Aram Sargsyan 716b936045 Implement sig0key-checks-limit and sig0message-checks-limit ... Previously a hard-coded limitation of maximum two key or message verification checks were introduced when checking the message's SIG(0) signature. It was done in order to protect against possible DoS attacks. The logic behind choosing the number two was that more than one key should only be required only during key rotations, and in that case two keys are enough. But later it became apparent that there are other use cases too where even more keys are required, see issue number #5050 in GitLab. This change introduces two new configuration options for the views, sig0key-checks-limit and sig0message-checks-limit, which define how many keys are allowed to be checked to find a matching key, and how many message verifications are allowed to take place once a matching key has been found. The latter protects against expensive cryptographic operations when there are keys with colliding tags and algorithm numbers, with default being 2, and the former protects against a bit less expensive key parsing operations and defaults to 16.		2025-02-20 13:35:14 +00:00
..
dns	Implement sig0key-checks-limit and sig0message-checks-limit	2025-02-20 13:35:14 +00:00
isc	Fix isc_quota bug	2025-02-20 10:56:00 +00:00
isccc	Refactor and simplify isc_symtab	2025-02-17 11:43:19 +01:00
isccfg	Implement sig0key-checks-limit and sig0message-checks-limit	2025-02-20 13:35:14 +00:00
ns	Include destination address port number in query logging	2025-02-04 10:49:26 +00:00
.gitignore	The isc/platform.h header has been completely removed	2021-07-06 05:33:48 +00:00
Makefile.am	Move irs_resconf into libdns and remove libirs	2023-02-24 09:38:59 +00:00