Commit Graph

477 Commits

Author SHA1 Message Date
wouter
0f45d8bf99 Use nsec3s_seen flag for speedup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@612 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:11:25 +00:00
wouter
958c81e30f if no NSEC3 present, skip validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@611 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:09:58 +00:00
wouter
13bf8e2c40 nsec3 work, prove name error.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@610 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:02:33 +00:00
wouter
7ce3b06765 nsec3 work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@609 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-12 14:16:46 +00:00
wouter
aeb09dffa7 nsec3 work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@607 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-11 18:18:16 +00:00
wouter
a85111360c please older gcc.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@604 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-06 09:16:43 +00:00
wouter
3ad0495feb port.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@603 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-06 09:14:13 +00:00
wouter
ef521111dc wildcard NSECs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@596 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-05 12:58:25 +00:00
wouter
78e8c8c786 trust anchor denial test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@594 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-05 11:47:09 +00:00
wouter
3d90b9afef wildcard DNAME detect
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@585 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 12:57:40 +00:00
wouter
f4e3dffeab DNAME synthesis and validation fixups.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@584 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 12:44:43 +00:00
wouter
5980a98623 tests, cleanup tmp when testbound fails, fixup referral glue cleanup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@583 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-04 11:31:29 +00:00
wouter
4353a39c1b cname nxdomain fixup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@576 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-03 09:13:27 +00:00
wouter
126276afc7 Nodata tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@572 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-31 12:35:41 +00:00
wouter
2a734b1305 please lint.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@570 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-31 07:56:00 +00:00
wouter
f4899c8521 can read bind-style config files for trust anchor information.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@569 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-31 07:44:16 +00:00
wouter
f8f907875d bind config trusted keys read work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@568 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 15:36:23 +00:00
wouter
5fbfaf15ab crypto cleanups at exit.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@567 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 13:38:52 +00:00
wouter
e97cae4641 Memory cleanup.
- caught bad free of un-alloced data in worker_send error case.
       - memory accounting for key cache (trust anchors and temporary cache).
       - memory accounting fixup for outside network tcp pending waits.
       - memory accounting fixup for outside network tcp callbacks.
       - memory accounting for iterator fixed storage.
       - key cache size and slabs config options.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@566 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-30 12:45:19 +00:00
wouter
8ebe08cf17 no convert to der for DSA signatures
signature test.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@564 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-29 14:27:04 +00:00
wouter
04acd6e628 verbosity detail gives validation failures, but not boring algorithm logs.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@560 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 15:07:52 +00:00
wouter
e79bdf5567 doc fixup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@559 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 14:14:20 +00:00
wouter
24afde4e4b Small speedup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@558 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 14:13:32 +00:00
wouter
d6ebf64d22 Faster verification.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@557 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 13:54:55 +00:00
wouter
d053842ac7 permissive mode feature.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@556 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 11:53:27 +00:00
wouter
f147c8079f enforce signature TTLs
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@555 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 10:26:16 +00:00
wouter
debf453bdd No offtree signing.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@554 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 09:47:17 +00:00
wouter
28f18e649d Referral validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@553 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-28 09:39:43 +00:00
wouter
316be1bec1 validator also computes insecure and indeterminate for rrsets and stores
that.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@551 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-27 14:55:06 +00:00
wouter
ee53b5fef8 do not cache nonRD replies in msg cache, the rrset cache is used for that.
store verification status in rrset cache to enable security for nonRD
replies and also speed up processing.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@550 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-27 13:46:05 +00:00
wouter
191976ec2e DS and DNSKEY not from additional synthesis. Nicer signature expiration errors.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@546 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 13:14:23 +00:00
wouter
1cd7ce0266 Fixup.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@545 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 12:24:07 +00:00
wouter
27f63fd760 prettier proof routines.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@544 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 10:36:15 +00:00
wouter
3e00f0a5e9 refuse unsigned authority section. clean additional section as option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@543 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-24 09:44:29 +00:00
wouter
808bdd71af CNAME validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@542 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-23 15:23:45 +00:00
wouter
2be671c1e7 review change.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@541 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-22 14:29:24 +00:00
wouter
ccf456e1db bogus ttl fixed value, config item.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@540 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-22 12:13:52 +00:00
