Commit Graph

96 Commits

Author SHA1 Message Date
wouter
5b421dc1c8 remove empty line
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1592 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-04-07 15:02:57 +00:00
wouter
12e1046582 signature clock skew code.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1590 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-04-06 14:09:33 +00:00
wouter
20bb53cd82 Do not validate with revoked keys.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1471 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-02-10 13:01:38 +00:00
wouter
7bd73ba9ca chrooted include file fix
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1411 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-06 15:47:15 +00:00
wouter
11da2e67b3 HINFO not downcased any more
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1410 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-01-06 14:49:26 +00:00
wouter
7af3150ba5 detection of sha256 and sha512 by testing if functionality was compiled
into openssl.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1328 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-03 16:06:12 +00:00
wouter
3f93452b2d - RSASHA256_NSEC3 and RSASHA512_NSEC3 algos are supported.
- updated ldns tarball (with those algos).



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1327 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-03 15:42:07 +00:00
wouter
9eabe79321 More verbose on signer name error.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1322 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-23 10:54:03 +00:00
wouter
b2759462dd fixup SHA256 algorithm set routine
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1279 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-02 09:05:20 +00:00
wouter
d3c4fb4145 SHA256 support.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1275 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-30 13:06:07 +00:00
wouter
706d293bcd Fix for SHA256 DS downgrade. And test of resistance.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1273 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-30 10:42:02 +00:00
wouter
6f3aa14fa5 DSA signature compatibility.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1053 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-15 19:51:28 +00:00
wouter
7714222dd8 Fixup unbound. Now still a switch DSA(ldns) DSA(bind) ...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1052 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-15 18:01:14 +00:00
wouter
abc608675f DSA test
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1051 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-15 15:19:25 +00:00
wouter
69cc6982a4 Check sig type for DSA.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1043 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-14 15:57:52 +00:00
wouter
649bb694f5 Jelte found DSA sig solution, copied from ldns to fit into unbound validator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1042 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-04-14 15:34:09 +00:00
wouter
cf50a0bcb7 Faster due to time-sharing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@966 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-19 13:12:23 +00:00
wouter
e2ce21cf4d move around debug levels.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@929 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-07 09:46:49 +00:00
wouter
5d3597ebd3 No downcasing for NSEC and RRSIG
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@754 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-19 08:55:19 +00:00
wouter
4bcd6aac94 regional nicer, remove region-allocator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 20:31:43 +00:00
wouter
b5a046ad99 function pointer whitelists on data types.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@660 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-05 11:41:12 +00:00
wouter
8da65ba871 NSEC rdata not lowercased.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@623 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-19 12:34:42 +00:00
wouter
3ad0495feb port.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@603 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-06 09:14:13 +00:00
wouter
8ebe08cf17 no convert to der for DSA signatures
signature test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@564 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-29 14:27:04 +00:00
wouter
04acd6e628 verbosity detail gives validation failures, but not boring algorithm logs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@560 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 15:07:52 +00:00
wouter
24afde4e4b Small speedup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@558 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 14:13:32 +00:00
wouter
d6ebf64d22 Faster verification.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@557 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 13:54:55 +00:00
wouter
f147c8079f enforce signature TTLs
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@555 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 10:26:16 +00:00
wouter
debf453bdd No offtree signing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@554 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 09:47:17 +00:00
wouter
191976ec2e DS and DNSKEY not from additional synthesis. Nicer signature expiration errors.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@546 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 13:14:23 +00:00
wouter
f8f1f71a0d findkey state.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@528 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 15:06:40 +00:00
wouter
c74469a4e3 fixup canon compare. Include full AXFR data in signature test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@526 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 10:05:52 +00:00
wouter
cba19c0ad0 key prime, DS test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@525 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 09:33:35 +00:00
wouter
7e87d99efa unit test will fail, but this fixes canonical order in unbound, waiting
for ldns fix.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@523 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 14:09:00 +00:00
wouter
3cdba8352f verify unit test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@522 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 13:18:32 +00:00
wouter
c31bd3c549 please lint.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@521 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 09:04:44 +00:00
wouter
a4f5349d21 crypto verify routines.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@520 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 08:39:00 +00:00
wouter
a7924bc280 hinfo treatment.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@510 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-13 11:53:24 +00:00
wouter
1025fee04d makefile nicer in case flex is missing.
canonical compare.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@509 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-13 10:27:44 +00:00
wouter
ef7a3f7407 canonical sort.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@508 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-10 15:12:06 +00:00
wouter
2590097954 debug override date config option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@505 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 15:16:25 +00:00
wouter
24c0426379 rrsig checks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@502 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 09:58:04 +00:00
wouter
583712faa8 sigcrypt keyset processing
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@501 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 13:59:57 +00:00
wouter
2a4438e369 use sigcrypt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@500 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 13:02:53 +00:00
wouter
2350c8287b sigcrypt work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@499 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 11:45:54 +00:00
wouter
801bfa406b sigcrypt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@498 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 15:18:25 +00:00