picnoir
/
Systemd
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
Systemd/src/resolve
History
Lennart Poettering b64513580c resolved: when we receive an reply which is OPT-less or RRSIG-less, downgrade what we verified 
If we receive a reply that lacks the OPT RR, then this is reason to downgrade what was verified before, as it's
apparently no longer true, and the previous OPT RR we saw was only superficially OK.

Similar, if we realize that RRSIGs are not augmented, then also downgrade the feature level that was verified, as
DNSSEC is after all not supported. This check is in particular necessary, as we might notice the fact that RRSIG is not
augmented only very late, when verifying the root domain.

Also, when verifying a successful response, actually take in consideration that it might have been reported already
that RRSIG or OPT are missing in the response.
 		2016-01-17 20:47:46 +01:00
..
.gitignore resolve: add more record types and convert to gperf table 2014-08-03 22:02:32 -04:00
Makefile resolved: add daemon to manage resolv.conf 2014-05-19 18:14:56 +02:00
RFCs resolved: update RFCs list and TODO list 2016-01-17 20:47:46 +01:00
dns-type.c resolved: some RR types may appear only or not at all in a zone apex 2016-01-17 20:44:25 +01:00
dns-type.h resolved: some RR types may appear only or not at all in a zone apex 2016-01-17 20:44:25 +01:00
org.freedesktop.resolve1.conf resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
org.freedesktop.resolve1.service resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
resolved-bus.c resolved: improve query RR type error wording a bit 2016-01-11 20:19:10 +01:00
resolved-bus.h resolved: rename resolved.h to resolved-manager.h 2014-08-01 16:14:59 +02:00
resolved-conf.c resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved-conf.h resolved,networkd: unify ResolveSupport enum 2016-01-05 17:30:51 +01:00
resolved-def.h resolved: add packet header details for mDNS 2015-12-08 16:41:45 +01:00
resolved-dns-answer.c resolved: implement the full NSEC and NSEC3 postive wildcard proofs 2016-01-13 20:21:57 +01:00
resolved-dns-answer.h resolved: implement the full NSEC and NSEC3 postive wildcard proofs 2016-01-13 20:21:57 +01:00
resolved-dns-cache.c resolved: when caching negative responses, honour NSEC/NSEC3 TTLs 2016-01-05 01:35:28 +01:00
resolved-dns-cache.h resolved: when caching negative responses, honour NSEC/NSEC3 TTLs 2016-01-05 01:35:28 +01:00
resolved-dns-dnssec.c resolved: update RFCs list and TODO list 2016-01-17 20:47:46 +01:00
resolved-dns-dnssec.h resolved: rename dnssec_verify_dnskey() → dnssec_verify_dnskey_by_ds() 2016-01-17 20:47:45 +01:00
resolved-dns-packet.c resolved: ignore invalid OPT RRs in incoming packets 2016-01-17 20:47:46 +01:00
resolved-dns-packet.h resolved: parse EDNS0 rcode extension bits 2015-12-29 21:42:09 +01:00
resolved-dns-query.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-dns-query.h resolved: query_process_cname - make fully recursive 2016-01-07 14:43:24 +01:00
resolved-dns-question.c resolved: cache - do negative caching only on the canonical name 2015-12-10 17:04:42 +01:00
resolved-dns-question.h resolved: make sure DNS_ANSWER_FOREACH() can be nested 2015-12-02 20:43:11 +01:00
resolved-dns-rr.c resolved: complete NSEC non-existance proofs 2016-01-17 20:47:46 +01:00
resolved-dns-rr.h resolved: complete NSEC non-existance proofs 2016-01-17 20:47:46 +01:00
resolved-dns-scope.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-dns-scope.h resolved: rework OPT RR generation logic 2015-12-27 01:41:40 +01:00
resolved-dns-search-domain.c dns-domain: simplify dns_name_is_root() and dns_name_is_single_label() 2015-11-25 22:00:07 +01:00
resolved-dns-search-domain.h resolved: fully support DNS search domains 2015-11-25 21:59:16 +01:00
resolved-dns-server.c resolved: when we receive an reply which is OPT-less or RRSIG-less, downgrade what we verified 2016-01-17 20:47:46 +01:00
resolved-dns-server.h resolved: downgrade server feature level more aggressively when we have reason to 2016-01-17 20:47:46 +01:00
resolved-dns-stream.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-dns-stream.h remove unused includes 2015-02-23 23:53:42 +01:00
resolved-dns-transaction.c resolved: downgrade server feature level more aggressively when we have reason to 2016-01-17 20:47:46 +01:00
resolved-dns-transaction.h resolved: rename DnsTransaction's current_features field to current_feature_level 2016-01-11 19:40:00 +01:00
resolved-dns-trust-anchor.c resolved: rename dnssec_verify_dnskey() → dnssec_verify_dnskey_by_ds() 2016-01-17 20:47:45 +01:00
resolved-dns-trust-anchor.h resolved: when validating, first strip revoked trust anchor keys from validated keys list 2016-01-11 19:39:59 +01:00
resolved-dns-zone.c resolved: internalize string buffer of dns_resource_record_to_string() 2015-12-26 19:09:10 +01:00
resolved-dns-zone.h resolved: chase DNSKEY/DS RRs when doing look-ups with DNSSEC enabled 2015-12-10 11:35:52 +01:00
resolved-gperf.gperf resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved-link.c resolved: cache formatted server string in DnsServer structure 2016-01-11 19:40:00 +01:00
resolved-link.h resolved: introduce support for per-interface negative trust anchors 2016-01-06 18:36:32 +01:00
resolved-llmnr.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-llmnr.h resolved: use a #define for LLMNR port 2015-07-13 11:28:29 -04:00
resolved-manager.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-manager.h resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved-mdns.c resolved,networkd: unify ResolveSupport enum 2016-01-05 17:30:51 +01:00
resolved-mdns.h resolved: add infrastructure for mDNS related sockets 2015-12-08 16:37:40 +01:00
resolved-resolv-conf.c resolved: cache formatted server string in DnsServer structure 2016-01-11 19:40:00 +01:00
resolved-resolv-conf.h resolved: split out all code dealing with /etc/resolv.conf into its own .c file 2015-11-25 21:58:37 +01:00
resolved.c resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved.conf.in resolved: make MulticastDNS support configurable in resolved.conf 2016-01-05 17:41:41 +01:00
test-dnssec-complex.c resolved: add complex test case 2016-01-17 20:47:46 +01:00
test-dnssec.c resolved: rename dnssec_verify_dnskey() → dnssec_verify_dnskey_by_ds() 2016-01-17 20:47:45 +01:00