Context Navigation

← Previous Period
Next Period →

Timeline

01/18/11:

20:09 PDNSSEC edited by ahu: (diff)
20:01 Changeset [1896] by ahu: Jose Arthur Benetasso Villanova fixed a very old comment typo ;-)
20:01 Changeset [1895] by ahu: Jose Arthur Benetasso Villanova contributed the postgresql schema update …
16:33 Changeset [1894] by ahu: document (un)set-presigned
15:55 Changeset [1893] by ahu: implement 'pdnssec set-presigned', allowing PowerDNSSEC to serve …
13:58 Ticket #336 (field change_date does not work as expected) created by anon: I am using pdns 2.9.21 with gpgsql backend I've set up serial = 0 in SOA …
09:43 Changeset [1892] by ahu: remove the signing code from dnspacket, where it was cute but wrong.
09:37 Changeset [1891] by ahu: add tools to compare pdns output to that of other servers
09:21 Changeset [1890] by ahu: move clone-zone into the pdnssec era

01/17/11:

21:04 Changeset [1889] by ahu: alternate rdtsc() implementation

01/15/11:

21:41 Changeset [1888] by ahu: massively speed up our NSEC3 AXFR code
12:26 Changeset [1887] by ahu: add support for NSEC3 zonetransfers!
12:24 Changeset [1886] by ahu: emitNSEC3 and getNSEC3Hashes are useful outside of the packethandler class …
12:23 Changeset [1885] by ahu: teach bindbackend about the possibility of empty nsec3 salts

01/14/11:

23:12 Changeset [1884] by ahu: implement 'pdnssec import-zone-key-pem' which is compatible with the …
14:14 Ticket #335 (pdnsd problem querying pdns authoritative only and external cnames) created by anon: Hi, I have a problem configuring pdnsd proxy server querying a local only …
13:12 Changeset [1883] by ahu: fix up nsec3 hunt in BIND backend, problems spotted by Christoph Meerwald
13:10 Changeset [1882] by ahu: properly invalidate keycache on adding a new key - this removes the …

01/12/11:

21:19 Changeset [1881] by ahu: repeat after me.. no more rushed coding
20:27 Changeset [1880] by ahu: make packetcache further aware of difference between tcp and udp, so we …
19:26 Changeset [1879] by ahu: refuse to make keys of unknown algorithm instead of just complaining allow …
17:35 Changeset [1878] by ahu: oops, put the NSEC3NARROW item in the NSEC3PARAM cache
17:30 Changeset [1877] by ahu: don't interleave DNSBackend::lookup and ::getSOA! Plus don't add NSEC to …

01/11/11:

23:50 Changeset [1876] by ahu: add some logic to prevent us crashing on an nsec3 non-narrow zone with …
23:00 Changeset [1875] by ahu: messed up the 'narrow' detection from the db
22:45 Changeset [1874] by ahu: keycache would only serve expired records, and never renew expired …
22:42 Changeset [1873] by ahu: improve syntax checking for pdnssec
22:41 Changeset [1872] by ahu: make replacing_insert from syncres.hh useable for the rest of pdns
21:08 Changeset [1871] by ahu: restore NSEC generation & signatures for AXFR.
20:59 Changeset [1870] by ahu: implement simplistic 60 dnssec key cache
20:56 Changeset [1869] by ahu: make packetcache dnssec aware (different answers based on do)
20:52 Changeset [1868] by ahu: quiet query logging with log-dns-details, move query logging to place …
15:40 PDNSSEC edited by ahu: (diff)
15:39 Changeset [1867] by ahu: remainder of 3600-ectomy
15:14 Changeset [1866] by ahu: making the world safe for ttl!=3600 dnssec, one step at a time ;-)
14:44 Changeset [1865] by ahu: fix typo in bindbackend, add pdnssec hash-zone-record convenience function …
12:53 PDNSSEC edited by ahu: (diff)
12:19 WikiStart edited by ahu: (diff)
12:13 PDNSSEC edited by ahu: (diff)
11:26 PDNSSEC edited by ahu: (diff)
11:05 PDNSSEC edited by ahu: (diff)
11:01 PDNSSEC edited by ahu: (diff)
10:29 Changeset [1864] by ahu: oops - previous commit was uncompiled & thus broken
10:25 Changeset [1863] by ahu: silence a warning from the BIND backend, plus vamp up the auto-build …
10:21 PDNSSEC edited by ahu: (diff)
10:15 Changeset [1862] by ahu: slim down our tar.gz, taking out a .svn directory + outdated sgml
09:43 Changeset [1861] by ahu: update our internal tar.gz builder
09:43 Changeset [1860] by ahu: bye bye sgml, plus some updates to the xml

