Brian Wellington
70d08aea0a
800. [bug] dnssec-signzone produced incorrect statistics for
...
large zones. [RT #1133 ]
2001-03-30 18:02:34 +00:00
Brian Wellington
45e22378fc
dns_name_tofilenametext() now downcases the name, which means the callers
...
don't need to.
2001-03-27 23:43:15 +00:00
Brian Wellington
7d7215baf8
Add dns_name_tofilenametext(), and use it in the dnssec tools.
2001-03-27 22:57:48 +00:00
Brian Wellington
d566e8ea7b
open databases with the root as origin when possible.
2001-03-27 22:08:39 +00:00
Brian Wellington
b03c1bf72f
Make sure to create all keyset- and signedkey- files with downcased names;
...
downcase names before looking for signedkey- files in dnssec-signzone.
2001-03-23 03:59:00 +00:00
Brian Wellington
4e146b2fd6
duplicate keys on the command line were not properly suppressed
2001-03-22 19:28:23 +00:00
Brian Wellington
c3de05e48a
send usage to stderr, not stdout.
2001-02-15 23:26:29 +00:00
Brian Wellington
f91dc72b42
725. [bug] Installing man pages could fail.
2001-02-04 15:52:44 +00:00
Stephen Jacob
524222cfb8
Added purify support (${PURIFY} to link lines) to remaining
...
Makefile.in's in bin/*
2001-02-02 18:53:05 +00:00
Brian Wellington
01b8865b14
689. [doc] man pages are now installed. [RT #210 ]
2001-01-18 01:33:54 +00:00
Brian Wellington
b43d1c1f46
Don't die if a child's key is in the zone and a signedkey file is present.
2001-01-12 23:36:03 +00:00
Brian Wellington
7dec36c225
677. [bug] dnssec-signzone would occasionally use the wrong ttl
...
for database operations and fail. [RT #643 ]
2001-01-12 01:38:21 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
Brian Wellington
ee303f481d
639. [bug] Reading entropy from the keyboard would sometimes fail.
...
[RT #591 ]
note: the entropy callback conventions should really be documented.
2000-12-27 00:11:26 +00:00
Andreas Gustafsson
5ccb842cda
lined up columns in signing performance statistics output
...
and made all the lines use colons consistently
2000-12-15 19:26:54 +00:00
Andreas Gustafsson
7e044d7367
fixed several bugs in signing performance statistics printing
2000-12-15 19:19:56 +00:00
Andreas Gustafsson
cbd600f1ba
spacing
2000-12-15 19:07:07 +00:00
Olafur Gudmundsson
acc63b06d9
[615] dnssec-signzone did not like child signed keysets with multiple
...
signatures. (coredump)
[616] After consulting with Andreas I added some more timing statistics
when statistics are requesed.
2000-12-15 05:58:08 +00:00
Brian Wellington
31874cf824
Print the version of dnssec-signzone in a comment in the signed zone.
2000-12-12 20:21:34 +00:00
Mark Andrews
88a6fef494
init dns_rdata_t's
2000-12-11 23:09:47 +00:00
Brian Wellington
253f774e35
608. [func] dnssec-signzone now adds a comment to the zone
...
with the time the file was signed.
2000-12-11 22:55:25 +00:00
Brian Wellington
78838d3e0c
8 space -> tab conversion
2000-12-11 19:24:30 +00:00
Brian Wellington
911ed0d3be
Split journal.[ch] into journal.[ch] and diff.[ch]
2000-12-09 02:17:12 +00:00
Brian Wellington
aeab541554
(void) , not ()
2000-12-07 23:00:59 +00:00
Brian Wellington
64ee08a355
If there are no signing keys, don't make sure that the SIG bit is turned on
...
when building NXTs.
2000-12-07 21:49:11 +00:00
Mark Andrews
6fda157766
ISC_LINK_*UNSAFE -> ISC_LINK_INITAND*
2000-12-07 20:15:58 +00:00
Brian Wellington
5d63dfaa9d
Document the -n option
2000-12-07 02:20:07 +00:00
Brian Wellington
c9d7e543d0
597. [func] dnssec-signzone is now multithreaded.
2000-12-07 01:41:14 +00:00
Brian Wellington
dd380f3dca
removed cruft that caused a memory leak
2000-12-06 00:38:12 +00:00
Andreas Gustafsson
3955d85b3c
uninitialized variable
2000-11-27 22:19:37 +00:00
Brian Wellington
cffe50abf6
Lots of copyright updates
2000-11-18 03:01:17 +00:00
Brian Wellington
3f01dde0bd
554. [bug] In some cases, not all of the dnssec tools were
...
properly installed.
2000-11-13 20:09:45 +00:00
Andreas Gustafsson
5ae97875f9
undo: last changes belongs on release branch, not mainline
2000-11-10 18:05:25 +00:00
Andreas Gustafsson
ba8176b44d
document that RSA keys are limited to 2000 bits in 9.0.1
2000-11-10 18:03:05 +00:00
Brian Wellington
9dc3c7213b
Add -a (verify generated signatures) option to signkey and makekeyset
2000-11-09 18:55:17 +00:00
Brian Wellington
b585f0373c
dnssec-signzone prints warnings if loading a child's signkey file fails.
