Commit Graph

185 Commits

Author SHA1 Message Date
wouter
14e22d1a19 max iterations for neg cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1291 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-09 13:06:06 +00:00
wouter
05dcda36e2 working on negative DS
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1288 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-07 15:22:32 +00:00
wouter
af05e11f7c add remove local data and local zone with remote control
(ldns-testpkts sync with ldns trunk).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1261 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-19 14:49:29 +00:00
wouter
f2c643c169 threadsafe rrset counter.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1240 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-17 07:13:31 +00:00
wouter
3ba08ebd78 Do not mark additional section items bogus.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1222 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-09-02 14:35:13 +00:00
wouter
90163454a7 dlv negative cache size option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1213 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-27 13:02:22 +00:00
wouter
343c2425ae more test DLV.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1203 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-22 10:06:14 +00:00
wouter
3be517fbe4 Test DLV anchor.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1202 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-21 14:58:39 +00:00
wouter
7faf341d92 DLV negative cache works.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1200 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-21 10:43:45 +00:00
wouter
e03225f480 basic DLV works.
iana port update.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1191 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-15 10:55:09 +00:00
wouter
cf59fb45fb DLV work
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1190 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-14 15:16:50 +00:00
wouter
71700f6a04 - Fixup rrset security updates overwriting 2181 trust status.
This makes validated to be insecure data just as worthless as
	  nonvalidated data, and 2181 rules prevent cache overwrites to them.
	- Fix assertion fail on bogus key handling.
	- dnssec lameness detection works on first query at trust apex.
	- NS queries get proper cache and dnssec lameness treatment.
	- fixup compilation without pthreads on linux.
	- NS queries are done after every referral.
	  validator is used on those NS records (if anchors enabled).




git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1185 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-08-12 10:13:57 +00:00
wouter
0e619f9bdd fixup for type DS queries from clients when trustanchor for that name exists.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@1148 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-07-15 09:45:50 +00:00
wouter
38c018e539 - setup speec_cache for need-ldns-testns in dotests.
- check number of queued replies on incoming queries to avoid overload
         on that account.
       - fptr whitelist checks are not disabled in optimize mode.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@971 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-20 07:18:42 +00:00
wouter
cf50a0bcb7 Faster due to time-sharing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@966 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-19 13:12:23 +00:00
wouter
361bf7d411 fixup validator classification of root referrals.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@936 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-08 12:24:01 +00:00
wouter
76a26d97a8 log level 2.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@930 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-07 11:04:56 +00:00
wouter
e2ce21cf4d move around debug levels.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@929 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-02-07 09:46:49 +00:00
wouter
a1ba0ccb3f coverity run fixes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@803 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-12-04 17:54:14 +00:00
wouter
ae9a865863 Harden dnssec stripped zones.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@730 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-01 15:32:27 +00:00
wouter
0d1d88543d Fixup of reload bug.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@726 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-11-01 09:48:20 +00:00
wouter
67d2bad8e0 dnssec lame detection.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@714 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-22 15:25:37 +00:00
wouter
ae66969d39 - lex fix
- unsecure validation neater
- const cast warning removal


