bind9/lib
Matthijs Mekking 6b5d7357df Detect NSEC3 salt collisions
When generating a new salt, compare it with the previous NSEC3
paremeters to ensure the new parameters are different from the
previous ones.

This moves the salt generation call from 'bin/named/*.s' to
'lib/dns/zone.c'. When setting new NSEC3 parameters, you can set a new
function parameter 'resalt' to enforce a new salt to be generated. A
new salt will also be generated if 'salt' is set to NULL.

Logging salt with zone context can now be done with 'dnssec_log',
removing the need for 'dns_nsec3_log_salt'.
2020-11-26 10:43:59 +01:00
..
bind9 Warn if 'stale-refresh-time' < 30 (default) 2020-11-11 12:53:23 -03:00
dns Detect NSEC3 salt collisions 2020-11-26 10:43:59 +01:00
irs Add libssl libraries to Windows build 2020-11-09 16:00:28 +01:00
isc Convert add_quota() to a function 2020-11-25 12:45:47 +01:00
isccc Add libssl libraries to Windows build 2020-11-09 16:00:28 +01:00
isccfg Change nsec3param salt config to saltlen 2020-11-26 10:43:59 +01:00
ns implementation of hook-based asynchronous functionality 2020-11-24 15:11:39 -08:00
samples Add libssl libraries to Windows build 2020-11-09 16:00:28 +01:00
win32/bindevt update all copyright headers to eliminate the typo 2020-09-14 16:20:40 -07:00
.gitignore Provide unit test driver 2020-05-21 12:13:01 +02:00
Makefile.am Complete rewrite the BIND 9 build system 2020-04-21 14:19:48 +02:00
unit-test-driver.sh.in Provide unit test driver 2020-05-21 12:13:01 +02:00