~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

Age	Commit message (Collapse)	Author
2016-01-29	resolve-host: allow specifying type as TYPEnn	Zbigniew Jędrzejewski-Szmek
	This mirrors the behaviour of host and makes the conversion to and from string symmetrical.
2016-01-28	resolved: convert TLSA fields to string	Zbigniew Jędrzejewski-Szmek
	Example output: _443._tcp.fedoraproject.org IN TLSA 0 0 1 GUAL5bejH7czkXcAeJ0vCiRxwMnVBsDlBMBsFtfLF8A= -- Cert. usage: CA constraint -- Selector: Full Certificate -- Matching type: SHA-256
2016-01-28	resolved: OPENPGPKEY records	Zbigniew Jędrzejewski-Szmek

2016-01-25	resolved: move dns_type_to_af() to dns-type.c	Lennart Poettering

2016-01-17	resolved: some RR types may appear only or not at all in a zone apex	Lennart Poettering
	Add extra checks when validating with RRSIGs. This follows recommendations from: http://www.george-barwood.pwp.blueyonder.co.uk/DnsServer/NotesOnDNSSSEC.htm
2016-01-13	resolved: refuse validating wildcard RRs for SOA, NSEC3, DNAME	Lennart Poettering

2016-01-11	resolved: refuse doing queries for known-obsolete RR types	Lennart Poettering
	Given how fragile DNS servers are with some DNS types, and given that we really should avoid confusing them with known-weird lookups, refuse doing lookups for known-obsolete RR types.
2016-01-11	resolved: don't attempt to send queries for DNSSEC RR types to servers not ↵	Lennart Poettering
	supporting them If we already degraded the feature level below DO don't bother with sending requests for DS, DNSKEY, RRSIG, NSEC, NSEC3 or NSEC3PARAM RRs. After all, we cannot do DNSSEC validation then anyway, and we better not press a legacy server like this with such modern concepts. This also has the benefit that when we try to validate a response we received using DNSSEC, and we detect a limited server support level while doing so, all further auxiliary DNSSEC queries will fail right-away.
2015-12-26	resolved: split out a new dns_type_may_redirect() call	Lennart Poettering
	Let's abstract which RRs shall honour CNAMEs, and which ones should not.
2015-12-18	resolved: make use of dns_{class\|type}_is_{pseudo\|valid_rr}() everywhere	Lennart Poettering

2015-12-18	resolved: move DNS class utilities to dns-type.c and add more helpers	Lennart Poettering
	Let's make DNS class helpers more like DNS type helpers, let's move them from resolved-dns-rr.[ch] into dns-type.[ch]. This also adds two new calls dns_class_is_pseudo() and dns_class_is_valid_rr() which operate similar to dns_type_is_pseudo() and dns_type_is_valid_rr() but for classes instead of types. This should hopefully make handling of DNS classes and DNS types more alike.
2015-12-11	resolved: generalize DNS RR type validity checks	Lennart Poettering
	Check the validity of RR types as we parse or receive data from IPC clients, and use the same code for all of them.
2015-12-10	resolved: fix parameter type of dns_type_is_pseudo()	Lennart Poettering
	DNS RR types are uint16_t after all, treat them as such.
2015-07-23	resolved: rr - ignore pseudo types in NSEC(3) bitmaps	Tom Gundersen

2014-08-03	resolve-host: make arg_type an int	Zbigniew Jędrzejewski-Szmek
	We are using it also to store _DNS_TYPE_INVALID, so it should be signed.
2014-08-03	resolve: add more record types and convert to gperf table	Zbigniew Jędrzejewski-Szmek
	We are unlikely to evert support most of them, but we can at least display the types properly. The list is taken from the IANA list. The table of number->name mappings is converted to a switch statement. gcc does a nice job of optimizing lookup (when optimization is enabled). systemd-resolve-host -t is now case insensitive.