Commit graph

275 commits

Author SHA1 Message Date
Brian Wellington
70d08aea0a 800. [bug] dnssec-signzone produced incorrect statistics for
large zones.  [RT #1133]
2001-03-30 18:02:34 +00:00
Brian Wellington
45e22378fc dns_name_tofilenametext() now downcases the name, which means the callers
don't need to.
2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8 Add dns_name_tofilenametext(), and use it in the dnssec tools. 2001-03-27 22:57:48 +00:00
Brian Wellington
d566e8ea7b open databases with the root as origin when possible. 2001-03-27 22:08:39 +00:00
Brian Wellington
b03c1bf72f Make sure to create all keyset- and signedkey- files with downcased names;
downcase names before looking for signedkey- files in dnssec-signzone.
2001-03-23 03:59:00 +00:00
Brian Wellington
4e146b2fd6 duplicate keys on the command line were not properly suppressed 2001-03-22 19:28:23 +00:00
Brian Wellington
c3de05e48a send usage to stderr, not stdout. 2001-02-15 23:26:29 +00:00
Brian Wellington
f91dc72b42 725. [bug] Installing man pages could fail. 2001-02-04 15:52:44 +00:00
Stephen Jacob
524222cfb8 Added purify support (${PURIFY} to link lines) to remaining
Makefile.in's in bin/*
2001-02-02 18:53:05 +00:00
Brian Wellington
01b8865b14 689. [doc] man pages are now installed. [RT #210] 2001-01-18 01:33:54 +00:00
Brian Wellington
b43d1c1f46 Don't die if a child's key is in the zone and a signedkey file is present. 2001-01-12 23:36:03 +00:00
Brian Wellington
7dec36c225 677. [bug] dnssec-signzone would occasionally use the wrong ttl
for database operations and fail. [RT #643]
2001-01-12 01:38:21 +00:00
Brian Wellington
499b34cea0 copyright update 2001-01-09 22:01:04 +00:00
Brian Wellington
ee303f481d 639. [bug] Reading entropy from the keyboard would sometimes fail.
[RT #591]

note: the entropy callback conventions should really be documented.
2000-12-27 00:11:26 +00:00
Andreas Gustafsson
5ccb842cda lined up columns in signing performance statistics output
and made all the lines use colons consistently
2000-12-15 19:26:54 +00:00
Andreas Gustafsson
7e044d7367 fixed several bugs in signing performance statistics printing 2000-12-15 19:19:56 +00:00
Andreas Gustafsson
cbd600f1ba spacing 2000-12-15 19:07:07 +00:00
Olafur Gudmundsson
acc63b06d9 [615] dnssec-signzone did not like child signed keysets with multiple
signatures. (coredump)
[616] After consulting with Andreas I added some more timing statistics
	when statistics are requesed.
2000-12-15 05:58:08 +00:00
Brian Wellington
31874cf824 Print the version of dnssec-signzone in a comment in the signed zone. 2000-12-12 20:21:34 +00:00
Mark Andrews
88a6fef494 init dns_rdata_t's 2000-12-11 23:09:47 +00:00
Brian Wellington
253f774e35 608. [func] dnssec-signzone now adds a comment to the zone
with the time the file was signed.
2000-12-11 22:55:25 +00:00
Brian Wellington
78838d3e0c 8 space -> tab conversion 2000-12-11 19:24:30 +00:00
Brian Wellington
911ed0d3be Split journal.[ch] into journal.[ch] and diff.[ch] 2000-12-09 02:17:12 +00:00
Brian Wellington
aeab541554 (void) , not () 2000-12-07 23:00:59 +00:00
Brian Wellington
64ee08a355 If there are no signing keys, don't make sure that the SIG bit is turned on
when building NXTs.
2000-12-07 21:49:11 +00:00
Mark Andrews
6fda157766 ISC_LINK_*UNSAFE -> ISC_LINK_INITAND* 2000-12-07 20:15:58 +00:00
Brian Wellington
5d63dfaa9d Document the -n option 2000-12-07 02:20:07 +00:00
Brian Wellington
c9d7e543d0 597. [func] dnssec-signzone is now multithreaded. 2000-12-07 01:41:14 +00:00
Brian Wellington
dd380f3dca removed cruft that caused a memory leak 2000-12-06 00:38:12 +00:00
Andreas Gustafsson
3955d85b3c uninitialized variable 2000-11-27 22:19:37 +00:00
Brian Wellington
cffe50abf6 Lots of copyright updates 2000-11-18 03:01:17 +00:00
Brian Wellington
3f01dde0bd 554. [bug] In some cases, not all of the dnssec tools were
properly installed.
2000-11-13 20:09:45 +00:00
Andreas Gustafsson
5ae97875f9 undo: last changes belongs on release branch, not mainline 2000-11-10 18:05:25 +00:00
Andreas Gustafsson
ba8176b44d document that RSA keys are limited to 2000 bits in 9.0.1 2000-11-10 18:03:05 +00:00
Brian Wellington
9dc3c7213b Add -a (verify generated signatures) option to signkey and makekeyset 2000-11-09 18:55:17 +00:00
Brian Wellington
b585f0373c dnssec-signzone prints warnings if loading a child's signkey file fails. 2000-11-09 18:39:46 +00:00
Brian Wellington
b7bf1bc9d9 openssl rsa doesn't have a 2048 bit limit. Change it to 4096, which
takes a long time and a lot of entropy to generate.
2000-11-07 20:10:14 +00:00
Brian Wellington
85e60ef497 Change an error message and allow time to be specified as YYYYMMDD
(without HHMMSS).
2000-11-06 17:28:24 +00:00
Brian Wellington
6e4deb9f1b updates 2000-11-01 00:33:50 +00:00
Brian Wellington
82f4c5bc90 - print the names of the files generated, expand the usages a bit
- add -d directory option to dnssec-signzone
2000-10-31 20:09:15 +00:00
Mark Andrews
368b37b616 dns_rdata_invalidate -> dns_rdata_reset 2000-10-31 03:22:05 +00:00
Brian Wellington
c5c77ccbe1 Redo the dns_rdata_init() stuff again. 2000-10-28 22:56:25 +00:00
Brian Wellington
0bd785149d Document the '-t' (statistics) option. 2000-10-28 01:16:46 +00:00
Brian Wellington
3af66745d8 Use the nxt rdatastruct instead of an ugly hack. 2000-10-28 01:09:36 +00:00
Brian Wellington
3568cef90b Use the SOA TTL as the TTL for NXT records, not the SOA minimum value. 2000-10-28 00:53:39 +00:00
Brian Wellington
ecc8ad5822 changes to stats printing 2000-10-27 21:08:03 +00:00
Brian Wellington
babe5bc58a The initialize/invalidate rdata changes weren't made in all places. 2000-10-27 20:56:39 +00:00
Brian Wellington
18d1a4ea33 fix the case when keys are not specified on the command line 2000-10-27 20:27:51 +00:00
Brian Wellington
469f328aa0 - added statistics gathering
- work when keys specified on the command line are in a different directory
- misc cleanup
2000-10-27 18:48:22 +00:00
Mark Andrews
c03bb27f06 532. [func] Implement DNS UPDATE pseudo records using
DNS_RDATA_UPDATE flag.

