wouter
0f45d8bf99
Use nsec3s_seen flag for speedup.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@612 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:11:25 +00:00
wouter
958c81e30f
if no NSEC3 present, skip validation.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@611 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:09:58 +00:00
wouter
13bf8e2c40
nsec3 work, prove name error.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@610 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:02:33 +00:00
wouter
7ce3b06765
nsec3 work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@609 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-12 14:16:46 +00:00
wouter
aeb09dffa7
nsec3 work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@607 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-11 18:18:16 +00:00
wouter
a85111360c
please older gcc.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@604 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-06 09:16:43 +00:00
wouter
3ad0495feb
port.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@603 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-06 09:14:13 +00:00
wouter
ef521111dc
wildcard NSECs.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@596 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-05 12:58:25 +00:00
wouter
78e8c8c786
trust anchor denial test.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@594 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-05 11:47:09 +00:00
wouter
3d90b9afef
wildcard DNAME detect
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@585 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 12:57:40 +00:00
wouter
f4e3dffeab
DNAME synthesis and validation fixups.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@584 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 12:44:43 +00:00
wouter
5980a98623
tests, cleanup tmp when testbound fails, fixup referral glue cleanup.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@583 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 11:31:29 +00:00
wouter
4353a39c1b
cname nxdomain fixup.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@576 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-03 09:13:27 +00:00
wouter
126276afc7
Nodata tests.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@572 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-31 12:35:41 +00:00
wouter
2a734b1305
please lint.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@570 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-31 07:56:00 +00:00
wouter
f4899c8521
can read bind-style config files for trust anchor information.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@569 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-31 07:44:16 +00:00
wouter
f8f907875d
bind config trusted keys read work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@568 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 15:36:23 +00:00
wouter
5fbfaf15ab
crypto cleanups at exit.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@567 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 13:38:52 +00:00
wouter
e97cae4641
Memory cleanup.
...
- caught bad free of un-alloced data in worker_send error case.
- memory accounting for key cache (trust anchors and temporary cache).
- memory accounting fixup for outside network tcp pending waits.
- memory accounting fixup for outside network tcp callbacks.
- memory accounting for iterator fixed storage.
- key cache size and slabs config options.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@566 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 12:45:19 +00:00
wouter
8ebe08cf17
no convert to der for DSA signatures
...
signature test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@564 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-29 14:27:04 +00:00
wouter
04acd6e628
verbosity detail gives validation failures, but not boring algorithm logs.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@560 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 15:07:52 +00:00
wouter
e79bdf5567
doc fixup.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@559 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 14:14:20 +00:00
wouter
24afde4e4b
Small speedup.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@558 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 14:13:32 +00:00
wouter
d6ebf64d22
Faster verification.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@557 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 13:54:55 +00:00
wouter
d053842ac7
permissive mode feature.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@556 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 11:53:27 +00:00
wouter
f147c8079f
enforce signature TTLs
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@555 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 10:26:16 +00:00
wouter
debf453bdd
No offtree signing.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@554 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 09:47:17 +00:00
wouter
28f18e649d
Referral validation.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@553 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 09:39:43 +00:00
wouter
316be1bec1
validator also computes insecure and indeterminate for rrsets and stores
...
that.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@551 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-27 14:55:06 +00:00
wouter
ee53b5fef8
do not cache nonRD replies in msg cache, the rrset cache is used for that.
...
