Mark Andrews
dafcb997e3
update copyright notice
2004-03-05 05:14:21 +00:00
Mark Andrews
beb5c413b5
Replace sparse switch with if-else
...
Style
Add warning comments on known sparce switches.
2004-02-01 23:56:19 +00:00
Mark Andrews
9e09ddba95
add sig0 comment
2003-09-30 06:18:11 +00:00
Mark Andrews
93d6dfaf66
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2003-09-30 06:00:40 +00:00
Mark Andrews
5eb91bd90e
silence compiler warnings (HPUX/11i)
2003-07-25 00:01:16 +00:00
Mark Andrews
81aea2f2d3
undo wrong branch
2002-12-13 02:51:41 +00:00
Mark Andrews
0020640ff6
checkpoint
2002-12-13 02:37:35 +00:00
Michael Graff
972cbaa79e
merge rt3598 (code by marka, pullup by me)
2002-11-12 22:22:32 +00:00
Brian Wellington
9e6286de2a
add dst_key_privatefrombuffer(), which coverts a public key into a private
...
key.
2002-02-27 22:12:06 +00:00
Mark Andrews
a7038d1a05
copyrights
2002-02-20 03:35:59 +00:00
Mark Andrews
c46f10e4a1
Use as_textregion.base not as_pointer. [RT #2385 ]
2002-01-21 01:07:32 +00:00
Brian Wellington
0118965e19
fix large DH key generation, hopefully for the last time.
2001-12-18 06:05:41 +00:00
Brian Wellington
b7415ddd79
let isc_lex_destroy() close sources.
2001-11-30 18:26:46 +00:00
Brian Wellington
2e4bec457d
Before signing with a key, make sure that it's not the public-only part.
...
A sane crypto toolkit would catch this and return an error, but openssl
unceremoniously seg faults.
2001-11-30 02:11:04 +00:00
Andreas Gustafsson
1f1d36a87b
Check return values or cast them to (void), as required by the coding
...
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Brian Wellington
3638017bd3
1143. [bug] When a trusted-keys statement was present and named
...
was built without crypto support, it would leak memory.
2001-11-28 02:35:02 +00:00
Andreas Gustafsson
91cd0f93ad
sizeof style
2001-11-27 01:56:32 +00:00
Brian Wellington
bcf53cf8d0
Move the memory allocation wrappers into openssl_link.c, since they're
...
openssl specific.
2001-11-07 23:03:54 +00:00
Brian Wellington
f368466f81
Creating a NULL KEY shouldn't trigger a "no crypto" error.
2001-11-06 22:27:52 +00:00
Brian Wellington
ba45e16a66
Clean up the implementation cleanup mechanism. Also remove ->issymmetric,
...
since it's easier to just do it in dst_api.c.
2001-11-06 20:47:59 +00:00
Brian Wellington
2f93757751
Rework the "no crypto support" test. Rather than explicitly checking whether
...
built without openssl, instead return NOCRYPTO if the algorithm is not
supported but known.
2001-11-06 18:08:07 +00:00
Brian Wellington
7b5bf4bea4
a key could be freed twice in an unlikely error case.
2001-11-06 03:02:48 +00:00
Brian Wellington
36e37042c6
997. [func] Add support for RSA-SHA1 keys.
2001-09-15 00:01:58 +00:00
Brian Wellington
6614bac268
oops, don't return an isc_boolean_t as an isc_result_t.
2001-07-10 21:27:59 +00:00
Brian Wellington
3b31ce9da9
functions can now return DST_R_NOCRYPTO
2001-07-10 19:05:53 +00:00
Brian Wellington
28e2058c5f
macro style
2001-07-10 05:12:43 +00:00
Brian Wellington
9622173ccb
only create a memory pool if OPENSSL is defined.
2001-07-10 05:00:42 +00:00
Brian Wellington
024550401d
#if defined(OPENSSL) ==> #ifdef OPENSSL
...
remove unused #include <openssl/rand.h>
2001-07-10 04:01:19 +00:00
David Lawrence
25efbc557e
set the permissions on a symmetric keyfile before anything is written to it,
...
rather than after it is closed
2001-05-31 10:45:32 +00:00
Brian Wellington
0716b32560
remove unnecessary const
2001-05-21 22:10:23 +00:00
Brian Wellington
177ede307a
minor internal reorganization (yes, this will all become clear at some point)
2001-05-10 19:07:18 +00:00
Brian Wellington
4bd95a4965
fix a cut-and-paste-o and a warning
2001-05-10 04:50:28 +00:00
Brian Wellington
8e4da48fa7
consolidated duplicated code for filename mangling, removed sanity checks that
...
weren't.
2001-05-09 23:04:50 +00:00
Andreas Gustafsson
a08f7f4a6c
frombuffer() was declared 'static' but defined
...
without 'static'
2001-05-04 17:57:33 +00:00
Brian Wellington
daad43e5a4
802. [bug] DNSSEC key tags were computed incorrectly in almost
...
all cases. [RT #1146 ]
2001-04-04 02:02:58 +00:00
Brian Wellington
45e22378fc
dns_name_tofilenametext() now downcases the name, which means the callers
...
don't need to.
2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8
Add dns_name_tofilenametext(), and use it in the dnssec tools.
2001-03-27 22:57:48 +00:00
Brian Wellington
3d60fe9baf
740. [port] Handle openssl library mismatches slightly better.
2001-02-14 20:26:48 +00:00
Brian Wellington
b3936096b8
fix get_key_struct() definition
2001-01-27 04:33:18 +00:00
Brian Wellington
46c3b3f6e1
isc_uint16_t -> dns_keytag_t in many places; dns_keytable_findkeynode
...
was casting incorrectly. [RT #664 ]
2001-01-24 02:23:02 +00:00
Brian Wellington
5d0cca62ee
Renamed keyid.c to key.c, and moved in a bunch of other functions that don't
...
depend on crypto.
2001-01-17 01:08:08 +00:00
Brian Wellington
d7483d67f7
Move dst_region_computeid into a new file dst/keyid.c, so that all of the
...
dnssec code doesn't need to be linked in by using rdata routines.
2001-01-17 00:33:37 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Brian Wellington
523dd6a979
669. [func] dnssec-keygen now makes the public key file
...
non-world-readable for symmetric keys. [RT #403 ]
2001-01-09 00:53:06 +00:00
Andreas Gustafsson
8998ed8481
added UNUSED() macro
2000-12-18 21:09:42 +00:00
Brian Wellington
ebfcb6cf66
550. [func] Support unknown rdata types and classes.
2000-11-09 23:55:05 +00:00
Brian Wellington
ed239db49c
Allow keys to be referred to as 'Kname.+id+alg.' (with a trailing dot), since
...
file completion often produces strings of that form.
2000-11-01 00:17:18 +00:00
Mark Andrews
c03bb27f06
532. [func] Implement DNS UPDATE pseudo records using
...
DNS_RDATA_UPDATE flag.
531. [func] Rdata really should be initalized before being
assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
dns_rdata_clone(), dns_rdata_fromregion()),
check that it is.
2000-10-25 04:26:57 +00:00
Brian Wellington
e9c0951923
Remove dnssafe; use openssl rsa instead.
2000-09-16 01:12:21 +00:00
Brian Wellington
020d334001
Don't assume class IN.
2000-09-12 09:54:36 +00:00
