|
|
|
@2024
|
[2024]
|
2 years |
ahu |
this giant commit implements TSIG access control and outbound TSIG …
|
|
|
|
@2012
|
[2012]
|
2 years |
ahu |
this giant commit adds full IPv6 master/slaving/notification support which …
|
|
|
|
@1959
|
[1959]
|
2 years |
ahu |
divorce addRRSigs() from DNSPacket. Make sure addRRSigs() uses an RRSIG …
|
|
|
|
@1944
|
[1944]
|
2 years |
ahu |
remove qtype char* constructor
|
|
|
|
@1940
|
[1940]
|
2 years |
ahu |
even if we do opt-out, the NSEC3PARAM flags field should be 0
|
|
|
|
@1939
|
[1939]
|
2 years |
ahu |
if I understand things correctly, powerdns does 'opt-out' NSEC3, but we …
|
|
|
|
@1934
|
[1934]
|
2 years |
ahu |
make sure we sign our DNSKEYs when serving an AXFR. Plus remove some …
|
|
|
|
@1932
|
[1932]
|
2 years |
ahu |
silence a lot of debugging output at loglevel 9 (you did not see it, but …
|
|
|
|
@1930
|
[1930]
|
2 years |
ahu |
Christoph Meerwald discovered we would sign out-of-zone additional data, …
|
|
|
|
@1928
|
[1928]
|
2 years |
ahu |
reinstate 'recursor' handoff in auth server, issue spotted by Detlef …
|
|
|
|
@1903
|
[1903]
|
2 years |
ahu |
move code around in preparation for non-RSA keys & signatures
|
|
|
|
@1900
|
[1900]
|
2 years |
ahu |
work around apparent bug in 'dig' output of DS records. Dig likes to …
|
|
|
|
@1893
|
[1893]
|
2 years |
ahu |
implement 'pdnssec set-presigned', allowing PowerDNSSEC to serve …
|
|
|
|
@1892
|
[1892]
|
2 years |
ahu |
remove the signing code from dnspacket, where it was cute but wrong.
|
|
|
|
@1886
|
[1886]
|
2 years |
ahu |
emitNSEC3 and getNSEC3Hashes are useful outside of the packethandler class …
|
|
|
|
@1880
|
[1880]
|
2 years |
ahu |
make packetcache further aware of difference between tcp and udp, so we …
|
|
|
|
@1877
|
[1877]
|
2 years |
ahu |
don't interleave DNSBackend::lookup and ::getSOA!
Plus don't add NSEC to …
|
|
|
|
@1868
|
[1868]
|
2 years |
ahu |
quiet query logging with log-dns-details, move query logging to place …
|
|
|
|
@1867
|
[1867]
|
2 years |
ahu |
remainder of 3600-ectomy
|
|
|
|
@1855
|
[1855]
|
2 years |
ahu |
make sure that DNSKEY requests can be delegated
don't do NSEC on …
|
|
|
|
@1854
|
[1854]
|
2 years |
ahu |
no longer try to add NSEC/NSEC3 to unsigned zones
also don't add DNSSEC …
|
|
|
|
@1850
|
[1850]
|
2 years |
ahu |
fix giant memory leak, silence debugging, improve error message about …
|
|
|
|
@1843
|
[1843]
|
2 years |
ahu |
* Make everything aware of multiple simultaneous signing keys
* …
|
|
|
|
@1836
|
[1836]
|
2 years |
ahu |
unbase32hex speedup dereconversion broke everything, fixed now
|
|
|
|
@1830
|
[1830]
|
2 years |
ahu |
remove old 'guillotine' truncate functionality which should've been …
|
|
|
|
@1829
|
[1829]
|
2 years |
ahu |
remove one unneccessary layer of (un)base32hex transitions, spotted by Aki …
|
|
|
|
@1828
|
[1828]
|
2 years |
ahu |
don't truncate just before sending answer, plus improve logging a bit
|
|
|
|
@1813
|
[1813]
|
2 years |
ahu |
spotted by Wouter Wijngaards, turns out we were incrementing/decrementing …
|
|
|
|
@1811
|
[1811]
|
2 years |
ahu |
Thanks to Roy Arends, actually make nsec3-narrow work, enable with …
|
|
|
|
@1810
|
[1810]
|
2 years |
ahu |
implement 'narrow' NSEC3 generation w/o consulting the database ordering, …
|
|
|
|
@1808
|
[1808]
|
2 years |
ahu |
don't synthesise an NSEC for NSEC3 zones when queried directly for NSEC
|
|
|
|
@1806
|
[1806]
|
2 years |
ahu |
when explicitly asking for an NSEC, we should not do a 'relative' pointer …
|
|
|
|
@1799
|
[1799]
|
2 years |
ahu |
also include DNSKEY on a case-insensitive match.