2000-11-09 18:39:46 +00:00
Brian Wellington
b7bf1bc9d9
openssl rsa doesn't have a 2048 bit limit. Change it to 4096, which
...
takes a long time and a lot of entropy to generate.
2000-11-07 20:10:14 +00:00
Brian Wellington
85e60ef497
Change an error message and allow time to be specified as YYYYMMDD
...
(without HHMMSS).
2000-11-06 17:28:24 +00:00
Brian Wellington
6e4deb9f1b
updates
2000-11-01 00:33:50 +00:00
Brian Wellington
82f4c5bc90
- print the names of the files generated, expand the usages a bit
...
- add -d directory option to dnssec-signzone
2000-10-31 20:09:15 +00:00
Mark Andrews
368b37b616
dns_rdata_invalidate -> dns_rdata_reset
2000-10-31 03:22:05 +00:00
Brian Wellington
c5c77ccbe1
Redo the dns_rdata_init() stuff again.
2000-10-28 22:56:25 +00:00
Brian Wellington
0bd785149d
Document the '-t' (statistics) option.
2000-10-28 01:16:46 +00:00
Brian Wellington
3af66745d8
Use the nxt rdatastruct instead of an ugly hack.
2000-10-28 01:09:36 +00:00
Brian Wellington
3568cef90b
Use the SOA TTL as the TTL for NXT records, not the SOA minimum value.
2000-10-28 00:53:39 +00:00
Brian Wellington
ecc8ad5822
changes to stats printing
2000-10-27 21:08:03 +00:00
Brian Wellington
babe5bc58a
The initialize/invalidate rdata changes weren't made in all places.
2000-10-27 20:56:39 +00:00
Brian Wellington
18d1a4ea33
fix the case when keys are not specified on the command line
2000-10-27 20:27:51 +00:00
Brian Wellington
469f328aa0
- added statistics gathering
...
- work when keys specified on the command line are in a different directory
- misc cleanup
2000-10-27 18:48:22 +00:00
Mark Andrews
c03bb27f06
532. [func] Implement DNS UPDATE pseudo records using
...
DNS_RDATA_UPDATE flag.
531. [func] Rdata really should be initalized before being
assigned to (dns_rdata_fromwire(), dns_rdata_fromtext(),
dns_rdata_clone(), dns_rdata_fromregion()),
check that it is.
2000-10-25 04:26:57 +00:00
Mark Andrews
5e589b5356
Uninitalised link fixes, batch 1.
2000-10-20 02:21:58 +00:00
Mark Andrews
b20ee662a7
521. [bug] Detect master files which contain $INCLUDE and always
...
reload. [RT #196 ]
new result code DNS_R_SEENINCLUDE
dns_master_load* can now return DNS_R_SEENINCLUDE
2000-10-17 07:22:39 +00:00
Brian Wellington
6177fc9897
A lot of files generated by libtool were not properly ignored.
2000-10-16 23:44:25 +00:00
Brian Wellington
db503b6daf
logging changes.
2000-09-26 22:11:25 +00:00
Brian Wellington
78106d74eb
usage changes
2000-09-21 17:18:14 +00:00
Andreas Gustafsson
922e6a3c2a
478. [bug] "make install" failed if the directory specified with
...
--prefix did not already exist.
2000-09-20 19:06:16 +00:00
Brian Wellington
c0bf51978c
remove unnecessary allocations
2000-09-12 11:50:46 +00:00
Brian Wellington
356fdd6073
missing initializer
2000-09-12 11:33:14 +00:00
Brian Wellington
1f8f904ad6
Added support for non-IN classes.
2000-09-12 10:07:50 +00:00
Brian Wellington
66f5b00c37
Some of the resigning policies were a bit strange.
2000-09-08 14:16:43 +00:00
Brian Wellington
c668509ab7
Allow signature validity period to be specified.
2000-09-08 14:15:10 +00:00
Brian Wellington
2abb1aa083
clarify an error message
2000-09-08 14:11:53 +00:00
Brian Wellington
42ffd37e52
remove unnecessary memory allocations
2000-09-08 08:47:29 +00:00
Brian Wellington
42848e71bc
Move some shared code to the shared file.
2000-09-08 08:38:59 +00:00
Brian Wellington
4b9384f20d
Print a warning if attempting to sign a zone with no keys. Fail if the
...
zone's signedkey file has keys that don't match the zone.
2000-09-07 15:53:15 +00:00
Andreas Gustafsson
6992382575
cut-and-paste-o
2000-08-17 22:08:16 +00:00
Brian Wellington
529ff4b495
HAVE_RANDOMDEV -> PATH_RANDOMDEV
2000-08-17 19:17:57 +00:00
Brian Wellington
a14613fce9
--with-randomdev sets HAVE_RANDOMDEV, use that instead of /dev/random.
