Wouter Wijngaards
c4c8a65ff2
- fix validation in this case: CNAME to nodata for co-hosted opt-in
...
NSEC3 insecure delegation, was bogus, fixed to be insecure.
git-svn-id: file:///svn/unbound/trunk@2355 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-12-17 10:05:56 +00:00
Wouter Wijngaards
488aee467a
- Fix validation failure for parent and child on same server with an
...
insecure childzone and a CNAME from parent to child.
git-svn-id: file:///svn/unbound/trunk@2321 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-10-29 13:10:26 +00:00
Wouter Wijngaards
c3f180eebb
- Abide RFC5155 section 9.2: no AD flag for replies with NSEC3 optout.
...
git-svn-id: file:///svn/unbound/trunk@2233 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-09-15 07:08:09 +00:00
Wouter Wijngaards
11ecb5183b
review of NSEC and NSEC3 zones results
...
git-svn-id: file:///svn/unbound/trunk@2058 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-22 14:40:45 +00:00
Wouter Wijngaards
091050add6
cache verify work for nsec and nsec3.
...
git-svn-id: file:///svn/unbound/trunk@2047 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-17 09:49:18 +00:00
Wouter Wijngaards
42599b7044
and store sec status
...
git-svn-id: file:///svn/unbound/trunk@2046 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-17 09:27:53 +00:00
Wouter Wijngaards
367c2abbf3
Faster nsec3.
...
git-svn-id: file:///svn/unbound/trunk@2044 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-16 16:52:56 +00:00
Wouter Wijngaards
147d47eee7
Move includes to code files.
...
git-svn-id: file:///svn/unbound/trunk@2035 be551aaa-1e26-0410-a405-d3ace91eadb9
2010-03-12 15:17:48 +00:00
Wouter Wijngaards
a4a7894f79
Fix validation failure cnamenodata proof failed for hud.gov.
...
git-svn-id: file:///svn/unbound/trunk@1902 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-11-13 10:10:05 +00:00
Wouter Wijngaards
7782cf2b97
More detailed errors.
...
git-svn-id: file:///svn/unbound/trunk@1871 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-08 07:23:49 +00:00
Wouter Wijngaards
ce45cbda6d
- moved version number to 1.4.0 because of 1.3.4 release with only
...
the NSEC3 patch.
- val-log-level: 2 shows extended error information for validation
failures, but still one (longish) line per failure. For example:
validation failure <example.com. DNSKEY IN>: signature expired from
192.0.2.4 for trust anchor example.com. while building chain of trust
validation failure <www.example.com. A IN>: no signatures from
192.0.2.6 for key example.com. while building chain of trust
git-svn-id: file:///svn/unbound/trunk@1868 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-07 16:45:47 +00:00
Wouter Wijngaards
6f37df3b92
Fix trunk.
...
git-svn-id: file:///svn/unbound/trunk@1866 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-07 14:00:56 +00:00
Wouter Wijngaards
1a02ab895b
Fix check for signatures.
...
git-svn-id: file:///svn/unbound/trunk@1864 be551aaa-1e26-0410-a405-d3ace91eadb9
2009-10-07 12:56:57 +00:00
Wouter Wijngaards
0d01be50bc
detection of sha256 and sha512 by testing if functionality was compiled
...
into openssl.
git-svn-id: file:///svn/unbound/trunk@1328 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-03 16:06:12 +00:00
Wouter Wijngaards
7176710b7f
Fixup b32 compat for Mac OSX linker.
...
git-svn-id: file:///svn/unbound/trunk@1323 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-11-03 14:38:03 +00:00
Wouter Wijngaards
c73c662fce
work on nsec3 negative cache for qtype DS .
...
git-svn-id: file:///svn/unbound/trunk@1290 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-10-08 14:42:46 +00:00
Wouter Wijngaards
0bdfbccbdc
please doxygen.
...
git-svn-id: file:///svn/unbound/trunk@898 be551aaa-1e26-0410-a405-d3ace91eadb9
2008-01-25 10:41:17 +00:00
Wouter Wijngaards
6f49c2fe55
regional nicer, remove region-allocator.
...
git-svn-id: file:///svn/unbound/trunk@697 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-10-18 20:31:43 +00:00
Wouter Wijngaards
0f7ced491e
NSEC3 test and fix for bitmap protection code.
...
git-svn-id: file:///svn/unbound/trunk@637 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-25 08:33:14 +00:00
Wouter Wijngaards
c4392dd54c
wildcard nsec3 tests.
...
git-svn-id: file:///svn/unbound/trunk@618 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-18 08:28:35 +00:00
Wouter Wijngaards
748bfb0b0e
more nsec3 tests.
...
git-svn-id: file:///svn/unbound/trunk@617 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-17 14:52:14 +00:00
Wouter Wijngaards
6510d8f20a
namerror nsec3 proof works.
...
git-svn-id: file:///svn/unbound/trunk@616 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-17 14:03:35 +00:00
Wouter Wijngaards
c7d15770c1
nsec3 hash function unit test.
...
git-svn-id: file:///svn/unbound/trunk@615 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-17 09:25:54 +00:00
Wouter Wijngaards
7987b687dc
NSEC3.
...
git-svn-id: file:///svn/unbound/trunk@613 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-14 11:15:42 +00:00
Wouter Wijngaards
92198b3624
if no NSEC3 present, skip validation.
...
git-svn-id: file:///svn/unbound/trunk@611 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:09:58 +00:00
Wouter Wijngaards
facde2ca10
nsec3 work, prove name error.
...
git-svn-id: file:///svn/unbound/trunk@610 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-13 15:02:33 +00:00
Wouter Wijngaards
d85debfae4
nsec3 work.
...
git-svn-id: file:///svn/unbound/trunk@609 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-12 14:16:46 +00:00
Wouter Wijngaards
26f9ea8942
nsec3 work.
...
git-svn-id: file:///svn/unbound/trunk@607 be551aaa-1e26-0410-a405-d3ace91eadb9
2007-09-11 18:18:16 +00:00