Brian Wellington
5ea0d11ca4
771. [cleanup] TSIG errors related to unsynchronized clocks
...
are logged better.
2001-03-07 20:53:32 +00:00
Brian Wellington
100d0d2ec6
Use a refcount instead of an explicit mutex and integer.
2001-02-13 03:57:06 +00:00
Brian Wellington
9d967288c3
zero length keys from the config file were not being logged as too short to be
...
secure.
2001-01-22 20:27:04 +00:00
Brian Wellington
564c1b8f42
remove the use of abs(), which could have led to false positives because of
...
64 to 32 bit truncation.
2001-01-16 22:47:56 +00:00
Andreas Gustafsson
4755b174df
simplified constant names, eliminating the dns_constname structs
2001-01-11 21:07:21 +00:00
Andreas Gustafsson
8c56932f9a
yet another potential memory leak
2001-01-11 20:30:51 +00:00
Mark Andrews
19c7cce855
674. [func] Allow messages to be TSIG signed / verified using
...
a offset from the current time.
2001-01-09 23:35:33 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Mark Andrews
0c70ab3065
672. [bug] The wrong time was in the "time signed" field when
...
replying with BADTIME error.
2001-01-09 14:32:44 +00:00
Brian Wellington
6734ac097f
#include <isc/print.h>
2000-12-08 03:10:32 +00:00
Brian Wellington
020ebf1190
log the reasons for various verify failures.
2000-12-07 20:13:29 +00:00
Andreas Gustafsson
7863e6bd43
provide a more detailed error message when configuring
...
a TSIG key fails [RT #461 ]
2000-11-15 00:52:04 +00:00
Mark Andrews
368b37b616
dns_rdata_invalidate -> dns_rdata_reset
2000-10-31 03:22:05 +00:00
Mark Andrews
c03bb27f06
532. [func] Implement DNS UPDATE pseudo records using
...
DNS_RDATA_UPDATE flag.
531. [func] Rdata really should be initalized before being
assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
dns_rdata_clone(), dns_rdata_fromregion()),
check that it is.
2000-10-25 04:26:57 +00:00
Brian Wellington
0e5d6900bd
Various hacks to allow (at some point in the future) interoperability
...
with Windows 2000's broken implementation of TKEY.
2000-10-12 00:40:52 +00:00
Brian Wellington
d1cbf71409
clean up suspicious looking and incorrect uses of dns_name_fromregion
2000-10-07 00:09:28 +00:00
Brian Wellington
dd27011f02
locks weren't being destroyed.
2000-09-25 17:46:39 +00:00
Brian Wellington
6e5fa98df0
A call to isc_mem_put could (in some cases) be called with an invalid size.
2000-09-21 21:29:16 +00:00
Brian Wellington
5c29047792
minor dst api change
2000-09-12 09:59:28 +00:00
Brian Wellington
8447ecf6fd
Check for NULL before checking for key size.
2000-09-08 07:51:28 +00:00
Brian Wellington
70d950d16e
Log a warning if TSIG keys are too short (where too short is less than 8 bytes).
2000-09-07 20:34:04 +00:00
Brian Wellington
a00c5e2151
gss-tsig support
2000-08-17 02:08:27 +00:00
David Lawrence
beea173d49
Rewrote the INSIST in dns_tsigkey_create() so that dstalg was guaranteed to
...
be set, even when INSISTS() are turned off.
2000-08-16 00:18:30 +00:00
Brian Wellington
1e2749dba8
Yet more minor cleanup.
2000-08-14 22:00:00 +00:00
Brian Wellington
f2338a0d6a
Minor tsig cleanup.
2000-08-14 18:13:11 +00:00
David Lawrence
40f53fa8d9
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
...
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
David Lawrence
003e911541
tsig.c:136: warning: unused variable `tmp' -- removed
2000-07-31 21:07:11 +00:00
Brian Wellington
da786e7937
Sending a TSIG signed query with a TSIG algorithm that's not
...
HMAC-MD5.SIG-ALG.REG.INT shouldn't crash the server. Also, the description
of dns_tsigkey_create was wrong in at least one place, and the function
incorrectly returned an undocumented result.
