summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
...
* Log IPSET actions.v2.69rc2Wang Jian2014-03-283-1/+12
* Add --dnssec-no-timecheckSimon Kelley2014-03-285-83/+116
* Ensure ->sentto is valid for DNSSEC forwards. Otherwise retries SEGV.Simon Kelley2014-03-271-0/+1
* Cache stats availble in CHAOS .bind domain.Simon Kelley2014-03-275-15/+155
* Terminate DS-search when reaching the root via cache entries.Simon Kelley2014-03-261-0/+11
* SERVFAIL is an expected error return, don't try all servers.Simon Kelley2014-03-251-4/+3
* Handle failure of hash_questions()Tomas Hozza2014-03-251-29/+33
* Memory leak in error path.Tomas Hozza2014-03-251-2/+5
* Reorder sanity checks on UDP packet reception, to cope with failed recvfrom()Simon Kelley2014-03-241-7/+11
* Add dnssec-check-unsigned to example config file.Simon Kelley2014-03-241-0/+8
* CHANGELOG update.v2.69rc1Simon Kelley2014-03-221-0/+4
* Ignore DNS queries from port 0: http://www.ietf.org/mail-archive/web/dnsop/cu...Simon Kelley2014-03-221-3/+16
* Tidy uid defines.Andy2014-03-222-2/+2
* Fix DNSSEC crash retrying to IPv6 server.Simon Kelley2014-03-211-2/+2
* Initialise uid when creating CNAME cache record.Simon Kelley2014-03-201-0/+2
* Make --quiet-dhcp apply to DHCPDISCOVER when client ignored.Simon Kelley2014-03-201-0/+2
* Manpage typos.Moritz Warning2014-03-201-2/+2
* Tidy and fix cache->uid handling.Simon Kelley2014-03-183-15/+27
* Ensure next_uid() can never return 0.Andy2014-03-171-2/+4
* Handle integer overflow in uid counter. Fixes rare crashes in cache code.Simon Kelley2014-03-164-16/+23
* Warn about non-local queries once only for UDP.Simon Kelley2014-03-121-1/+6
* TypoSimon Kelley2014-03-121-1/+1
* OPT_LOCAL_SERVICE needs up-to-date interface list too.Simon Kelley2014-03-061-1/+2
* Set --local-service in Debian package startup.Simon Kelley2014-03-053-0/+17
* --local-service. Default protection from DNS amplification attacks.Simon Kelley2014-03-056-2/+133
* Add --static to pkg-config command when appropriate.Simon Kelley2014-03-051-1/+4
* Compiler warning.Simon Kelley2014-03-031-2/+2
* Man page updates for DNSSEC.Simon Kelley2014-03-021-2/+13
* KEYBLOCK LEN better as a multiple of 8.Simon Kelley2014-03-021-1/+1
* Can have local DS records (trust anchors).v2.69test11Simon Kelley2014-03-011-1/+1
* Mass edit of INSECURE->BOGUS returns for server failure/bad input.v2.69test10Simon Kelley2014-03-011-84/+73
* Don't cache secure replies which we've messsed with.Simon Kelley2014-03-011-5/+4
* Tweak tuning params.Simon Kelley2014-03-013-4/+5
* Handle replies with no answers and no NS in validate_reply.Simon Kelley2014-03-011-0/+4
* Don't free blockdata for negative DS cache entries.Simon Kelley2014-03-012-2/+2
* Fix off-by-one overwrite.Simon Kelley2014-03-011-1/+2
* Tidy.Simon Kelley2014-03-011-4/+3
* Check that unsigned replies come from unsigned zones if --dnssec-check-unsign...Simon Kelley2014-02-286-110/+469
* Negative caching for DS records.Simon Kelley2014-02-273-48/+104
* Return INSECURE when validation fails with proved non-existent DS.Simon Kelley2014-02-251-5/+9
* Strip DNSSEC RRs when query doesn't have DO bit set.Simon Kelley2014-02-254-94/+327
* Speeling.Simon Kelley2014-02-241-7/+7
* Code cleanup.v2.69test9Simon Kelley2014-02-241-47/+34
* An NSEC record cannot attest to its own non-existance!Simon Kelley2014-02-241-4/+8
* Check signer name in RRSIGs.Simon Kelley2014-02-231-6/+32
* Bugfix for last commit.Simon Kelley2014-02-231-4/+4
* NSEC3 validation. First pass.Simon Kelley2014-02-235-113/+505
* Add --servers-file option.Simon Kelley2014-02-208-27/+92
* Omit ECC from DNSSEC if nettle library is old.Simon Kelley2014-02-192-6/+17
* More server cleanup.Simon Kelley2014-02-191-29/+24