2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00

110 Commits

Author SHA1 Message Date
Mark Andrews
beb5c413b5 Replace sparse switch with if-else
Style
Add warning comments on known sparce switches.
2004-02-01 23:56:19 +00:00
Mark Andrews
9e09ddba95 add sig0 comment 2003-09-30 06:18:11 +00:00
Mark Andrews
93d6dfaf66 1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY. 2003-09-30 06:00:40 +00:00
Mark Andrews
5eb91bd90e silence compiler warnings (HPUX/11i) 2003-07-25 00:01:16 +00:00
Mark Andrews
81aea2f2d3 undo wrong branch 2002-12-13 02:51:41 +00:00
Mark Andrews
0020640ff6 checkpoint 2002-12-13 02:37:35 +00:00
Michael Graff
972cbaa79e merge rt3598 (code by marka, pullup by me) 2002-11-12 22:22:32 +00:00
Brian Wellington
9e6286de2a add dst_key_privatefrombuffer(), which coverts a public key into a private
key.
2002-02-27 22:12:06 +00:00
Mark Andrews
a7038d1a05 copyrights 2002-02-20 03:35:59 +00:00
Mark Andrews
c46f10e4a1 Use as_textregion.base not as_pointer. [RT #2385] 2002-01-21 01:07:32 +00:00
Brian Wellington
0118965e19 fix large DH key generation, hopefully for the last time. 2001-12-18 06:05:41 +00:00
Brian Wellington
b7415ddd79 let isc_lex_destroy() close sources. 2001-11-30 18:26:46 +00:00
Brian Wellington
2e4bec457d Before signing with a key, make sure that it's not the public-only part.
A sane crypto toolkit would catch this and return an error, but openssl
unceremoniously seg faults.
2001-11-30 02:11:04 +00:00
Andreas Gustafsson
1f1d36a87b Check return values or cast them to (void), as required by the coding
standards; add exceptions to the coding standards for cases where this is
not desirable
2001-11-30 01:59:49 +00:00
Brian Wellington
3638017bd3 1143. [bug] When a trusted-keys statement was present and named
was built without crypto support, it would leak memory.
2001-11-28 02:35:02 +00:00
Andreas Gustafsson
91cd0f93ad sizeof style 2001-11-27 01:56:32 +00:00
Brian Wellington
bcf53cf8d0 Move the memory allocation wrappers into openssl_link.c, since they're
openssl specific.
2001-11-07 23:03:54 +00:00
Brian Wellington
f368466f81 Creating a NULL KEY shouldn't trigger a "no crypto" error. 2001-11-06 22:27:52 +00:00
Brian Wellington
ba45e16a66 Clean up the implementation cleanup mechanism. Also remove ->issymmetric,
since it's easier to just do it in dst_api.c.
2001-11-06 20:47:59 +00:00
Brian Wellington
2f93757751 Rework the "no crypto support" test. Rather than explicitly checking whether
built without openssl, instead return NOCRYPTO if the algorithm is not
supported but known.
2001-11-06 18:08:07 +00:00
Brian Wellington
7b5bf4bea4 a key could be freed twice in an unlikely error case. 2001-11-06 03:02:48 +00:00
Brian Wellington
36e37042c6 997. [func] Add support for RSA-SHA1 keys. 2001-09-15 00:01:58 +00:00
Brian Wellington
6614bac268 oops, don't return an isc_boolean_t as an isc_result_t. 2001-07-10 21:27:59 +00:00
Brian Wellington
3b31ce9da9 functions can now return DST_R_NOCRYPTO 2001-07-10 19:05:53 +00:00
Brian Wellington
28e2058c5f macro style 2001-07-10 05:12:43 +00:00
Brian Wellington
9622173ccb only create a memory pool if OPENSSL is defined. 2001-07-10 05:00:42 +00:00
Brian Wellington
024550401d #if defined(OPENSSL) ==> #ifdef OPENSSL
remove unused #include <openssl/rand.h>
2001-07-10 04:01:19 +00:00
David Lawrence
25efbc557e set the permissions on a symmetric keyfile before anything is written to it,
rather than after it is closed
2001-05-31 10:45:32 +00:00
Brian Wellington
0716b32560 remove unnecessary const 2001-05-21 22:10:23 +00:00
Brian Wellington
177ede307a minor internal reorganization (yes, this will all become clear at some point) 2001-05-10 19:07:18 +00:00
Brian Wellington
4bd95a4965 fix a cut-and-paste-o and a warning 2001-05-10 04:50:28 +00:00
Brian Wellington
8e4da48fa7 consolidated duplicated code for filename mangling, removed sanity checks that
weren't.
2001-05-09 23:04:50 +00:00
Andreas Gustafsson
a08f7f4a6c frombuffer() was declared 'static' but defined
without 'static'
2001-05-04 17:57:33 +00:00
Brian Wellington
daad43e5a4 802. [bug] DNSSEC key tags were computed incorrectly in almost
all cases. [RT #1146]
2001-04-04 02:02:58 +00:00
Brian Wellington
45e22378fc dns_name_tofilenametext() now downcases the name, which means the callers
don't need to.
2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8 Add dns_name_tofilenametext(), and use it in the dnssec tools. 2001-03-27 22:57:48 +00:00
Brian Wellington
3d60fe9baf 740. [port] Handle openssl library mismatches slightly better. 2001-02-14 20:26:48 +00:00
Brian Wellington
b3936096b8 fix get_key_struct() definition 2001-01-27 04:33:18 +00:00
Brian Wellington
46c3b3f6e1 isc_uint16_t -> dns_keytag_t in many places; dns_keytable_findkeynode
was casting incorrectly. [RT #664]
2001-01-24 02:23:02 +00:00
Brian Wellington
5d0cca62ee Renamed keyid.c to key.c, and moved in a bunch of other functions that don't
depend on crypto.
2001-01-17 01:08:08 +00:00
Brian Wellington
d7483d67f7 Move dst_region_computeid into a new file dst/keyid.c, so that all of the
dnssec code doesn't need to be linked in by using rdata routines.
2001-01-17 00:33:37 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Brian Wellington
523dd6a979 669. [func] dnssec-keygen now makes the public key file
non-world-readable for symmetric keys. [RT #403]
2001-01-09 00:53:06 +00:00
Andreas Gustafsson
8998ed8481 added UNUSED() macro 2000-12-18 21:09:42 +00:00
Brian Wellington
ebfcb6cf66 550. [func] Support unknown rdata types and classes. 2000-11-09 23:55:05 +00:00
Brian Wellington
ed239db49c Allow keys to be referred to as 'Kname.+id+alg.' (with a trailing dot), since
file completion often produces strings of that form.
2000-11-01 00:17:18 +00:00
Mark Andrews
c03bb27f06 532. [func] Implement DNS UPDATE pseudo records using
DNS_RDATA_UPDATE flag.

 531.   [func]          Rdata really should be initalized before being
                        assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
                        dns_rdata_clone(), dns_rdata_fromregion()),
                        check that it is.
2000-10-25 04:26:57 +00:00
Brian Wellington
e9c0951923 Remove dnssafe; use openssl rsa instead. 2000-09-16 01:12:21 +00:00
Brian Wellington
020d334001 Don't assume class IN. 2000-09-12 09:54:36 +00:00
Brian Wellington
8c7fa43b3c Make dst_region_computeid() take an algorithm, since it was returning the
wrong id for RSA keys.  Also clean up a few error messages from dst routines.
2000-09-08 14:23:49 +00:00