Commits · d3030059bacd5e58b3eaebb8fb5cb785cab7c9f6 · Knot projects / Knot DNS

Dec 20, 2021
- tests-extra: ctl/basic -- call zone-purge in the blocking mode · d3030059
  David Vasek authored 3 years ago and Daniel Salzman committed 3 years ago
  
  d3030059
- tests: test pre-check of mod-geoip configuration · 9c10c1d5
  Libor Peltan authored 3 years ago
  
  9c10c1d5
Dec 15, 2021
- dnssec: enforce safe rrsig-refresh · d8b1e148
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  d8b1e148
Dec 14, 2021
- knot: change server.remote-retry-delay units from seconds to milliseconds · 3de9dde9
  Daniel Salzman authored 3 years ago
  
  3de9dde9
Dec 10, 2021
- DS push: use DNSKEY TTL for parent DS · 2948a910
  Libor Peltan authored 3 years ago
  
  2948a910
Dec 07, 2021
- conf: change the default number of NSEC3 iterations to 0 · 00098369
  Daniel Salzman authored 3 years ago
  
  00098369
- tests-extra: enable ldns-verify-zone for alg rollovers (it works with new versions) · 4811a3d6
  Daniel Salzman authored 3 years ago
  
  4811a3d6
- tests: scenario of alg roll with offline KSK · 40ec91ca
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  40ec91ca
Dec 04, 2021
- keymgr: set brief mode by default and add verbose mode for disabling · e81ef796
  Jan Hák authored 3 years ago and Daniel Salzman committed 3 years ago
  
  Option --brief is now deprecated.
  e81ef796
Dec 02, 2021
- dnssec: implemented re-salt option on every ZSK roll occasion · 89662f91
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  89662f91
- tests: test of incremental signing when re-sign is pending · d5a1cb1c
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  d5a1cb1c
Nov 26, 2021
- tests: compatibility with new Bind · 502aa17d
  Libor Peltan authored 3 years ago
  
  502aa17d
- implemented pool of opened outgoing conenctions · a0d5d045
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  a0d5d045
Nov 24, 2021
- spelling · 43db89b8
  Josh Soref authored 3 years ago and Daniel Salzman committed 3 years ago
  
  Signed-off-by: Josh Soref <jsoref@users.noreply.github.com>
  43db89b8
Nov 12, 2021
- refresh: carefully decide axfr/address/remote failover · ed7beb5e
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  ed7beb5e
Nov 04, 2021
- zonemd: option to systematicly remove · a743bc8b
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  a743bc8b
Nov 03, 2021
- DS push: fix querying parent SOA if CNAME present at non-terminal · 17d20d8d
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  17d20d8d
Nov 01, 2021
- catalog: verify corectness before interpret · 58332b19
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  58332b19
Oct 21, 2021
- ZONEMD: fixed and refactored handling without DNSSEC · 2ad9d785
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  2ad9d785
Oct 13, 2021
- tests-extra: ensure reproducible test starts at the beginning of a second · de410190
  Daniel Salzman authored 3 years ago
  
  de410190
Oct 06, 2021
- offlineKSK: take DNSKEY TTL from KSR · bdc0c889
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  bdc0c889
- dnssec (offlineKSK): RRSIG validation does not count with rrsig-refresh... · 6e83d7a1
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  ... this removes the need for equal configuration of offline ksk sides
  6e83d7a1
Oct 01, 2021
- tests: make flags. zone readable by bind · 0add2400
  Libor Peltan authored 3 years ago
  
  0add2400
Sep 30, 2021
- nameserver: dont put additionals induced by additionals · 60632709
  Libor Peltan authored 3 years ago
  
  60632709
- tests: fix occasional fail due to timing · ca9852bd
  Libor Peltan authored 3 years ago
  
  ca9852bd
Sep 29, 2021
- svcb: put nsec covering missing glue if some exist · 96d7a9c6
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  96d7a9c6
- svcb: put targeted svcb into additionals · 6417f030
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  6417f030
- svcb/https: as regular optional glue with rrsig · 0cc65583
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  0cc65583
Sep 22, 2021
- kjournalprint: take path to journal from configuration · 3cbcb283
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  3cbcb283
- keymgr: rename -d param to -D · d06a8817
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  d06a8817
- Revert "keymgr: new -D param instead of deprecated -d" · f4248636
  Daniel Salzman authored 3 years ago
  
  This reverts commit 29decc3e.
  f4248636
Sep 07, 2021
- dnssec: configurable period before deleting deleted keys · c224af22
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  c224af22
Sep 06, 2021
- zonemd: reflect changes in configuration when reloaded · b021320b
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  b021320b
- zonemd: create hash and bump serial when turned on · e10a760d
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  e10a760d
Sep 05, 2021
- keymgr: new -D param instead of deprecated -d · 29decc3e
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  29decc3e
Sep 01, 2021
- dnssec-validate: also verify that ent over non-opt-outed deleg is not opt-outed 2 · 4a2c9ed8
  Libor Peltan authored 3 years ago
  
  4a2c9ed8
Aug 31, 2021
- bugfix: fix answering with opt-outed NSEC3 on empty-non-terminal · 1a22a8a4
  Libor Peltan authored 3 years ago and Daniel Salzman committed 3 years ago
  
  1a22a8a4
Aug 19, 2021

fix: store master serial once on-slave-signing turned on... · 41922911

Libor Peltan authored 3 years ago

...in case the zone had been XFRed before, the master serial
was not stored and after local signing, it was doomed

41922911

Aug 09, 2021
- catalog: document that all zones are reloaded upon catz update · d7698815
  Libor Peltan authored 3 years ago
  
  d7698815
- catalog: avoid opening catalogDB from worker threads... · c850b288
  Libor Peltan authored 3 years ago
  
  ...in case of concurrency, it might lead to server crash on startup this way, catalogDB is only opened from main thread in advance
  c850b288

Admin message