Commit graph

30 commits

Author SHA1 Message Date
Daniel Salzman
b3cdb3431a tests: relicense to GPL-2.0-or-later 2025-03-24 09:53:50 +01:00
Jan Hák
cbae4db7c4 libdnssec: move sample keys from tests to libdnssec 2024-07-19 13:19:19 +02:00
Jan Hák
632d672800 keymgr: add keystore-test command 2024-07-19 13:18:56 +02:00
Daniel Salzman
e31e542256 configure: remove no longer needed check for Ed25519 support 2023-12-22 17:12:54 +01:00
Daniel Salzman
9b730624a3 zone-sign: don't share PKCS 11 private keys by multiple signing threads
The reason is described in the GnuTLS doc:
"In versions of GnuTLS later than 3.5.11 the object is protected using locks and
 a single gnutls_pkcs11_privkey_t can be re-used by many threads. However,
 for performance it is recommended to utilize one object per key per thread."
2023-09-20 18:14:39 +02:00
David Vašek
b20f32bd2e tests/libdnssec: fix vfprintf %s of a NULL pointer
The test behavior and its output are the same as before, but without error reports (on some platforms).
2023-07-31 18:51:56 +02:00
Daniel Salzman
f85afb815c libdnssec: add support for setting PKCS #11 key label when its generated 2022-07-28 12:29:54 +02:00
Libor Peltan
908e8c9853 tests: added unit tests of libdnssec with ed448 alg 2021-11-08 09:07:56 +01:00
David Vašek
9a2f5a1bdb tests/libdnssec: update the built-in SoftHSM config to work with its current versions 2021-01-15 16:08:40 +01:00
Libor Peltan
03029bcbfe dnssec: enable speedup of rrsig validation by deterministic ECDSA 2020-08-26 11:10:02 +02:00
Libor Peltan
7803589738 dnssec: implemented DSA deterministic signing 2020-08-26 10:48:47 +02:00
Daniel Salzman
b9d1579bc2 libdnssec: rename dnssec_keystore_export() to dnssec_keystore_get_private() 2020-08-25 21:52:30 +02:00
David Vašek
e3d311d8ed coding style improvements - copyright notice 2019-07-04 15:16:43 +02:00
Daniel Salzman
62f4d7df7f libdnssec: export pem API 2019-01-24 16:58:57 +01:00
Daniel Salzman
73c1eee0e4 tests: fix some memory leaks in test_keystore_pkcs8 2019-01-21 20:40:57 +01:00
Daniel Salzman
ba25f38e91 tests: remove libdnssec/test_list.c 2019-01-21 20:23:52 +01:00
Mark Karpilovskij
6d1d86eb89 libdnssec: relax the fixed length condition for key ID 2019-01-21 14:30:17 +01:00
Daniel Salzman
3d1e98edb1 tests: improve temporary directory cleanup 2019-01-21 12:35:24 +01:00
Daniel Salzman
73ccd974a6 libdnssec: unify keystore function names 2019-01-21 11:46:40 +01:00
Daniel Salzman
e186e6cf59 libdnssec: remove unused keystore listing 2019-01-21 10:49:34 +01:00
Daniel Salzman
3171f32fa8 libdnssec: remove PKCS #8 keystore abstraction 2019-01-21 10:49:34 +01:00
Daniel Salzman
25dcdd7485 Revert "add GOST algorithm support"
Nowadays the DNS comunity is not interested in GOST. Also this change is not
compatible (see https://gitlab.com/gnutls/gnutls/merge_requests/755).

This reverts commit da5615556c.
2019-01-07 14:00:41 +01:00
Daniel Salzman
2d9d9f9092 Add -Wshadow to default CFLAGS + adapt code 2018-12-03 16:18:58 +01:00
Vladimír Čunát
da5615556c
add GOST algorithm support
The other `#ifdef HAVE_*` were moved in switches,
so that they don't rely on being the last before `default:`

The tests needed fixing up cases of using GOST as invalid values.
2018-08-30 15:04:36 +02:00
Mark Karpilovskij
43d02901bb libdnssec: hardcode key sizes for curve algorithms
closes #602
2018-08-30 11:19:16 +02:00
Daniel Kahn Gillmor
846bb431d2 use https://www.gnu.org instead of http://www.gnu.org
www.gnu.org has offered https for years now.
2018-08-29 09:45:57 -04:00
Mark Karpilovskij
ca2f2ea047 tests/libdnssec: Rewrite NSEC bitmap test and make it extensible. 2018-08-18 15:12:56 +02:00
Mark Karpilovskij
799af5a141 tests: update nsec bitmap test 2018-03-13 16:02:17 +01:00
Daniel Salzman
edf16dee50 Update license in previously changed files 2018-03-12 14:56:15 +01:00
Daniel Salzman
2faf8f9991 dnssec: move to libdnssec 2018-03-12 13:31:30 +01:00