picnoir/Systemd
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
Systemd/src/resolve
History
Tom Gundersen 35ad41d361 resolved: dnssec - properly take wildcards into account in NESC3 proof 
For NXDOMAIN, it is not sufficient to prove that the next-closest
enclosure does not exist, we must also prove that there is no
wildcard domain directly below the closest enclosure which would
synthesise the name that has been requested.

For positive responses, in addition to exact matches, we should
accept wildcard ones. In that case we must first prove that
there is no precise match (i.e., that the closest encounter
is not the record itself) and secondly that the source of
synthesis exists.
2016-01-03 10:50:26 +01:00
..
.gitignore resolve: add more record types and convert to gperf table 2014-08-03 22:02:32 -04:00
dns-type.c resolved: split out a new dns_type_may_redirect() call 2015-12-26 19:09:09 +01:00
dns-type.h resolved: split out a new dns_type_may_redirect() call 2015-12-26 19:09:09 +01:00
Makefile resolved: add daemon to manage resolv.conf 2014-05-19 18:14:56 +02:00
org.freedesktop.resolve1.conf resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
org.freedesktop.resolve1.service resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
resolved-bus.c resolved: properly handle SRV RRs with the DNS root as hostname 2015-12-29 21:42:09 +01:00
resolved-bus.h resolved: rename resolved.h to resolved-manager.h 2014-08-01 16:14:59 +02:00
resolved-conf.c resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
resolved-conf.h resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
resolved-def.h resolved: add packet header details for mDNS 2015-12-08 16:41:45 +01:00
resolved-dns-answer.c resolved: don't allow RRs with TTL=0 and TTL!=0 in the same RRset 2015-12-29 21:42:09 +01:00
resolved-dns-answer.h resolved: add a call that dumps the contents of a DnsAnswer structure 2015-12-18 19:42:02 +01:00
resolved-dns-cache.c resolved: add comments referencing various RFCs to various places 2015-12-29 21:42:10 +01:00
resolved-dns-cache.h resolved: gather statistics about resolved names 2015-12-26 19:09:10 +01:00
resolved-dns-dnssec.c resolved: dnssec - properly take wildcards into account in NESC3 proof 2016-01-03 10:50:26 +01:00
resolved-dns-dnssec.h resolved: dnssec - factor out hashed domain generation 2016-01-03 09:59:13 +01:00
resolved-dns-packet.c resolved: append RFC6975 algorithm data to EDNS OPT RR 2015-12-29 21:42:10 +01:00
resolved-dns-packet.h resolved: parse EDNS0 rcode extension bits 2015-12-29 21:42:09 +01:00
resolved-dns-query.c resolved: never use data from failed transactions 2015-12-26 19:09:10 +01:00
resolved-dns-query.h resolved: propagate the DNSSEC result from the transaction to the query and the the bus client 2015-12-18 20:09:30 +01:00
resolved-dns-question.c resolved: cache - do negative caching only on the canonical name 2015-12-10 17:04:42 +01:00
resolved-dns-question.h resolved: make sure DNS_ANSWER_FOREACH() can be nested 2015-12-02 20:43:11 +01:00
resolved-dns-rr.c resolved: add comments referencing various RFCs to various places 2015-12-29 21:42:10 +01:00
resolved-dns-rr.h resolved: NSEC3 hash algorithms are distinct from DS digest algorithms 2015-12-29 21:42:10 +01:00
resolved-dns-scope.c resolved: rework OPT RR generation logic 2015-12-27 01:41:40 +01:00
resolved-dns-scope.h resolved: rework OPT RR generation logic 2015-12-27 01:41:40 +01:00
resolved-dns-search-domain.c dns-domain: simplify dns_name_is_root() and dns_name_is_single_label() 2015-11-25 22:00:07 +01:00
resolved-dns-search-domain.h resolved: fully support DNS search domains 2015-11-25 21:59:16 +01:00
resolved-dns-server.c resolved: use CLAMP() intsead of MIN(MAX()) 2015-12-29 21:42:10 +01:00
resolved-dns-server.h resolved: rename "features" variables to "feature_level" 2015-12-27 01:41:40 +01:00
resolved-dns-stream.c resolved: don't set TCP_NODELAY twice for TCP sockets 2015-12-26 19:09:10 +01:00
resolved-dns-stream.h remove unused includes 2015-02-23 23:53:42 +01:00
resolved-dns-transaction.c resolved: don't conclude NODATA if CNAME exists 2016-01-03 09:28:48 +01:00
resolved-dns-transaction.h resolved: add dns_transaction_close_connection() 2015-12-27 01:41:39 +01:00
resolved-dns-trust-anchor.c resolved: add support NSEC3 proofs, as well as proofs for domains that are OK to be unsigned 2015-12-18 14:48:50 +01:00
resolved-dns-trust-anchor.h resolved: add a simple trust anchor database as additional RR source 2015-12-03 21:17:49 +01:00
resolved-dns-zone.c resolved: internalize string buffer of dns_resource_record_to_string() 2015-12-26 19:09:10 +01:00
resolved-dns-zone.h resolved: chase DNSKEY/DS RRs when doing look-ups with DNSSEC enabled 2015-12-10 11:35:52 +01:00
resolved-gperf.gperf resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
resolved-link.c resolved: don't complain if networkd doesn't know an interface we care about 2015-12-18 14:48:49 +01:00
resolved-link.h resolved: create dns scopes for mDNS 2015-12-08 16:41:45 +01:00
resolved-llmnr.c resolved: improve some log messages a bit 2015-12-27 01:41:39 +01:00
resolved-llmnr.h resolved: use a #define for LLMNR port 2015-07-13 11:28:29 -04:00
resolved-manager.c resolved: use right format specifier to print transaction ID 2015-12-18 14:48:49 +01:00
resolved-manager.h resolved: gather statistics about resolved names 2015-12-26 19:09:10 +01:00
resolved-mdns.c resolved: add support NSEC3 proofs, as well as proofs for domains that are OK to be unsigned 2015-12-18 14:48:50 +01:00
resolved-mdns.h resolved: add infrastructure for mDNS related sockets 2015-12-08 16:37:40 +01:00
resolved-resolv-conf.c resolved: flush the global DNS cache if /etc/resolv.conf is touched 2015-11-27 00:46:51 +01:00
resolved-resolv-conf.h resolved: split out all code dealing with /etc/resolv.conf into its own .c file 2015-11-25 21:58:37 +01:00
resolved.c resolved: make sure FallbackDNS= overrides built-in servers, doesn't extend them 2015-11-25 21:58:37 +01:00
resolved.conf.in resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
RFCs resolved: add a list of DNS-related RFCs and their implementation status in resolved 2015-12-29 21:42:10 +01:00
test-dnssec.c resolved: internalize string buffer of dns_resource_record_to_string() 2015-12-26 19:09:10 +01:00