townforge/unbound
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
4,530 Commits 1 Branch 0 Tags 79 MiB
cc
Commit Graph

477 Commits

Author SHA1 Message Date
wouter
726011b074 - Fix DNSSEC validation of query type ANY with DNAME answers. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3898 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-20 14:27:13 +00:00
wouter
bc78c785ce - Patch that resolves CNAMEs entered in local-data conf statements that 
point to data on the internet, from Jinmei Tatuya (Infoblox).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3885 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-18 13:18:20 +00:00
ralph
caf867d9be - Fix #1117: spelling errors, from Robert Edmonds 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3877 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-10-05 09:56:05 +00:00
wouter
df7a514d4e - Fix #835: fix --disable-dsa with nettle verify. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3864 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-20 12:22:07 +00:00
ralph
43a31cadce fix potential memory leak in daemon/remote.c and nullpointer dereference in 
validator/autotrust.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3856 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-15 08:39:59 +00:00
ralph
8dc79ecaed Take configured minimum TTL into consideration when reducing TTL to original 
TTL from RRSIG.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3849 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-09-05 12:30:46 +00:00
wouter
883854cacb - Fix #777: OpenSSL 1.1.0 compatibility, patch from Sebastian A. Siewior. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3837 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-08-29 07:05:19 +00:00
wouter
f48143758c - Fix #788 for nettle 3.0: Failed to build with Nettle >= 3.0 and 
--with-libunbound-only --with-nettle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3810 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-07-05 14:00:33 +00:00
wouter
ca3061a124 Fixup _get_osfhandle calls 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3809 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-07-05 07:46:16 +00:00
wouter
b0ae561157 - Fixes for 64bit windows compile. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3808 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-07-05 07:40:13 +00:00
wouter
4f8df458fc - Improve threadsafety for openssl 0.9.8 ecdsa dnssec signatures. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3766 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-07 13:02:02 +00:00
wouter
45728bf2c1 - Fix distinction between free and CRYPTO_free in dsa and ecdsa alloc. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3745 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-06-02 08:31:17 +00:00
wouter
f3d914e425 - generic edns option parse and store code. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3740 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-05-31 15:08:05 +00:00
wouter
6fd683c0aa - cachedb module event handling design. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3700 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-04-15 14:19:00 +00:00
wouter
9cf951bc85 Stop memory leak on error condition. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3694 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-23 09:18:29 +00:00
wouter
ad159008d6 please lint. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3693 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-23 08:42:18 +00:00
wouter
16f46e5028 please lint. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3692 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-23 08:37:27 +00:00
wouter
43a523ffbd please lint. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3690 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-23 08:32:17 +00:00
wouter
7b6e5dd9c7 - OpenSSL 1.1.0 portability, --disable-dsa configure option. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3689 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-03-23 08:19:49 +00:00
wouter
93773aa8b2 - Fix that NSEC3 negative cache is used when there is no salt. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3639 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-24 15:02:35 +00:00
wouter
811692e34b - load gost algorithm if digest is seen before key algorithm. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3630 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-19 12:17:03 +00:00
wouter
fd50c17e10 Remove lint warning. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3629 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-19 12:16:27 +00:00
wouter
71e764c00d - Print understandable debug log when unusable DS record is seen. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3627 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-19 10:48:23 +00:00
wouter
1459ca9220 - insecure-lan-zones: yesno config option, patch from Dag-Erling 
Smørgrav.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3619 be551aaa-1e26-0410-a405-d3ace91eadb9
 2016-02-09 13:25:59 +00:00
wouter
33c3822724 - spelling fixes from Igor Sobrado Delgado. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3544 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-18 14:11:46 +00:00
wouter
238f452eb4 Document ASN contents. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3542 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 14:36:10 +00:00
wouter
ba54ca6eb2 cast to please lint. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3541 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 14:27:49 +00:00
wouter
9fa96d25a0 - Fixup DER encoded DSA signatures for libnettle. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3540 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 13:31:22 +00:00
wouter
9e891ddaa9 Repair // style comments for portability. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3539 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 12:46:47 +00:00
wouter
0884d0a2f1 use digest_nettle function for nsec3_hash calls. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3537 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 11:39:58 +00:00
wouter
3a4b39810c please lint. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3536 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 11:32:04 +00:00
wouter
0a8bb72c5d - refactor nsec3 hash implementation to be more library-portable. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3535 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 11:30:04 +00:00
wouter
984f91d1b4 - Fix #594. libunbound: optionally use libnettle for crypto. 
Contributed by Luca Bruno.  Added --with-nettle for use with
  --with-libunbound-only.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3533 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-11-17 09:43:07 +00:00
wouter
34ac46080c - Fix #716: nodata proof with empty non-terminals and wildcards. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3526 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-29 13:08:15 +00:00
wouter
456de38eb9 windows portability. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3521 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-27 15:35:08 +00:00
wouter
00b44c3aa0 - Fix #712: unbound-anchor appears to not fsync root.key. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3512 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-10-22 07:06:31 +00:00
wouter
553bf1df1e - Remove confusion comment from canonical_compare() function. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3488 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-09-22 08:43:56 +00:00
wouter
94981e10b4 configuration option affects autotrust. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3472 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-13 12:52:51 +00:00
wouter
7fc17c9a1f - 5011 implementation does not insist on all algorithms, when 
harden-algo-downgrade is turned off.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3471 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-13 12:03:53 +00:00
wouter
7396d00ba0 - Fix 5011 anchor update timer after reload. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3466 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-08-03 11:56:37 +00:00
wouter
16eedd74ef no zero waiting times. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3464 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-30 14:01:04 +00:00
wouter
ec305ab84b fixup. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3463 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-30 12:02:18 +00:00
wouter
c58e83c3e1 - Added permit-small-holddown config to debug fast 5011 rollover. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3462 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-07-30 11:52:12 +00:00
wouter
c17574c81a - DLV is going to be decommissioned. Advice to stop using it, and 
put text in the example configuration and man page to that effect.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3424 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-20 06:24:06 +00:00
wouter
97ffe64ba3 - Change syntax of particular validator error to be easier for 
machine parse, swap rrset and ip adres info so it looks like:
  validation failure <www.example.nl. TXT IN>: signature crypto
  failed from 2001:DB8:7:bba4::53 for <*.example.nl. NSEC IN>


