Commit Graph

Select branches

Hide Pull Requests

master

v2.0

v2.1

v2.10

v2.11

v2.12

v2.13

v2.14

v2.15

v2.16

v2.17

v2.18

v2.19

v2.2

v2.20

v2.21

v2.22

v2.23

v2.24

v2.25

v2.26

v2.27

v2.28

v2.29

v2.3

v2.30

v2.31

v2.32

v2.33

v2.34

v2.35

v2.36

v2.37

v2.38

v2.39

v2.4

v2.40

v2.41

v2.42

v2.43

v2.44

v2.45

v2.46

v2.47

v2.48

v2.49

v2.5

v2.50

v2.51

v2.52

v2.53

v2.55

v2.56

v2.57

v2.58

v2.59

v2.6

v2.60

v2.60rc1

v2.60rc2

v2.60rc3

v2.60rc4

v2.60rc5

v2.60test10

v2.60test11

v2.60test12

v2.60test13

v2.60test14

v2.60test15

v2.60test16

v2.60test17

v2.60test18

v2.60test7

v2.60test8

v2.60test9

v2.61

v2.61rc1

v2.61rc2

v2.61rc3

v2.61rc4

v2.61test10

v2.61test11

v2.61test2

v2.61test3

v2.61test4

v2.61test5

v2.61test6

v2.61test7

v2.61test8

v2.61test9

v2.62

v2.62rc1

v2.62rc2

v2.62rc3

v2.62test1

v2.62test2

v2.62test3

v2.62test4

v2.63

v2.63rc1

v2.63rc2

v2.63rc3

v2.63rc4

v2.63rc5

v2.63rc6

v2.63test1

v2.63test2

v2.63test3

v2.64

v2.64rc1

v2.64rc2

v2.64rc3

v2.64test1

v2.64test2

v2.64test3

v2.64test4

v2.64test5

v2.64test6

v2.64test7

v2.65

v2.65test1

v2.65test2

v2.65test3

v2.65test4

v2.66

v2.66rc1

v2.66rc2

v2.66rc3

v2.66rc4

v2.66rc5

v2.66test1

v2.66test10

v2.66test11

v2.66test12

v2.66test13

v2.66test14

v2.66test15

v2.66test16

v2.66test17

v2.66test18

v2.66test19

v2.66test2

v2.66test20

v2.66test21

v2.66test22

v2.66test23

v2.66test3

v2.66test4

v2.66test5

v2.66test6

v2.66test7

v2.66test8

v2.66test9

v2.67

v2.67rc1

v2.67rc2

v2.67rc3

v2.67rc4

v2.67test1

v2.67test10

v2.67test11

v2.67test12

v2.67test13

v2.67test14

v2.67test15

v2.67test16

v2.67test17

v2.67test18

v2.67test2

v2.67test3

v2.67test4

v2.67test5

v2.67test6

v2.67test7

v2.67test8

v2.67test9

v2.68

v2.68rc1

v2.68rc2

v2.68rc3

v2.68rc4

v2.68rc5

v2.68test1

v2.68test2

v2.69

v2.69rc1

v2.69rc2

v2.69rc3

v2.69rc4

v2.69test1

v2.69test10

v2.69test11

v2.69test2

v2.69test3

v2.69test4

v2.69test5

v2.69test6

v2.69test7

v2.69test8

v2.69test9

v2.7

v2.70

v2.71

v2.71test1

v2.71test2

v2.72

v2.72rc1

v2.72rc2

v2.72test1

v2.72test2

v2.72test3

v2.73

v2.73rc1

v2.73rc10

v2.73rc2

v2.73rc3

v2.73rc4

v2.73rc5

v2.73rc6

v2.73rc7

v2.73rc8

v2.73rc9

v2.73test1

v2.73test2

v2.73test3

v2.73test4

v2.73test5

v2.73test6

v2.74

v2.74rc1

v2.74rc2

v2.74rc3

v2.74rc4

v2.74test1

v2.74test2

v2.75

v2.76

v2.76rc1

v2.76rc2

v2.76test1

v2.76test10

v2.76test11

v2.76test12

v2.76test13

v2.76test2

v2.76test3

v2.76test4

v2.76test5

v2.76test6

v2.76test7

v2.76test8

v2.76test9

v2.77

v2.77rc1

v2.77rc2

v2.77rc3

v2.77rc4

v2.77rc5

v2.77test1

v2.77test2

