bind9/bin
Artem Boldariev 992f815770 Add "protocols" options to the "tls" clause
This commit adds the ability to specify allowed TLS protocols versions
within the "tls" clause. If an unsupported TLS protocol version is
specified in a file, the configuration file will not pass
verification.

Also, this commit adds strict checks for "tls" clauses verification,
in particular:

- it ensures that loading configuration files containing duplicated
"tls" clauses is not allowed;

- it ensures that loading configuration files containing "tls" clauses
missing "cert-file" or "key-file" is not allowed;

- it ensures that loading configuration files containing "tls" clauses
named as "ephemeral" or "none" is not allowed.
2021-10-01 15:50:43 +03:00
..
check Remove the mastefile-format map option 2021-09-17 07:09:50 +02:00
confgen Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00
delv clean up dns_client API 2021-08-30 08:47:39 +02:00
dig Validate HTTP path passed to dig 2021-09-29 19:42:03 +03:00
dnssec Remove the mastefile-format map option 2021-09-17 07:09:50 +02:00
named Add "protocols" options to the "tls" clause 2021-10-01 15:50:43 +03:00
nsupdate Fix closing brackets in help message 2021-09-15 17:01:00 +10:00
plugins Remove support for external applications to register libisc 2021-08-30 08:47:39 +02:00
rndc Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00
tests Add "protocols" options to the "tls" clause 2021-10-01 15:50:43 +03:00
tools Clean up the dns_dispatch_getudp API 2021-07-09 15:58:02 +02:00
Makefile.am Remove native PKCS#11 support 2021-09-09 15:35:39 +02:00