Aram Sargsyan 716b936045 Implement sig0key-checks-limit and sig0message-checks-limit ... Previously a hard-coded limitation of maximum two key or message verification checks were introduced when checking the message's SIG(0) signature. It was done in order to protect against possible DoS attacks. The logic behind choosing the number two was that more than one key should only be required only during key rotations, and in that case two keys are enough. But later it became apparent that there are other use cases too where even more keys are required, see issue number #5050 in GitLab. This change introduces two new configuration options for the views, sig0key-checks-limit and sig0message-checks-limit, which define how many keys are allowed to be checked to find a matching key, and how many message verifications are allowed to take place once a matching key has been found. The latter protects against expensive cryptographic operations when there are keys with colliding tags and algorithm numbers, with default being 2, and the former protects against a bit less expensive key parsing operations and defaults to 16.		2025-02-20 13:35:14 +00:00
..
cfg_test.c	Remove redundant parentheses from the return statement	2024-11-19 12:27:22 +01:00
checkgrammar.py	Sort grammar map keys while pretty printing them	2022-07-01 08:59:23 +02:00
dnssec-policy.default.conf	Add offline-ksk option	2024-08-22 08:21:52 +02:00
forward.zoneopt	remove {root-}delegation-only	2023-03-23 12:57:01 -07:00
hint.zoneopt	remove {root-}delegation-only	2023-03-23 12:57:01 -07:00
in-view.zoneopt	[master] automatically generate named.conf grammars for the ARM	2018-01-22 11:06:32 -08:00
Makefile.am	Add support for User Statically Defined Tracing (USDT) probes	2023-08-21 18:39:53 +02:00
mirror.zoneopt	Implement the min-transfer-rate-in configuration option	2025-02-20 09:32:55 +00:00
options	Implement sig0key-checks-limit and sig0message-checks-limit	2025-02-20 13:35:14 +00:00
parsegrammar.py	Add a new library to parse grammar format produced by cfg_test	2022-07-01 08:59:04 +02:00
primary.zoneopt	Rename remote-servers standard term to server-list	2024-12-13 08:50:02 +01:00
redirect.zoneopt	Rename remote-servers standard term to server-list	2024-12-13 08:50:02 +01:00
rndc.grammar	remove nonfunctional DSCP implementation	2023-01-09 12:15:21 -08:00
secondary.zoneopt	Implement the min-transfer-rate-in configuration option	2025-02-20 09:32:55 +00:00
sort-options.pl	Update the copyright information in all files in the repository	2022-01-11 09:05:02 +01:00
static-stub.zoneopt	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00
stub.zoneopt	Implement the min-transfer-rate-in configuration option	2025-02-20 09:32:55 +00:00