Lowercase RRDATA …
|
|
|
|
@1798
|
[1798]
|
2 years |
ahu |
make sure we stuff in synthesised DNSKEYs for an ANY query - maybe this …
|
|
|
|
@1797
|
[1797]
|
2 years |
ahu |
used a non-existent database connection in tcp backend for signing (oops)
|
|
|
|
@1796
|
[1796]
|
2 years |
ahu |
enable hybrid gsqlite3/bind operation where sqlite hosts keying material …
|
|
|
|
@1790
|
[1790]
|
2 years |
ahu |
move around a lot of stuff to isolate dnssec db connectivity
fix up …
|
|
|
|
@1775
|
[1775]
|
2 years |
ahu |
also fix up the signing of the SOA in noerror responses
|
|
|
|
@1767
|
[1767]
|
2 years |
ahu |
lowercase the nsec3 output (hurts the eyes less, plus identical to nsd), …
|
|
|
|
@1763
|
[1763]
|
2 years |
ahu |
fix up (not) signing SOA queries every once in a while, plus caching …
|
|
|
|
@1759
|
[1759]
|
2 years |
ahu |
fix up pdns_server for new key api
|
|
|
|
@1709
|
[1709]
|
3 years |
ahu |
make sure we are more query class safe, so auth now only replies to …
|
|
|
|
@1647
|
[1647]
|
3 years |
ahu |
make sure NSEC for zone apex covers the DNSKEY too
|
|
|
|
@1616
|
[1616]
|
3 years |
ahu |
implement 'NSEC3', and enable it for NXDOMAIN responses - other cases have …
|
|
|
|
@1615
|
[1615]
|
3 years |
ahu |
implement first ghetto nsec3 generation code - all wrong
|
|
|
|
@1613
|
[1613]
|
3 years |
ahu |
infrastructure in packethandler.cc & pdnssec to start to do something with …
|
|
|
|
@1607
|
[1607]
|
3 years |
ahu |
fix 'same level soa' regression test, plus clean up some whitespace
|
|
|
|
@1606
|
[1606]
|
3 years |
ahu |
make sure we don't consult cache for dnssec questions for now (since we …
|
|
|
|
@1599
|
[1599]
|
3 years |
ahu |
rectify tabs/spaces, plus clarify debugging output, plus stop NS/Wildcard …
|
|
|
|
@1581
|
[1581]
|
3 years |
ahu |
dnskey requests contain auth data in their responses - thanks to Leen …
|
|
|
|
@1571
|
[1571]
|
3 years |
ahu |
make sure we do not add NSEC records to non-DNSSEC queries
|
|
|
|
@1561
|
[1561]
|
3 years |
ahu |
rip out old, but efficient and highly tuned but scary packethandler code, …
|
|
|
|
@1543
|
[1543]
|
3 years |
ahu |
add testcase for wildcard CNAME pointing to a record that does not have …
|
|
|
|
@1542
|
[1542]
|
3 years |
ahu |
close issue where asking for a AAAA for a record with a CNAME only to an A …
|
|
|
|
@1472
|
[1472]
|
3 years |
ahu |
and the final bit of whitespace/tab cleanup
|
|
|
|
@1469
|
[1469]
|
3 years |
ahu |
it turns out that boost::iequals is dog slow, introduce pdns_iequals which …
|
|
|
|
@1468
|
[1468]
|
3 years |
ahu |
silence 'sdig' EDNS-PING output, replace Utility::strcasecmp by …
|
|
|
|
@1466
|
[1466]
|
3 years |
ahu |
close ticket 224, 'no referral when queried for SOA of subdomain'. …
|
|
|
|
@1407
|
[1407]
|
4 years |
ahu |
in the PacketCache?, we sometimes cached things we should not have been
|
|
|
|
@1344
|
[1344]
|
4 years |
ahu |
fix duplicate CNAME issue discovered by Andreas Jakum of UPC, plus address …
|
|
|
|
@1321
|
[1321]
|
4 years |
ahu |
indent, plus make 'notify' program a bit more powerful
|
|
|
|
@1302
|
[1302]
|
5 years |
ahu |
fix up MBOXFW fancy records, plus add them to the regression tests
|
|
|
|
@1299
|
[1299]
|
5 years |
ahu |
fix up the URL fancy record type, plus tell sdig no longer to emit EDNS0 …
|
|
|
|
@1289
|
[1289]
|
5 years |
ahu |
just remove the HINFO code - was not needed
|
|
|
|
@1276
|
[1276]
|
5 years |
ahu |
third batch of std::exception
|
|
|
|
@1272
|
[1272]
|
5 years |
ahu |
