summaryrefslogtreecommitdiffstats
path: root/lib/dnssec (follow)
Commit message (Expand)AuthorAgeFilesLines
* Resolve !1509 with 6.0 (libknot 3.4 compatibility)Vladimír Čunát2024-05-094-22/+23
|\
| * treewide: more compatibility with future libknot 3.4Vladimír Čunát2024-05-062-11/+12
| * treewide: more compatibility with future libknot 3.4Vladimír Čunát2024-05-064-12/+12
* | Merge remote-tracking branch 'origin/master' into 6.0Oto Šťáva2024-04-101-1/+1
|\|
| * lib/dnssec nit: improve #include pathVladimír Čunát2024-04-081-1/+1
* | lib/dnssec: refactor kr_dnssec_key_*Vladimír Čunát2024-03-051-3/+2
* | Merge branch 'release-6.0.6' into 6.0v6.0.6Vladimír Čunát2024-02-132-10/+55
|\|
| * validator: limit the amount of work on SHA1 in NSEC3 proofsVladimír Čunát2024-02-121-0/+12
| * lib/cache: limit the amount of work on SHA1Vladimír Čunát2024-02-121-0/+12
| * validator: similarly also limit excessive NSEC3 salt lengthVladimír Čunát2024-02-122-6/+30
| * validator: lower the NSEC3 iteration limit (150 -> 50)Vladimír Čunát2024-02-121-5/+2
* | lib/dnssec: allow validating some RRsets around 64 KiB sizeVladimír Čunát2024-02-131-3/+19
|/
* Copyright notices: remove years and replace e-mailOto Šťáva2022-12-148-8/+8
* lib/dnssec: nitsVladimír Čunát2022-05-181-5/+2
* lib/dnssec: rewrite kr_nsec_ref_to_unsigned()Vladimír Čunát2022-05-182-60/+25
* lib/dnssec: drop kr_nsec_name_error_response_check()Vladimír Čunát2022-05-182-104/+0
* lib/dnssec: replace kr_nsec_existence_denial()Vladimír Čunát2022-05-182-204/+85
* lib/dnssec/ta: use trie_t instead of map_tOto Šťáva2022-05-042-26/+30
* Fix defects detected by Coverity ScanOto Šťáva2022-02-281-8/+0
* lib/dnssec: conditionally ignore SHA1 DS, as SHOULD by RFC4509Vladimír Čunát2022-02-041-5/+21
* daemon/zimport: rewrite, support ZONEMDVladimír Čunát2021-12-221-1/+1
* libknot: bump dependency version to 3.0.2Tomas Krizek2021-12-211-5/+1
* spellingJosh Soref2021-11-193-16/+16
* lib/dnssec/signature nit: improve API docsVladimír Čunát2021-11-031-1/+1
* log: shortening LOG_GRP_<SOMETHING> to <SOMETHING>Lukáš Ježek2021-07-291-2/+2
* log: remove hard-coded prefix from log messagesLukáš Ježek2021-07-291-2/+2
* log: split to groupsLukáš Ježek2021-07-291-2/+2
* treewide: rename assumptions to kr_assert() / kr_fails_assert()Tomas Krizek2021-05-253-26/+26
* lib/dnssec/ta.c: replace assertsTomas Krizek2021-05-251-1/+1
* lib/dnssec/signature.c: replace assertsTomas Krizek2021-05-251-31/+24
* lib/dnssec/nsec3.c: replace assertsTomas Krizek2021-05-252-128/+83
* lib/dnssec/nsec.c: replace assertsTomas Krizek2021-05-251-88/+52
* lib/dnssec/ta: remove trivial kr_ta_covers_qry()Vladimír Čunát2021-05-151-12/+0
* lib/resolve: minor improvements around kr_ta_* callsVladimír Čunát2021-05-102-24/+0
* lib/dnssec/ta: remove unused kr_ta_covers() functionVladimír Čunát2021-05-102-24/+1
* lib/dnssec/ta kr_ta_covers_qry(): generalize and improveVladimír Čunát2021-05-102-19/+40
* validator: improve NTA precisionVladimír Čunát2021-05-061-0/+1
* validator: avoid assertion in an edge-caseVladimír Čunát2021-04-302-0/+8
* treewide: remove duplicate contrib/wire.hVladimír Čunát2021-04-141-3/+2
* validate: fix on some NSEC ranges with zero byte(s)Vladimír Čunát2021-04-101-3/+63
* treewide: add defensive checks for the NSEC3 limitVladimír Čunát2021-03-301-0/+4
* validate: downgrade zone on high NSEC3 iterationsVladimír Čunát2021-03-301-0/+12
* lib/dnssec: fix build against libdnssec 3.0Vladimír Čunát2020-09-011-1/+6
* doc-comments: fix some of the complaints from doxygenVladimír Čunát2020-07-151-2/+1
* treewide: machine readable license for GNU GPLv3+ source codePetr Špaček2020-02-258-104/+8
* gitlabci: fix lint:tidyTomas Krizek2019-03-121-2/+2
* trust anchors: improvements around DNSKEY refusalVladimír Čunát2019-01-091-18/+24
* trust_anchors: add .summary() and use it for loggingPetr Špaček2019-01-091-4/+0
* treewide nitpick: fix -WshadowVladimír Čunát2019-01-081-4/+4
* Re-revert "kr_nsec_bitmap_contains_type(): moved to libdnssec"Vladimír Čunát2018-09-043-57/+17