v2.77test3

v2.77test4

v2.77test5

v2.78

v2.78test1

v2.78test2

v2.79

v2.79rc1

v2.79rc2

v2.79test1

v2.8

v2.80

v2.80rc1

v2.80test1

v2.80test2

v2.80test3

v2.80test4

v2.80test5

v2.80test6

v2.80test7

v2.80test8

v2.81

v2.81rc1

v2.81rc2

v2.81rc3

v2.81rc4

v2.81rc5

v2.82

v2.82rc1

v2.82test1

v2.83

v2.83test1

v2.84

v2.84rc1

v2.84rc2

v2.84test1

v2.84test2

v2.84test3

v2.85

v2.85rc1

v2.85rc2

v2.85rc3

v2.86

v2.86rc1

v2.86rc2

v2.86rc3

v2.86test1

v2.86test2

v2.86test3

v2.86test4

v2.86test5

v2.86test6

v2.86test7

v2.87

v2.87rc1

v2.87test1

v2.87test2

v2.87test3

v2.87test4

v2.87test5

v2.87test6

v2.87test7

v2.87test8

v2.87test9

v2.88

v2.88rc1

v2.88rc2

v2.88rc3

v2.88rc4

v2.88rc5

v2.88test1

v2.88test2

v2.88test3

v2.89

v2.89test1

v2.9

v2.90

v2.90deb2

v2.90test1

v2.90test2

v2.90test3

v2.90test4

v2.91

v2.91rc1

v2.91rc2

v2.91rc3

v2.91rc4

v2.91rc5

v2.91rc6

v2.91test1

v2.91test10

v2.91test2

v2.91test4

v2.91test5

v2.91test6

v2.91test7

v2.91test8

v2.91test9

v2.92

v2.92rc1

v2.92rc2

v2.92rc3

v2.92test1

v2.92test10

v2.92test11

v2.92test12

v2.92test13

v2.92test14

v2.92test15

v2.92test16

v2.92test17

v2.92test18

v2.92test19

v2.92test2

v2.92test20

v2.92test21

v2.92test22

v2.92test3

v2.92test4

v2.92test5

v2.92test6

v2.92test7

v2.92test8

v2.92test9

v2.93

v2.93rc1

v2.93rc2

v2.93rc3

v2.93test1

v2.93test10

v2.93test2

v2.93test3

v2.93test4

v2.93test5

v2.93test6

v2.93test7

v2.93test8

v2.93test9

Mono Color

• f2e4c277c4 Bugfix for last commit. Simon Kelley 2014-02-23 15:24:26 +00:00
• 5107ace14a NSEC3 validation. First pass. Simon Kelley 2014-02-23 10:48:32 +00:00
• 7b1eae4f50 Add --servers-file option. Simon Kelley 2014-02-20 13:43:28 +00:00
• c152dc8492 Omit ECC from DNSSEC if nettle library is old. Simon Kelley 2014-02-19 18:14:33 +00:00
• 7bcca0060f More server cleanup. Simon Kelley 2014-02-19 17:45:17 +00:00
• d68c2ca2b7 Cleanup of server reading code, preparation, for dynamic reading from files. Simon Kelley 2014-02-18 22:30:30 +00:00
• de73a497ca --rev-server option. Syntactic sugar for PTR queries. Simon Kelley 2014-02-17 21:43:27 +00:00
• e3ec15af10 Log BOGUS validation result when upstream sends SERVFAIL. Simon Kelley 2014-02-13 16:56:30 +00:00
• dac74312da TYpo. Simon Kelley 2014-02-13 16:43:49 +00:00
• 2ecd9bd5c0 No CD in forwarded queries unless dnssec-debug for TCP too. Simon Kelley 2014-02-13 16:42:02 +00:00
• a0ab18f6eb Don't mess with the TTL of DNSSEC RRs. Simon Kelley 2014-02-13 16:38:23 +00:00
• ebe95a831f Add RFC-6605 ECDSA DNSSEC verification. Simon Kelley 2014-02-13 14:56:10 +00:00
• ee4158678a Use DS records as trust anchors, not DNSKEYs. v2.69test8 Simon Kelley 2014-02-11 11:07:22 +00:00
