Skip to content
Snippets Groups Projects
  1. Sep 01, 2013
  2. Aug 30, 2013
    • Jan Kadlec's avatar
      dnssec: small changes and fixes · 12322ac6
      Jan Kadlec authored
      - preparation for non-forced zone sing planning
      - added a posibility not to wait for readers in changeset application when applying DNSSEC changes upon load/reload (there should be no readers, since the zone is not in the zonedb)
      - fixes in changeset merging (SOAs and serials were wrong - SOAs might still be wrong, when me merge the changesets, we do *NOT* want to update the serial, since the user already did that)
      
      Refs #4
      12322ac6
  3. Aug 27, 2013
    • Jan Kadlec's avatar
      DNSSEC: small fixes · 78acf383
      Jan Kadlec authored
      Refs #4
      78acf383
    • Jan Kadlec's avatar
      DNSSEC: bugfixes, debug code · 3cc2223f
      Jan Kadlec authored
      - First store merge changesets, then apply signatures
      - Added pretty print function to dump changesets, HAS TO BE REMOVED!!!
      - some fixes, mainly in signature checking
      - fails to save to journal for same reason
      - deliberate leaks - malformed changesets, needs custom freeing function
      
      Refs #4
      3cc2223f
    • Jan Kadlec's avatar
      DNSSEC: signature checking, forced signing, merged diff's and DNSSEC's changesets · 8ab216e1
      Jan Kadlec authored
      - Zones are now automatically (re)signed when server starts/reloads
      - Signature validity check now calculates the signature as well - this is used to detect changes to RRs themselves
      - 'knotc signzone' issues a force signing of zone - all RRSIGs are dropped and recreated
      - Some leaks and bugs still present, but the code is commitable now
      
      Refs #4
      8ab216e1
  4. Aug 22, 2013
  5. Aug 21, 2013
  6. Aug 20, 2013
  7. Aug 16, 2013
  8. Aug 15, 2013
  9. Aug 14, 2013
  10. Aug 13, 2013
  11. Aug 12, 2013
    • Jan Kadlec's avatar
      DNSSEC: Handling of SOA RRSIGs. · 54e06c83
      Jan Kadlec authored
      - Quite a lot of changes had to be done, because some variables were only accesible locally.
      - Some includes might not be needed, needs a second look.
      
      Refs #4
      54e06c83
Loading