2000-08-17 18:56:49 +00:00
Brian Wellington
df08ae001a
Add @DNS_GSSAPI_LIBS@ to DNSLIBS
2000-08-17 02:11:50 +00:00
Andreas Gustafsson
91ab5ca629
<isc/print.h> needed for snprintf()
2000-08-17 01:22:10 +00:00
Brian Wellington
c6891157b1
The keyset for the root had two dots in it.
2000-08-14 20:39:23 +00:00
Brian Wellington
18940d2cdf
The keyset filename was missing the trailing dot.
2000-08-14 20:11:29 +00:00
Brian Wellington
4fc4813eb3
Remove all non-threadsafe functions (in the non-threaded programs).
2000-08-14 04:43:17 +00:00
Brian Wellington
924fbebfbe
more cleanup
2000-08-11 23:59:46 +00:00
Brian Wellington
b4d8cb6bf7
Large sections rewritten to use dns_diff_t instead of rdatalists/rdatasets.
...
This should remove any possible problems relating to database modifications
while iterators are active.
2000-08-11 23:23:19 +00:00
Brian Wellington
565d0dc22f
Added a convenience function to convert a sig rdatastruct into a string.
2000-08-11 23:07:53 +00:00
Brian Wellington
c7d63ae5a4
Remove support for the zone status bit, since the proposal no longer exists.
2000-08-11 19:39:10 +00:00
Brian Wellington
cdde861f12
Chage 'key id' to 'key tag' in a few places
2000-08-10 22:08:23 +00:00
Brian Wellington
e8892697f9
Incrementally write the signed zone instead of adding all of the SIG
...
records to the database and using dns_db_dump.
2000-08-03 20:10:05 +00:00
Brian Wellington
3fe99b84d6
removed cruft
2000-08-03 13:42:46 +00:00
David Lawrence
9805b668b7
isc_buffer_putmem() takes an unsigned char as its second argument but a literal
...
string is of type char, so a couple of different OSs were complaining.
The 2nd parameter to isc_buffer_putmem() should probably be a const void *,
but rather than deal with changing the API and whatever that implies
with regard to versioning and whatever else, I have instead worked around
the issue by using isc_buffer_putuint8() to add a NUL to the buffer in
the two places that isc_buffer_putmem(&b, "", 1) was used.
2000-08-02 20:27:14 +00:00
Brian Wellington
aabfa856aa
Memory could be leaked if an improper signed keyset was seen.
2000-08-02 13:51:02 +00:00
David Lawrence
40f53fa8d9
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
...
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
Brian Wellington
36e0c37908
359. [bug] dnssec-signzone occasionally signed glue records.
2000-07-31 23:11:23 +00:00
David Lawrence
90fc267992
needs <dns/fixedname.h> now that it rdatastruct.h does not provide it
2000-07-31 21:13:38 +00:00
David Lawrence
d1d5229cc9
needs <dns/fixedname.h> now that it rdatastruct.h does not provide it
2000-07-31 21:07:25 +00:00
Brian Wellington
abb04a9d70
Don't print "stop typing" if the user interrupted the entropy gathering.
2000-07-31 20:38:27 +00:00
Brian Wellington
c1ee9be19b
clean up the text relating to pseudorandom input.
2000-07-31 19:39:42 +00:00
Brian Wellington
529a6b5224
358. [cleanup] Rename the intermediate files used by the dnssec
...
programs.
2000-07-31 15:28:21 +00:00
Brian Wellington
b4e3970226
-h wasn't handled properly.
2000-07-30 20:53:49 +00:00
David Lawrence
15a4474541
word wrap copyright notice at column 70
2000-07-27 09:55:03 +00:00
Andreas Gustafsson
7916c2f2b2
clarified
2000-07-26 21:36:43 +00:00
Brian Wellington
a1cbe5c5a1
The example omitted the -o option for the wrong reason.
2000-07-26 21:36:08 +00:00
Brian Wellington
10680f2169
The cycle text was even more confusing than it is now.
2000-07-26 20:58:11 +00:00
Andreas Gustafsson
6967adadcb
minor clarifications
2000-07-26 19:13:18 +00:00
Andreas Gustafsson
4a9b6178ba
incorrect use of plural
2000-07-26 18:52:05 +00:00
Brian Wellington
15ba758c3a
minor tweaks
2000-07-26 00:47:17 +00:00
Jim Reid
bb09af99a5
fixed some brokwn .Ar macro calls that should have been .Fl calls
...
tidied up some clumsy English and missing option intros.
2000-06-28 23:41:01 +00:00
Jim Reid
57584184fe
incorporated Brian's corrections and improvements
2000-06-28 03:20:49 +00:00
Jim Reid
5aeec9bb28
first draft of man pages on dnssec tools
2000-06-27 21:50:27 +00:00