bind9/lib/dns
Matthijs Mekking f4dc62f33b With update-check-ksk also consider offline keys
The option `update-check-ksk` will look if both KSK and ZSK are
available before signing records.  It will make sure the keys are
active and available.  However, for operational practices keys may
be offline.  This commit relaxes the update-check-ksk check and will
mark a key that is offline to be available when adding signature
tasks.

(cherry picked from commit 3cb8c49c73)
2019-04-12 11:33:06 +02:00
..
include <dns/ecs.h> was missing ISC_LANG_ENDDECLS. 2019-04-09 12:05:57 +10:00
rdata enforce DS hash exists 2019-04-10 14:44:05 +10:00
tests Add debug printfs 2019-04-11 19:47:44 +10:00
win32 Remove message catalogs 2019-01-09 23:44:26 +01:00
.gitignore 4394. [func] Add rndc command "dnstap-reopen" to close and 2016-06-24 09:37:04 +10:00
acl.c isc_mutex_init returns 'void' 2018-11-22 11:51:49 +00:00
adb.c clear AD flag when altering response messages 2018-12-06 10:29:11 -08:00
api documentation changes establishing the 9.14 stable branch 2019-02-27 18:06:35 -05:00
badcache.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
byaddr.c force promotion to unsigned int 2019-03-14 13:51:30 -07:00
cache.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
callbacks.c Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
catz.c declarations before assertions 2019-02-18 17:40:56 -05:00
client.c Make delv use OS-supplied ephemeral port range 2019-03-08 13:14:00 +01:00
clientinfo.c Replace "config.h" with <config.h> 2018-08-16 12:45:59 +02:00
compress.c Remove duplicate config.h 2018-08-08 09:37:30 +02:00
db.c QNAME miminimization should create a separate fetch context for each fetch - 2018-10-23 12:15:04 +00:00
dbiterator.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
dbtable.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
diff.c Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached 2018-11-08 12:22:17 +07:00
dispatch.c - isc_task_create_bound - create a task bound to specific task queue 2018-11-23 04:34:02 -05:00
dlz.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
dns64.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
dnsrps.c silence compiler warning 2018-11-28 12:00:16 -05:00
dnssec.c add more key maintenance event logging 2019-01-31 12:18:55 -08:00
dnstap.c Make lib/dns/dnstap.pb-c.h private header 2019-03-22 12:07:31 +01:00
dnstap.proto extend DNSTAP to record UPDATE requests and responses as a separate type 2018-10-03 01:03:56 -07:00
ds.c cleanup: use dns_secalg_t and dns_dsdigest_t where appropriate 2019-03-08 22:16:48 +11:00
dst_api.c Remove RSAMD5 support 2018-12-11 11:32:24 +01:00
dst_internal.h Remove internal dst memory context that was used just for OpenSSL and was passthrough for malloc and free 2018-10-25 08:16:24 +02:00
dst_openssl.h Use standard OPENSSL_NO_ENGINE instead of custom USE_ENGINE define 2018-05-03 15:32:43 +02:00
dst_parse.c Remove RSAMD5 support 2018-12-11 11:32:24 +01:00
dst_parse.h Remove RSAMD5 support 2018-12-11 11:32:24 +01:00
dst_pkcs11.h Update license headers to not include years in copyright in all applicable files 2018-02-23 10:12:02 +01:00
dst_result.c Remove message catalogs 2019-01-09 23:44:26 +01:00
dyndb.c gcc defines __SANITIZE_ADDRESS__ and not __ADDRESS_SANITIZER__, use the correct #define 2018-12-19 12:24:59 +01:00
ecdb.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
ecs.c Update license headers to not include years in copyright in all applicable files 2018-02-23 10:12:02 +01:00
fixedname.c Add a dns_fixedname_initname() helper function 2018-04-09 12:14:16 +02:00
forward.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
gen-unix.h Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
gen-win32.h Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
gen.c #include <limits.h> for PATH_MAX, define if not found 2019-03-08 18:23:59 +11:00
geoip.c Add couple more ISC_UNREACHABLE(); found thanks to coccinelle 2018-11-22 09:28:00 -05:00
gssapi_link.c Remove internal dst memory context that was used just for OpenSSL and was passthrough for malloc and free 2018-10-25 08:16:24 +02:00
gssapictx.c remove redundant assignment 2019-02-18 17:40:56 -05:00
hmac_link.c Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached 2018-11-08 12:22:17 +07:00
ipkeylist.c Replace custom isc_u?intNN_t types with C99 u?intNN_t types 2018-08-08 09:37:28 +02:00
iptable.c Add small tweaks to the code to fix compilation when ISC assertions are disabled 2018-11-08 12:21:53 +07:00
journal.c Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached 2018-11-08 12:22:17 +07:00
key.c Remove RSAMD5 support 2018-12-11 11:32:24 +01:00
keydata.c Replace custom isc_u?intNN_t types with C99 u?intNN_t types 2018-08-08 09:37:28 +02:00
keytable.c Refactor *_destroy and *_detach functions to unified order of actions. 2018-08-28 13:15:59 +02:00
Kyuafile regen master 2017-12-29 01:44:18 +00:00
lib.c Remove message catalogs 2019-01-09 23:44:26 +01:00
log.c Move NSID logging to its own category 2018-06-05 12:10:37 +10:00
lookup.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
Makefile.in Make lib/dns/dnstap.pb-c.h private header 2019-03-22 12:07:31 +01:00
mapapi begin preparation for 9.13.0 2018-05-21 11:50:38 -07:00
master.c Set 'specials' to match 'specials' in 'lib/dns/master.c' 2019-04-11 19:47:43 +10:00
masterdump.c Fix whitespace so that the names align 2019-04-11 19:47:43 +10:00
