Systemd/src/resolve
Lennart Poettering 85aeaccc10 resolved: fix DNSSEC canonical ordering logic
When applying canonical DNSSEC ordering for an RRset only order by the
wire format of the RRs' RDATA, not by the full wire formatting. The RFC
isn't particularly clear about this, but this is apparently how it is
done. This fixes validation of pentagon.gov's DS RRset.
2016-01-04 20:27:45 +01:00
..
.gitignore resolve: add more record types and convert to gperf table 2014-08-03 22:02:32 -04:00
Makefile resolved: add daemon to manage resolv.conf 2014-05-19 18:14:56 +02:00
RFCs resolve: add RFC4501 URI support to systemd-resolve-host 2016-01-03 12:59:26 +01:00
dns-type.c resolved: split out a new dns_type_may_redirect() call 2015-12-26 19:09:09 +01:00
dns-type.h resolved: split out a new dns_type_may_redirect() call 2015-12-26 19:09:09 +01:00
org.freedesktop.resolve1.conf resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
org.freedesktop.resolve1.service resolved: add legacy dbus service and policy files 2014-07-16 03:41:39 +02:00
resolved-bus.c resolved: properly handle SRV RRs with the DNS root as hostname 2015-12-29 21:42:09 +01:00
resolved-bus.h resolved: rename resolved.h to resolved-manager.h 2014-08-01 16:14:59 +02:00
resolved-conf.c resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
resolved-conf.h resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
resolved-def.h resolved: add packet header details for mDNS 2015-12-08 16:41:45 +01:00
resolved-dns-answer.c resolved: don't allow RRs with TTL=0 and TTL!=0 in the same RRset 2015-12-29 21:42:09 +01:00
resolved-dns-answer.h resolved: add a call that dumps the contents of a DnsAnswer structure 2015-12-18 19:42:02 +01:00
resolved-dns-cache.c resolved: add comments referencing various RFCs to various places 2015-12-29 21:42:10 +01:00
resolved-dns-cache.h resolved: gather statistics about resolved names 2015-12-26 19:09:10 +01:00
resolved-dns-dnssec.c resolved: fix DNSSEC canonical ordering logic 2016-01-04 20:27:45 +01:00
resolved-dns-dnssec.h resolved: print a log message when we ignore an NSEC3 RR with an excessive amount of iterations 2016-01-03 17:54:01 +01:00
resolved-dns-packet.c resolved: fix serialization of the root domain 2016-01-02 22:16:16 +01:00
resolved-dns-packet.h resolved: parse EDNS0 rcode extension bits 2015-12-29 21:42:09 +01:00
resolved-dns-query.c resolved: never use data from failed transactions 2015-12-26 19:09:10 +01:00
resolved-dns-query.h resolved: propagate the DNSSEC result from the transaction to the query and the the bus client 2015-12-18 20:09:30 +01:00
resolved-dns-question.c resolved: cache - do negative caching only on the canonical name 2015-12-10 17:04:42 +01:00
resolved-dns-question.h resolved: make sure DNS_ANSWER_FOREACH() can be nested 2015-12-02 20:43:11 +01:00
resolved-dns-rr.c resolved: add negative trust anchro support, and add trust anchor configuration files 2016-01-03 12:59:26 +01:00
resolved-dns-rr.h resolved: fix DNSSEC canonical ordering logic 2016-01-04 20:27:45 +01:00
resolved-dns-scope.c resolved: rework OPT RR generation logic 2015-12-27 01:41:40 +01:00
resolved-dns-scope.h resolved: rework OPT RR generation logic 2015-12-27 01:41:40 +01:00
resolved-dns-search-domain.c dns-domain: simplify dns_name_is_root() and dns_name_is_single_label() 2015-11-25 22:00:07 +01:00
resolved-dns-search-domain.h resolved: fully support DNS search domains 2015-11-25 21:59:16 +01:00
resolved-dns-server.c resolved: use CLAMP() intsead of MIN(MAX()) 2015-12-29 21:42:10 +01:00
resolved-dns-server.h resolved: rename "features" variables to "feature_level" 2015-12-27 01:41:40 +01:00
resolved-dns-stream.c resolved: don't set TCP_NODELAY twice for TCP sockets 2015-12-26 19:09:10 +01:00
resolved-dns-stream.h remove unused includes 2015-02-23 23:53:42 +01:00
resolved-dns-transaction.c resolved: actually make use of message ID when logging about failed DNSSEC validation 2016-01-04 20:25:55 +01:00
resolved-dns-transaction.h resolved: add dns_transaction_close_connection() 2015-12-27 01:41:39 +01:00
resolved-dns-trust-anchor.c resolved: refuse revoked DNSKEYs in trust anchor 2016-01-03 17:57:44 +01:00
resolved-dns-trust-anchor.h resolved: add negative trust anchro support, and add trust anchor configuration files 2016-01-03 12:59:26 +01:00
resolved-dns-zone.c resolved: internalize string buffer of dns_resource_record_to_string() 2015-12-26 19:09:10 +01:00
resolved-dns-zone.h resolved: chase DNSKEY/DS RRs when doing look-ups with DNSSEC enabled 2015-12-10 11:35:52 +01:00
resolved-gperf.gperf resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
resolved-link.c resolved: don't complain if networkd doesn't know an interface we care about 2015-12-18 14:48:49 +01:00
resolved-link.h resolved: create dns scopes for mDNS 2015-12-08 16:41:45 +01:00
resolved-llmnr.c resolved: improve some log messages a bit 2015-12-27 01:41:39 +01:00
resolved-llmnr.h resolved: use a #define for LLMNR port 2015-07-13 11:28:29 -04:00
resolved-manager.c resolved: use right format specifier to print transaction ID 2015-12-18 14:48:49 +01:00
resolved-manager.h resolved: gather statistics about resolved names 2015-12-26 19:09:10 +01:00
resolved-mdns.c resolved: add support NSEC3 proofs, as well as proofs for domains that are OK to be unsigned 2015-12-18 14:48:50 +01:00
resolved-mdns.h resolved: add infrastructure for mDNS related sockets 2015-12-08 16:37:40 +01:00
resolved-resolv-conf.c resolved: flush the global DNS cache if /etc/resolv.conf is touched 2015-11-27 00:46:51 +01:00
resolved-resolv-conf.h resolved: split out all code dealing with /etc/resolv.conf into its own .c file 2015-11-25 21:58:37 +01:00
resolved.c resolved: make sure FallbackDNS= overrides built-in servers, doesn't extend them 2015-11-25 21:58:37 +01:00
resolved.conf.in resolved: introduce a dnssec_mode setting per scope 2015-12-03 21:17:49 +01:00
test-dnssec.c resolved: internalize string buffer of dns_resource_record_to_string() 2015-12-26 19:09:10 +01:00