 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-23 09:05:44 +00:00
wouter
31b8eb1015 Can handle a number of keys for the trust point. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1847 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-22 14:40:14 +00:00
wouter
5d07c6ae3c revocation of trust anchors works. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1846 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-22 14:04:43 +00:00
wouter
6650ab00ca rfc5011 and algorithm rollover 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1845 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-22 12:20:21 +00:00
wouter
3ae4d48bfb Test TTLs and signatures. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1843 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-18 11:23:50 +00:00
wouter
8e36b3fee5 Pick up revocations even if not normally validly signed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1842 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-18 10:13:06 +00:00
wouter
f6e1799332 autotrust tests and fixes. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1841 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-18 07:49:29 +00:00
wouter
b2e277f947 Fix problem with delegation where glue has expired. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1837 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-17 14:36:06 +00:00
wouter
8a4b3d5fbe Fixup TTL too large bug for bogus responses. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1822 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-10 10:01:36 +00:00
wouter
1c400300ef - autotrust testbound scenarios. 
- autotrust fix that failure count is written to file.
        - autotrust fix that keys may become valid after add holddown time
          alone, before the probe returns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1819 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-07 14:34:29 +00:00
wouter
342ade4fa9 Set path earlier. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1816 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-04 12:22:46 +00:00
wouter
d92047812e Test the new doxygen pick up. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1815 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-04 11:26:49 +00:00
wouter
da1b7f1826 - TRAFFIC keyword for testbound. Simplifies test generation. 
${range lower val upper} to check probe timeout values.
- test with 5011-prepublish rollover and revocation.
- fix revocation of RR for autotrust, stray exclamation mark.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1804 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-02 13:11:52 +00:00
wouter
dba2082782 more keys for autotrust testing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1803 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-02 10:04:34 +00:00
wouter
7bc0cca2bf active probe 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1802 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-01 14:47:57 +00:00
wouter
a1d844cda6 randomise probe time. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1798 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-09-01 12:45:10 +00:00
wouter
e947c5b54f variable processing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1795 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-31 15:58:38 +00:00
wouter
54b76eb064 Test for DLV DS lookup fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1789 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-27 10:13:55 +00:00
wouter
434eb12575 Test for DS lookup fix. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1788 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-27 10:07:58 +00:00
wouter
d6a58dba46 autotrust probing and testbound with fake timer support. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1787 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-26 13:23:49 +00:00
wouter
dc96615355 Fixup memleak in unsupported algorithm checks at startup. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1774 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-25 06:51:00 +00:00
wouter
59f0039bba autotrust test routines. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1771 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-24 14:40:25 +00:00
wouter
f2ab6580f6 Fix bug in DLV. Iana portlist. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1762 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-14 13:58:54 +00:00
wouter
964c7a04ce Nicer names for test files. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1755 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-11 10:33:56 +00:00
wouter
88815de938 updated unit tests. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1754 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-11 10:24:45 +00:00
wouter
6488f5120e Tests for DS GOST. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1749 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-06 14:45:40 +00:00
wouter
96c6d3daf3 GOST support with --enable-gost. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1747 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-06 13:38:55 +00:00
wouter
0ee3554101 Test example signatures for rsasha256 and rsasha512. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1742 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-08-04 12:45:51 +00:00
wouter
a36d0b554b Fixup for root prime requests sent when not needed. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1736 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-07-23 13:21:42 +00:00
wouter
00971e4abf Fixup lameness handling in server selection. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1735 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-07-21 13:52:39 +00:00
wouter
efa0fad14e extremely lenient for truncated positive replies 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1670 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-18 10:59:59 +00:00
wouter
bcaa5a3d51 Fixup parse problem reported by Hauke Lampe. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1669 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-18 09:31:58 +00:00
wouter
486acbe0fb Extra test, but no dlv negative cache failures discovered. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1664 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-16 14:57:19 +00:00
wouter
30f2ca1cff Fixup stub below a forward, the stub is still honored and not trumped by the 
forward zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1653 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-12 09:01:42 +00:00
wouter
cb323a70bd Fixed potential wrong NSEC, but the bug could not be triggered. Unit test 
added anyway.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1651 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-12 07:23:04 +00:00
wouter
b60f48fe0e forward-zone and DS fixup. Test. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1650 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-11 18:54:07 +00:00
wouter
8697c2c5aa Fixup stub chain of trust from public to private servers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1648 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-11 14:02:37 +00:00
wouter
c8dcc0edd2 Remove REVOKE flag support. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1639 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-06-08 08:29:17 +00:00
wouter
c1fa18995f python lock deadlock on MacOSX. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1615 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-23 14:59:44 +00:00
wouter
3bfff97da5 Pylib for macOSX 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1614 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-23 14:34:32 +00:00
wouter
72bfbdf12d Line endings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1607 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-17 11:52:42 +00:00
wouter
715a0fe7d9 rsasha512 fixup and successful test of new winsock handler. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1606 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-17 11:18:19 +00:00
wouter
e2df850810 min-ttl option and tests for min-ttl and max-ttl. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1598 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-14 10:10:11 +00:00
wouter
7f587c89e8 pyunbound test 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1587 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-06 11:04:54 +00:00
wouter
2615ee91a0 doc test fixup. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1583 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-03 14:13:25 +00:00
wouter
122d5b762b - Fixed a bug that caused messages to be stored in the cache too 
long.  Hard to trigger, but NXDOMAINs for nameservers or CNAME
	  targets have been more vulnerable to the TTL miscalculation bug. 


