Timeline
01/11/11:
- 23:50 Changeset [1876] by
- add some logic to prevent us crashing on an nsec3 non-narrow zone with …
- 23:00 Changeset [1875] by
- messed up the 'narrow' detection from the db
- 22:45 Changeset [1874] by
- keycache would only serve expired records, and never renew expired …
- 22:42 Changeset [1873] by
- improve syntax checking for pdnssec
- 22:41 Changeset [1872] by
- make replacing_insert from syncres.hh useable for the rest of pdns
- 21:08 Changeset [1871] by
- restore NSEC generation & signatures for AXFR.
- 20:59 Changeset [1870] by
- implement simplistic 60 dnssec key cache
- 20:56 Changeset [1869] by
- make packetcache dnssec aware (different answers based on do)
- 20:52 Changeset [1868] by
- quiet query logging with log-dns-details, move query logging to place …
- 15:40 PDNSSEC edited by
- (diff)
- 15:39 Changeset [1867] by
- remainder of 3600-ectomy
- 15:14 Changeset [1866] by
- making the world safe for ttl!=3600 dnssec, one step at a time ;-)
- 14:44 Changeset [1865] by
- fix typo in bindbackend, add pdnssec hash-zone-record convenience function …
- 12:53 PDNSSEC edited by
- (diff)
- 12:19 WikiStart edited by
- (diff)
- 12:13 PDNSSEC edited by
- (diff)
- 11:26 PDNSSEC edited by
- (diff)
- 11:05 PDNSSEC edited by
- (diff)
- 11:01 PDNSSEC edited by
- (diff)
- 10:29 Changeset [1864] by
- oops - previous commit was uncompiled & thus broken
- 10:25 Changeset [1863] by
- silence a warning from the BIND backend, plus vamp up the auto-build …
- 10:21 PDNSSEC edited by
- (diff)
- 10:15 Changeset [1862] by
- slim down our tar.gz, taking out a .svn directory + outdated sgml
- 09:43 Changeset [1861] by
- update our internal tar.gz builder
- 09:43 Changeset [1860] by
- bye bye sgml, plus some updates to the xml
01/10/11:
- 15:41 PDNSSEC edited by
- (diff)
- 14:48 Changeset [1859] by
- hypermodern bulk slave engine forward ported from 2.9.22.x. Does 5000 …
- 14:45 Ticket #334 (Auto-splitting long TXT records doesn't work) created by
- If you enter a TXT record longer than 255 characters the record generates …
- 14:44 Changeset [1858] by
- remote master can now also have a :port number - forward port from …
- 14:42 Changeset [1857] by
- add multiple master support to gsqlbackends - forward port from 2.9.22.x
- 14:41 Changeset [1856] by
- make sure geobackend sets auth=1, which should always be true
- 12:50 Changeset [1855] by
- make sure that DNSKEY requests can be delegated don't do NSEC on …
- 12:14 Changeset [1854] by
- no longer try to add NSEC/NSEC3 to unsigned zones also don't add DNSSEC …
- 12:03 Changeset [1853] by
- more dnssec docs
- 11:06 Ticket #333 (Improvement for recursor wipe cache) created by
- This enables cleaning of names from packet cache as well. Also adds …
- 09:39 Changeset [1852] by
- add support for unsalted nsec3 hashes ('1 0 1 -')
- 08:51 Changeset [1851] by
- show-zone output partially went to stderr we can now roundtrip a zone via …
01/09/11:
- 22:05 Changeset [1850] by
- fix giant memory leak, silence debugging, improve error message about …
- 19:26 Changeset [1849] by
- index the signature cache on the hash of the public key instead of on the …
- 16:54 Changeset [1848] by
- move some non-'keeper' dnssec signing logic away to a separate file, …
- 11:40 Changeset [1847] by
- 3.0pre
- 11:39 PDNSSEC edited by
- (diff)
- 11:31 Changeset [1846] by
- remove more of boost dependency, fix up debian compilation
- 11:27 Changeset [1845] by
- remove boost filesystem dependency
- 10:06 Changeset [1844] by
- always sign DS records - bit of an oddity, we normally assume that all …
- 09:58 Changeset [1843] by
- * Make everything aware of multiple simultaneous signing keys * …
- 09:51 Changeset [1842] by
- silence some debugging output on ordering zone information
- 09:37 Changeset [1841] by
- fix up confusing message about starting up another distributor thread
- 07:13 Changeset [1840] by
- remove dependency on the boost_system libs, easing compilation on …
- 07:12 Changeset [1839] by
- move document generation structure fully over to xml docbook
01/08/11:
- 14:22 Changeset [1838] by
- moving to prettier docbook xml output
- 01:54 Changeset [1837] by
- make rest of powerdns RSASHA256 aware. Works too.
