Brian Wellington
7b5bf4bea4
a key could be freed twice in an unlikely error case.
2001-11-06 03:02:48 +00:00
Brian Wellington
36e37042c6
997. [func] Add support for RSA-SHA1 keys.
2001-09-15 00:01:58 +00:00
Brian Wellington
6614bac268
oops, don't return an isc_boolean_t as an isc_result_t.
2001-07-10 21:27:59 +00:00
Brian Wellington
3b31ce9da9
functions can now return DST_R_NOCRYPTO
2001-07-10 19:05:53 +00:00
Brian Wellington
28e2058c5f
macro style
2001-07-10 05:12:43 +00:00
Brian Wellington
9622173ccb
only create a memory pool if OPENSSL is defined.
2001-07-10 05:00:42 +00:00
Brian Wellington
024550401d
#if defined(OPENSSL) ==> #ifdef OPENSSL
...
remove unused #include <openssl/rand.h>
2001-07-10 04:01:19 +00:00
David Lawrence
25efbc557e
set the permissions on a symmetric keyfile before anything is written to it,
...
rather than after it is closed
2001-05-31 10:45:32 +00:00
Brian Wellington
0716b32560
remove unnecessary const
2001-05-21 22:10:23 +00:00
Brian Wellington
177ede307a
minor internal reorganization (yes, this will all become clear at some point)
2001-05-10 19:07:18 +00:00
Brian Wellington
4bd95a4965
fix a cut-and-paste-o and a warning
2001-05-10 04:50:28 +00:00
Brian Wellington
8e4da48fa7
consolidated duplicated code for filename mangling, removed sanity checks that
...
weren't.
2001-05-09 23:04:50 +00:00
Andreas Gustafsson
a08f7f4a6c
frombuffer() was declared 'static' but defined
...
without 'static'
2001-05-04 17:57:33 +00:00
Brian Wellington
daad43e5a4
802. [bug] DNSSEC key tags were computed incorrectly in almost
...
all cases. [RT #1146 ]
2001-04-04 02:02:58 +00:00
Brian Wellington
45e22378fc
dns_name_tofilenametext() now downcases the name, which means the callers
...
don't need to.
2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8
Add dns_name_tofilenametext(), and use it in the dnssec tools.
2001-03-27 22:57:48 +00:00
Brian Wellington
3d60fe9baf
740. [port] Handle openssl library mismatches slightly better.
2001-02-14 20:26:48 +00:00
Brian Wellington
b3936096b8
fix get_key_struct() definition
2001-01-27 04:33:18 +00:00
Brian Wellington
46c3b3f6e1
isc_uint16_t -> dns_keytag_t in many places; dns_keytable_findkeynode
...
was casting incorrectly. [RT #664 ]
2001-01-24 02:23:02 +00:00
Brian Wellington
5d0cca62ee
Renamed keyid.c to key.c, and moved in a bunch of other functions that don't
...
depend on crypto.
2001-01-17 01:08:08 +00:00
Brian Wellington
d7483d67f7
Move dst_region_computeid into a new file dst/keyid.c, so that all of the
...
dnssec code doesn't need to be linked in by using rdata routines.
2001-01-17 00:33:37 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Brian Wellington
523dd6a979
669. [func] dnssec-keygen now makes the public key file
...
non-world-readable for symmetric keys. [RT #403 ]
2001-01-09 00:53:06 +00:00
Andreas Gustafsson
8998ed8481
added UNUSED() macro
2000-12-18 21:09:42 +00:00
Brian Wellington
ebfcb6cf66
550. [func] Support unknown rdata types and classes.
2000-11-09 23:55:05 +00:00
Brian Wellington
ed239db49c
Allow keys to be referred to as 'Kname.+id+alg.' (with a trailing dot), since
...
file completion often produces strings of that form.
2000-11-01 00:17:18 +00:00
Mark Andrews
c03bb27f06
532. [func] Implement DNS UPDATE pseudo records using
...
DNS_RDATA_UPDATE flag.
531. [func] Rdata really should be initalized before being
assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
dns_rdata_clone(), dns_rdata_fromregion()),
check that it is.
2000-10-25 04:26:57 +00:00
Brian Wellington
e9c0951923
Remove dnssafe; use openssl rsa instead.
