Skip to content
Snippets Groups Projects
  1. Dec 02, 2013
  2. Nov 29, 2013
  3. Nov 28, 2013
  4. Nov 21, 2013
  5. Oct 23, 2013
  6. Oct 22, 2013
  7. Oct 16, 2013
  8. Oct 11, 2013
  9. Oct 10, 2013
  10. Sep 30, 2013
  11. Sep 25, 2013
  12. Sep 16, 2013
  13. Sep 03, 2013
  14. Aug 30, 2013
    • Jan Kadlec's avatar
      dnssec: small changes and fixes · 12322ac6
      Jan Kadlec authored
      - preparation for non-forced zone sing planning
      - added a posibility not to wait for readers in changeset application when applying DNSSEC changes upon load/reload (there should be no readers, since the zone is not in the zonedb)
      - fixes in changeset merging (SOAs and serials were wrong - SOAs might still be wrong, when me merge the changesets, we do *NOT* want to update the serial, since the user already did that)
      
      Refs #4
      12322ac6
  15. Aug 27, 2013
    • Jan Kadlec's avatar
      DNSSEC: signature checking, forced signing, merged diff's and DNSSEC's changesets · 8ab216e1
      Jan Kadlec authored
      - Zones are now automatically (re)signed when server starts/reloads
      - Signature validity check now calculates the signature as well - this is used to detect changes to RRs themselves
      - 'knotc signzone' issues a force signing of zone - all RRSIGs are dropped and recreated
      - Some leaks and bugs still present, but the code is commitable now
      
      Refs #4
      8ab216e1
  16. Aug 08, 2013
    • Marek Vavrusa's avatar
      Fixed TSIG check for multi-packet signatures. · 739060b2
      Marek Vavrusa authored
      Problem was the function is copied from another one which
      always decrements the arcount and trims the TSIG RR. But with
      aggregated responses, this should be stripped not from first,
      but from the packet actually containing the TSIG.
      739060b2
  17. Aug 06, 2013
  18. Aug 02, 2013
  19. Jul 30, 2013
  20. Jul 29, 2013
  21. Jul 26, 2013
Loading