bind9/lib
Mark Andrews edfbe5c30f Check that we can verify a signature at initialisation time
Fedora 33 doesn't support RSASHA1 in future mode.  There is no easy
check for this other than by attempting to perform a verification
using known good signatures.  We don't attempt to sign with RSASHA1
as that would not work in FIPS mode.  RSASHA1 is verify only.

The test vectors were generated using OpenSSL 3.0 and
util/gen-rsa-sha-vectors.c.  Rerunning will generate a new set of
test vectors as the private key is not preserved.

e.g.
	cc util/gen-rsa-sha-vectors.c -I /opt/local/include \
		-L /opt/local/lib -lcrypto
2022-07-25 10:32:13 -04:00
..
bind9 Forbid zones with both dnssec-policy and max-zone-ttl 2022-07-20 11:57:37 -07:00
dns Check that we can verify a signature at initialisation time 2022-07-25 10:32:13 -04:00
irs Move all the unit tests to /tests/<libname>/ 2022-05-28 14:53:02 -07:00
isc Cleanup the STATID_CONNECT and STATID_CONNECTFAIL stat counters 2022-07-14 14:34:53 +02:00
isccc Update clang to version 14 2022-06-16 17:21:11 +02:00
isccfg mark max-zone-ttl deprecated in options and zone 2022-07-20 11:55:03 -07:00
ns Increase the BUFSIZ-long buffers 2022-07-15 10:33:46 +00:00
.gitignore The isc/platform.h header has been completely removed 2021-07-06 05:33:48 +00:00
Makefile.am move samples/resolve.c to bin/tests/system 2021-04-16 14:29:43 +02:00