Commits · b6d2d5a2a5d4d765f51271cb46735f14c9308bee · Pavel Spirek / Knot DNS · GitLab

Snippets Groups Projects

GitLab now enforces expiry dates on tokens that originally had no set expiration date. Those tokens were given an expiration date of one year later. Please review your personal access tokens, project access tokens, and group access tokens to ensure you are aware of upcoming expirations. Administrators of GitLab can find more information on how to identify and mitigate interruption in our documentation.

Self sign-up has been disabled due to increased spam activity. If you want to get access, please send an email to a project owner (preferred) or at gitlab(at)nic(dot)cz. We apologize for the inconvenience.

Oct 29, 2018
- doc: offline KSK: improved text · b6d2d5a2
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  b6d2d5a2
- dnssec: get rid of ctx->rollover_only_zsk in favor of KEY_ROLL_ALLOW_ZSK_ROLL · fe117396
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  fe117396
- offline KSK: improved deleting offline records · f48fbe36
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  f48fbe36
- offline KSK: removed in-place offline KSK setup option · ba000c68
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  ba000c68
- offline KSK: major redesign: KSR (only ZSKs) and SKR (DNSKEY, CDS, RRSIG) · 070e5672
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  070e5672
- dnssec: separated function for adding publishable DNSKEY, CDNSKEY, CDS into rrsets · 1e85b91a
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  1e85b91a
- offline KSK: bugfix - check zone belongance of stored RRSIGs · f2f01792
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  f2f01792
- Revert "test offline KSK: modify KASP db when Knot is already running" · 49a6a0ff
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
```
This reverts commit c7f3a4aa554b8f2d5384ce3316ff62e02db015a6.
```
  49a6a0ff
- Revert "offline KSK: feat - sending and signing also CDNSKEY and CDS" · 70e41cac
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
```
This reverts commit 7faf3eafec6774d920e2e87853fc362ed21ada74.
```
  70e41cac
- offline KSK: feat - sending and signing also CDNSKEY and CDS · 1e873072
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  1e873072
- doc: offline ksk: operational manual · 72ae9ca9
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  72ae9ca9
- feature/DNSSEC: offline KSK with server+signer sending KSR+SKR · de1972ff
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  de1972ff
- offline KSK: implement deleting RRSIGs stored in kaspdb · b5b8a8a1
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  b5b8a8a1
- feature/DNSSEC: offline KSK: only with shared kasp db · 0ab9ac45
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  0ab9ac45
- dnssec: separated function for determining cdnskeys · cdbe765d
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  cdbe765d
- tests: keymgr becomes confile instead of kaspdir · e7fe8562
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  e7fe8562
- keymgr: feature: deleting old keys in "removed" state · 93dc23a5
  Libor Peltan authored 6 years ago and Mark Karpilovskij committed 6 years ago
  
  93dc23a5
- bugfix/load: don't overwrite zone-in-journal on reload when journal ignored · 5d8d399d
  Libor Peltan authored 6 years ago
  
  5d8d399d
- Merge branch 'retire_time_from_ds_ttl' into 'master' · 82bb4e88
  Daniel Salzman authored 6 years ago
```
Retire time from ds ttl

Closes #617

See merge request !943
```
  82bb4e88
- DS query: don't ask other addrs if first returned negative · 95f01af4
  Libor Peltan authored 6 years ago
  
  95f01af4
- doc: key retire from DS TTL · 0e55e362
  Libor Peltan authored 6 years ago
  
  0e55e362
Oct 27, 2018
- onlinesign: don't ignore planned changes in keys timers · a1438e9a
  Libor Peltan authored 6 years ago and Daniel Salzman committed 6 years ago
  
  a1438e9a
- dnssec: after DS check, KSK remains active for DS TTL · 48a0046d
  Libor Peltan authored 6 years ago and Daniel Salzman committed 6 years ago
  
  48a0046d
- Merge branch 'keymgr_timers_monotonic' into 'master' · 04a0dad5
  Daniel Salzman authored 6 years ago
```
keymgr: added check that timers make sense

See merge request !944
```
  04a0dad5
Oct 26, 2018
- keymgr: added check that timers make sense · 570b9799
  Libor Peltan authored 6 years ago
  
  570b9799
- update: remove double ACL check · 5b9aa6b7
  Daniel Salzman authored 6 years ago
  
  5b9aa6b7
- libknot/tsig: remove unused structure items · c700eba7
  Daniel Salzman authored 6 years ago
  
  c700eba7
- requestor: code cleanup · 0afdb24c
  Daniel Salzman authored 6 years ago
  
  0afdb24c
- zone: move update enque/deque to update · 84fab142
  Daniel Salzman authored 6 years ago
  
  84fab142
Oct 25, 2018
- tests-extra: add note on unusable libknot with ASAN · 9008ae9f
  Daniel Salzman authored 6 years ago
  
  9008ae9f
- Merge branch 'remove_csk_compatib' into 'master' · 7b5cf7b9
  Daniel Salzman authored 6 years ago
```
dnssec: remove fallback from single KSK to CSK; fix tests

See merge request !942
```
  7b5cf7b9
- dnssec: remove fallback from single KSK to CSK; fix tests · 8e52cd70
  Libor Peltan authored 6 years ago
  
  8e52cd70
Oct 24, 2018
- libknot: remove superfluous function knot_rrset_to_wire_rotate · b267b665
  Daniel Salzman authored 6 years ago
  
  b267b665
- doc: update and unify configuration reference · c6c94164
  Daniel Salzman authored 6 years ago
  
  c6c94164
- Merge branch 'fix_signing_updates' into 'master' · 409b6ced
  Daniel Salzman authored 6 years ago
```
Fix signing updates

See merge request !940
```
  409b6ced
- doc: remove invalid reference · 0b2e57c3
  Daniel Salzman authored 6 years ago
  
  0b2e57c3
- python: add comment about libknot.so loading · c1e844cc
  Daniel Salzman authored 6 years ago
  
  c1e844cc
- dnssec: keep track of newly added rrsig expiration · 10a59d48
  Libor Peltan authored 6 years ago
  
  10a59d48
- dnssec: signing updates not forcedly; re-planning improved · f5a3688b
  Libor Peltan authored 6 years ago
  
  f5a3688b
- Merge branch 'doc-dnsproxy-resolver' into 'master' · 35824c60
  Daniel Salzman authored 6 years ago
```
doc/dnsproxy: describe forwarding to resolver use-case

See merge request !941
```
  35824c60