Wouter Wijngaards
05215e8e7d
- --disable-sha1 disables SHA1 support in RRSIG, so from DNSKEY and
...
DS records. NSEC3 is not disabled.
- fake-sha1 test option; print warning if used. To make unit tests.
git-svn-id: file:///svn/unbound/trunk@4043 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-03-09 13:18:08 +00:00
Wouter Wijngaards
29e96e86c9
- separate ldns into core ldns inside ldns/ subdirectory. No more
...
--with-ldns is needed and unbound does not rely on libldns.
git-svn-id: file:///svn/unbound/trunk@2998 be551aaa-1e26-0410-a405-d3ace91eadb9
2013-10-31 15:09:26 +00:00
Wouter Wijngaards
7359d84e2f
- Fix wildcard expansion no-data reply under an optout NSEC3 zone is
...
validated as insecure, reported by Jia Li (lijia@cnnic.cn ).
git-svn-id: file:///svn/unbound/trunk@2461 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-07-11 09:03:18 +00:00
Wouter Wijngaards
b4a089ff0d
- Fix no ADflag for NXDOMAIN in NSEC3 optout. And wildcard in optout.
...
git-svn-id: file:///svn/unbound/trunk@2397 be551aaa-1e26-0410-a405-d3ace91eadb9
2011-03-01 12:48:45 +00:00
Wouter Wijngaards
c3f180eebb
- Abide RFC5155 section 9.2: no AD flag for replies with NSEC3 optout.
...
git-svn-id: file:///svn/unbound/trunk@2233 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-09-15 07:08:09 +00:00
Wouter Wijngaards
cf19a76bf6
Test that AD flags and NSEC3 optout does what we say.
...
git-svn-id: file:///svn/unbound/trunk@2230 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-09-14 09:11:19 +00:00