 531.   [func]          Rdata really should be initalized before being
                        assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
                        dns_rdata_clone(), dns_rdata_fromregion()),
                        check that it is.
2000-10-25 04:26:57 +00:00
Mark Andrews
5e589b5356 Uninitalised link fixes, batch 1. 2000-10-20 02:21:58 +00:00
Mark Andrews
b20ee662a7 521. [bug] Detect master files which contain $INCLUDE and always
reload. [RT #196]

new result code DNS_R_SEENINCLUDE
dns_master_load* can now return DNS_R_SEENINCLUDE
2000-10-17 07:22:39 +00:00
Brian Wellington
6177fc9897 A lot of files generated by libtool were not properly ignored. 2000-10-16 23:44:25 +00:00
Brian Wellington
db503b6daf logging changes. 2000-09-26 22:11:25 +00:00
Brian Wellington
78106d74eb usage changes 2000-09-21 17:18:14 +00:00
Andreas Gustafsson
922e6a3c2a 478. [bug] "make install" failed if the directory specified with
--prefix did not already exist.
2000-09-20 19:06:16 +00:00
Brian Wellington
c0bf51978c remove unnecessary allocations 2000-09-12 11:50:46 +00:00
Brian Wellington
356fdd6073 missing initializer 2000-09-12 11:33:14 +00:00
Brian Wellington
1f8f904ad6 Added support for non-IN classes. 2000-09-12 10:07:50 +00:00
Brian Wellington
66f5b00c37 Some of the resigning policies were a bit strange. 2000-09-08 14:16:43 +00:00
Brian Wellington
c668509ab7 Allow signature validity period to be specified. 2000-09-08 14:15:10 +00:00
Brian Wellington
2abb1aa083 clarify an error message 2000-09-08 14:11:53 +00:00
Brian Wellington
42ffd37e52 remove unnecessary memory allocations 2000-09-08 08:47:29 +00:00
Brian Wellington
42848e71bc Move some shared code to the shared file. 2000-09-08 08:38:59 +00:00
Brian Wellington
4b9384f20d Print a warning if attempting to sign a zone with no keys. Fail if the
zone's signedkey file has keys that don't match the zone.
2000-09-07 15:53:15 +00:00
Andreas Gustafsson
6992382575 cut-and-paste-o 2000-08-17 22:08:16 +00:00
Brian Wellington
529ff4b495 HAVE_RANDOMDEV -> PATH_RANDOMDEV 2000-08-17 19:17:57 +00:00
Brian Wellington
a14613fce9 --with-randomdev sets HAVE_RANDOMDEV, use that instead of /dev/random. 2000-08-17 18:56:49 +00:00
Brian Wellington
df08ae001a Add @DNS_GSSAPI_LIBS@ to DNSLIBS 2000-08-17 02:11:50 +00:00
Andreas Gustafsson
91ab5ca629 <isc/print.h> needed for snprintf() 2000-08-17 01:22:10 +00:00
Brian Wellington
c6891157b1 The keyset for the root had two dots in it. 2000-08-14 20:39:23 +00:00
Brian Wellington
18940d2cdf The keyset filename was missing the trailing dot. 2000-08-14 20:11:29 +00:00
Brian Wellington
4fc4813eb3 Remove all non-threadsafe functions (in the non-threaded programs). 2000-08-14 04:43:17 +00:00
Brian Wellington
924fbebfbe more cleanup 2000-08-11 23:59:46 +00:00
Brian Wellington
b4d8cb6bf7 Large sections rewritten to use dns_diff_t instead of rdatalists/rdatasets.
This should remove any possible problems relating to database modifications
while iterators are active.
2000-08-11 23:23:19 +00:00
Brian Wellington
565d0dc22f Added a convenience function to convert a sig rdatastruct into a string. 2000-08-11 23:07:53 +00:00