- 01:53 Changeset [1836] by
- unbase32hex speedup dereconversion broke everything, fixed now
- 00:57 Changeset [1835] by
- make dnsseckeeper & dnssecinfra code, plus pdnssec, aware of non-RSASHA1 …
- 00:24 Changeset [1834] by
- also emit DS for digest type 2 (SHA256) in pdnssec output
- 00:13 Changeset [1833] by
- make sure pipe backend for now gets the 'auth' field *mostly* right
01/07/11:
- 23:29 Changeset [1832] by
- make sure we don't send back an oversized packet after adding signatures
- 23:04 Changeset [1831] by
- <- idiot
- 21:34 Ticket #200 (pdns auth from svn sends truncated oversized responses for every query but ...) closed by
- fixed: fixed in commit 1830
- 21:33 Changeset [1830] by
- remove old 'guillotine' truncate functionality which should've been …
- 21:01 Changeset [1829] by
- remove one unneccessary layer of (un)base32hex transitions, spotted by Aki …
- 14:02 Changeset [1828] by
- don't truncate just before sending answer, plus improve logging a bit
- 11:32 Changeset [1827] by
- fix base32 padding issue as found by Aki Tuomi and solved by Michel Stol
01/06/11:
- 23:00 Changeset [1826] by
- add some operational doctrine, plus link to the wiki
- 22:23 Changeset [1825] by
- more documentation, plus add importing as zsk, ksk, plus adding a zsk or …
- 22:14 Changeset [1824] by
- make importing keys a bit more resilient against whitespace, plus fix up …
- 22:10 Changeset [1823] by
- oops, the --config-name fix broke setups w/o a config-name plus add …
- 22:00 Changeset [1822] by
- report (fatal) errors better
- 21:41 Changeset [1821] by
- more docs
- 20:09 Changeset [1820] by
- suggested by Maik Zumstrull, pdnssec needs --config-name to access virtual …
- 19:57 Changeset [1819] by
- make sure that we dnssec-rectify dnssec enabled zones that are slaved from …
- 17:00 PDNSSEC edited by
- (diff)
- 17:00 PDNSSEC edited by
- (diff)
- 16:58 Changeset [1818] by
- and like this?
- 16:56 Changeset [1817] by
- maybe this helps us build..
- 16:15 PDNSSEC edited by
- (diff)
- 15:58 PDNSSEC edited by
- (diff)
- 15:52 Changeset [1816] by
- make pdnssec output useful help rename order-zone to rectify-zone and make …
- 15:41 Changeset [1815] by
- make sqlite3 schema case insensitive, thanks to Peter van Dijk for telling …
- 15:18 PDNSSEC edited by
- (diff)
- 14:23 Changeset [1814] by
- disable AXFR for NSEC3 zones for now - we can do it for non-narrow mode, …
- 14:03 Changeset [1813] by
- spotted by Wouter Wijngaards, turns out we were incrementing/decrementing …
- 13:44 Changeset [1812] by
- make sure 'pdnssec' can see the ultra-vital 'random' backend too
- 13:38 Changeset [1811] by
- Thanks to Roy Arends, actually make nsec3-narrow work, enable with …
- 10:15 Changeset [1810] by
- implement 'narrow' NSEC3 generation w/o consulting the database ordering, …
- 10:13 Changeset [1809] by
- quiet some nsec3 debugging output
01/04/11:
- 23:00 Changeset [1808] by
- don't synthesise an NSEC for NSEC3 zones when queried directly for NSEC
- 22:22 PDNSSEC edited by
- (diff)
- 21:59 Changeset [1807] by
- On his birthday, José Arthur Benetasso Villanova gave us initial …
- 20:57 Changeset [1806] by
- when explicitly asking for an NSEC, we should not do a 'relative' pointer …
- 20:35 Changeset [1805] by
- our random may be random, but it is authoritative random!!
