Systemd/src/resolve
Lennart Poettering b9282bc128 resolved: on negative NODATA replies, properly deal with empty non-terminals
empty non-terminals generally lack NSEC RRs, which means we can deduce their existance only from the fact that there
are other RRs that contain them in their suffix. Specifically, the NSEC proof for NODATA on ENTs works by sending the
NSEC whose next name is a suffix of the queried name to the client. Use this information properly.
2016-01-17 20:47:46 +01:00
..
.gitignore resolve: add more record types and convert to gperf table 2014-08-03 22:02:32 -04:00
Makefile resolved: add daemon to manage resolv.conf 2014-05-19 18:14:56 +02:00
RFCs update RFCs 2016-01-04 22:42:10 +01:00
dns-type.c resolved: some RR types may appear only or not at all in a zone apex 2016-01-17 20:44:25 +01:00
dns-type.h resolved: some RR types may appear only or not at all in a zone apex 2016-01-17 20:44:25 +01:00
org.freedesktop.resolve1.conf resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
org.freedesktop.resolve1.service resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
resolved-bus.c resolved: improve query RR type error wording a bit 2016-01-11 20:19:10 +01:00
resolved-bus.h resolved: rename resolved.h to resolved-manager.h 2014-08-01 16:14:59 +02:00
resolved-conf.c resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved-conf.h resolved,networkd: unify ResolveSupport enum 2016-01-05 17:30:51 +01:00
resolved-def.h resolved: add packet header details for mDNS 2015-12-08 16:41:45 +01:00
resolved-dns-answer.c resolved: implement the full NSEC and NSEC3 postive wildcard proofs 2016-01-13 20:21:57 +01:00
resolved-dns-answer.h resolved: implement the full NSEC and NSEC3 postive wildcard proofs 2016-01-13 20:21:57 +01:00
resolved-dns-cache.c resolved: when caching negative responses, honour NSEC/NSEC3 TTLs 2016-01-05 01:35:28 +01:00
resolved-dns-cache.h resolved: when caching negative responses, honour NSEC/NSEC3 TTLs 2016-01-05 01:35:28 +01:00
resolved-dns-dnssec.c resolved: on negative NODATA replies, properly deal with empty non-terminals 2016-01-17 20:47:46 +01:00
resolved-dns-dnssec.h resolved: rename dnssec_verify_dnskey() → dnssec_verify_dnskey_by_ds() 2016-01-17 20:47:45 +01:00
resolved-dns-packet.c basic: introduce generic ascii_strlower_n() call and make use of it everywhere 2016-01-11 19:39:59 +01:00
resolved-dns-packet.h resolved: parse EDNS0 rcode extension bits 2015-12-29 21:42:09 +01:00
resolved-dns-query.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-dns-query.h resolved: query_process_cname - make fully recursive 2016-01-07 14:43:24 +01:00
resolved-dns-question.c resolved: cache - do negative caching only on the canonical name 2015-12-10 17:04:42 +01:00
resolved-dns-question.h resolved: make sure DNS_ANSWER_FOREACH() can be nested 2015-12-02 20:43:11 +01:00
resolved-dns-rr.c resolved: when validating an RRset, store information about the synthesizing source and zone in each RR 2016-01-17 20:47:45 +01:00
resolved-dns-rr.h resolved: when validating an RRset, store information about the synthesizing source and zone in each RR 2016-01-17 20:47:45 +01:00
resolved-dns-scope.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-dns-scope.h resolved: rework OPT RR generation logic 2015-12-27 01:41:40 +01:00
resolved-dns-search-domain.c dns-domain: simplify dns_name_is_root() and dns_name_is_single_label() 2015-11-25 22:00:07 +01:00
resolved-dns-search-domain.h resolved: fully support DNS search domains 2015-11-25 21:59:16 +01:00
resolved-dns-server.c resolved: split out resetting of DNS server counters into a function call of its own 2016-01-11 19:40:00 +01:00
resolved-dns-server.h resolved: rework how and when we detect whether our chosen DNS server knows DNSSEC 2016-01-11 19:40:00 +01:00
resolved-dns-stream.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-dns-stream.h remove unused includes 2015-02-23 23:53:42 +01:00
resolved-dns-transaction.c resolved: rename dnssec_verify_dnskey() → dnssec_verify_dnskey_by_ds() 2016-01-17 20:47:45 +01:00
resolved-dns-transaction.h resolved: rename DnsTransaction's current_features field to current_feature_level 2016-01-11 19:40:00 +01:00
resolved-dns-trust-anchor.c resolved: rename dnssec_verify_dnskey() → dnssec_verify_dnskey_by_ds() 2016-01-17 20:47:45 +01:00
resolved-dns-trust-anchor.h resolved: when validating, first strip revoked trust anchor keys from validated keys list 2016-01-11 19:39:59 +01:00
resolved-dns-zone.c resolved: internalize string buffer of dns_resource_record_to_string() 2015-12-26 19:09:10 +01:00
resolved-dns-zone.h resolved: chase DNSKEY/DS RRs when doing look-ups with DNSSEC enabled 2015-12-10 11:35:52 +01:00
resolved-gperf.gperf resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved-link.c resolved: cache formatted server string in DnsServer structure 2016-01-11 19:40:00 +01:00
resolved-link.h resolved: introduce support for per-interface negative trust anchors 2016-01-06 18:36:32 +01:00
resolved-llmnr.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-llmnr.h resolved: use a #define for LLMNR port 2015-07-13 11:28:29 -04:00
resolved-manager.c resolved: set a description on all our event sources 2016-01-11 19:39:59 +01:00
resolved-manager.h resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved-mdns.c resolved,networkd: unify ResolveSupport enum 2016-01-05 17:30:51 +01:00
resolved-mdns.h resolved: add infrastructure for mDNS related sockets 2015-12-08 16:37:40 +01:00
resolved-resolv-conf.c resolved: cache formatted server string in DnsServer structure 2016-01-11 19:40:00 +01:00
resolved-resolv-conf.h resolved: split out all code dealing with /etc/resolv.conf into its own .c file 2015-11-25 21:58:37 +01:00
resolved.c resolved,networkd: add a per-interface DNSSEC setting 2016-01-05 20:10:31 +01:00
resolved.conf.in resolved: make MulticastDNS support configurable in resolved.conf 2016-01-05 17:41:41 +01:00
test-dnssec.c resolved: rename dnssec_verify_dnskey() → dnssec_verify_dnskey_by_ds() 2016-01-17 20:47:45 +01:00