Mark Andrews
1d2f282840
cleanup unused variables
2012-07-24 12:18:10 +10:00
Mark Andrews
6eb6af6732
3354. [func] Improve OpenSSL error logging. [RT #29932 ]
2012-07-23 15:08:21 +10:00
Mark Andrews
ec048f4600
make maxbits signed as BN_num_bits is signed
2012-06-15 11:54:58 +10:00
Mark Andrews
7865ea9545
3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-14 15:44:20 +10:00
Tinderbox User
5fa46bc916
update copyright notice
2012-03-10 23:45:53 +00:00
Mark Andrews
28a8f5b0de
set $Id$
2012-03-08 00:21:15 +11:00
Mark Andrews
8473cd921e
pkey is only used if USE_ENGINE is defined or USE_EVP is 1
2011-03-11 02:59:37 +00:00
Mark Andrews
19f4b069dc
3068. [bug] Named failed to build with a OpenSSL without engine
...
support. [RT #23473 ]
2011-03-11 01:11:54 +00:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Mark Andrews
8a0943e125
silence compiler warnings. [RT #20472 ]
2009-10-30 05:08:23 +00:00
Mark Andrews
4c53f98dbd
RFC5702
2009-10-28 21:08:18 +00:00
Automatic Updater
990dca4605
update copyright notice
2009-10-27 23:47:45 +00:00
Mark Andrews
e09cdbac08
2738. [func] Add RSASHA256 and RSASHA512 tests to the dnssec system
...
test. [RT #20453 ]
2009-10-27 22:25:37 +00:00
Francis Dupont
775a8d86d9
keygen progress indication [RT #20284 ]
2009-10-24 09:46:19 +00:00
Automatic Updater
510032fdf4
update copyright notice
2009-10-22 23:48:07 +00:00
Evan Hunt
cc6cddfd94
2726. [func] Added support for SHA-2 DNSSEC algorithms,
...
RSASHA256 and RSASHA512. [RT #20023 ]
2009-10-22 02:21:31 +00:00
Mark Andrews
3c5e54941f
2718. [bug] The space calculations in opensslrsa_todns() were
...
incorrect. [RT #20394 ]
2009-10-20 02:59:19 +00:00
Francis Dupont
8b78c993cb
explicit engine rt20230a
2009-10-05 17:30:49 +00:00
Francis Dupont
6839f8b6df
cleanup USE_EVP_RSA (RT #20044 )
2009-09-23 11:16:50 +00:00
Francis Dupont
1f821c1058
merge rt19294
2009-09-07 12:58:33 +00:00
Mark Andrews
bbc204a237
2669. [func] Update PKCS#11 support to support Keyper HSM.
...
Update PKCS#11 patch to be against openssl-0.9.8i.
2009-09-03 04:09:58 +00:00
Mark Andrews
97a2451eea
2653. [bug] Treat ENGINE_load_private_key() failures as key
...
not found rather than out of memory. [RT #18033 ]
2009-08-18 07:45:14 +00:00
Evan Hunt
553ead32ff
2636. [func] Simplify zone signing and key maintenance with the
...
dnssec-* tools. Major changes:
- all dnssec-* tools now take a -K option to
specify a directory in which key files will be
stored
- DNSSEC can now store metadata indicating when
they are scheduled to be published, acttivated,
revoked or removed; these values can be set by
dnssec-keygen or overwritten by the new
dnssec-settime command
- dnssec-signzone -S (for "smart") option reads key
metadata and uses it to determine automatically
which keys to publish to the zone, use for
signing, revoke, or remove from the zone
[RT #19816 ]
2009-07-19 04:18:05 +00:00
Francis Dupont
47b7dfffe5
spelling
2009-01-17 14:45:17 +00:00
Automatic Updater
03faa7804e
update copyright notice
2009-01-14 23:48:00 +00:00
Francis Dupont
fa7ef31685
integrate -P1 patch
2009-01-14 17:28:47 +00:00
Mark Andrews
6098d364b6
2448. [func] Add NSEC3 support. [RT #15452 ]
2008-09-24 02:46:23 +00:00
Automatic Updater
e672951ed2
update copyright notice
2008-04-01 23:47:10 +00:00
Mark Andrews
dec509888a
don't use C99 declarations
2008-04-01 00:03:31 +00:00
Francis Dupont
2a31bd5310
add EVP and PKCS11
2008-03-31 14:42:51 +00:00
Automatic Updater
70e5a7403f
update copyright notice
2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
46f681f001
2105. [func] GSS-TSIG support (RFC 3645).
2006-12-04 02:26:05 +00:00
Mark Andrews
289ae548d5
2105. [func] GSS-TSIG support (RFC 3645).
2006-12-04 01:54:53 +00:00
Mark Andrews
6805e4e2c4
2101. [bug] OpenSSL version checks were not quite right.
...
[RT #16476 ]
2006-11-07 21:23:06 +00:00
Mark Andrews
b5d4d4d77f
WIN32 not WIN
2006-10-11 03:54:56 +00:00
Mark Andrews
0695629678
Windows specific compile time test for:
...
2089. [security] Raise the minimum safe OpenSSL versions to
OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
prior to these have known security flaws which
are (potentially) exploitable in named. [RT #16391 ]
2006-10-11 02:15:59 +00:00
Mark Andrews
14a2b06605
Use F5 as large RSA exponent w/ OpenSSL 0.9.8
2006-10-10 02:30:10 +00:00
Mark Andrews
fda0a03881
2089. [security] Raise the minimum safe OpenSSL versions to
...
OpenSSL 0.9.7l and OpenSSL 0.9.8d. Versions
prior to these have known security flaws which
are (potentially) exploitable in named. [RT #16391 ]
2088. [security] Change the default RSA exponent from 3 to 65537.
[RT #16391 ]
2006-10-02 01:44:27 +00:00
Mark Andrews
641f68d427
update copyright notice
2006-03-02 00:37:23 +00:00
Mark Andrews
25c18fded0
1994. [port] OpenSSL 0.9.8 support. [RT #15694 ]
2006-03-01 02:32:46 +00:00
Mark Andrews
2674e1a455
1940. [bug] Fixed a number of error conditions reported by
...
Coverity.
2005-11-30 03:33:49 +00:00
Mark Andrews
016c0a82f1
1888. [func] "USE INTERNAL MALLOC" is now runtime selectable.
...
[RT #14892 ]
2005-06-17 02:22:45 +00:00
Mark Andrews
69fe9aaafd
update copyright notice
2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
494576ce20
1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
...
allow parallel make to succeed.
2004-12-09 01:41:25 +00:00
