Commits · 1e16efe4b6d3ab9088f67959473892ae8f8e663f · Kamil Sopko / Knot DNS

Oct 28, 2013
- Add missing lock. · 1e16efe4
  Jan Kadlec authored 11 years ago
  
  1e16efe4
Oct 23, 2013
- DNSSEC: fix loading of ECDSA public key · ec3f2749
  Jan Včelák authored 11 years ago
```
closes #210
```
  ec3f2749
Oct 18, 2013
- DNSSEC: reuse RR set signing code for SIG(0) · 178c64e8
  Jan Včelák authored 11 years ago
  
  178c64e8
- DNSSEC: enable ECDSA with OpenSSL 1.0.1 and higher · 65c7147e
  Jan Včelák authored 11 years ago
  
  65c7147e
- DNSSEC: fix memory leak when verifying ECDSA signature · 6f15a79c
  Jan Včelák authored 11 years ago
  
  6f15a79c
- DNSSEC: fix leaks when assigning private ECDSA key · 4d142c45
  Jan Včelák authored 11 years ago
  
  4d142c45
Oct 17, 2013
- zone-sign: fix assertation fault if NSEC is used · 185fe11b
  Jan Včelák authored 11 years ago
  
  185fe11b
Oct 16, 2013
- update zone_tree_apply calls to use new interface · 6827438c
  Jan Včelák authored 11 years ago
```
refs #181
```
  6827438c
- DNSSEC: simplify signatures expiration detection · 72b5502b
  Jan Včelák authored 11 years ago
```
refs #4, #189
```
  72b5502b
- TODO reply · 990b7c83
  Jan Včelák authored 11 years ago
  
  990b7c83
- DNSSEC: Moved DNSSEC-only related function to zone-sign.h · 8307388d
  Jan Kadlec authored 11 years ago
  
  8307388d
Oct 14, 2013
- DNSSEC: add thread cleanup function · 3e67d70d
  Jan Včelák authored 11 years ago
```
Resolves missing reachable leaks in OpenSSL.

refs #4
```
  3e67d70d
- Dbg message added. · dea6e697
  Jan Kadlec authored 11 years ago
  
  dea6e697
Oct 12, 2013

DNSSEC: fix keytag calculation for in-zone keys · a4daa62d
Jan Včelák authored 11 years ago
```
(Also fixes invalid read reported by Valgrind.)

refs #4
```
a4daa62d

DNSSEC: backend library cleanup function, register using atexit() · ff3b098e

Jan Včelák authored 11 years ago

Fixes some still-reachable memory leaks. The function should be
called upon termination by all tools dealing with crypto (currently
knotd, knsec3hash, and knsupdate).

refs #4

ff3b098e

DDNS/DNSSEC: Leak fix, small fixes. · 3c581229

Jan Kadlec authored 11 years ago

 - Do not copy SOA with RRSIG, it will be dropped anyway.
 - Small code improvements, assertion added.

Refs #4

3c581229

Oct 11, 2013
- make all include paths relative to /src · 06c53cf5
  Jan Včelák authored 11 years ago
  
  06c53cf5
- DNSSEC: correctly sign DNSKEY set with unknown keys · 314dcea7
  Jan Včelák authored 11 years ago
```
refs #4, #183
```
  314dcea7
Oct 10, 2013
- DNSSEC: fixed NSEC node skipping. · 0ed9451d
  Jan Kadlec authored 11 years ago
```
- Would create an extra NSEC in special cases

Refs #4
```
  0ed9451d
- DNSSEC: leak fix, close file handle after loading the key · 07e641d1
  Jan Včelák authored 11 years ago
```
refs #4
```
  07e641d1
- DNSSEC: leak fix, free public key RDATA in key parameters · d18f3ad4
  Jan Včelák authored 11 years ago
```
refs #4
```
  d18f3ad4
- DNSSEC: do not create NSEC3 nodes for glues. · 454d5dc0
  Jan Kadlec authored 11 years ago
  
  454d5dc0
Oct 09, 2013
- DNSSEC: do not add RRSIG to NSEC3 bitmap if not needed. · 862c7095
  Jan Kadlec authored 11 years ago
```
- Function that checks whether RR should be signed moved to node.h (made most sense)

Refs #4
```
  862c7095
- DNSSEC: fixed wrong condition for signing. · df8bf5f2
  Jan Kadlec authored 11 years ago
```
Refs #4
```
  df8bf5f2
- key: fix OpenBSD warning - missing include · a068c7e6
  Daniel Salzman authored 11 years ago
  
  a068c7e6
- DNSSEC: refactor create_nsec3_owner() and add tests · 1ef7c7c2
  Jan Včelák authored 11 years ago
```
refs #4, #180
```
  1ef7c7c2
Oct 08, 2013
- DNSSEC: use zone diff when deleting NSEC3 chain · 1f2f8a9c
  Jan Včelák authored 11 years ago
```
refs #4
```
  1f2f8a9c
- DNSSEC: delete NSEC3 chain when switching back to NSEC · 4e1f28aa
  Jan Včelák authored 11 years ago
```
Prior this commit, NSEC3 nodes were kept in the zone when NSEC3PARAM
RR was removed.

refs #4
```
  4e1f28aa
- Moved node to NSEC3 connecting to node adjusting. · 5a3bb649
  Lubos Slovak authored 11 years ago
```
Saves one iteration over the zone + properly sets NSEC3 references
when disabling NSEC3.

refs #4
```
  5a3bb649
Oct 07, 2013
- Simplified previous fix. · 29d8cc03
  Lubos Slovak authored 11 years ago
  
  29d8cc03
- Fixed setting NSEC3 node ref in adjusting. · 6c5dd5b6
  Lubos Slovak authored 11 years ago
  
  6c5dd5b6
Oct 04, 2013
- DNSSEC: support for ECDSA validation · 3107c34b
  Jan Včelák authored 11 years ago
```
refs #4
```
  3107c34b
Oct 03, 2013
- DNSSEC: keep unknown DNSKEY RRs in the zone · 4518abbb
  Jan Včelák authored 11 years ago
```
ref #4
```
  4518abbb
Oct 01, 2013
- Config: add option for signature lifetime. · 7a6f3457
  Lubos Slovak authored 11 years ago
```
refs #4, #169
```
  7a6f3457
Sep 30, 2013
- DNSSEC: check snprintf() result when constructing key filename · 6c06da20
  Jan Včelák authored 11 years ago
```
CID: 1086906
```
  6c06da20
- DNSSEC: assert key names are present when writing RRSIG RDATA · c5661dda
  Jan Včelák authored 11 years ago
```
CID: 1091462 1091461
```
  c5661dda
- DNSSEC: assert dname owner is present when creating NSEC RR set · 07cd9b80
  Jan Včelák authored 11 years ago
```
Therefore knot_dname_size() return non-negative value.

CID: 1091463
```
  07cd9b80
- DNSSEC: fix leak in remove_expired_rrsigs() on error recovery · 0d19d792
  Jan Včelák authored 11 years ago
```
CID: 1091464
```
  0d19d792
- possible array negative index access in rr_already_signed() · db583498
  Jan Včelák authored 11 years ago
```
CID: 1094068
```
  db583498
Sep 26, 2013
- zone-nsec: fix header extension in include · b34c6820
  Jan Včelák authored 11 years ago
  
  b34c6820

Admin message

Admin message