bind9/bin/dnssec
Ondřej Surý 8171bf01ed
Deprecate max-rsa-exponent-size, always use 4096 instead
The `max-rsa-exponent-size` could limit the exponents of the RSA
public keys during the DNSSEC verification.  Instead of providing
a cryptic (not cryptographic) knob, hardcode the max exponent to
be 4096 (the theoretical maximum for DNSSEC).
2025-05-21 00:50:08 +02:00
..
.gitignore Introduce new DNSSEC tool dnssec-ksr 2024-04-19 10:41:04 +02:00
dnssec-cds.c Deprecate max-rsa-exponent-size, always use 4096 instead 2025-05-21 00:50:08 +02:00
dnssec-cds.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 10:46:36 +01:00
dnssec-dsfromkey.c Replace isc_mem_destroy() with isc_mem_detach() 2025-03-05 11:17:17 +01:00
dnssec-dsfromkey.rst Add internal hyperlinks to See Also section of manual pages 2022-03-14 10:46:36 +01:00
dnssec-importkey.c Replace isc_mem_destroy() with isc_mem_detach() 2025-03-05 11:17:17 +01:00
dnssec-importkey.rst Teach dnssec-settime to read unset times that it writes 2022-05-17 16:28:40 +02:00
dnssec-keyfromlabel.c Remove -p option from dnssec-keygen/keyfromlabel 2025-03-25 23:48:23 +00:00
dnssec-keyfromlabel.rst Remove -p option from dnssec-keygen/keyfromlabel 2025-03-25 23:48:23 +00:00
dnssec-keygen.c switch to ISC_LIST_FOREACH everywhere 2025-03-31 13:45:10 -07:00
dnssec-keygen.rst Remove -d option from dnssec-keygen 2025-03-25 23:48:23 +00:00
dnssec-ksr.c use ISC_LIST_FOREACH in more places 2025-03-31 13:45:14 -07:00
dnssec-ksr.rst dnssec-ksr keygen -o to create KSKs 2024-11-01 15:50:16 +01:00
dnssec-revoke.c Replace isc_mem_destroy() with isc_mem_detach() 2025-03-05 11:17:17 +01:00
dnssec-revoke.rst Remove OpenSSL Engine support 2024-08-06 15:17:48 +02:00
dnssec-settime.c Replace isc_mem_destroy() with isc_mem_detach() 2025-03-05 11:17:17 +01:00
dnssec-settime.rst Remove OpenSSL Engine support 2024-08-06 15:17:48 +02:00
dnssec-signzone.c Deprecate max-rsa-exponent-size, always use 4096 instead 2025-05-21 00:50:08 +02:00
dnssec-signzone.rst Fix broken links in documentation 2025-01-24 12:07:36 +01:00
dnssec-verify.c Replace isc_mem_destroy() with isc_mem_detach() 2025-03-05 11:17:17 +01:00
dnssec-verify.rst Remove OpenSSL Engine support 2024-08-06 15:17:48 +02:00
dnssectool.c switch to ISC_LIST_FOREACH everywhere 2025-03-31 13:45:10 -07:00
dnssectool.h Add restrict key tag range support 2024-08-22 12:12:02 +00:00
Makefile.am unify fips handling to isc_crypto and make the toggle one way 2025-02-27 17:37:43 +03:00