• 83349b8aa4 Further tidying of AD and DO bit handling. Simon Kelley 2014-02-10 21:02:01 +00:00
• 7fa836e105 Handle validation when more one key is needed. Simon Kelley 2014-02-10 20:11:24 +00:00
• 1633e30834 Fix Byte-order botch: broke DNSSEC on big-endian platforms. Simon Kelley 2014-02-10 16:42:46 +00:00
• c8ca33f810 Fix DNSSEC caching problems: incomplete RRSIG RRsets. Simon Kelley 2014-02-10 10:35:42 +00:00
• e243c072b5 AD bit in queries handled as RFC6840 p5.7 Simon Kelley 2014-02-06 18:14:09 +00:00
• da4f372271 Add trust-anchors file to Debian package. v2.69test7 Simon Kelley 2014-02-06 15:21:37 +00:00
• 610e782a29 Fix stack-smashing crash in DNSSEC. Thanks to Henk Jan Agteresch. Simon Kelley 2014-02-06 14:45:17 +00:00
• 854cf26907 DNSSEC config in example file. Simon Kelley 2014-02-06 12:07:10 +00:00
• bb201c211a Protect against malicious DNS replies with very large RRsets. Simon Kelley 2014-02-06 12:01:05 +00:00
• 12fae49fff Make RR work when returning A/AAAA records and an RRSIG. Simon Kelley 2014-02-04 22:03:06 +00:00
• fd372273bd Updated version of contrib/try-all-ns v2.69test6 Jesse Glick 2014-02-04 20:20:35 +00:00
• b98d22c191 Linking stuff. Latest Debian/Ubuntu don't automatically link gmp. Simon Kelley 2014-02-04 16:57:25 +00:00
• 160f6507c3 Make DNSEC default, add build-depends for same, bump version. Simon Kelley 2014-02-04 16:49:41 +00:00
• 613d6c5249 CHANGLEOG for DNSSEC. v2.69test5 Simon Kelley 2014-02-04 11:50:11 +00:00
• 81a883fda3 Format tweak. v2.69test4 Simon Kelley 2014-02-03 21:17:04 +00:00
• 40b695c1f1 Log NXDOMAIN correctly. Simon Kelley 2014-02-03 17:07:51 +00:00
• 5f938534a9 Return configured DNSKEYs even though we don't have RRSIGS for them. Simon Kelley 2014-02-03 16:44:32 +00:00
• 8d718cbb3e Nasty cache failure and memory leak with DNSSEC. Simon Kelley 2014-02-03 16:27:37 +00:00
• f6a2b79310 Validate Ooops. Simon Kelley 2014-02-01 14:54:26 +00:00
• 82e3f45a9f Blockdata fixes and tuning. Simon Kelley 2014-01-31 21:05:48 +00:00
• 072e81b3c5 Blockdata leak. Simon Kelley 2014-01-31 12:42:54 +00:00
• 1d97ac4fd2 copy-n-paste error. Simon Kelley 2014-01-31 11:12:27 +00:00
• db73746620 Anounce DNSSEC at startup. Simon Kelley 2014-01-31 10:32:45 +00:00
• 97bc798b05 Init ->dependent field in frec allocation. Simon Kelley 2014-01-31 10:19:52 +00:00
• edc231bc58 Compiler warning. Simon Kelley 2014-01-31 09:52:50 +00:00
• b85e092e23 Add a file containing current root trust anchors, for convenience. Simon Kelley 2014-01-30 09:49:28 +00:00
• 583043f527 Crash in cache code when compiled with HAVE_DNSSEC. Simon Kelley 2014-01-28 14:54:46 +00:00
