summaryrefslogtreecommitdiff
AgeCommit message (Expand)Author
2015-12-28resolved: only keep a single list of supported signature algorithmsLennart Poettering
2015-12-28resolve-host: log RR parsing errorsLennart Poettering
2015-12-28resolved: add ECDSA signature supportLennart Poettering
2015-12-28shared: relax restrictions on valid domain name characters a bitLennart Poettering
2015-12-28resolved: split out RSA-specific code from dnssec_verify_rrset()Lennart Poettering
2015-12-28resolved: simplify MD algorithm initialization a bitLennart Poettering
2015-12-28resolved: add SHA384 digest supportLennart Poettering
2015-12-27hwdb: Update database of Bluetooth company identifiersMarcel Holtmann
2015-12-27Merge pull request #2225 from poettering/dnssec7Tom Gundersen
2015-12-27resolved: rename "features" variables to "feature_level"Lennart Poettering
2015-12-27resolved: rework OPT RR generation logicLennart Poettering
2015-12-27resolved: reuse dns_transaction_stop() when destructing transaction objectsLennart Poettering
2015-12-27resolved: add dns_transaction_close_connection()Lennart Poettering
2015-12-27resolved: make sure we reset the DNSSEC result when we accept a response packetLennart Poettering
2015-12-27resolved: improve some log messages a bitLennart Poettering
2015-12-27resolved: never proceed processing truncated packetsLennart Poettering
2015-12-27resolved: remember explicitly whether we already tried a stream connectionLennart Poettering
2015-12-27resolved: make sure we GC stream transactions properlyLennart Poettering
2015-12-27resolved: ignore additional DNS responses we get while validatingLennart Poettering
2015-12-27resolved: introduce dns_transaction_reset_answer()Lennart Poettering
2015-12-27shared: fix handling of suffix "." in dns_name_compare_func()Lennart Poettering
2015-12-26shared: fix error propagation in dns_name_compare_func()Lennart Poettering
2015-12-26resolved: don't unnecessarily allocate memory in dns_packet_append_name()Lennart Poettering
2015-12-26resolved: name TCP and UDP socket calls uniformlyLennart Poettering
2015-12-26resolved: add an automatic downgrade to non-DNSSEC modeLennart Poettering
2015-12-26resolved: no need to store return value of dns_server_possible_features()Lennart Poettering
2015-12-26resolved: don't set TCP_NODELAY twice for TCP socketsLennart Poettering
2015-12-26resolved: generate an explicit transaction error when we cannot reach server ...Lennart Poettering
2015-12-26resolved: deal with unsigned DS/NSEC/NSEC3 properlyLennart Poettering
2015-12-26resolved: log each dnssec failure, in a recognizable wayLennart Poettering
2015-12-26resolved: gather statistics about resolved namesLennart Poettering
2015-12-26resolved: if we accepted unauthenticated NSEC/NSEC3 RRs, use them for proofsLennart Poettering
2015-12-26resolved: don't insist on finding DNSKEYs for RRsets of zones with DNSSEC offLennart Poettering
2015-12-26resolved: be stricter when searching for a DS RR for a DNSKEY RRLennart Poettering
2015-12-26resolved: make use of dns_type_may_redirect() where possibleLennart Poettering
2015-12-26update DNSSEC TODOLennart Poettering
2015-12-26resolved: tighten search for NSEC3 RRs a bitLennart Poettering
2015-12-26resolved: when doing NSEC3 proof, first find right NSEC3 suffixLennart Poettering
2015-12-26resolved: properly implement RRSIG validation of wildcarded RRsetsLennart Poettering
2015-12-26resolved: never use data from failed transactionsLennart Poettering
2015-12-26resolved: don't choke on NSEC/NSEC3 RRs with no bitmapLennart Poettering
2015-12-26bitmap: don't do bitwise XOR on booleansLennart Poettering
2015-12-26util-lib: make sure more bitmap calls can deal with NULL objects fineLennart Poettering
2015-12-26resolved: internalize string buffer of dns_resource_record_to_string()Lennart Poettering
2015-12-26resolved: when matching SOA RRs, don't eat up errorsLennart Poettering
2015-12-26resolved: when matching SOA RRs, honour RR classLennart Poettering
2015-12-26resolved: when looking for a SOA RR in a reply, pick the right oneLennart Poettering
2015-12-26resolved: when caching NXDOMAIN for an RR, make sure we flush out old ANY ent...Lennart Poettering
2015-12-26resolved: split out a new dns_type_may_redirect() callLennart Poettering
2015-12-26resolve-host: propagate error properlyLennart Poettering