- 20:19 PDNSSEC edited by
- (diff)
- 19:52 PDNSSEC/details edited by
- (diff)
- 19:50 PDNSSEC/details edited by
- (diff)
- 19:44 PDNSSEC edited by
- (diff)
- 17:16 PDNSSEC edited by
- (diff)
- 16:11 PDNSSEC edited by
- (diff)
- 16:09 Changeset [1804] by
- PAY ATTENTION! from this commit onwards, generic backends will NOT perform …
- 13:19 Changeset [1803] by
- actually set the module-dir before we need it instead of after - spotted …
- 11:12 Changeset [1802] by
- teach pdnssec about config-dir
- 11:12 PDNSSEC edited by
- (diff)
- 11:06 PDNSSEC edited by
- (diff)
- 11:02 PDNSSEC edited by
- (diff)
- 10:31 PDNSSEC edited by
- (diff)
- 10:20 Changeset [1801] by
- make pdnssec (hopefully) support dynamically loaded modules too
- 10:03 Changeset [1800] by
- make dnssec queries configurable, patch by Stefan Schmidt. Will have to be …
01/03/11:
- 21:59 Changeset [1799] by
- also include DNSKEY on a case-insensitive match. Lowercase RRDATA …
- 21:11 Changeset [1798] by
- make sure we stuff in synthesised DNSKEYs for an ANY query - maybe this …
- 12:16 Changeset [1797] by
- used a non-existent database connection in tcp backend for signing (oops)
- 12:03 Changeset [1796] by
- enable hybrid gsqlite3/bind operation where sqlite hosts keying material …
- 00:07 PDNSSEC edited by
- (diff)
01/02/11:
- 22:50 Changeset [1795] by
- add some primitive locking to the rrsig cache, plus clarify some logging …
- 22:49 Changeset [1794] by
- add the code to add the new fields to the sqlite3 sql schema
- 22:48 Changeset [1793] by
- make pdnssec read the right configuration file, plus make add-zone-key add …
- 22:32 Changeset [1792] by
- turns out that there is a tiny chance we crash on setting the …
- 20:40 Changeset [1791] by
- hook up activate-domain-key, deactivate-domain-key, remove-domain-key
- 19:34 Changeset [1790] by
- move around a lot of stuff to isolate dnssec db connectivity fix up …
- 19:31 Changeset [1789] by
- move SOA serialization code away from dnspacket into generic dns.cc file, …
- 19:30 Changeset [1788] by
- add import-zone-key for interop, remove key-repository setting from …
- 19:28 Changeset [1787] by
- pare down zone2sql/zone2ldap dependencies so they don't depend on a …
01/01/11:
- 22:25 Changeset [1786] by
- some helpful migration sql statements - still quite brief
- 22:23 Changeset [1785] by
- move some more stuff to the 'infra' and away from the 'keeper'
- 22:22 Changeset [1784] by
- bye bye directory based dnssec key repo
- 22:21 Changeset [1783] by
- don't crash if the dnsseckeeper returns unexpected results
- 22:20 Changeset [1782] by
- actually compile the dbdnsseckeeper into the binaries
- 22:19 Changeset [1781] by
- hook up the dbdnsseckeeper to everything, implement (most) methods in the …
- 21:26 Changeset [1780] by
- enable sqlite3 as a dnssec backend - especially useful as key storage for …
12/31/10:
- 14:39 Changeset [1779] by
- in preparation for database storage of keys, move out some infrastructure …
- 14:31 Changeset [1778] by
- repair some tabdamage
12/30/10:
- 22:45 Changeset [1777] by
- fix up export-zone-key so that we set the algorithm field correctly
- 22:22 Changeset [1776] by
- default init last_changed in dnsresource records, finally shutting up …
- 22:22 Changeset [1775] by
- also fix up the signing of the SOA in noerror responses
