Mark Andrews
80169c379d
3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
...
and ECDSAP384SHA384. [RT #37183 ]
2014-09-29 10:18:54 +10:00
Mark Andrews
7fbbc9bfd3
3762. [bug] Address build problems with --pkcs11-native +
...
--with-openssl with ECDSA support. [RT #35467 ]
2014-02-27 18:29:52 +11:00
Evan Hunt
3249da26fc
[master] rationalize external key handling
...
3723. [cleanup] Imported keys are now handled the same way
regardless of DNSSEC algorithm. [RT #35215 ]
2014-01-30 17:49:32 -08:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Tinderbox User
431a83fb29
update copyright notice
2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260
[master] replace memcpy() with memmove().
...
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120 ]
2014-01-08 16:39:05 -08:00
Tinderbox User
473d3168f0
update copyright notice
2013-09-04 23:46:16 +00:00
Mark Andrews
0c91911b4d
3642. [func] Allow externally generated DNSKEY to be imported
...
into the DNSKEY management framework. A new tool
dnssec-importkey is used to this. [RT #34698 ]
2013-09-04 13:53:02 +10:00
Tinderbox User
b7e6fc2a4c
update copyright notice
2013-03-08 23:47:06 +00:00
Mark Andrews
aababae795
3521. [bug] Address memory leak in opensslecdsa_link.c. [RT #32249 ]
2013-03-08 21:12:42 +11:00
Evan Hunt
0e37e9e3d7
[master] silence noisy OpenSSL logging
...
3402. [bug] Correct interface numbers for IPv4 and IPv6 interfaces.
2012-10-24 12:58:16 -07:00
Mark Andrews
6eb6af6732
3354. [func] Improve OpenSSL error logging. [RT #29932 ]
2012-07-23 15:08:21 +10:00
Mark Andrews
7865ea9545
3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-14 15:44:20 +10:00
Mark Andrews
e8e0a46925
silence warnings from clang
2012-05-30 11:52:02 +10:00
Tinderbox User
99d8f5a704
update copyright notice
2012-05-02 23:45:44 +00:00
Mark Andrews
aaaf8d4f48
3317. [func] Add ECDSA support (RFC 6605). [RT #21918 ]
2012-05-02 23:20:17 +10:00