bind9/lib
Matthijs Mekking 6db879160f Detect NSEC3 salt collisions
When generating a new salt, compare it with the previous NSEC3
paremeters to ensure the new parameters are different from the
previous ones.

This moves the salt generation call from 'bin/named/*.s' to
'lib/dns/zone.c'. When setting new NSEC3 parameters, you can set a new
function parameter 'resalt' to enforce a new salt to be generated. A
new salt will also be generated if 'salt' is set to NULL.

Logging salt with zone context can now be done with 'dnssec_log',
removing the need for 'dns_nsec3_log_salt'.

(cherry picked from commit 6b5d7357df)
2020-11-26 14:15:05 +00:00
..
bind9 prep 9.16.9 2020-11-26 12:25:53 +01:00
dns Detect NSEC3 salt collisions 2020-11-26 14:15:05 +00:00
irs update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
isc Fix typo in ISC_PLAFORM_HAVESYSUNH 2020-11-26 14:17:17 +01:00
isccc update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
isccfg Change nsec3param salt config to saltlen 2020-11-26 14:15:04 +00:00
ns prep 9.16.9 2020-11-26 12:25:53 +01:00
samples The dns_message_create() cannot fail, change the return to void 2020-09-30 14:26:26 +02:00
win32/bindevt update all copyright headers to eliminate the typo 2020-09-14 16:50:58 -07:00
.gitignore added gitignore, removed cvsignore 2012-03-03 23:10:05 -08:00
Kyuafile link in lib/isccc/tests/Kyuafile 2018-11-13 07:23:36 +11:00
Makefile.in remove lib/tests as nothing uses it anymore 2018-03-09 14:12:50 -08:00