2000-09-16 01:12:21 +00:00
Brian Wellington
020d334001
Don't assume class IN.
2000-09-12 09:54:36 +00:00
Brian Wellington
8c7fa43b3c
Make dst_region_computeid() take an algorithm, since it was returning the
...
wrong id for RSA keys. Also clean up a few error messages from dst routines.
2000-09-08 14:23:49 +00:00
Brian Wellington
d3735e0e25
DST_ALG_RSA -> DST_ALG_RSAMD5
2000-09-02 01:17:20 +00:00
Brian Wellington
c9e998ea51
A bit of gss-tsig code. Don't expect this to work.
2000-08-17 02:04:22 +00:00
David Lawrence
40f53fa8d9
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
...
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
Brian Wellington
38c3484647
Replace the internal dst__id_calc() with the visible dst_region_computeid().
2000-07-31 19:44:21 +00:00
Brian Wellington
c0975ccf5c
Use the dst entropy wrapper in all cases, so that the initial entropy flags
...
passes into dst are always in effect.
2000-06-12 18:05:15 +00:00
Brian Wellington
ce89d902a2
dst_context_create should check for a null key before creating a context
2000-06-12 07:07:53 +00:00
Brian Wellington
6204077770
Actually make openssl work with our entropy api
2000-06-09 23:31:55 +00:00
Brian Wellington
09a1a618cd
Use the entropy api.
2000-06-09 22:32:20 +00:00
Andreas Gustafsson
3b938ff0d9
copyright messages now generated by util/update_copyrights
2000-06-09 20:58:39 +00:00
David Lawrence
e46d261abb
added void parameter declarator for definition of dst_lib_destroy()
2000-06-08 23:21:15 +00:00
David Lawrence
e90de0d144
buildfilename() definition needed static attribute of its declaration
2000-06-08 20:38:48 +00:00
Brian Wellington
76513c0271
Removed errant call to dns_rdata_freestruct, cleaned up an error case.
2000-06-07 19:05:45 +00:00
Brian Wellington
78d14e388a
Use MD5/SHA1 from libisc instead of dst/openssl
2000-06-07 17:22:31 +00:00
Brian Wellington
4441bfbd6b
More dst updates:
...
- dst_lib_init()/dst_lib_destroy() allow dst to use a predefined
mctx and free all resources on exit.
- dst_key_tofile() & dst_key/fromfile() take a directory parameter.
- dst_key_parsefile() removed, replaced by dst_key_fromnamedfile()
- more bug fixes and memory leak fixes
2000-06-06 21:58:16 +00:00
Brian Wellington
aeca99a602
Don't dereference a pointer before assigning it.
2000-06-03 00:43:46 +00:00
Brian Wellington
e8325473bc
typos
2000-06-02 23:44:52 +00:00
Brian Wellington
182706b2e9
more dst updates
2000-06-02 23:36:14 +00:00
Brian Wellington
011463c376
New DST API for signing/verifying, as well as some reorganization, cleanup,
...
and bug fixes.
2000-06-02 18:57:51 +00:00
David Lawrence
6d12fdf966
Megacommit of many files.
...
Mostly, several functions that take pointers as arguments, almost
always char * pointers, had those pointers qualified with "const".
Those that returned pointers to previously const-qualified arguments
had their return values qualified as const. Some structure members
were qualified as const to retain that attribute from the variables
from which they were assigned.
The macro DE_CONST is used to deal with a handful of very special
places where something is qualified as const but really needs to have
its const qualifier removed.
rdata.c now defines macros for the prototypes of the basic rdata functions,
and all of the lib/dns/rdata/**/*.c files now use them.
Some minor integer-compatibility issues. (IE, ~0x03 is a signed int,
so assigning it to an unsigned int should use a cast. The type of an
enum member is int, so there are some conversion issues there, too.)
A pointers-to-function should not be cast to a pointer-to-object.
Variables should not be named for C reserved identifiers.
One or two set-but-not-used variables removed.
Minor other ISC style cleanups.
2000-06-01 18:26:56 +00:00
Brian Wellington
a9bc95f22e
dst now stores the key name as a dns_name_t, not a char *.
2000-05-24 23:13:32 +00:00