2000-07-28 23:27:01 +00:00
Brian Wellington
ddbc279e7b
Removed some cruft and a crash.
2000-07-28 00:01:59 +00:00
David Lawrence
15a4474541
word wrap copyright notice at column 70
2000-07-27 09:55:03 +00:00
Brian Wellington
3b2efab212
There's no real difference between the "sring" and "dring" parameters, so
...
call them "ring1" and "ring2" instead. Also remove a bogus assertion.
2000-07-21 22:38:31 +00:00
Brian Wellington
a49acbf201
Store tsig keys in an rbt, not a list.
2000-07-21 20:53:59 +00:00
Brian Wellington
4be64854b4
The wrong name was being duped when a tsig key was generated using tkey.
2000-07-21 20:32:12 +00:00
Brian Wellington
a5e73f3e9d
Having a non-noerror value inn the tsig error field should always return
...
DNS_R_TSIGERRORSET in dns_tsig_verify. Change the result text to reflect
this.
2000-07-20 19:32:57 +00:00
Brian Wellington
49c8a96fba
Don't require that tsig keys must be on a keyring. Also some other cleanup.
2000-07-18 00:46:03 +00:00
Brian Wellington
809fdfba22
TSIG AXFR verify failed when talking to a BIND 8 server.
2000-06-23 00:48:28 +00:00
Brian Wellington
3aec811249
fixed memory leak on TSIG BADSIG
2000-06-06 23:44:13 +00:00
Brian Wellington
b70f6ae9d0
missing call to dst_context_destroy
2000-06-05 20:01:07 +00:00
Brian Wellington
4fe8755480
Use the new DST API
2000-06-02 18:59:33 +00:00
David Lawrence
6d12fdf966
Megacommit of many files.
...
Mostly, several functions that take pointers as arguments, almost
always char * pointers, had those pointers qualified with "const".
Those that returned pointers to previously const-qualified arguments
had their return values qualified as const. Some structure members
were qualified as const to retain that attribute from the variables
from which they were assigned.
The macro DE_CONST is used to deal with a handful of very special
places where something is qualified as const but really needs to have
its const qualifier removed.
rdata.c now defines macros for the prototypes of the basic rdata functions,
and all of the lib/dns/rdata/**/*.c files now use them.
Some minor integer-compatibility issues. (IE, ~0x03 is a signed int,
so assigning it to an unsigned int should use a cast. The type of an
enum member is int, so there are some conversion issues there, too.)
A pointers-to-function should not be cast to a pointer-to-object.
Variables should not be named for C reserved identifiers.
One or two set-but-not-used variables removed.
Minor other ISC style cleanups.
2000-06-01 18:26:56 +00:00
Brian Wellington
fe0e3c7707
Rename message->tsigset/querytsigset to tsig/querytsig.
2000-05-31 23:58:35 +00:00
Brian Wellington
0f80bfec68
The message code now has functions to manipulate TSIG and SIG(0), and the
...
callers use these functions. Also a lot of TSIG cleanup.
2000-05-30 23:14:57 +00:00
Brian Wellington
7077846f3b
minor cleanup
2000-05-27 00:24:07 +00:00
Brian Wellington
af60263664
Added dns_tsigkey_attach & _detach, to simplify reference counting.
...
Added dns_message_get/settsigkey to deuglify tsig key handling in message code.
2000-05-26 00:16:46 +00:00
Brian Wellington
a9bc95f22e
dst now stores the key name as a dns_name_t, not a char *.
2000-05-24 23:13:32 +00:00
David Lawrence
ed019cabc1
fixed lines > 79 columns wide
2000-05-24 05:10:00 +00:00
Brian Wellington
7e8dd00fce
More tsig rdatastruct problems fixed
2000-05-22 23:17:22 +00:00
Brian Wellington
e492431068
missing NULL initialization
2000-05-19 00:29:00 +00:00
Brian Wellington
c50936eb40
changed dst_key_free() prototype, misc. dst cleanup
2000-05-19 00:20:59 +00:00
Brian Wellington
81ab85fd39
dst function name cleanup
2000-05-17 22:48:10 +00:00