Commit graph

36 commits

Author SHA1 Message Date
Daniel Salzman
edcb6b09f7 conf: change default salt length to 0 2024-11-05 15:12:49 +01:00
Libor Peltan
65d2b862b3 tests: all DDNS: randomize, unify and fix protocols and knsupdate usage...
...also in interference with XDP
2024-09-04 15:50:32 +02:00
Libor Peltan
121ce227f2 test/ddns: fixed escaping of backslash 2024-07-22 11:23:36 +02:00
Jan Hák
94447d17eb tests-extra: add random knsupdate and protocol selection to some DDNS tests 2024-07-15 22:12:04 +02:00
Libor Peltan
fb01e0259f DDNS: NSEC3PARAM handling in pre-check...
both non-apex addition and second-NSEC3PARAM addition handled as REFUSED
and not impacting the update-bulk processing
2024-01-12 11:57:59 +01:00
Libor Peltan
475f236321 DDNS: unify DNAME semantic errors with CNAME's...
...by ignoring first RR that introduces the violation...
...without failing the update or whole bulk of updates
2024-01-11 12:45:21 +01:00
Libor Peltan
80b10da862 incr update/bugfix: wildcard glue removal, adjust additional pointer 2023-09-07 09:14:57 +02:00
Libor Peltan
1f9f05d847 DDNS: don't block DNSSEC-related records...
...this can still be achieved by ACL/update-type
2022-04-12 13:49:13 +02:00
Libor Peltan
96d7a9c610 svcb: put nsec covering missing glue if some exist 2021-09-29 15:07:15 +02:00
Libor Peltan
6417f03094 svcb: put targeted svcb into additionals 2021-09-29 15:07:15 +02:00
Libor Peltan
0cc6558339 svcb/https: as regular optional glue with rrsig 2021-09-29 15:07:15 +02:00
David Vašek
7db672619c tests-extra: make flush() wait for the file(s) update completion where it makes sense 2020-05-29 23:52:38 +02:00
Libor Peltan
495b7432c7 ddns: refuse if adding grand-child to a node with DNAME 2019-11-27 14:53:47 +01:00
Libor Peltan
4ea63d1c3d bugfix/updates: infinite recursion when changing SOA TTL 2019-11-19 16:29:35 +01:00
Libor Peltan
b26835770f adjust additionals: also changed nodes that aren't referenced by adds_reverse_tree 2019-11-08 14:29:56 +01:00
Libor Peltan
09b6db7325 tests: add test of replacing RRset with different TTL +dnssec 2019-08-08 15:05:41 +02:00
Daniel Salzman
a85bb2891b tests-extra: sometimes enable NSEC3 opt-out for ddns/basic 2019-07-31 13:06:17 +02:00
Libor Peltan
fe71e1d1a4 tests: node change nonauth -> deleg 2019-06-17 14:21:46 +02:00
Libor Peltan
217e70faf8 adjusting: implemented reverse tree for looking up additionals changed in update
the tree is like a key-value database, with the key being a domain name
of a record which is an additional for a record in the zone
while the name might be not in the zone; the value is a list_t
of pointers to zone nodes, for which it actually is an addiitonal

whenever in an incremental update a record is changed/added
with the name of an additional, all the listed nodes
must be re-adjusted (re-discovered additionals

previously, we always re-discovered additionals for whole zone
2019-05-14 16:45:59 +02:00
Libor Peltan
297454e3a5 dnssec: incremental sign, avoid signing glue
also, on normal sign, remove possibly existing RRSIGs on NONAUTH nodes
2019-04-04 10:59:42 +02:00
Libor Peltan
65a9b69e90 DDNS: allowed deleting non-apex DNSKEY and NSEC3PARAM records 2016-12-20 12:53:33 +01:00
Dominik Taborsky
578e5b4337 tests-extra: fix ddns/basic command order, first send update then dig 2016-08-09 13:06:33 +02:00
Dominik Taborsky
857b3ec8f9 tests: fix missing DDNS update send 2016-07-12 10:23:59 +02:00
Daniel Salzman
5c0d3db5d2 tests-extra: switch to the new DNSSEC configuration 2016-06-27 10:57:00 +02:00
Jan Vcelak
a9389703ba functional tests: no DNSSEC changes allowed via DDNS 2015-01-19 17:05:11 +01:00
Jan Vcelak
d3cc205921 tests: DDNS add record into apex 2014-08-14 16:51:01 +02:00
Daniel Salzman
b601c536ae tests-extra: extend xfr and ddns tests with empty record 2014-06-24 10:38:42 +02:00
Jan Kadlec
21f4aa2a34 tests-extra: extend DDNS test with NAPTR addition 2014-06-17 16:27:43 +02:00
Jan Kadlec
ca2910c50e Fixed wrong DDNS tests. 2014-04-09 18:44:53 +02:00
Lubos Slovak
d8e67890f2 [tests-extra] Fixed TODOs + added one ddns test 2014-04-04 13:12:23 +02:00
Lubos Slovak
89ca310906 Added some more DDNS tests.
- NSs in apex - some possibly problematic scenarios.
- CNAMEs - dtto
2014-04-03 19:39:21 +02:00
Jan Kadlec
c1f65be2c6 DDNS: Fixed errors uncovered by new tests + test changes. 2014-03-19 15:46:13 +01:00
Daniel Salzman
22e81b57a4 tests-extra: ddns/basic tiny cleaning 2014-03-19 11:30:40 +01:00
Jan Kadlec
b489cd9f1e tests-extra: New DDNS test cases
- Every scenario from old tests rewritten, plus some new ones added, some are still failing
2014-03-18 17:13:49 +01:00
Daniel Salzman
59069fa73e tests-extra: improve ddns/basic test 2014-03-11 20:12:38 +01:00
Jan Kadlec
9f5aff78c1 tests-extra: DDNS tests
- random test used for chain fix testing
 - manual test, some of the cases copied from the old tests, but not all.
2014-03-06 17:38:41 +01:00