01/10/11:

15:41 PDNSSEC edited by ahu: (diff)
14:48 Changeset [1859] by ahu: hypermodern bulk slave engine forward ported from 2.9.22.x. Does 5000 …
14:45 Ticket #334 (Auto-splitting long TXT records doesn't work) created by anon: If you enter a TXT record longer than 255 characters the record generates …
14:44 Changeset [1858] by ahu: remote master can now also have a :port number - forward port from …
14:42 Changeset [1857] by ahu: add multiple master support to gsqlbackends - forward port from 2.9.22.x
14:41 Changeset [1856] by ahu: make sure geobackend sets auth=1, which should always be true
12:50 Changeset [1855] by ahu: make sure that DNSKEY requests can be delegated don't do NSEC on …
12:14 Changeset [1854] by ahu: no longer try to add NSEC/NSEC3 to unsigned zones also don't add DNSSEC …
12:03 Changeset [1853] by ahu: more dnssec docs
11:06 Ticket #333 (Improvement for recursor wipe cache) created by anon: This enables cleaning of names from packet cache as well. Also adds …
09:39 Changeset [1852] by ahu: add support for unsalted nsec3 hashes ('1 0 1 -')
08:51 Changeset [1851] by ahu: show-zone output partially went to stderr we can now roundtrip a zone via …

01/09/11:

22:05 Changeset [1850] by ahu: fix giant memory leak, silence debugging, improve error message about …
19:26 Changeset [1849] by ahu: index the signature cache on the hash of the public key instead of on the …
16:54 Changeset [1848] by ahu: move some non-'keeper' dnssec signing logic away to a separate file, …
11:40 Changeset [1847] by ahu: 3.0pre
11:39 PDNSSEC edited by ahu: (diff)
11:31 Changeset [1846] by ahu: remove more of boost dependency, fix up debian compilation
11:27 Changeset [1845] by ahu: remove boost filesystem dependency
10:06 Changeset [1844] by ahu: always sign DS records - bit of an oddity, we normally assume that all …
09:58 Changeset [1843] by ahu: * Make everything aware of multiple simultaneous signing keys * …
09:51 Changeset [1842] by ahu: silence some debugging output on ordering zone information
09:37 Changeset [1841] by ahu: fix up confusing message about starting up another distributor thread
07:13 Changeset [1840] by ahu: remove dependency on the boost_system libs, easing compilation on …
07:12 Changeset [1839] by ahu: move document generation structure fully over to xml docbook

01/08/11:

14:22 Changeset [1838] by ahu: moving to prettier docbook xml output
01:54 Changeset [1837] by ahu: make rest of powerdns RSASHA256 aware. Works too.
01:53 Changeset [1836] by ahu: unbase32hex speedup dereconversion broke everything, fixed now
00:57 Changeset [1835] by ahu: make dnsseckeeper & dnssecinfra code, plus pdnssec, aware of non-RSASHA1 …
00:24 Changeset [1834] by ahu: also emit DS for digest type 2 (SHA256) in pdnssec output
00:13 Changeset [1833] by ahu: make sure pipe backend for now gets the 'auth' field *mostly* right

01/07/11:

23:29 Changeset [1832] by ahu: make sure we don't send back an oversized packet after adding signatures
23:04 Changeset [1831] by ahu: <- idiot
21:34 Ticket #200 (pdns auth from svn sends truncated oversized responses for every query but ...) closed by ahu: fixed: fixed in commit 1830
21:33 Changeset [1830] by ahu: remove old 'guillotine' truncate functionality which should've been …
21:01 Changeset [1829] by ahu: remove one unneccessary layer of (un)base32hex transitions, spotted by Aki …
14:02 Changeset [1828] by ahu: don't truncate just before sending answer, plus improve logging a bit
11:32 Changeset [1827] by ahu: fix base32 padding issue as found by Aki Tuomi and solved by Michel Stol

01/06/11:

23:00 Changeset [1826] by ahu: add some operational doctrine, plus link to the wiki
22:23 Changeset [1825] by ahu: more documentation, plus add importing as zsk, ksk, plus adding a zsk or …
22:14 Changeset [1824] by ahu: make importing keys a bit more resilient against whitespace, plus fix up …
22:10 Changeset [1823] by ahu: oops, the --config-name fix broke setups w/o a config-name plus add …
22:00 Changeset [1822] by ahu: report (fatal) errors better
21:41 Changeset [1821] by ahu: more docs
20:09 Changeset [1820] by ahu: suggested by Maik Zumstrull, pdnssec needs --config-name to access virtual …
19:57 Changeset [1819] by ahu: make sure that we dnssec-rectify dnssec enabled zones that are slaved from …
17:00 PDNSSEC edited by ahu: (diff)
17:00 PDNSSEC edited by ahu: (diff)
16:58 Changeset [1818] by ahu: and like this?
16:56 Changeset [1817] by ahu: maybe this helps us build..
16:15 PDNSSEC edited by ahu: (diff)
15:58 PDNSSEC edited by ahu: (diff)
15:52 Changeset [1816] by ahu: make pdnssec output useful help rename order-zone to rectify-zone and make …
15:41 Changeset [1815] by ahu: make sqlite3 schema case insensitive, thanks to Peter van Dijk for telling …
15:18 PDNSSEC edited by ahu: (diff)
14:23 Changeset [1814] by ahu: disable AXFR for NSEC3 zones for now - we can do it for non-narrow mode, …
14:03 Changeset [1813] by ahu: spotted by Wouter Wijngaards, turns out we were incrementing/decrementing …
13:44 Changeset [1812] by ahu: make sure 'pdnssec' can see the ultra-vital 'random' backend too
13:38 Changeset [1811] by ahu: Thanks to Roy Arends, actually make nsec3-narrow work, enable with …
10:15 Changeset [1810] by ahu: implement 'narrow' NSEC3 generation w/o consulting the database ordering, …
10:13 Changeset [1809] by ahu: quiet some nsec3 debugging output

01/04/11:

23:00 Changeset [1808] by ahu: don't synthesise an NSEC for NSEC3 zones when queried directly for NSEC
22:22 PDNSSEC edited by ahu: (diff)
21:59 Changeset [1807] by ahu: On his birthday, José Arthur Benetasso Villanova gave us initial …
20:57 Changeset [1806] by ahu: when explicitly asking for an NSEC, we should not do a 'relative' pointer …
20:35 Changeset [1805] by ahu: our random may be random, but it is authoritative random!!
20:19 PDNSSEC edited by ahu: (diff)
19:52 PDNSSEC/details edited by ahu: (diff)
19:50 PDNSSEC/details edited by ahu: (diff)
19:44 PDNSSEC edited by ahu: (diff)
17:16 PDNSSEC edited by ahu: (diff)
16:11 PDNSSEC edited by ahu: (diff)
16:09 Changeset [1804] by ahu: PAY ATTENTION! from this commit onwards, generic backends will NOT perform …
13:19 Changeset [1803] by ahu: actually set the module-dir before we need it instead of after - spotted …
11:12 Changeset [1802] by ahu: teach pdnssec about config-dir
11:12 PDNSSEC edited by ahu: (diff)
11:06 PDNSSEC edited by ahu: (diff)
11:02 PDNSSEC edited by ahu: (diff)
10:31 PDNSSEC edited by ahu: (diff)
10:20 Changeset [1801] by ahu: make pdnssec (hopefully) support dynamically loaded modules too
10:03 Changeset [1800] by ahu: make dnssec queries configurable, patch by Stefan Schmidt. Will have to be …

01/03/11:

21:59 Changeset [1799] by ahu: also include DNSKEY on a case-insensitive match. Lowercase RRDATA …
21:11 Changeset [1798] by ahu: make sure we stuff in synthesised DNSKEYs for an ANY query - maybe this …
12:16 Changeset [1797] by ahu: used a non-existent database connection in tcp backend for signing (oops)
12:03 Changeset [1796] by ahu: enable hybrid gsqlite3/bind operation where sqlite hosts keying material …
00:07 PDNSSEC edited by ahu: (diff)

01/02/11:

22:50 Changeset [1795] by ahu: add some primitive locking to the rrsig cache, plus clarify some logging …
22:49 Changeset [1794] by ahu: add the code to add the new fields to the sqlite3 sql schema
22:48 Changeset [1793] by ahu: make pdnssec read the right configuration file, plus make add-zone-key add …
22:32 Changeset [1792] by ahu: turns out that there is a tiny chance we crash on setting the …
20:40 Changeset [1791] by ahu: hook up activate-domain-key, deactivate-domain-key, remove-domain-key
19:34 Changeset [1790] by ahu: move around a lot of stuff to isolate dnssec db connectivity fix up …
19:31 Changeset [1789] by ahu: move SOA serialization code away from dnspacket into generic dns.cc file, …
19:30 Changeset [1788] by ahu: add import-zone-key for interop, remove key-repository setting from …
19:28 Changeset [1787] by ahu: pare down zone2sql/zone2ldap dependencies so they don't depend on a …

01/01/11:

22:25 Changeset [1786] by ahu: some helpful migration sql statements - still quite brief
22:23 Changeset [1785] by ahu: move some more stuff to the 'infra' and away from the 'keeper'
22:22 Changeset [1784] by ahu: bye bye directory based dnssec key repo
22:21 Changeset [1783] by ahu: don't crash if the dnsseckeeper returns unexpected results
22:20 Changeset [1782] by ahu: actually compile the dbdnsseckeeper into the binaries
22:19 Changeset [1781] by ahu: hook up the dbdnsseckeeper to everything, implement (most) methods in the …
21:26 Changeset [1780] by ahu: enable sqlite3 as a dnssec backend - especially useful as key storage for …

12/31/10:

14:39 Changeset [1779] by ahu: in preparation for database storage of keys, move out some infrastructure …
14:31 Changeset [1778] by ahu: repair some tabdamage

12/30/10:

22:45 Changeset [1777] by ahu: fix up export-zone-key so that we set the algorithm field correctly
22:22 Changeset [1776] by ahu: default init last_changed in dnsresource records, finally shutting up …
22:22 Changeset [1775] by ahu: also fix up the signing of the SOA in noerror responses
22:20 Changeset [1774] by ahu: stop bind backend from crashing on domains that are not found, plus fix up …
20:52 Changeset [1773] by ahu: spruce up 'show-zone' output, add 'set-nsec3', 'unset-nsec3', …
15:48 Changeset [1772] by ahu: mark bind supermaster code as 'experimental'
15:47 Changeset [1771] by ahu: clone-zone got inception and expiration wrong, plus teach it to grab the …
15:41 Changeset [1770] by ahu: bindbackend can now do nsec3, gets at least some records right ;-)
15:40 Changeset [1769] by ahu: re-enable order-zone, make it nsec/nsec3 aware dnsseckeeper
15:39 Changeset [1768] by ahu: silence some debugging output, clarify some comments
15:39 Changeset [1767] by ahu: lowercase the nsec3 output (hurts the eyes less, plus identical to nsd), …

12/29/10:

11:23 Ticket #332 (--start-id not respected when --zone is passed and named.conf not used in ...) created by anon: The sample command: zone2sql --start-id=10 …
09:58 Changeset [1766] by ahu: our 'throttle' code would do one final 'throttle' long after the time …

12/28/10:

15:13 Changeset [1765] by ahu: make sure zone2sql and zone2ldap know about the new dnssec file naming too
15:08 Changeset [1764] by ahu: testing scripts

12/27/10:

22:53 Changeset [1763] by ahu: fix up (not) signing SOA queries every once in a while, plus caching …
22:01 Changeset [1762] by ahu: interim commit to get it out of the way
21:55 Changeset [1761] by ahu: with this commit, ldns-signzone+nsd and 'drill -t axfr' on powerdns and …
20:25 Changeset [1760] by ahu: align our key storage naming with the excellent ldns/nsd/unbound tools, …
16:57 Changeset [1759] by ahu: fix up pdns_server for new key api
16:57 Changeset [1758] by ahu: this implies that there will be more dnsseckeepers - database backed for …
16:56 Changeset [1757] by ahu: move to mature key management (unified zsks, proper ids, active, inactive)

12/22/10:

10:31 Changeset [1756] by ahu: Kevin discovered a typo in the docs, thanks ;-)

12/21/10:

21:49 Changeset [1755] by ahu: move to keys with ids in addition to tags, so we can refer to keys in an …

Context Navigation

Timeline

01/18/11:

01/17/11:

01/15/11:

01/14/11:

01/12/11:

01/11/11:

01/10/11:

01/09/11:

01/08/11:

01/07/11:

01/06/11:

01/04/11:

01/03/11:

01/02/11:

01/01/11:

12/31/10:

12/30/10:

12/29/10:

12/28/10:

12/27/10:

12/22/10:

12/21/10:

12/19/10:

Download in other formats: