upstream/unbound
1
0
Fork 0
mirror of https://github.com/NLnetLabs/unbound.git synced 2026-01-30 02:09:28 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
unbound/util
History
Wouter Wijngaards 52e2331dd4 - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 
duplicates
- [dnscrypt] introduce dnscrypt-provider-cert-rotated option,
  from Manu Bretelle.
	This option allows handling multiple cert/key pairs while only
	distributing some of them.
	In order to reliably match a client magic with a given key without
	strong assumption as to how those were generated, we need both key and
	cert. Likewise, in order to know which ES version should be used.
	On the other hand, when rotating a cert, it can be desirable to only
	serve the new cert but still be able to handle clients that are still
	using the old certs's public key.
	The `dnscrypt-provider-cert-rotated` allow to instruct unbound to not
	publish the cert as part of the DNS's provider_name's TXT answer.



git-svn-id: file:///svn/unbound/trunk@4373 be551aaa-1e26-0410-a405-d3ace91eadb9
2017-10-17 07:34:49 +00:00
..
data - Fix param unused warning for windows exportsymbol compile. 2017-10-02 12:24:48 +00:00
shm_side - Fix #1440: [dnscrypt] client nonce cache. 2017-09-18 08:55:08 +00:00
storage - Spelling fixes, from Phil Porada. 2017-09-15 14:29:28 +00:00
alloc.c - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
alloc.h - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
as112.c And document the files. 2016-02-09 13:51:35 +00:00
as112.h And document the files. 2016-02-09 13:51:35 +00:00
config_file.c - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 2017-10-17 07:34:49 +00:00
config_file.h - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 2017-10-17 07:34:49 +00:00
configlexer.c - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 2017-10-17 07:34:49 +00:00
configlexer.lex - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 2017-10-17 07:34:49 +00:00
configparser.c - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 2017-10-17 07:34:49 +00:00
configparser.h - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 2017-10-17 07:34:49 +00:00
configparser.y - [dnscrypt] prevent dnscrypt-secret-key, dnscrypt-provider-cert 2017-10-17 07:34:49 +00:00
configyyrename.h Neater configure and no double config.h includes. 2009-03-24 10:42:57 +00:00
fptr_wlist.c - Fix #1440: [dnscrypt] client nonce cache. 2017-09-18 08:55:08 +00:00
fptr_wlist.h - Added mesh_add_sub to add detached mesh entries. 2017-05-02 13:17:56 +00:00
iana_ports.inc - iana portlist update 2017-08-28 08:29:00 +00:00
locks.c - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
locks.h - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
log.c - Fix #1268: SIGSEGV after log_reopen. 2017-05-22 07:20:59 +00:00
log.h - Fixup compile on cygwin, more portable openssl thread id. 2015-03-16 10:51:32 +00:00
mini_event.c - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
mini_event.h - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
module.c assign cb_arg 2017-04-06 13:47:46 +00:00
module.h - use a cachedb answer even if it's "expired" when serve-expired is yes 2017-09-19 09:08:29 +00:00
net_help.c - Fix #1402: squelch invalid argument error for fd_set_block on windows. 2017-08-21 14:15:32 +00:00
net_help.h - enhancement for hardened-tls for DNS over TLS. Removed duplicated 2017-06-29 11:45:43 +00:00
netevent.c - Spelling fixes, from Phil Porada. 2017-09-15 14:29:28 +00:00
netevent.h and this dnscrypt commit for chacha. 2017-06-08 07:29:06 +00:00
random.c - remove NULL-checks before free, patch from Michael McConville. 2015-12-11 10:26:15 +00:00
random.h And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 2014-02-07 13:28:39 +00:00
rbtree.c fixes for _t changes. 2017-01-19 14:11:59 +00:00
rbtree.h layout. 2017-01-20 16:09:37 +00:00
regional.c And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 2014-02-07 13:28:39 +00:00
regional.h And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings. 2014-02-07 13:28:39 +00:00
rtt.c - infra-cache-min-rtt patch from Florian Riehm, for expected long 2015-02-02 08:46:22 +00:00
rtt.h - spelling fixes from Igor Sobrado Delgado. 2015-11-18 14:11:46 +00:00
timehist.c please lint. 2017-04-13 13:03:38 +00:00
timehist.h - (for 1.6.3:) unbound.h exports the shm stats structures. They use 2017-04-13 12:47:29 +00:00
tube.c - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
tube.h - Fix to rename internally used types from _t to _type, because _t 2017-01-19 10:25:41 +00:00
ub_event.c - Fix incomplete prototypes reported by Dag-Erling Smørgrav. 2016-09-05 07:23:23 +00:00
ub_event.h - Spelling fixes, from Phil Porada. 2017-09-15 14:29:28 +00:00
ub_event_pluggable.c - Fix incomplete prototypes reported by Dag-Erling Smørgrav. 2016-09-05 07:23:23 +00:00
winsock_event.c fixes for _t changes. 2017-01-19 14:11:59 +00:00
winsock_event.h fixes for _t changes. 2017-01-19 14:11:59 +00:00