• 8f6213cce9 Allow use of COPTS in Debian rules invokation for nefarious purposes. Simon Kelley 2014-01-28 11:16:49 +00:00
• 00ec693db8 Debian package with DNSSEC now possible. Simon Kelley 2014-01-28 11:08:57 +00:00
• 70b4a818ef Man page entries for DNSSEC flags. Simon Kelley 2014-01-27 22:38:48 +00:00
• 7c28612a59 Trivial format fix. Simon Kelley 2014-01-27 21:38:11 +00:00
• 6f4681034e Code tidy. Simon Kelley 2014-01-26 23:39:17 +00:00
• 6938f3476e Don't mark answers as DNSEC validated if DNS-doctored. Simon Kelley 2014-01-26 22:47:39 +00:00
• 17fb9ea763 Exclude CRC code in DNSSEC build - replaced with SHA1. Simon Kelley 2014-01-26 09:36:54 +00:00
• 7d23a66ff0 Remove --dnssec-permissive, pointless if we don't set CD upstream. Simon Kelley 2014-01-26 09:33:21 +00:00
• 703c7ff429 Fix to last commit. Simon Kelley 2014-01-25 23:46:23 +00:00
• 8a9be9e493 Replace CRC32 with SHA1 for spoof detection in DNSSEC builds. Simon Kelley 2014-01-25 23:17:21 +00:00
• c92f0083a2 Get AA flag right in DNSSEC answers from cache. Simon Kelley 2014-01-25 18:43:59 +00:00
• b5dbfd142a RRSIG answer logging. Simon Kelley 2014-01-25 18:19:51 +00:00
• cbf13a2a6d Class specifier in --dnskey, instead of hardwiring C_IN. Simon Kelley 2014-01-25 17:59:14 +00:00
• 5b3bf92101 --dnssec-debug Simon Kelley 2014-01-25 17:03:07 +00:00
• 0744ca66ad More DNSSEC caching logic, and avoid repeated validation of DS/DNSKEY Simon Kelley 2014-01-25 16:40:15 +00:00
• 2d33bda2e6 RRSIGS for PTR records from cache. Simon Kelley 2014-01-24 22:37:25 +00:00
• 32f90c0fad Tweak. Simon Kelley 2014-01-24 10:37:36 +00:00
• bce6e1bc6d RRSIGs in DS and DNSKEY cached answers. Simon Kelley 2014-01-23 22:02:19 +00:00
• 824202ef54 More DNSSEC cache readout. Simon Kelley 2014-01-23 20:59:46 +00:00
• 9ebfca1e84 Compiler warning. Simon Kelley 2014-01-23 12:11:43 +00:00
• 6429e421b3 Compiler warning. Simon Kelley 2014-01-23 12:09:36 +00:00
• c9bfa948c3 remove redundant headerage Simon Kelley 2014-01-22 22:32:33 +00:00
• e7829aefd8 Cache RRSIGS. Simon Kelley 2014-01-22 22:21:51 +00:00
• 51ea3ca254 Caching of DNSSEC records. Simon Kelley 2014-01-22 19:31:38 +00:00
• 57ab36e77d Tweak definition of a permanent IPv6 address on Linux. Jonas Gorski 2014-01-22 11:34:16 +00:00
• dd0e0a3995 Handle time_t wraparound more sanely. Simon Kelley 2014-01-22 11:16:59 +00:00
• 6fd6dacb39 Fix loop in RR sort. Simon Kelley 2014-01-21 20:17:40 +00:00
• 39048ad10b bug fix, avoids infinite loop in forwarding code. Simon Kelley 2014-01-21 17:33:58 +00:00
• 979cdf9b64 Fix to hostname_cmp, and update to canonicalisation table. RFC 4034 LIES. Simon Kelley 2014-01-21 16:26:41 +00:00
• dbf721235b Rationalise hostname_cmp() Simon Kelley 2014-01-21 14:28:02 +00:00