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3422 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-05-10 12:04:22 +00:00
wouter
ba41e16d3c - Unbound exits with a fatal error when the auto-trust-anchor-file 
fails to be writable.  This is seconds after startup.  You can
  load a readonly auto-trust-anchor-file with trust-anchor-file.
  The file has to be writable to notice the trust anchor change,
  without it, a trust anchor change will be unnoticed and the system
  will then become unoperable.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3387 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-04-07 12:03:05 +00:00
wouter
410ac6cd67 - rename ldns subdirectory to sldns to avoid name collision. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3380 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-26 10:21:38 +00:00
wouter
6d0f96673d - If unknown trust anchor algorithm, and libressl is used, error 
message encourages upgrade of the libressl package.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3378 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-25 16:04:05 +00:00
wouter
d1bf57dfd1 - Fixes to add integer overflow checks on allocation (defense in depth). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3372 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-20 15:36:25 +00:00
wouter
9f56dc9102 - Use reallocarray for integer overflow protection, patch submitted 
by Loganaden Velvindron.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3365 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-17 08:24:24 +00:00
wouter
5a4a7863b6 - Fix #644: harden-algo-downgrade option, if turned off, fixes the 
reported excessive validation failure when multiple algorithms
  are present.  It allows the weakest algorithm to validate the zone.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3354 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-03-09 13:30:37 +00:00
wouter
16b3909f91 - Fix validation failure in case upstream forwarder (ISC BIND) does 
not have the same trust anchors and decides to insert unsigned NS
  record in authority section.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3329 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-02-09 11:44:46 +00:00
wouter
f8c9f95aa9 - Fix unintended use of gcc extension for incomplete enum types, 
compile with pedantic c99 compliance (from Daniel Dickman).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3321 be551aaa-1e26-0410-a405-d3ace91eadb9
 2015-01-26 08:46:40 +00:00
wouter
f9213eaf93 - Fix cdflag dns64 processing. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3275 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-19 08:43:08 +00:00
wouter
0778829809 - Fix that CD flag disables DNS64 processing, returning the DNSSEC 
signed AAAA denial.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3273 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-11-18 15:15:57 +00:00
wouter
275b0360d4 More casts. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3244 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-13 09:23:12 +00:00
wouter
def3dfd114 More unsigned chasts for toupper/tolower/ctype 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3242 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-10-13 08:35:00 +00:00
matje
96e1b5ac58 Be lenient when a NSEC NameError response with RCODE=NXDOMAIN is received. 
This is okay according 4035, but not after revising existence in 4592. 
NSEC empty non-terminals exist and thus the RCODE should have been NOERROR.