Brian Wellington
c7d63ae5a4 Remove support for the zone status bit, since the proposal no longer exists. 2000-08-11 19:39:10 +00:00
Brian Wellington
cdde861f12 Chage 'key id' to 'key tag' in a few places 2000-08-10 22:08:23 +00:00
Brian Wellington
e8892697f9 Incrementally write the signed zone instead of adding all of the SIG
records to the database and using dns_db_dump.
2000-08-03 20:10:05 +00:00
Brian Wellington
3fe99b84d6 removed cruft 2000-08-03 13:42:46 +00:00
David Lawrence
9805b668b7 isc_buffer_putmem() takes an unsigned char as its second argument but a literal
string is of type char, so a couple of different OSs were complaining.
The 2nd parameter to isc_buffer_putmem() should probably be a const void *,
but rather than deal with changing the API and whatever that implies
with regard to versioning and whatever else, I have instead worked around
the issue by using isc_buffer_putuint8() to add a NUL to the buffer in
the two places that isc_buffer_putmem(&b, "", 1) was used.
2000-08-02 20:27:14 +00:00
Brian Wellington
aabfa856aa Memory could be leaked if an improper signed keyset was seen. 2000-08-02 13:51:02 +00:00
David Lawrence
40f53fa8d9 Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
own CVS tree will help minimize CVS conflicts.  Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
Brian Wellington
36e0c37908 359. [bug] dnssec-signzone occasionally signed glue records. 2000-07-31 23:11:23 +00:00
David Lawrence
90fc267992 needs <dns/fixedname.h> now that it rdatastruct.h does not provide it 2000-07-31 21:13:38 +00:00
David Lawrence
d1d5229cc9 needs <dns/fixedname.h> now that it rdatastruct.h does not provide it 2000-07-31 21:07:25 +00:00
Brian Wellington
abb04a9d70 Don't print "stop typing" if the user interrupted the entropy gathering. 2000-07-31 20:38:27 +00:00
Brian Wellington
c1ee9be19b clean up the text relating to pseudorandom input. 2000-07-31 19:39:42 +00:00
Brian Wellington
529a6b5224 358. [cleanup] Rename the intermediate files used by the dnssec
programs.
2000-07-31 15:28:21 +00:00
Brian Wellington
b4e3970226 -h wasn't handled properly. 2000-07-30 20:53:49 +00:00
David Lawrence
15a4474541 word wrap copyright notice at column 70 2000-07-27 09:55:03 +00:00
Andreas Gustafsson
7916c2f2b2 clarified 2000-07-26 21:36:43 +00:00
Brian Wellington
a1cbe5c5a1 The example omitted the -o option for the wrong reason. 2000-07-26 21:36:08 +00:00
Brian Wellington
10680f2169 The cycle text was even more confusing than it is now. 2000-07-26 20:58:11 +00:00
Andreas Gustafsson
6967adadcb minor clarifications 2000-07-26 19:13:18 +00:00
Andreas Gustafsson
4a9b6178ba incorrect use of plural 2000-07-26 18:52:05 +00:00
Brian Wellington
15ba758c3a minor tweaks 2000-07-26 00:47:17 +00:00
Jim Reid
bb09af99a5 fixed some brokwn .Ar macro calls that should have been .Fl calls
tidied up some clumsy English and missing option intros.
2000-06-28 23:41:01 +00:00
Jim Reid
57584184fe incorporated Brian's corrections and improvements 2000-06-28 03:20:49 +00:00
Jim Reid
5aeec9bb28 first draft of man pages on dnssec tools 2000-06-27 21:50:27 +00:00