• c979fa04a4 Provide for static library linking. Simon Kelley 2014-01-21 13:45:17 +00:00
• c5f4ec7d23 NSEC proof-of-non-existence. Simon Kelley 2014-01-20 22:37:55 +00:00
• 5d3b87a484 Better handling of truncated DNSSEC replies. Simon Kelley 2014-01-20 11:57:23 +00:00
• 72ae2f3d56 Don't validate error returns. Simon Kelley 2014-01-19 09:54:16 +00:00
• 6c0cb858c1 Trivial format fix Simon Kelley 2014-01-17 14:40:46 +00:00
• e0c0ad3b5e UDP retries for DNSSEC Simon Kelley 2014-01-16 22:42:07 +00:00
• 4619d94622 Fix SEGV and failure to validate on x86_64. Simon Kelley 2014-01-16 19:53:06 +00:00
• 0975a58e9b Merge branch 'master' of ssh://central/var/cache/git/dnsmasq Simon Kelley 2014-01-15 17:12:08 +00:00
• a25720a34a protocol handling for DNSSEC Simon Kelley 2014-01-14 23:13:55 +00:00
• cc111e0bab Add ip6addr.h to Makefile list. Simon Kelley 2014-01-13 21:38:19 +00:00
• 86bec2d399 Swap crypto library from openSSL to nettle. Simon Kelley 2014-01-13 21:31:20 +00:00
• a59ff5f3df Merge branch 'master' of ssh://central/var/cache/git/dnsmasq Simon Kelley 2014-01-12 22:36:12 +00:00
• c3a04081ff [fd00::} and [fe80::] special addresses in DHCPv6 options. v2.69test3 Simon Kelley 2014-01-11 22:18:19 +00:00
• ae76242fdf Fix missing RA RDNS option with --dhcp-option=option6:23,[::] Simon Kelley 2014-01-10 18:15:16 +00:00
• 4f04476e3b Set AD bit for address replies from /etc/hosts &c Simon Kelley 2014-01-10 12:20:38 +00:00
• 1486a9c7f2 Furthet tweak to RRset sort. Simon Kelley 2014-01-10 11:39:14 +00:00
• 5ada888507 RFC 4035 5.3.2 wildcard label rules. Simon Kelley 2014-01-09 22:25:03 +00:00
• 5f8e58f49b DNSSEC consolidation. Simon Kelley 2014-01-09 17:31:19 +00:00
• b8071a849a Tweak blockdata accounting. Simon Kelley 2014-01-09 09:41:33 +00:00
• b6e9e7c32d Handle digest lengths greater than 1 block. Simon Kelley 2014-01-08 21:21:20 +00:00
• 0435d041ea AD into cache fixes. Simon Kelley 2014-01-08 18:22:37 +00:00
• 795501bc86 AD bit handling when doing validation. Simon Kelley 2014-01-08 18:11:55 +00:00
• c2207688c0 Memory stats for DNSSEC. Simon Kelley 2014-01-08 18:04:20 +00:00
• 98c098bfc7 Move blockdata to it's own file. Simon Kelley 2014-01-08 17:31:16 +00:00
• c47e3ba446 Update copyright for 2014. Simon Kelley 2014-01-08 17:07:54 +00:00
• f1668d2786 New source port for DNSSEC-originated queries. Simon Kelley 2014-01-08 16:53:27 +00:00
• 7d7b7b31e5 DNSSEC for TCP queries. Simon Kelley 2014-01-08 15:53:35 +00:00
• 3ddacb86e9 Ensure cache is big enough to do DNSSEC. Simon Kelley 2014-01-08 14:32:03 +00:00
• 60b68069cf Rationalise DNS packet-buffer size calculations. Simon Kelley 2014-01-08 12:10:28 +00:00
• 871417d45d Handle truncated replies in DNSSEC validation. Simon Kelley 2014-01-08 11:22:32 +00:00