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@702 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-19 08:03:08 +00:00
wouter
4bcd6aac94 regional nicer, remove region-allocator.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 20:31:43 +00:00
wouter
28e9a2eb92 fixup insecure glue on referrals.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@688 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 15:48:54 +00:00
wouter
49a22dcb04 fixup test, less logging.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@687 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 14:49:12 +00:00
wouter
5741aa1aca fixup crashy.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@685 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 14:22:14 +00:00
wouter
9860e15c26 no debug on low verbosity.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@684 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-17 14:10:46 +00:00
wouter
a4478ad648 function pointer whitelist for module operations. completing fptr work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@661 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-05 12:42:25 +00:00
wouter
510b51560a fixup cname out of unsec zone.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@655 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-03 13:33:23 +00:00
wouter
b476a154c3 Fixup and test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@654 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-03 12:20:55 +00:00
wouter
4772e1a940 loopfix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@653 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-03 08:36:47 +00:00
wouter
cfe76fa84f NSEC3 tests, and fixup for qtype ANY wildcard proof.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@638 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-25 09:39:32 +00:00
wouter
7c02422dc4 Fixup and test for nonrec loop case.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@634 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-21 20:30:04 +00:00
wouter
7a61cc6108 debug
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@633 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-21 15:45:32 +00:00
wouter
9d162463e3 Fixup alloc in wrong region.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@628 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-21 13:34:44 +00:00
wouter
da7d0e0c2f quick fixup
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@626 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-20 12:46:19 +00:00
wouter
6ae36122de more liberal for ANS ENT bug. Fixup DS ENT handling too.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@625 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-20 12:31:35 +00:00
wouter
6a5ea1a369 Fixup for a wildcarded NSEC with empty nonterminal query.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@624 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-20 11:37:15 +00:00
wouter
dc52d27c78 print validator classification type.
update plan items.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@619 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-18 12:33:51 +00:00
wouter
bca2a9be40 namerror nsec3 proof works.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@616 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-17 14:03:35 +00:00
wouter
6fb9ede4b5 NSEC3.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@613 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-14 11:15:42 +00:00
wouter
0f45d8bf99 Use nsec3s_seen flag for speedup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@612 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:11:25 +00:00
wouter
13bf8e2c40 nsec3 work, prove name error.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@610 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:02:33 +00:00
wouter
7ce3b06765 nsec3 work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@609 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-12 14:16:46 +00:00
wouter
a85111360c please older gcc.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@604 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-06 09:16:43 +00:00
wouter
ef521111dc wildcard NSECs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@596 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-05 12:58:25 +00:00
wouter
78e8c8c786 trust anchor denial test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@594 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-05 11:47:09 +00:00
wouter
3d90b9afef wildcard DNAME detect
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@585 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 12:57:40 +00:00
wouter
f4e3dffeab DNAME synthesis and validation fixups.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@584 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 12:44:43 +00:00
wouter
5980a98623 tests, cleanup tmp when testbound fails, fixup referral glue cleanup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@583 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 11:31:29 +00:00
wouter
126276afc7 Nodata tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@572 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-31 12:35:41 +00:00
wouter
5fbfaf15ab crypto cleanups at exit.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@567 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 13:38:52 +00:00
wouter
e97cae4641 Memory cleanup.
- caught bad free of un-alloced data in worker_send error case.
       - memory accounting for key cache (trust anchors and temporary cache).
       - memory accounting fixup for outside network tcp pending waits.
       - memory accounting fixup for outside network tcp callbacks.
       - memory accounting for iterator fixed storage.
       - key cache size and slabs config options.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@566 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 12:45:19 +00:00
wouter
04acd6e628 verbosity detail gives validation failures, but not boring algorithm logs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@560 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 15:07:52 +00:00
wouter
d053842ac7 permissive mode feature.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@556 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 11:53:27 +00:00
wouter
28f18e649d Referral validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@553 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 09:39:43 +00:00
wouter
316be1bec1 validator also computes insecure and indeterminate for rrsets and stores
that.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@551 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-27 14:55:06 +00:00
wouter
ee53b5fef8 do not cache nonRD replies in msg cache, the rrset cache is used for that.
store verification status in rrset cache to enable security for nonRD
replies and also speed up processing.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@550 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-27 13:46:05 +00:00
wouter
27f63fd760 prettier proof routines.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@544 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 10:36:15 +00:00
wouter
3e00f0a5e9 refuse unsigned authority section. clean additional section as option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@543 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 09:44:29 +00:00
wouter
808bdd71af CNAME validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@542 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-23 15:23:45 +00:00
wouter
2be671c1e7 review change.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@541 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-22 14:29:24 +00:00
wouter
ccf456e1db bogus ttl fixed value, config item.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@540 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-22 12:13:52 +00:00
wouter
4ee83871c3 Returns and caches validated replies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@536 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 13:12:10 +00:00
wouter
47baec8a77 any response validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@535 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 07:58:55 +00:00
wouter
afc61f292b nxdomain validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@534 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 14:27:11 +00:00
wouter
940a8f82ba nodata validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@533 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 13:39:58 +00:00
wouter
c009f0706c VALIDATE state and positive response validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@532 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 12:31:12 +00:00
wouter
8c3416a20b handle DNSKEY response state.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@531 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 08:10:57 +00:00
wouter
63872867b7 nsec work, canonical compare routine and tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@530 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-17 14:25:42 +00:00
wouter
e173c2f391 ds2ke and nsec work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@529 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-17 11:41:49 +00:00
wouter
f8f1f71a0d findkey state.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@528 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 15:06:40 +00:00
wouter
cba19c0ad0 key prime, DS test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@525 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 09:33:35 +00:00
wouter
24c0426379 rrsig checks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@502 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 09:58:04 +00:00
wouter
de42790b48 val_util work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@497 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 14:30:01 +00:00
wouter
139baa112a id number change
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@496 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 09:24:20 +00:00
wouter
ff6116c300 prime work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@494 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 15:56:12 +00:00
wouter
7f7627bbea validator work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@493 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 12:57:29 +00:00
wouter
66ec0fd628 key cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@491 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 09:34:58 +00:00
wouter
7d81863897 validator, trust anchors.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@482 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 15:45:32 +00:00
wouter
67b41d6a36 validator work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@481 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 14:36:20 +00:00
wouter
b3cbef4dfc passing of control between modules.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@479 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 12:13:08 +00:00
wouter
b6f4010edf callbacks via module specific function for walk_supers.
part of a move towards multiple modules for meshes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@471 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 14:01:34 +00:00
wouter
ffae9bc790 module configuration option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@468 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 11:17:30 +00:00