Matthijs Mekking 2710d9a11d Add built-in dnssec-policy "insecure" ... Add a new built-in policy "insecure", to be used to gracefully unsign a zone. Previously you could just remove the 'dnssec-policy' configuration from your zone statement, or remove it. The built-in policy "none" (or not configured) now actually means no DNSSEC maintenance for the corresponding zone. So if you immediately reconfigure your zone from whatever policy to "none", your zone will temporarily be seen as bogus by validating resolvers. This means we can remove the functions 'dns_zone_use_kasp()' and 'dns_zone_secure_to_insecure()' again. We also no longer have to check for the existence of key state files to figure out if a zone is transitioning to insecure.		2021-04-30 11:18:38 +02:00
..
include	Add built-in dnssec-policy "insecure"	2021-04-30 11:18:38 +02:00
rdata	Update ZONEMD to match RFC 8976	2021-04-30 10:43:37 +10:00
tests	Update ZONEMD to match RFC 8976	2021-04-30 10:43:37 +10:00
win32	Add built-in dnssec-policy "insecure"	2021-04-30 11:18:38 +02:00
.gitignore	4394. [func] Add rndc command "dnstap-reopen" to close and	2016-06-24 09:37:04 +10:00
acl.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
adb.c	Simplify the EDNS buffer size logic for DNS Flag Day 2020	2020-10-05 16:21:21 +02:00
badcache.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
byaddr.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
cache.c	Remove the option 'cleaning-interval'	2021-01-19 10:12:40 +01:00
callbacks.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
catz.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
client.c	properly initialise resarg->lock	2021-04-19 14:32:40 +10:00
clientinfo.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
compress.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
db.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00
dbiterator.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
diff.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
dispatch.c	Silence cppcheck 2.2 false positive in udp_recv()	2020-11-25 12:45:47 +01:00
dlz.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00
dns64.c	add dns_dns64_findprefix	2020-11-25 08:25:29 +11:00
dnsrps.c	Add stale-refresh-time option	2020-11-11 12:53:23 -03:00
dnssec.c	Purge keys implementation	2021-02-23 09:16:48 +01:00
dnstap.c	Address theoretical resource leak in dns_dt_open()	2021-02-22 12:22:31 +11:00
dnstap.proto	fix spelling errors reported by Fossies.	2020-02-21 15:05:08 +11:00
ds.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
dst_api.c	Move most of the OpenSSL initialization to isc_tls	2021-02-18 19:33:54 +01:00
dst_internal.h	Move most of the OpenSSL initialization to isc_tls	2021-02-18 19:33:54 +01:00
dst_openssl.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
dst_parse.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
dst_parse.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
dst_pkcs11.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
dst_result.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
dyndb.c	Use libuv's shared library handling capabilities	2020-10-28 15:48:58 +01:00
ecs.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
fixedname.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
forward.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00
gen-unix.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
gen-win32.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
gen.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
geoip2.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
gssapi_link.c	Stop including gssapi.h from dst/gssapi.h header	2021-02-16 01:04:46 +00:00
gssapictx.c	Free resources when gss_accept_sec_context() fails	2021-04-08 10:33:44 +02:00
hmac_link.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
ipkeylist.c	implement xfrin via XoT	2021-01-29 12:07:38 +01:00
iptable.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
journal.c	Refactor dns_journal_rollforward() to work over opened journal	2021-04-16 12:04:06 +02:00
kasp.c	Add purge-keys config option	2021-02-23 09:16:48 +01:00
key.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
keydata.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
keymgr.c	Check for keyid conflicts between new keys	2021-04-26 10:42:46 +02:00
keytable.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00
lib.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
log.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
lookup.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
Makefile.am	remove lib/dns/gen when running 'make clean'	2021-04-07 08:06:49 +10:00
master.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
masterdump.c	Use stale TTL as RRset TTL in dumpdb	2021-04-13 09:48:20 +02:00
message.c	Check that sig0 name is the root.	2020-09-30 13:24:29 +00:00
name.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
ncache.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
nsec.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
nsec3.c	Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure	2021-04-29 13:43:40 +02:00
nta.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00
openssl_link.c	Use library constructor/destructor to initialize OpenSSL	2021-02-18 19:33:54 +01:00
openssldh_link.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
opensslecdsa_link.c	Make opensslecdsa_parse use fromlabel	2021-01-26 15:01:26 +01:00
openssleddsa_link.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
opensslrsa_link.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
order.c	Allow "order none" in "rrset-order" rules	2020-10-02 08:41:43 +02:00
peer.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
pkcs11.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
pkcs11ecdsa_link.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
pkcs11eddsa_link.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
pkcs11rsa_link.c	Fix misplaced declaration	2020-12-01 10:46:58 +11:00
private.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rbt.c	Reformat sources using clang-format-11	2020-12-08 18:36:23 +01:00
rbtdb.c	Address inconsistencies in checking added RRsets	2021-04-29 10:30:00 +02:00
rbtdb.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rcode.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rdata.c	Make calling generic rdata methods consistent	2021-03-26 22:04:42 +00:00
rdatalist.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rdatalist_p.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rdataset.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rdatasetiter.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rdataslab.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
request.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
resolver.c	Bump the maximum number of hazard pointers in tests	2021-02-18 19:32:55 +01:00
result.c	Add NSEC3PARAM unit test, refactor zone.c	2020-11-26 10:43:59 +01:00
rootns.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rpz.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00
rriterator.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
rrl.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
sdb.c	Add stale-refresh-time option	2020-11-11 12:53:23 -03:00
sdlz.c	Add stale-refresh-time option	2020-11-11 12:53:23 -03:00
soa.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
ssu.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
ssu_external.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
stats.c	Update comments to have binary notation	2020-09-29 10:36:07 +10:00
tcpmsg.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
time.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
timer.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
tkey.c	Stop including gssapi.h from dst/gssapi.h header	2021-02-16 01:04:46 +00:00
transport.c	refactor outgoing HTTP connection support	2021-03-05 13:29:26 +02:00
tsec.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
tsig.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00
tsig_p.h	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
ttl.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
update.c	Add built-in dnssec-policy "insecure"	2021-04-30 11:18:38 +02:00
validator.c	Mark DNSSEC responses with NSEC3 records that exceed 150 as insecure	2021-04-29 13:43:40 +02:00
view.c	Initialize checknames field in dns_view_create()	2021-02-23 16:08:13 +01:00
xfrin.c	Check SOA owner names in zone transfers	2021-04-29 10:30:00 +02:00
zone.c	Add built-in dnssec-policy "insecure"	2021-04-30 11:18:38 +02:00
zone_p.h	Add NSEC3PARAM unit test, refactor zone.c	2020-11-26 10:43:59 +01:00
zonekey.c	update all copyright headers to eliminate the typo	2020-09-14 16:20:40 -07:00
zoneverify.c	Optimise dnssec-verify	2021-01-28 11:07:03 +11:00
zt.c	Cleanup redundant isc_rwlock_init() result checks	2021-02-03 12:22:33 +11:00