make single threaded mode more resilient against exceptions - thanks …
|
|
|
|
@1239
|
[1239]
|
5 years |
ahu |
prevent powerdns being hammered by servers repeating malformed queries ad …
|
|
|
|
@1232
|
[1232]
|
5 years |
ahu |
implement EDNS NSID call (RFC 5001), plus an experimental EDNS option …
|
|
|
|
@1216
|
[1216]
|
5 years |
ahu |
second batch of non-behaviour changing changes (we hope)
|
|
|
|
@1147
|
[1147]
|
5 years |
ahu |
fix cname-and-wildcard with qname but no rrcode match, reported by zzyzz
|
|
|
|
@1113
|
[1113]
|
5 years |
ahu |
slight speedup by removing duplicate queries in case of non-aa answer
|
|
|
|
@1106
|
[1106]
|
6 years |
ahu |
make notification-proxy trusted-notification-host support multiple hosts
|
|
|
|
@1099
|
[1099]
|
6 years |
ahu |
properly set ra bit if needed, closing ticket 167 reported by Augie Schwer
|
|
|
|
@1085
|
[1085]
|
6 years |
ahu |
implement trusted-notification-proxy, improve logging in nproxy
|
|
|
|
@1081
|
[1081]
|
6 years |
ahu |
potential fix for cname/wildcard issue
|
|
|
|
@1079
|
[1079]
|
6 years |
ahu |
plug memory leak on packet building error caused by bogus database …
|
|
|
|
@1078
|
[1078]
|
6 years |
ahu |
fix new timeout code (too quick to timeout), set notification opcode on …
|
|
|
|
@1074
|
[1074]
|
6 years |
ahu |
some small unimportant changes
|
|
|
|
@1054
|
[1054]
|
6 years |
ahu |
final fix hopefully for fancy record any queries of wildcard records
|
|
|
|
@1053
|
[1053]
|
6 years |
ahu |
further fancy record fixes as debugged by Jorn Ekkelenkamp, this time for …
|
|
|
|
@1051
|
[1051]
|
6 years |
ahu |
silence signedness warning, refuse direct queries for non-standard 'URL' …
|
|
|
|
@1036
|
[1036]
|
6 years |
ahu |
fix up fancy records
|
|
|
|
@1034
|
[1034]
|
6 years |
ahu |
remove some whitespace, fixup 'reload' in bind backend, fix incoming …
|
|
|
|
@1031
|
[1031]
|
6 years |
ahu |
no longer recurse for additional records - they are ignored anyhow
|
|
|
|
@1015
|
[1015]
|
6 years |
ahu |
fix some MOADNSParser problems (notifications, for example), remove dead …
|
|
|
|
@1014
|
[1014]
|
6 years |
ahu |
improved support for multiline records in zones, plus accept @ as part of …
|
|
|
|
@1004
|
[1004]
|
6 years |
ahu |
be a bit more precise about database errrors in logging
|
|
|
|
@992
|
[992]
|
6 years |
ahu |
fix ticket 123 - but I'm unhappy with the fix..
|
|
|
|
@983
|
[983]
|
6 years |
ahu |
improve binary compatability with BIND
|
|
|
|
@980
|
[980]
|
6 years |
ahu |
first round of tcpreceiver cleanups - should fix memory leaks, plus add …
|
|
|
|
@972
|
[972]
|
6 years |
ahu |
move DNSPacket over to MOADNSParser!
|
|
|
|
@961
|
[961]
|
6 years |
ahu |
put DNSPacket on a diet, move several static functions out of it, move …
|
|
|
|
@947
|
[947]
|
6 years |
ahu |
fix 'ns with identical glue' giving sort of NXRRSET, plus regression test. …
|
|
|
|
@940
|
[940]
|
6 years |
ahu |
add 'uptime' to rrd graphs, merge Augie Schwer's fixes for ticket #119 - …
|
|
|
|
@912
|
[912]
|
7 years |
ahu |
update version to 3.1.4-pre2
add support for "send-root-referral=lean"
add …
|
|
|
|
@884
|
[884]
|
7 years |
ahu |
patch by Derrik Pates that fixes fancy records
|
|
|
|
@878
|
[878]
|
7 years |
ahu |
make powerdns less chatty over malformed queries
|
|
|
|
@874
|
[874]
|
7 years |
ahu |
fix possible leak of tcp connections
|
|
|
|
@680
|
[680]
|
7 years |
ahu |
the FSF has moved!
|
|
|
|
@539
|
[539]
|
8 years |
ahu |
Fix 'same level NS referral', as exemplified by the new …
|
|
|
|