Ondřej Surý 5e10fdc295 Implement RFC 3645 Section 4.1.1 key expiry check in TKEY ... Check for existing non-expired TSIG keys before accepting a new GSS-API negotiation. Per RFC 3645 Section 4.1.1: - If a key exists and has not expired, reject with BADNAME - If a key exists but has expired, delete it and start fresh Previously, an expired GSS key would permanently block re-negotiation for that name until the server was restarted. Use BADKEY rather than BADNAME to avoid creating an oracle for key name enumeration by unauthenticated attackers.		2026-04-01 07:04:39 +02:00
..
dns	Implement RFC 3645 Section 4.1.1 key expiry check in TKEY	2026-04-01 07:04:39 +02:00
isc	include <sys/endian.h> according by checking in meson	2026-03-31 16:06:37 +03:00
isccc	switch isc_md_type_t to a proper enum	2026-02-02 11:12:55 +03:00
isccfg	Remove NZF support, make LMDB required for new zone storage	2026-03-18 11:02:33 +01:00
ns	Remove node and db pointer from dns_rdataset_t.vec	2026-03-31 16:22:56 +02:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
meson.build	replace the build system with meson	2025-06-11 10:30:12 +03:00