message.c Fix assertion failure in nslookup/dig/mdig when message has multiple SIG(0) options. 2019-03-26 21:32:08 +11:00
name.c isc_mutex_init returns 'void' 2018-11-22 11:51:49 +00:00
ncache.c allow for up 100 records or 64K of data to be in a ncache entry 2019-01-09 15:53:32 +11:00
nsec.c Turn (int & flag) into (int & flag) != 0 when implicitly typed to bool 2018-11-08 12:21:53 +07:00
nsec3.c Move REQUIRE outside comment unsupported alg 2018-12-19 12:54:57 +01:00
nta.c uninitalize memory read on error path 2018-11-14 15:26:27 -05:00
openssl_link.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
openssldh_link.c convert query_test 2018-11-14 20:17:04 -08:00
opensslecdsa_link.c Add generic message digest API (isc_md) to replace specific MD functions md5/sha1/sha256 2018-10-25 08:15:42 +02:00
openssleddsa_link.c Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached 2018-11-08 12:22:17 +07:00
opensslrsa_link.c Remove RSAMD5 support 2018-12-11 11:32:24 +01:00
order.c Refactor *_destroy and *_detach functions to unified order of actions. 2018-08-28 13:15:59 +02:00
peer.c Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached 2018-11-08 12:22:17 +07:00
pkcs11.c Make OpenSSL mandatory 2018-07-19 12:47:03 -04:00
pkcs11ecdsa_link.c Make sure null atributes are never used 2019-01-16 15:48:37 -05:00
pkcs11eddsa_link.c Add generic message digest API (isc_md) to replace specific MD functions md5/sha1/sha256 2018-10-25 08:15:42 +02:00
pkcs11rsa_link.c Make sure null atributes are never used 2019-01-16 15:48:37 -05:00
portlist.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
private.c Turn (int & flag) into (int & flag) != 0 when implicitly typed to bool 2018-11-08 12:21:53 +07:00
rbt.c Rewrite isc_refcount API to fetch_and_<op>, instead of former <op>_and_<fetch> 2018-08-28 12:15:39 +02:00
rbtdb.c Print in dump-file stale ttl 2019-01-30 14:11:12 -08:00
rbtdb.h Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
rcode.c maybe_numeric failed to handle NUL in text region. 2019-01-09 18:33:42 +11:00
rdata.c Ensure base64/base32/hex fields in DNS records that should be non-empty are. 2019-01-09 18:04:21 +11:00
rdatalist.c Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
rdatalist_p.h Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
rdataset.c refactor filter-aaaa implementation 2018-12-06 10:29:10 -08:00
rdatasetiter.c Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
rdataslab.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
request.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
resolver.c In resume_qmin check if the fetch context is already shutting down - if so, try to destroy it, don't continue 2019-04-03 16:34:33 +02:00
result.c Remove message catalogs 2019-01-09 23:44:26 +01:00
rootns.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
rpz.c Fix deadlock in RPZ update code. 2019-04-06 12:41:36 -07:00
rriterator.c Replace custom isc_u?intNN_t types with C99 u?intNN_t types 2018-08-08 09:37:28 +02:00
rrl.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
sdb.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
sdlz.c add missing MAYBE_UNLOCK 2019-03-14 09:01:12 +11:00
soa.c Replace custom isc_u?intNN_t types with C99 u?intNN_t types 2018-08-08 09:37:28 +02:00
spnego.asn1 Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
spnego.c Remove duplicate config.h 2018-08-08 09:37:30 +02:00
spnego.h Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
spnego_asn1.c fix memory leak 2019-02-19 09:17:03 +11:00
spnego_asn1.pl Remove $Id markers, Principal Author and Reviewed tags from the full source tree 2018-05-11 13:17:46 +02:00
ssu.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
ssu_external.c Ensure that POSIX strerror_r variant is use even when _GNU_SOURCE is enabled by default 2018-08-29 13:31:28 +02:00
stats.c - Make isc_mutex_destroy return void 2018-11-22 11:52:08 +00:00
tcpmsg.c Replace custom isc_u?intNN_t types with C99 u?intNN_t types 2018-08-08 09:37:28 +02:00
time.c Replace custom isc_u?intNN_t types with C99 u?intNN_t types 2018-08-08 09:37:28 +02:00
timer.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
tkey.c Change #4148 wasn't complete 2019-01-31 09:01:23 -08:00
tsec.c Hint the compiler with ISC_UNREACHABLE(); that code after INSIST(0); cannot be reached 2018-11-08 12:22:17 +07:00
tsig.c record when querytsig is valid 2019-02-18 17:39:08 -05:00
tsig_p.h Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
ttl.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
update.c Style: some curly brackets 2019-04-12 11:33:06 +02:00
validator.c cleanup: use dns_secalg_t and dns_dsdigest_t where appropriate 2019-03-08 22:16:48 +11:00
version.c address win32 build issues 2018-05-22 16:32:21 -07:00
view.c Initialise mincachettl and minncachettl to zero in dns_view_create. 2019-04-10 15:08:33 +10:00
xfrin.c Prevent races when waiting for log messages 2019-02-14 10:41:56 +01:00
zone.c With update-check-ksk also consider offline keys 2019-04-12 11:33:06 +02:00
zone_p.h Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
zonekey.c Replace custom isc_boolean_t with C standard bool type 2018-08-08 09:37:30 +02:00
zoneverify.c Turn (int & flag) into (int & flag) != 0 when implicitly typed to bool 2018-11-08 12:21:53 +07:00
zt.c Add a comment explaining a mirror zone glitch 2019-02-08 05:49:22 -05:00