Skip to content
Snippets Groups Projects
  1. Aug 11, 2016
  2. Jul 16, 2016
  3. Dec 09, 2015
  4. Dec 06, 2015
  5. Oct 19, 2015
  6. Sep 21, 2015
  7. Aug 19, 2015
  8. Jun 30, 2015
    • Marek Vavruša's avatar
      lib/validate: pseudocode of the validation flow · da79dc09
      Marek Vavruša authored
      1. validate module must be between iterate/cache
      2. produce: copy OPT with DO=1, ask for DNSKEY if we don’t have it
      3. resolve.c: subrequest DNSKEY if asked to do it
      4. consume: check DNSKEY and set it, validate RRSIGs against it
      
      another issues:
      
      rrsigcache is copypasta of rrcache, there is one special case with storing RRSIGs which doesn’t deserve it’s own module (if the validation is off, then nothing will get written in there anyway)
      
      since the resolution is asynchronous, layers must only *ask* resolver to do subrequests for them using query flags (like when we encounter an unknown zone cut)
      da79dc09
  9. Jun 29, 2015
  10. Jun 07, 2015
  11. May 27, 2015
  12. May 25, 2015
  13. Apr 12, 2015
  14. Apr 10, 2015
  15. Mar 18, 2015
  16. Mar 11, 2015
  17. Mar 10, 2015
  18. Mar 05, 2015
  19. Mar 04, 2015
  20. Feb 24, 2015
  21. Feb 23, 2015