store verification status in rrset cache to enable security for nonRD
replies and also speed up processing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@550 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-27 13:46:05 +00:00
wouter
191976ec2e
DS and DNSKEY not from additional synthesis. Nicer signature expiration errors.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@546 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 13:14:23 +00:00
wouter
1cd7ce0266
Fixup.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@545 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 12:24:07 +00:00
wouter
27f63fd760
prettier proof routines.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@544 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 10:36:15 +00:00
wouter
3e00f0a5e9
refuse unsigned authority section. clean additional section as option.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@543 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 09:44:29 +00:00
wouter
808bdd71af
CNAME validation.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@542 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-23 15:23:45 +00:00
wouter
2be671c1e7
review change.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@541 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-22 14:29:24 +00:00
wouter
ccf456e1db
bogus ttl fixed value, config item.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@540 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-22 12:13:52 +00:00
wouter
4ee83871c3
Returns and caches validated replies.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@536 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 13:12:10 +00:00
wouter
47baec8a77
any response validation.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@535 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 07:58:55 +00:00
wouter
afc61f292b
nxdomain validation.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@534 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 14:27:11 +00:00
wouter
940a8f82ba
nodata validation.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@533 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 13:39:58 +00:00
wouter
c009f0706c
VALIDATE state and positive response validation.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@532 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 12:31:12 +00:00
wouter
8c3416a20b
handle DNSKEY response state.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@531 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 08:10:57 +00:00
wouter
63872867b7
nsec work, canonical compare routine and tests.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@530 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-17 14:25:42 +00:00
wouter
e173c2f391
ds2ke and nsec work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@529 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-17 11:41:49 +00:00
wouter
f8f1f71a0d
findkey state.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@528 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 15:06:40 +00:00
wouter
c74469a4e3
fixup canon compare. Include full AXFR data in signature test.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@526 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 10:05:52 +00:00
wouter
cba19c0ad0
key prime, DS test.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@525 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 09:33:35 +00:00
wouter
7e87d99efa
unit test will fail, but this fixes canonical order in unbound, waiting
...
for ldns fix.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@523 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 14:09:00 +00:00
wouter
3cdba8352f
verify unit test.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@522 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 13:18:32 +00:00
wouter
c31bd3c549
please lint.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@521 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 09:04:44 +00:00
wouter
a4f5349d21
crypto verify routines.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@520 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 08:39:00 +00:00
wouter
7866ca5398
fixups for memory.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@512 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-14 13:15:36 +00:00
wouter
a7924bc280
hinfo treatment.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@510 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-13 11:53:24 +00:00
wouter
1025fee04d
makefile nicer in case flex is missing.
...
canonical compare.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@509 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-13 10:27:44 +00:00
wouter
ef7a3f7407
canonical sort.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@508 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-10 15:12:06 +00:00
wouter
2590097954
debug override date config option.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@505 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 15:16:25 +00:00
wouter
24c0426379
rrsig checks.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@502 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 09:58:04 +00:00
wouter
583712faa8
sigcrypt keyset processing
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@501 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 13:59:57 +00:00
wouter
2a4438e369
use sigcrypt.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@500 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 13:02:53 +00:00
wouter
2350c8287b
sigcrypt work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@499 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 11:45:54 +00:00
wouter
801bfa406b
sigcrypt.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@498 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 15:18:25 +00:00
wouter
de42790b48
val_util work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@497 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 14:30:01 +00:00
wouter
139baa112a
id number change
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@496 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 09:24:20 +00:00
wouter
ff6116c300
prime work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@494 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 15:56:12 +00:00
wouter
7f7627bbea
validator work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@493 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 12:57:29 +00:00
wouter
f5cae3bd4a
dname isroot and dellabel
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@492 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 11:06:00 +00:00
wouter
66ec0fd628
key cache.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@491 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 09:34:58 +00:00
wouter
28eb290cb7
key entry.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@490 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 14:56:24 +00:00
wouter
265b3531cc
create rrsets for verification later.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@489 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 14:12:28 +00:00
wouter
a5d91710d7
unit test trust anchor storage.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@487 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 13:15:16 +00:00
wouter
3ebe325be0
trust anchor storage and config.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@486 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 11:51:20 +00:00
wouter
7d81863897
validator, trust anchors.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@482 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 15:45:32 +00:00
wouter
67b41d6a36
validator work.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@481 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 14:36:20 +00:00
wouter
b3cbef4dfc
passing of control between modules.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@479 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 12:13:08 +00:00
wouter
b6f4010edf
callbacks via module specific function for walk_supers.
...
part of a move towards multiple modules for meshes.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@471 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 14:01:34 +00:00
wouter
ffae9bc790
module configuration option.
...
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@468 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 11:17:30 +00:00