wt/dnsmasq
1
0 Fork 0
mirror of http://thekelleys.org.uk/git/dnsmasq.git synced 2026-11-13 17:00:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,675 Commits 1 Branch 397 Tags
023ace8e54c2e83e88082a1073a281d659f2a860
Commit Graph
6 Commits
Author SHA1 Message Date
Simon Kelley 20295012b8 Fix possible free-memory ref in e75069f79a 2021-01-24 22:25:13 +00:00
Simon Kelley a69b017902 Change HAVE_NETTLEHASH compile-time to HAVE_CRYPTOHASH. 
HAVE_NETTLEHASH is retained for backwards compatibility, but deprecated.
 2021-01-24 21:53:28 +00:00
Simon Kelley e75069f79a Tidy initialisation in hash_questions.c 2021-01-22 22:50:25 +00:00
Simon Kelley 503f68dbc4 Fix warning message logic. 2021-01-15 21:53:29 +00:00
Petr Menšík 2024f97297 Support hash function from nettle (only) 
Unlike COPTS=-DHAVE_DNSSEC, allow usage of just sha256 function from
nettle, but keep DNSSEC disabled at build time. Skips use of internal
hash implementation without support for validation built-in.
 2020-12-16 15:49:03 +00:00
Simon Kelley 2d765867c5 Use SHA-256 to provide security against DNS cache poisoning. 
Use the SHA-256 hash function to verify that DNS answers
received are for the questions originally asked. This replaces
the slightly insecure SHA-1 (when compiled with DNSSEC) or
the very insecure CRC32 (otherwise). Refer: CERT VU#434904.
 2020-12-16 15:49:02 +00:00