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1582 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-03 13:49:40 +00:00
wouter
d9d9497e07 unit test for python module. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1581 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-04-02 14:44:57 +00:00
wouter
c865eb338d RRSIG validation fixed after Stephane Bortzmeyer reported. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1565 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-30 09:35:48 +00:00
wouter
2e66e891ae inverse trust anchor. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1533 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-18 14:02:46 +00:00
wouter
91b39120f4 Fixup trust anchor algorithm check. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1532 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-18 13:07:48 +00:00
wouter
db6002ee2a Tests for bug that we do not have. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1531 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-18 08:11:23 +00:00
wouter
1d1f79c962 test and nicer error handling on target query failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1530 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-17 14:45:31 +00:00
wouter
77d35f1b23 log and tests fixups. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1521 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-03-12 09:36:28 +00:00
wouter
20bb53cd82 Do not validate with revoked keys. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1471 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-02-10 13:01:38 +00:00
wouter
4bbf9ce601 testbound test for older fix added. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1456 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-02-05 14:31:16 +00:00
wouter
2ffc1ffe76 updated testset for recent changes 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1442 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-15 13:49:42 +00:00
wouter
a492eaeb60 slightly tighter timeouts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1419 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-08 15:58:35 +00:00
wouter
11da2e67b3 HINFO not downcased any more 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1410 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-06 14:49:26 +00:00
wouter
9cced4fbe6 fixup transparent zone answers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1409 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-06 13:51:12 +00:00
wouter
63d577f8fb test for HINFO. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1408 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-06 11:31:21 +00:00
wouter
bc37d19ce1 Fixup assertion failure for certain malformed packets. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1407 be551aaa-1e26-0410-a405-d3ace91eadb9
 2009-01-06 10:00:28 +00:00
wouter
4ed4e0b7f7 fixup for DLV lookup higher NSEC examination bug. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1398 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-12-18 10:14:30 +00:00
wouter
7899ee9c67 fixup remote control so most commands work in nonthreaded environment. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1382 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-12-03 15:20:56 +00:00
wouter
0af8ea988b Added test. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1381 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-12-03 14:07:08 +00:00
wouter
74738e7d1d root hints checks dig. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1377 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-25 15:18:54 +00:00
wouter
4a76add2db freebsd job control for test. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1374 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-24 15:35:00 +00:00
wouter
89ebfdcdd5 testset port to vista/mingw. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1373 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-24 15:05:33 +00:00
wouter
55b1c9928d Fixup for problems with do-ip6: no and only ipv6 addresses. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1353 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-17 12:47:34 +00:00
wouter
ea911e1bc4 Key algo RSASHA512. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1329 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-04 07:50:38 +00:00
wouter
3f93452b2d - RSASHA256_NSEC3 and RSASHA512_NSEC3 algos are supported. 
- updated ldns tarball (with those algos).



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1327 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-11-03 15:42:07 +00:00
wouter
2abb4965f3 root-hints check automated. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1320 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-22 13:40:21 +00:00
wouter
0c7257e644 ported 1.1 to windows. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1316 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-21 13:00:07 +00:00
wouter
c2b6ef6282 Referral path checking, for spoof mitigation, improved. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1305 be551aaa-1e26-0410-a405-d3ace91eadb9
 2008-10-15 13:32:49 +00:00