wouter
4ee83871c3 Returns and caches validated replies.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@536 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 13:12:10 +00:00
wouter
47baec8a77 any response validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@535 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-21 07:58:55 +00:00
wouter
afc61f292b nxdomain validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@534 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 14:27:11 +00:00
wouter
940a8f82ba nodata validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@533 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 13:39:58 +00:00
wouter
c009f0706c VALIDATE state and positive response validation.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@532 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 12:31:12 +00:00
wouter
8c3416a20b handle DNSKEY response state.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@531 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-20 08:10:57 +00:00
wouter
63872867b7 nsec work, canonical compare routine and tests.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@530 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-17 14:25:42 +00:00
wouter
e173c2f391 ds2ke and nsec work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@529 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-17 11:41:49 +00:00
wouter
f8f1f71a0d findkey state.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@528 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 15:06:40 +00:00
wouter
c74469a4e3 fixup canon compare. Include full AXFR data in signature test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@526 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 10:05:52 +00:00
wouter
cba19c0ad0 key prime, DS test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@525 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-16 09:33:35 +00:00
wouter
7e87d99efa unit test will fail, but this fixes canonical order in unbound, waiting
for ldns fix.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@523 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 14:09:00 +00:00
wouter
3cdba8352f verify unit test.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@522 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 13:18:32 +00:00
wouter
c31bd3c549 please lint.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@521 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 09:04:44 +00:00
wouter
a4f5349d21 crypto verify routines.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@520 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-15 08:39:00 +00:00
wouter
7866ca5398 fixups for memory.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@512 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-14 13:15:36 +00:00
wouter
a7924bc280 hinfo treatment.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@510 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-13 11:53:24 +00:00
wouter
1025fee04d makefile nicer in case flex is missing.
canonical compare.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@509 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-13 10:27:44 +00:00
wouter
ef7a3f7407 canonical sort.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@508 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-10 15:12:06 +00:00
wouter
2590097954 debug override date config option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@505 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 15:16:25 +00:00
wouter
24c0426379 rrsig checks.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@502 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-09 09:58:04 +00:00
wouter
583712faa8 sigcrypt keyset processing
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@501 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 13:59:57 +00:00
wouter
2a4438e369 use sigcrypt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@500 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 13:02:53 +00:00
wouter
2350c8287b sigcrypt work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@499 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-08 11:45:54 +00:00
wouter
801bfa406b sigcrypt.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@498 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 15:18:25 +00:00
wouter
de42790b48 val_util work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@497 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 14:30:01 +00:00
wouter
139baa112a id number change
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@496 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-07 09:24:20 +00:00
wouter
ff6116c300 prime work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@494 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 15:56:12 +00:00
wouter
7f7627bbea validator work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@493 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 12:57:29 +00:00
wouter
f5cae3bd4a dname isroot and dellabel
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@492 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 11:06:00 +00:00
wouter
66ec0fd628 key cache.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@491 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-06 09:34:58 +00:00
wouter
28eb290cb7 key entry.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@490 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 14:56:24 +00:00
wouter
265b3531cc create rrsets for verification later.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@489 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 14:12:28 +00:00
wouter
a5d91710d7 unit test trust anchor storage.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@487 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 13:15:16 +00:00
wouter
3ebe325be0 trust anchor storage and config.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@486 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-03 11:51:20 +00:00
wouter
7d81863897 validator, trust anchors.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@482 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 15:45:32 +00:00
wouter
67b41d6a36 validator work.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@481 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 14:36:20 +00:00
wouter
b3cbef4dfc passing of control between modules.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@479 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-02 12:13:08 +00:00
wouter
b6f4010edf callbacks via module specific function for walk_supers.
part of a move towards multiple modules for meshes.


git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@471 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 14:01:34 +00:00
wouter
ffae9bc790 module configuration option.
git-svn-id: https://unbound.nlnetlabs.nl/svn/trunk@468 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-08-01 11:17:30 +00:00