If this occurs, and the RRsets are secure, we set the RCODE to NOERROR and
the security status of the reponse is also considered secure.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3089 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-20 09:46:50 +00:00
matje
7b88f8ede8 only whitespace changes 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3088 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-18 13:54:19 +00:00
wouter
68b138cbd3 And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3079 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-02-07 13:28:39 +00:00
wouter
63354244f1 - Fix #547: no trustanchor written if filesystem full, fclose checked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3044 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-21 10:14:55 +00:00
wouter
511cfd92df - Windows port, adjust %lld to %I64d, and warning in win_event.c. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3040 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-16 16:01:37 +00:00
wouter
ba8b12b779 - fix #544: Fixed +i causes segfault when running with module conf "iterator". 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3038 be551aaa-1e26-0410-a405-d3ace91eadb9
 2014-01-16 13:04:34 +00:00
wouter
db8f72c4f7 - Fix sldns to use sldns_ prefix for all ldns_ variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3022 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-12-03 09:11:16 +00:00
wouter
884b06df55 Fix linking of sldns and ldns, unique identifiers for global variables. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@3021 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-11-30 11:03:55 +00:00
wouter
8e6ee27eda - separate ldns into core ldns inside ldns/ subdirectory. No more 
--with-ldns is needed and unbound does not rely on libldns.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-10-31 15:09:26 +00:00
wouter
a7e7ac40d0 fix lint, more time_t 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2950 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-27 14:45:33 +00:00
wouter
1940c3a670 remove bool. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2949 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-27 13:47:23 +00:00
wouter
f2403fc51c remove bool. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2948 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-27 13:46:41 +00:00
wouter
a3010b56fd more time_t 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2947 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-27 11:44:33 +00:00
wouter
658bd3bcf8 - review fixes from Willem. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2945 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-22 14:10:29 +00:00
wouter
b492e89a4d - more fixes that I overlooked. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2944 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-22 07:33:51 +00:00
wouter
1efe599073 - Fix#520: Errors found by static analysis from Tomas Hozza(redhat). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2942 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-21 13:31:09 +00:00
wouter
b4a007738c - Fix for 2038, with time_t instead of uint32_t. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2939 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-08-20 12:23:42 +00:00
wouter
08d0e4c6f6 - Fix memleak in testcode for testbound (if it fails). 
- Fix NSS returned arrays out of setup function to be statics.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2930 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-07-29 07:32:35 +00:00
wouter
2a9f76b880 - Fix use-after-free in out-of-memory handling code (thanks Jake 
Montgomery).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2900 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-05-16 07:36:37 +00:00
wouter
48c72225d1 - Robust checks on dname validity from rdata for dname compare. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2892 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-04-25 10:28:25 +00:00
wouter
2643272560 - includes and have_ssl fixes for nss. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2830 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-30 13:15:03 +00:00
wouter
0265146e12 fixup for doxygen 1.8.3 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2827 be551aaa-1e26-0410-a405-d3ace91eadb9
 2013-01-28 13:44:38 +00:00
matje
aae7a518bf Fix validation for responses with CNAME and wildcard expanded CNAME in 
ANSWER section.



git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2777 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-29 14:06:00 +00:00
wouter
97cc148487 - ignore trusted-keys globs that have no files (from Paul Wouters). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2770 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-10-01 07:18:49 +00:00
wouter
ac7d3cdbde - RFC6725 deprecates RSAMD5: this DNSKEY algorithm is disabled. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2753 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-08-30 12:02:53 +00:00
wouter
1caf700c2e - fix bogus nodata cname chain not reported as bogus by validator, 
(Thanks Peter van Dijk).


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2727 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-27 13:38:00 +00:00
wouter
7f7f11f49e - review fix for libnss, check hash prefix allocation size. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2723 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-25 14:32:37 +00:00
wouter
724697a418 - fix missing break for GOST DS hash function. 
- make depend


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2721 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-23 12:27:04 +00:00
wouter
109c3e384b - Fix validation of qtype DS queries that result in no data for 
non-optout NSEC3 zones.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2712 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-07-06 13:56:44 +00:00
wouter
182250237f - detect if openssl has FIPS_mode. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2703 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-28 06:54:16 +00:00
wouter
8cb9d852c0 - disable RSAMD5 if in FIPS mode (for openssl and for libnss). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2702 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-25 15:13:44 +00:00
wouter
4d012867f2 - disable RSAMD5 if in FIPS mode (when compiled with openssl). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2701 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-25 15:02:52 +00:00
wouter
491faef693 Test for ECC support for libNSS. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2700 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-22 15:20:56 +00:00
wouter
2d5552262c implement DNSSEC with libNSS: NSEC3, RSA, DSA, ECDSA, and DS hashes. 
make test succeeds.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2699 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-22 14:31:29 +00:00
wouter
836c366bb4 RSA with nss. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2697 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-21 15:19:16 +00:00
wouter
637238e3dd remove double free. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2696 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-21 12:01:34 +00:00
wouter
1aac0639ef - nss check for verification failure. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2695 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-21 12:00:48 +00:00
wouter
6fa543ca4d - fix error handling of alloc failure during rrsig verification. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2693 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-21 07:22:01 +00:00
wouter
5373e6bec7 - work on --with-nss build option (for now, --with-libunbound-only). 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2690 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-20 15:11:53 +00:00
wouter
ec417b19da code review. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2688 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-18 14:22:29 +00:00
wouter
e673d893c7 - The key-cache bad key ttl is now 60 seconds. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2685 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-06-15 12:25:29 +00:00
wouter
afcd09ab22 - Protect if statements in val_anchor for compilate without locks. 
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2670 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-16 10:54:52 +00:00
wouter
a6e01024c8 - Fix validation of nodata for DS query in NSEC zones, reported by 
Ondrej Mikle.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@2662 be551aaa-1e26-0410-a405-d3ace91eadb9
 2012-05-02 11:58:27 +00:00