summaryrefslogtreecommitdiffstats
path: root/lib/dnssec.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Merge 'origin/master' into 6.0 - last merge before renameOto Šťáva2024-05-141-1/+1
|\
| * Silence Clang-TidyOto Šťáva2024-05-131-1/+1
* | Merge remote-tracking branch 'origin/master' into 6.0Oto Šťáva2024-03-221-5/+8
|\|
| * lib/dnssec: rename 'check_crypto_limit' to 'account_crypto_limit'Oto Šťáva2024-03-051-4/+7
| * lib/dnssec: fix imprecise assertionVladimír Čunát2024-02-231-1/+1
* | lib/dnssec nit: reverse order of validating a DNSKEY setVladimír Čunát2024-03-051-2/+6
* | lib/dnssec: refactor kr_dnssec_key_*Vladimír Čunát2024-03-051-19/+9
|/
* mitigate KeyTrap DoS = CVE-2023-50387Vladimír Čunát2024-02-131-3/+4
* mitigate KeyTrap DoS = CVE-2023-50387Vladimír Čunát2024-02-131-0/+28
* lib/dnssec kr_rrset_validate_with_key(): deduplicate cleanupVladimír Čunát2024-02-131-6/+5
* Copyright notices: remove years and replace e-mailOto Šťáva2022-12-141-1/+1
* TTL bounds: improve the logicVladimír Čunát2022-12-131-8/+16
* daemon/zimport: better failure loggingVladimír Čunát2021-12-221-1/+4
* logging: remove QVERBOSE in favor of kr_log_qTomas Krizek2021-12-211-1/+1
* lib/dnssec: add a simple validator APIVladimír Čunát2021-11-031-0/+61
* lib/dnssec: make kr_dnskeys_trusted() cleanerVladimír Čunát2021-11-031-21/+18
* lib/dnssec: add a simpler version of kr_rrset_validate_with_key()Vladimír Čunát2021-11-031-0/+57
* lib/dnssec: factor out trim_ttl()Vladimír Čunát2021-11-031-24/+24
* lib/dnssec refactor: struct dseckey -> struct dnssec_keyVladimír Čunát2021-11-031-15/+15
* lib/dnssec.c: refactor validate_rrsig_rr()Vladimír Čunát2021-11-031-19/+18
* treewide: replace VERBOSE_STATUS, WITH_VERBOSE, etc.Vladimír Čunát2021-07-291-1/+1
* validate: add kr_rrset_validation_ctx_t::log_qryVladimír Čunát2021-07-291-1/+1
* log: shortening LOG_GRP_<SOMETHING> to <SOMETHING>Lukáš Ježek2021-07-291-1/+1
* log: add level prefix to each messageLukáš Ježek2021-07-291-1/+1
* treewide: rename assumptions to kr_assert() / kr_fails_assert()Tomas Krizek2021-05-251-5/+5
* lib/dnssec.c: replace assertsTomas Krizek2021-05-251-13/+11
* treewide: remove duplicate contrib/wire.hVladimír Čunát2021-04-141-5/+4
* validator: avoid using RRSIG from a different packetVladimír Čunát2020-10-071-6/+7
* validator: use rank BOGUS where appropriate instead of MISSINGPetr Špaček2020-04-151-0/+2
* treewide: machine readable license for GNU GPLv3+ source codePetr Špaček2020-02-251-13/+1
* iterate: better efficiency on huge RRsetsVladimír Čunát2019-12-041-0/+1
* validator: trim TTLs by RRSIG's expiration and original TTLVladimír Čunát2019-09-201-8/+26
* validate nitpick fix: unsupported algo edge caseVladimír Čunát2019-04-081-7/+3
* treewide nitpick: fix -WshadowVladimír Čunát2019-01-081-5/+5
* dnssec: improve bogus logging to give more infoPetr Špaček2018-12-201-2/+13
* knot_dname_in(): replaceVladimír Čunát2018-08-141-1/+1
* removal of pos from parametersVladimír Čunát2018-08-141-29/+32
* knot_rdata_t field renameVladimír Čunát2018-08-141-2/+2
* knot_rdataset_t field renamesVladimír Čunát2018-08-141-8/+8
* DNSSEC_OUT_OF_RANGE -> KNOT_ERANGEVladimír Čunát2018-08-141-1/+1
* knot_rdata_* changesVladimír Čunát2018-08-141-4/+4
* simple include fixesVladimír Čunát2018-08-141-5/+5
* treewide: remove branches supporting old knotVladimír Čunát2018-05-111-35/+0
* lib: fixed minor linter issues in libMarek Vavruša2018-01-121-1/+1
* dnssec: make a function static (unused outside)Vladimír Čunát2017-08-041-1/+14
* dnssec: guard against out-of-bailiwick signaturesVladimír Čunát2017-08-041-0/+8
* layer/validate: handle unknown algorithmsVladimír Čunát2017-07-241-2/+58
* lib: forwarding, some improvements in zone cut detection algorythmGrigorii Demidov2017-06-011-0/+32
* lib/dnssec: bugfix; libdnssec data structure was prematurely released after u...Grigorii Demidov2017-04-281-1/+0
* layer/validate: check if NSEC3 records in wildcard expansion proof has an optoutGrigorii Demidov2017-03-221-0/+4