- 22:20 Changeset [1774] by
- stop bind backend from crashing on domains that are not found, plus fix up …
- 20:52 Changeset [1773] by
- spruce up 'show-zone' output, add 'set-nsec3', 'unset-nsec3', …
- 15:48 Changeset [1772] by
- mark bind supermaster code as 'experimental'
- 15:47 Changeset [1771] by
- clone-zone got inception and expiration wrong, plus teach it to grab the …
- 15:41 Changeset [1770] by
- bindbackend can now do nsec3, gets at least some records right ;-)
- 15:40 Changeset [1769] by
- re-enable order-zone, make it nsec/nsec3 aware dnsseckeeper
- 15:39 Changeset [1768] by
- silence some debugging output, clarify some comments
- 15:39 Changeset [1767] by
- lowercase the nsec3 output (hurts the eyes less, plus identical to nsd), …
12/29/10:
- 11:23 Ticket #332 (--start-id not respected when --zone is passed and named.conf not used in ...) created by
- The sample command: zone2sql --start-id=10 …
- 09:58 Changeset [1766] by
- our 'throttle' code would do one final 'throttle' long after the time …
12/28/10:
- 15:13 Changeset [1765] by
- make sure zone2sql and zone2ldap know about the new dnssec file naming too
- 15:08 Changeset [1764] by
- testing scripts
12/27/10:
- 22:53 Changeset [1763] by
- fix up (not) signing SOA queries every once in a while, plus caching …
- 22:01 Changeset [1762] by
- interim commit to get it out of the way
- 21:55 Changeset [1761] by
- with this commit, ldns-signzone+nsd and 'drill -t axfr' on powerdns and …
- 20:25 Changeset [1760] by
- align our key storage naming with the excellent ldns/nsd/unbound tools, …
- 16:57 Changeset [1759] by
- fix up pdns_server for new key api
- 16:57 Changeset [1758] by
- this implies that there will be more dnsseckeepers - database backed for …
- 16:56 Changeset [1757] by
- move to mature key management (unified zsks, proper ids, active, inactive)
12/22/10:
- 10:31 Changeset [1756] by
- Kevin discovered a typo in the docs, thanks ;-)
12/21/10:
- 21:49 Changeset [1755] by
- move to keys with ids in addition to tags, so we can refer to keys in an …
12/19/10:
- 21:13 Changeset [1754] by
- clean up some dnssec logging
- 12:46 Changeset [1753] by
- tag for 3.3.1
12/18/10:
- 21:40 Changeset [1752] by
- first stab at all singing & dancing dnslabel class to replace our (ab)use …
12/14/10:
- 23:45 Ticket #331 (allow-from-file= parser needs review) created by
- When ACL file has normal stuff in it: gimre@voy:/tmp/pdns-recursor-3.3.1$ …
- 23:14 Ticket #330 (pdns-recursor doesn't respond to rec_control after reloading erroneous ACL ...) created by
- First we check with a correct ACL file: gimre@voy:~$ cat /tmp/foo.lst …
- 15:02 Changeset [1751] by
- add 3.3.1 release notes
- 14:35 Changeset [1750] by
- implement & document packetcache-bytes and cache-bytes, which return the …
- 14:15 Changeset [1749] by
- we're going to do a 3.3.1 - this isn't it yet, but there won't be an RC
- 14:14 Changeset [1748] by
- improve soft-calculated memory use statistics accuracy
12/13/10:
- 21:30 Ticket #326 ([PATCH] pdns_server crashes on SIGSTOP+SIGCONT, or under gdb) closed by
- fixed: Fixed in commit 1747
- 21:30 Changeset [1747] by
- Anders Kaseorg has fixed our semaphore code against returning EINTR, …
Note: See TracTimeline
for information about the timeline view.
