Commit graph

1192 commits

Author SHA1 Message Date
Daniel Salzman
b64678fa48 libzscanner: merge type_num with type_num_dsync 2025-11-03 09:48:38 +01:00
Libor Peltan
a83fab1eec libknot: support for DSYNC RRtype, RFC 9859 2025-11-03 09:13:43 +01:00
Daniel Salzman
a5fbacc624 tests/rrset-dump: fix compilation on OpenSuse + tiny refactoring 2025-11-02 08:07:53 +01:00
Libor Peltan
245ea34981 libknot/rrset-dump/bugfix: ERANGE instead of enlarging output buffer if overflow inside base64_encode 2025-10-31 14:07:32 +01:00
Libor Peltan
854612f682 zonemd: additional warning when signer verifies ZONEMD 2025-10-29 14:01:13 +01:00
Daniel Salzman
775929e110 Remove no longer existing libknot/dnssec/error.h 2025-10-24 21:17:43 +02:00
Daniel Salzman
060b7c361d Replace DNSSEC_INVALID_*_ALGORITHM with KNOT_EALGORITHM 2025-10-24 09:17:08 +02:00
Daniel Salzman
cd05972053 Replace DNSSEC_KEY_ALREADY_PRESENT with KNOT_EEXIST 2025-10-24 09:17:08 +02:00
Daniel Salzman
a2d690afb8 Replace DNSSEC_INVALID_KEY_NAME with KNOT_INVALID_KEY_NAME 2025-10-24 09:17:08 +02:00
Daniel Salzman
96475b8b1f Replace DNSSEC_INVALID_KEY_ALGORITHM with KNOT_INVALID_KEY_ALGORITHM 2025-10-24 09:17:08 +02:00
Daniel Salzman
fcdb13c3aa Replace DNSSEC_INVALID_PUBLIC_KEY with KNOT_INVALID_PUBLIC_KEY 2025-10-24 09:17:08 +02:00
Daniel Salzman
642328ead7 Replace DNSSEC_NOT_IMPLEMENTED_ERROR with KNOT_ENOTSUP 2025-10-24 09:17:08 +02:00
Daniel Salzman
768b3c0fdb Replace DNSSEC_ENOENT with KNOT_ENOENT 2025-10-24 09:17:08 +02:00
Daniel Salzman
e7e7052f7b Replace DNSSEC_EINVAL with KNOT_EINVAL 2025-10-24 09:17:08 +02:00
Daniel Salzman
3a6d24e3f1 Replace DNSSEC_EOK with KNOT_EOK 2025-10-24 09:17:08 +02:00
Daniel Salzman
07751bc184 libknot: replace dnssec/shared/dname with libknot/dname 2025-10-24 09:17:08 +02:00
Daniel Salzman
22d4d0a5d6 tests: adapt to libdnssec to libknot change 2025-10-24 09:17:08 +02:00
Daniel Salzman
9ef76b2a1c tests: move libdnssec tests to libknot 2025-10-24 09:17:08 +02:00
Daniel Salzman
75494000fd Update libdnssec -> libknot/dnssec includes 2025-10-24 09:17:08 +02:00
Daniel Salzman
17d7b25302 knot: prepare for integration of the Redis backend 2025-09-12 16:50:41 +02:00
Libor Peltan
92f99d6897 external validation: dump files follow zonefile templating and storage path 2025-08-01 17:31:18 +02:00
Daniel Salzman
326525dbbe Merge branch 'knotd-cert-ca' into 'master'
remote/acl TLS certificate validation

See merge request knot/knot-dns!1779
2025-06-23 18:19:04 +02:00
Jan Doskočil
261c378b74 conf: implemented certificate hostname validation 2025-06-23 17:55:14 +02:00
Daniel Salzman
82df13121e utils: add class aliases INTERNET and CHAOS 2025-06-14 20:48:18 +02:00
Daniel Salzman
1464b18288 kzonecheck: consider zone file name with origin auto-detection
Partially revert 38f65806dd
2025-05-30 13:16:37 +02:00
Daniel Salzman
38f65806dd kzonecheck: use SOA owner from zone file as origin if not specified 2025-05-12 16:33:49 +02:00
Jan Hák
0e152ae5cf sem-checks: add new DNSSEC algorithms 5 and 6 - RFC-9558, RFC-9563 2025-05-05 11:02:58 +02:00
Libor Peltan
2e5a20ab24 semantic-check: allow missing glue if NS is at other delegation...
...not only below
2025-04-30 14:06:18 +02:00
Daniel Salzman
b3cdb3431a tests: relicense to GPL-2.0-or-later 2025-03-24 09:53:50 +01:00
Libor Peltan
c7e0d925e1 dnssec: moved last_signed_serial from kaspDB to timers...
...to gain performance with many zones signing at once
2025-03-17 08:31:29 +01:00
Daniel Salzman
57c978bbea zonefile: refactor zcreator_step() arguments 2025-03-16 20:48:45 +01:00
Daniel Salzman
44120c0b00 zonefile: remove unused zcreator_t.master item 2025-03-16 20:48:45 +01:00
Libor Peltan
f8472acb5f implemented zonefile-skip option 2025-03-12 08:43:36 +01:00
Libor Peltan
daf9f6d0f5 implemented SOA serial shift for backup-signer op 2025-02-08 13:57:56 +01:00
Libor Peltan
c69d77607f bugfix/serial modulo: detect uint32 overflow 2025-01-21 12:34:57 +01:00
David Vašek
aacd827f71 tests/atomic: lower the iteration counts with spinlock-emulated atomics 2024-12-12 20:21:50 +01:00
Jan Hák
e53c99d3cb tests: fix usage of new atomic in code -- test_atomic.c 2024-12-11 17:36:20 +01:00
Daniel Salzman
3efd85c935 tests: don't build tests for atomic and spinlock if disabled daemon
As the tests depend on dthreads and liburcu.

fixes #946
2024-12-07 16:45:37 +01:00
Daniel Salzman
c811d6c0c0 tests: stabilize modules/test_rrl 2024-10-11 07:39:44 +02:00
Jan Hák
6055b7c9f6 acl: add protocol option to the configuration 2024-09-27 12:41:36 +02:00
Jan Hák
aaff152cfd yparser: add support for link-local IPv6 addresses 2024-09-16 12:46:46 +02:00
Jan Doskočil
fad9ce9f34 yparser: new time unit specifiers
w = week
M = month
y = year
2024-08-24 15:17:53 +02:00
Daniel Salzman
05f48507ea rrl: add R (rrl_query()) and W (rrl_update()) support 2024-08-19 16:01:09 +02:00
Jan Doskočil
b3e2a5916f
tests: longer lasting RRSIGs to prevent test breakage by expiration 2024-08-19 13:42:24 +02:00
Jan Doskočil
dc9fe7869d
test_journal: correct potential for truncation in snprintf
fmt string is "i%d" - theoretically if the argument was eg INT_MIN this
could've been 13 chars long, which is why gcc threw a warning
2024-08-16 11:09:30 +02:00
Daniel Salzman
9b42ca0904 rrl: update KRU 2024-08-12 08:01:55 +02:00
Daniel Salzman
934914bf38 module: add protocol processing callback 2024-08-12 08:01:47 +02:00
Daniel Salzman
3187da5791 tests/confdb: fix UBSAN 'applying non-zero offset 1 to null pointer' 2024-07-25 14:25:15 +02:00
Jan Hák
cbae4db7c4 libdnssec: move sample keys from tests to libdnssec 2024-07-19 13:19:19 +02:00
Jan Hák
632d672800 keymgr: add keystore-test command 2024-07-19 13:18:56 +02:00