Andreas Gustafsson
78951552dc
removed support for trusted keys other than security
...
roots; check that key name is appropriate even if it is a security
root; added/clarified log messages
2000-05-12 17:41:30 +00:00
Andreas Gustafsson
3ce4b8b03e
added a comment
2000-05-11 22:58:17 +00:00
David Lawrence
1a69a1a78c
Megacommit of dozens of files.
...
Cleanup of redundant/useless header file inclusion.
ISC style lint, primarily for function declarations and standalone
comments -- ie, those that appear on a line without any code, which
should be written as follows:
/*
* This is a comment.
*/
2000-05-08 14:38:29 +00:00
Andreas Gustafsson
59e9979330
REQUIRE(type != 0)
2000-05-05 00:18:36 +00:00
Andreas Gustafsson
c37a906752
more logging
2000-05-03 23:58:35 +00:00
David Lawrence
09f22ac5b0
Redundant header work, mostly removing <dns/result.h> from installed
...
headers and adding it to source files that need it.
2000-05-02 03:54:17 +00:00
Brian Wellington
48e27f529d
Conform to the dns_dnssec_verify api change and fix an nxt processing crash
2000-04-27 18:14:11 +00:00
Andreas Gustafsson
fa04a194fb
return value from dns_rdataset_first() was ignored;
...
added more comments and logging to nxtvalidate()
2000-04-27 00:15:16 +00:00
David Lawrence
6e49e91bd0
103. [func] libisc buffer API changes for <isc/buffer.h>:
...
Added:
isc_buffer_base(b) (pointer)
isc_buffer_current(b) (pointer)
isc_buffer_active(b) (pointer)
isc_buffer_used(b) (pointer)
isc_buffer_length(b) (int)
isc_buffer_usedlength(b) (int)
isc_buffer_consumedlength(b) (int)
isc_buffer_remaininglength(b) (int)
isc_buffer_activelength(b) (int)
isc_buffer_availablelength(b) (int)
Removed:
ISC_BUFFER_USEDCOUNT(b)
ISC_BUFFER_AVAILABLECOUNT(b)
isc_buffer_type(b)
Changed names:
isc_buffer_used(b, r) ->
isc_buffer_usedregion(b, r)
isc_buffer_available(b, r) ->
isc_buffer_available_region(b, r)
isc_buffer_consumed(b, r) ->
isc_buffer_consumedregion(b, r)
isc_buffer_active(b, r) ->
isc_buffer_activeregion(b, r)
isc_buffer_remaining(b, r) ->
isc_buffer_remainingregion(b, r)
Buffer types were removed, so the ISC_BUFFERTYPE_*
macros are no more, and the type argument to
isc_buffer_init and isc_buffer_allocate were removed.
isc_buffer_putstr is now void (instead of isc_result_t)
and requires that the caller ensure that there
is enough available buffer space for the string.
2000-04-27 00:03:12 +00:00
Andreas Gustafsson
8db70f36be
isc_buffer_putstr() will soon return void
2000-04-26 18:24:15 +00:00
David Lawrence
e1a5f4cd31
Shut up compiler about sigrdataset possibly being used before set in
...
nxtvalidate(). The warning is bogus.
2000-04-25 19:57:47 +00:00
Brian Wellington
ec371edc34
Add 'type' as a parameter to dns_validator_create()
2000-04-20 20:43:52 +00:00
Andreas Gustafsson
264fd373f3
added log message about not finding relevant NXTs;
...
added REQUIREs to enforce prerequisites as documented in validator.h;
added cancelation cleanup code
2000-04-20 18:03:12 +00:00
Brian Wellington
48ed268b33
snapshot - downward chaining support is much more complete, but still won't
...
work until the server returns the child's null key from the parent.
2000-04-19 18:08:27 +00:00
Andreas Gustafsson
d325d53d03
declare static function proveunsecure() before use;
...
eliminate compiler warning
2000-04-18 18:17:49 +00:00
Brian Wellington
613efcd8fb
snapshot - includes (untested) code to find unsecured subdomains, which
...
won't work until the server returns keys/nxts from the parent zones.
Also some style fixes.
2000-04-18 17:50:38 +00:00
Michael Graff
e44487bfc2
convert sender, arg, action, etc. to ev_sender, ev_arg, ev_action, etc.
2000-04-17 19:22:44 +00:00
Brian Wellington
fe5ba8ddb5
memory leak cleanup, error if multiple nxts are present in negative answer
2000-04-14 16:00:33 +00:00
Brian Wellington
777ac454c0
Fixed locking problems in event handlers. Reordered NXT processing to
...
do range checks before verify, since it's faster.
2000-04-14 02:30:12 +00:00
Brian Wellington
e83cae7fa8
snapshot - partial support for negative answer verification and a couple bug
...
fixes.
2000-04-13 18:10:07 +00:00
Bob Halley
fca5f81ad6
using snprintf or vsnprintf requires isc/print.h
2000-04-12 19:07:12 +00:00
Brian Wellington
63bf060be4
dst_key_iszonekey() checks that the key's protocol is DNSSEC or ANY.
...
Remove this check from the validator, and remove more redundant constants
from dst.h
2000-04-12 15:52:12 +00:00
Andreas Gustafsson
ecfe4a3490
validator_log() logged garbage after RR type
2000-04-11 22:17:49 +00:00
Brian Wellington
538fea1c91
Added back some code lost by the logging patch, made the keyvalidated event
...
handler actually work in the easy case.
2000-04-11 20:59:37 +00:00
Andreas Gustafsson
1b1e1fda46
logging
2000-04-11 20:35:37 +00:00
Brian Wellington
e7a8dfd296
If we mark an rdataset as secure, also mark the sigrdataset as secure.
2000-04-11 17:12:31 +00:00
Brian Wellington
3676eeb6ca
snapshot. Includes creating a new validator to validate pending KEYs.
2000-04-07 21:44:47 +00:00
Brian Wellington
b5debbe212
snapshot. Sends a fetch when a KEY isn't present and would partially handle
...
a successful response if it got one. Starts the validator with an
event to avoid deadlock in the resolver.
2000-04-07 17:36:40 +00:00
Andreas Gustafsson
93c786e092
cleared up some DNS_R_CONTINUE/DNS_R_WAIT confusion;
...
commented get_dst_key()
2000-04-06 23:09:01 +00:00
Michael Graff
4195904998
s/DNS_R_/ISC_R_/ change for some codes.
2000-04-06 22:03:35 +00:00
Brian Wellington
1c776a2909
missing an #include <dns/dnssec.h>
2000-04-05 22:30:57 +00:00
Brian Wellington
0a3e2e1d59
- added a call to dns_dnssec_verify
...
- swapped ISC_R_SUCCESS/DNS_R_CONTINUE in two places
- hitting the end of the list of SIGs without a verification is not success.
2000-04-05 22:29:47 +00:00
Bob Halley
1854401d34
was dereferencing the wrong rdataset
2000-03-23 22:52:22 +00:00
Andreas Gustafsson
1872808932
don't access freed memory
2000-03-23 20:33:15 +00:00
Andreas Gustafsson
62a84c4a27
val->view was not NULL before attach
2000-03-23 20:24:28 +00:00
Bob Halley
0ec4b862c9
checkpoint
2000-03-17 00:01:28 +00:00
Bob Halley
e419f613d8
checkpoint
2000-02-24 22:40:55 +00:00
Bob Halley
9695ae1c24
add missing #include
2000-02-24 21:05:28 +00:00
Bob Halley
bf43fdafa3
add keytable, validator
2000-02-23 23:31:33 +00:00