Mark Andrews
93d6dfaf66
1516. [func] Roll the DNSSEC types to RRSIG, NSEC and DNSKEY.
2003-09-30 06:00:40 +00:00
Mark Andrews
cc6271e46c
1494. [security] Turn on RSA BLINDING as a precaution.
2003-07-24 06:08:20 +00:00
Mark Andrews
81aea2f2d3
undo wrong branch
2002-12-13 02:51:41 +00:00
Mark Andrews
0020640ff6
checkpoint
2002-12-13 02:37:35 +00:00
Mark Andrews
f76c4ebaf5
1235. [func] Report 'out of memory' errors from openssl.
2002-03-19 04:30:57 +00:00
Brian Wellington
9e6286de2a
add dst_key_privatefrombuffer(), which coverts a public key into a private
...
key.
2002-02-27 22:12:06 +00:00
Mark Andrews
a7038d1a05
copyrights
2002-02-20 03:35:59 +00:00
Brian Wellington
3a8d4a316e
openssl 0.9.6a and higher don't have the RSA locking bug that earlier versions
...
did, so don't disable precomputation. Note that while this was fixed for
RSA, other algorithms still don't do locking when performing precomputation,
and thus we still disable it.
2002-01-15 22:09:45 +00:00
Brian Wellington
9af8851b85
whitespace style
2001-12-12 17:09:39 +00:00
Brian Wellington
0cb27602e5
1160. [bug] Generating Diffie-Hellman keys longer than 1024
...
bits could fail. [RT #2241 ]
2001-12-12 16:43:24 +00:00
Andreas Gustafsson
4f30395c97
Suppress compiler warnings about empty translation units
2001-11-20 21:28:41 +00:00
Brian Wellington
88d64279bb
if the function table entry already exists when _init() is called, don't
...
overwrite it.
2001-11-06 22:51:00 +00:00
Brian Wellington
ba45e16a66
Clean up the implementation cleanup mechanism. Also remove ->issymmetric,
...
since it's easier to just do it in dst_api.c.
2001-11-06 20:47:59 +00:00
Brian Wellington
3bc4de1f1b
memory leaks on errors
2001-11-06 17:59:50 +00:00
Brian Wellington
36e37042c6
997. [func] Add support for RSA-SHA1 keys.
2001-09-15 00:01:58 +00:00
Brian Wellington
024550401d
#if defined(OPENSSL) ==> #ifdef OPENSSL
...
remove unused #include <openssl/rand.h>
2001-07-10 04:01:19 +00:00
Brian Wellington
177ede307a
minor internal reorganization (yes, this will all become clear at some point)
2001-05-10 19:07:18 +00:00
Brian Wellington
daad43e5a4
802. [bug] DNSSEC key tags were computed incorrectly in almost
...
all cases. [RT #1146 ]
2001-04-04 02:02:58 +00:00
Brian Wellington
46c3b3f6e1
isc_uint16_t -> dns_keytag_t in many places; dns_keytable_findkeynode
...
was casting incorrectly. [RT #664 ]
2001-01-24 02:23:02 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Brian Wellington
523dd6a979
669. [func] dnssec-keygen now makes the public key file
...
non-world-readable for symmetric keys. [RT #403 ]
2001-01-09 00:53:06 +00:00
Olafur Gudmundsson
09ceae8853
keygen coredumps if rsa key is not generated due to lack of randomness
2000-12-05 21:11:18 +00:00
Brian Wellington
704d6eeab1
591. [bug] Work around non-reentrancy in openssl by disabling
...
precomputation in keys.
2000-12-04 23:06:37 +00:00
Brian Wellington
292ef406c6
Calling RSA_check_key() requires entropy, which may not be present. Remove
...
the call.
2000-11-22 00:11:30 +00:00
Brian Wellington
cffe50abf6
Lots of copyright updates
2000-11-18 03:01:17 +00:00
Brian Wellington
a06c40460a
fix a potential buffer overflow when writing keys to disk.
2000-09-25 23:19:39 +00:00
Brian Wellington
e9c0951923
Remove dnssafe; use openssl rsa instead.
2000-09-16 01:12:21 +00:00
