Tinderbox User
aa7b16ec2a
update copyright notice
2014-01-21 23:46:16 +00:00
Evan Hunt
d58e33bfab
[master] testcrypto.sh in system tests
...
3714. [test] System tests that need to test for cryptography
support before running can now use a common
"testcrypto.sh" script to do so. [RT #35213 ]
2014-01-20 16:08:09 -08:00
Mark Andrews
bf8267aa45
reverse bad copyright update
2012-06-29 11:39:47 +10:00
Tinderbox User
247bf37860
update copyright notice
2012-06-29 01:22:18 +00:00
Automatic Updater
09b46c3945
update copyright notice
2012-02-09 23:47:18 +00:00
Mark Andrews
77eca24a29
move keygeneration out of the timing critical section
2012-02-09 21:10:45 +00:00
Mark Andrews
46c7b71b4d
improve error diagnostics
2011-11-02 13:59:07 +00:00
Mark Andrews
ad94465154
improve failure reports
2011-10-25 03:57:08 +00:00
Mark Andrews
24ae404aca
'grep' -> 'grep -w' when checking for keyids
2011-10-13 03:55:01 +00:00
Mark Andrews
89d7808786
'grep' -> 'grep -w' when checking for keyids
2011-10-13 03:46:41 +00:00
Evan Hunt
b47c020d5c
3133. [bug] Change #3114 was incomplete. [RT #24577 ]
2011-07-08 01:43:26 +00:00
Scott Mann
07797bfb1f
fix RT 24561
2011-06-07 01:45:38 +00:00
Mark Andrews
ec564e401a
add debugging output on test failure
2011-05-31 13:52:06 +00:00
Scott Mann
5588b32695
This is a workaround fix for a problem in Solaris 10 (specifically on thing1)
...
for which a root cause has not yet been found. RT #24561 .
2011-05-30 15:13:49 +00:00
Evan Hunt
485522d7e1
3108. [cleanup] dnssec-signzone: Clarified some error and
...
warning messages; removed #ifdef ALLOW_KSKLESS_ZONES
code (use -P instead). [RT #20852 ]
3107. [bug] dnssec-signzone: Report the correct number of ZSKs
when using -x. [RT #20852 ]
2011-05-06 21:08:33 +00:00
Evan Hunt
61bcc23203
3076. [func] New '-L' option in dnssec-keygen, dnsset-settime, and
...
dnssec-keyfromlabel sets the default TTL of the
key. When possible, automatic signing will use that
TTL when the key is published. [RT #23304 ]
2011-03-17 01:40:40 +00:00
Automatic Updater
0e27506ce3
update copyright notice
2011-03-05 23:52:31 +00:00
Evan Hunt
9a859983d7
3062. [func] Made several changes to enhance human readability
...
of DNSSEC data in dig output and in generated
zone files:
- DNSKEY record comments are more verbose, no
longer used in multiline mode only
- multiline RRSIG records reformatted
- multiline output mode for NSEC3PARAM records
- "dig +norrcomments" suppresses DNSKEY comments
- "dig +split=X" breaks hex/base64 records into
fields of width X; "dig +nosplit" disables this.
[RT #22820 ]
2011-03-05 19:39:07 +00:00
Evan Hunt
61271cdee6
3060. [func] New option "dnssec-signzone -X <date>" allows
...
specification of a separate expiration date
for DNSKEY RRSIGs and other RRSIGs. [RT #22141 ]
2011-03-04 22:20:21 +00:00
Mark Andrews
c6f4972c74
2943. [func] Add support to load new keys into managed zones
...
without signing immediately with "rndc loadkeys".
Add support to link keys with "dnssec-keygen -S"
and "dnssec-settime -S". [RT #21351 ]
2010-08-16 22:21:07 +00:00
Mark Andrews
f2ae969065
handle revoke changes
2010-05-06 11:28:20 +00:00
Evan Hunt
ecde9a1cd5
smartsign fails on slow machines. delay the timing-sensitive
...
dnssec-settime call as long as possible.
2010-01-19 15:54:45 +00:00
Automatic Updater
6bb1560124
update copyright notice
2010-01-18 23:48:40 +00:00
Evan Hunt
e11a0c114c
2841. [func] Added "smartsign" and improved "autosign" and
...
"dnssec" regression tests. [RT #20865 ]
2010-01-18 19:19:31 +00:00
