Matthijs Mekking 4e46453035 Add new test cases with DNSSEC signing ... kasp-max-types-per-name (named2.conf.in): An unsigned zone with RR type count on a name right below the configured limit. Then sign the zone using KASP. Adding a RRSIG would push it over the RR type limit per name. Signing should fail, but the server should not crash, nor end up in infinite resign-attempt loop. kasp-max-records-per-type-dnskey (named1.conf.in): Test with low max-record-per-rrset limit and a DNSSEC policy requiring more than the limit. Signing should fail. kasp-max-types-per-name (named1.conf.in): Each RRSIG(covered type) is counted as an individual RR type. Test the corner case where a signed zone, which is just below the limit-1, adds a new type - doing so would trigger signing for the new type and thus increase the number of "types" by 2, pushing it over the limit again.		2024-06-10 16:55:11 +02:00
..
check	switch default zone database from "qp" to "qpzone"	2024-03-08 15:36:56 -08:00
confgen	Remove isc__tls_setfatalmode() function and the calls	2024-02-08 08:01:58 +01:00
delv	Pass a memory context in to dns_cache_create	2024-05-31 15:40:32 +10:00
dig	Re-enable EDNS if an EDNS flag gets set to 1 by +ednsflags	2024-03-16 16:07:55 +11:00
dnssec	Fail if there are non apex DNSKEYs	2024-05-16 10:28:27 +10:00
named	Add a limit to the number of RR types for single name	2024-06-10 16:55:09 +02:00
nsupdate	complete removal of isc_loop_current()	2024-04-02 10:35:56 +02:00
plugins	Remove 'inst != NULL' from cleanup check in plugin_register	2023-04-04 23:51:22 +00:00
rndc	Rework isccc_ccmsg to support multiple messages per tcp read	2024-04-18 20:08:44 +02:00
tests	Add new test cases with DNSSEC signing	2024-06-10 16:55:11 +02:00
tools	Emit and read correct DoT and DoH dnstap entries	2024-04-26 16:12:29 +03:00
Makefile.am	Remove native PKCS#11 support	2021-09-09 15:35:39 +02:00