Ondřej Surý
843d389661
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
Evan Hunt
0c559199bf
final cleanup
...
- add CHANGES note
- update copyrights and license headers
- add -j to the make commands in .gitlab-ci.yml to take
advantage of parallelization in the gitlab CI process
2018-02-22 22:58:15 -08:00
Evan Hunt
c032c54dda
parallelize most system tests
2018-02-22 15:29:02 -08:00
Mark Andrews
32d09cd7e0
4840. [test] Add tests to cover fallback to using ZSK on inactive
...
KSK. [RT #46787 ]
2017-12-06 20:26:43 +11:00
Tinderbox User
a855b8d231
update copyright notice / whitespace
2017-12-03 23:45:35 +00:00
Mark Andrews
196e01da5f
4837. [bug] dns_update_signatures{inc} (add_sigs) was not
...
properly determining if there were active KSK and
ZSK keys for a algorithm when update-check-ksk is
true (default) leaving records unsigned. [RT #46743 ]
2017-12-04 10:03:51 +11:00
Evan Hunt
6ce8a05f6c
[master] update copyrights that had been missed recently
2017-04-23 17:06:00 -07:00
Mukund Sivaraman
dd7d1df874
Increase minimum RSA keygen size to 1024 bits ( #36895 )
2017-04-21 12:00:40 +05:30
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Tinderbox User
811acf52b8
update copyright notice / whitespace
2015-03-04 23:45:21 +00:00
Mark Andrews
1b05d22789
4082. [bug] Incrementally sign large inline zone deltas.
...
[RT #37927 ]
2015-03-05 09:59:29 +11:00
Evan Hunt
60988462e5
[master] use posix-compatible shell in system tests
...
3839. [test] Use only posix-compatible shell in system tests.
[RT #35625 ]
2014-05-06 22:06:04 -07:00
Evan Hunt
d58e33bfab
[master] testcrypto.sh in system tests
...
3714. [test] System tests that need to test for cryptography
support before running can now use a common
"testcrypto.sh" script to do so. [RT #35213 ]
2014-01-20 16:08:09 -08:00
Evan Hunt
12bf5d4796
[master] address several issues with native pkcs11
2014-01-18 11:51:07 -08:00
Mark Andrews
e20788e121
update copyrights
2014-01-16 15:19:24 +11:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Curtis Blackburn
8009525601
3682. [bug] Correct the behavior of rndc retransfer to allow
...
inline-signing slave zones to retain NSEC3 parameters instead of
reverting to NSEC [RT #34745 ]
2013-12-04 12:26:20 -06:00
Mark Andrews
6b0434299b
3671. [bug] Don't allow dnssec-importkey overwrite a existing
...
non-imported private key.
2013-11-13 12:01:09 +11:00
Mark Andrews
88a6dc33b7
only generate DSA/ECDSA signatures in named if we have a source of randomness and only on specific platforms
2013-09-19 10:40:38 +10:00
Mark Andrews
3d3aa9cde6
use -r rather then -f
2013-09-09 12:19:30 +10:00
Mark Andrews
23c73a1848
only test dsa if we have a random device
2013-09-09 11:42:58 +10:00
Evan Hunt
690bd6bf5d
[master] fix inline test, add importkey to win32 build
2013-09-04 18:56:50 -07:00
Mark Andrews
5b9469c0db
test for ECDSAP256SHA256 support
2013-09-04 22:33:31 +10:00
Mark Andrews
0c91911b4d
3642. [func] Allow externally generated DNSKEY to be imported
...
into the DNSKEY management framework. A new tool
dnssec-importkey is used to this. [RT #34698 ]
2013-09-04 13:53:02 +10:00
Mark Andrews
d1e22676de
3635. [bug] Signatures were not being removed from a zone with
...
only KSK keys for a algorithm. [RT #24439 ]
2013-08-15 13:37:07 +10:00
Tinderbox User
77b1d950a6
update copyright notice
2013-07-10 23:46:10 +00:00
Evan Hunt
927e4c9fec
[master] address race conditions with removing inline zones
...
3513. [bug] named could crash when deleting inline-signing
zones with "rndc delzone". [RT #34066 ]
2013-07-09 17:39:21 -07:00
Mark Andrews
de0fd68097
3398. [bug] SOA parameters were not being updated with inline
...
signed zones if the zone was modified while the
server was offline. [RT #29272 ]
2012-10-19 10:25:06 +11:00
Mark Andrews
bf8267aa45
reverse bad copyright update
2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860
update copyright notice
2012-06-29 01:22:18 +00:00
Mark Andrews
1864400107
3289. [bug] 'rndc retransfer' failed for inline zones. [RT #28036 ]
2012-02-23 06:53:15 +00:00
Automatic Updater
41f1164438
update copyright notice
2012-01-31 23:47:33 +00:00
Evan Hunt
c54dadd853
3270. [bug] "rndc reload" didn't reuse existing zones correctly
...
when inline-signing was in use. [RT #27650 ]
2012-01-31 01:13:10 +00:00
Automatic Updater
0d1cf4f5bc
update copyright notice
2012-01-16 23:46:46 +00:00
Mark Andrews
00164c8db2
fetches in progress/buckets
2012-01-16 08:35:09 +00:00
Automatic Updater
edb4393ef5
update copyright notice
2012-01-10 23:46:58 +00:00
Evan Hunt
9a02019889
3264. [bug] Automatic regeneration of signatures in an
...
inline-signing zone could stall when the server
was restarted. [RT #27344 ]
3263. [bug] "rndc sync" did not affect the unsigned side of an
inline-signing zone. [RT #27337 ]
2012-01-10 18:13:37 +00:00
Evan Hunt
f30785f506
3252. [bug] When master zones using inline-signing were
...
updated while the server was offline, the source
zone could fall out of sync with the signed
copy. They can now resynchronize. [RT #26676 ]
2011-12-22 07:32:41 +00:00
Mark Andrews
24ef32426d
3181. [func] Inline-signing is now supported for master zones.
...
[RT #26224 ]
2011-10-26 20:56:45 +00:00
Mark Andrews
b1c6de5456
3177. [func] 'rndc keydone', remove the indicator record that
...
named has finished signing the zone with the
corresponding key. [RT #26206 ]
2011-10-25 01:54:22 +00:00
Automatic Updater
4e68c7c87c
update copyright notice
2011-08-30 23:46:53 +00:00
Mark Andrews
9198ab377b
3147. [func] Initial inline signing support. [RT #23657 ]
2011-08-30 05:16:15 +00:00
