Systemd/src/shared
Lennart Poettering 2b442ac878 resolved: add basic DNSSEC support
This adds most basic operation for doing DNSSEC validation on the
client side. However, it does not actually add the verification logic to
the resolver. Specifically, this patch only includes:

- Verifying DNSKEY RRs against a DS RRs
- Verifying RRSets against a combination of RRSIG and DNSKEY RRs
- Matching up RRSIG RRs and DNSKEY RRs
- Matching up RR keys and RRSIG RRs
- Calculating the DNSSEC key tag from a DNSKEY RR

All currently used DNSSEC combinations of SHA and RSA are implemented. Support
for MD5 hashing and DSA or EC cyphers are not. MD5 and DSA are probably
obsolete, and shouldn't be added. EC should probably be added
eventually, if it actually is deployed on the Internet.
2015-12-02 22:50:11 +01:00
..
linux build-sys: split internal basic/ library from shared/ 2015-06-11 10:52:46 +02:00
Makefile build-sys: add missing Makefile symlink 2015-08-31 13:09:52 +02:00
acl-util.c acl-util: only set the mask if not present 2015-11-28 18:48:03 -05:00
acl-util.h journal: move the gist of server_fix_perms to acl-util.[hc] 2015-11-27 23:32:32 -05:00
acpi-fpdt.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
acpi-fpdt.h
apparmor-util.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
apparmor-util.h mac: also rename use_{smack,selinux,apparmor}() calls so that they share the new mac_{smack,selinux,apparmor}_xyz() convention 2014-10-23 17:34:30 +02:00
architecture.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
architecture.h architecture.h: define PROC_CPUINFO_MODEL 2015-09-30 15:57:55 +03:00
ask-password-api.c treewide: use the negative error codes returned by our functions 2015-11-05 13:44:06 +01:00
ask-password-api.h ask-password: add support for caching passwords in the kernel keyring 2015-10-07 12:26:14 +02:00
base-filesystem.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
base-filesystem.h nspawn: finish user namespace support 2015-05-21 16:32:01 +02:00
boot-timestamps.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
boot-timestamps.h
bus-util.c tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
bus-util.h tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
cgroup-show.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
cgroup-show.h tree-wide: sort includes in *.h 2015-11-18 23:09:02 +01:00
clean-ipc.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
clean-ipc.h
condition.c selinux: split up mac_selinux_have() from mac_selinux_use() 2015-11-27 20:28:13 +01:00
condition.h tree-wide: make condition_free_list return NULL 2014-12-18 19:26:21 -05:00
conf-parser.c conf-parser: use extract_first_word 2015-11-09 23:57:49 -08:00
conf-parser.h tree-wide: sort includes in *.h 2015-11-18 23:09:02 +01:00
dev-setup.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
dev-setup.h nspawn: finish user namespace support 2015-05-21 16:32:01 +02:00
dns-domain.c util-lib: update dns_name_to_wire_format() to optionally generate DNSSEC canonical names 2015-12-02 22:50:11 +01:00
dns-domain.h resolved: add basic DNSSEC support 2015-12-02 22:50:11 +01:00
dropin.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
dropin.h Move dropin listing to shared 2014-12-16 00:30:33 -05:00
efivars.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
efivars.h tree-wide: sort includes in *.h 2015-11-18 23:09:02 +01:00
firewall-util.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
firewall-util.h firewall: rename fw-util.[ch] → firewall-util.[ch] 2015-06-15 14:08:02 +02:00
fstab-util.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
fstab-util.h util-lib: move fstab_node_to_udev_node() to fstab-util.[ch] 2015-10-27 13:25:55 +01:00
generator.c Merge pull request #1869 from poettering/kill-overridable 2015-11-13 14:04:34 +01:00
generator.h generators: rename add_{root,usr}_mount to add_{sysroot,sysroot_usr}_mount 2015-05-04 08:45:07 -04:00
gpt.h #pragma once here and there 2015-01-23 09:30:44 -05:00
ima-util.c
ima-util.h
import-util.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
import-util.h import: when downloading images, create a subtree quota group for them 2015-10-22 01:59:25 +02:00
initreq.h
install-printf.c core: simplify handling of %u, %U, %s and %h unit file specifiers 2015-11-12 17:57:04 +01:00
install-printf.h install: when exporting prefix InstallInfo to become UnitFileInstallInfo 2015-05-11 22:53:54 +02:00
install.c install: don't mix state and type enums 2015-11-15 14:45:24 +01:00
install.h core: simplify handling of %u, %U, %s and %h unit file specifiers 2015-11-12 17:57:04 +01:00
logs-show.c tree-wide: expose "p"-suffix unref calls in public APIs to make gcc cleanup easy 2015-11-27 19:19:36 +01:00
logs-show.h tree-wide: sort includes in *.h 2015-11-18 23:09:02 +01:00
machine-image.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
machine-image.h tree-wide: sort includes in *.h 2015-11-18 23:09:02 +01:00
machine-pool.c doc: correct orthography, word forms and missing/extraneous words 2015-11-06 13:45:21 +01:00
machine-pool.h importd: add new bus calls for importing local tar and raw images 2015-03-05 00:59:38 +01:00
output-mode.h journalctl: add --utc option 2014-10-02 14:52:32 +02:00
pager.c util-lib: move more locale-related calls to locale-util.[ch] 2015-10-27 13:25:56 +01:00
pager.h systemd-verify: check man pages 2014-07-20 19:48:16 -04:00
path-lookup.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
path-lookup.h install: when exporting prefix InstallInfo to become UnitFileInstallInfo 2015-05-11 22:53:54 +02:00
ptyfwd.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
ptyfwd.h machinectl: fix race when opening new shells with "machinectl shell" 2015-10-07 20:10:48 +02:00
seccomp-util.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
seccomp-util.h seccomp-util.h: make sure seccomp-util.h can be included alone 2014-12-12 13:35:32 +01:00
sleep-config.c defs: rework CONF_DIRS_NULSTR() macro 2015-11-10 17:31:31 +01:00
sleep-config.h #pragma once here and there 2015-01-23 09:30:44 -05:00
spawn-ask-password-agent.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
spawn-ask-password-agent.h
spawn-polkit-agent.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
spawn-polkit-agent.h
specifier.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
specifier.h
switch-root.c user-util: move UID/GID related macros from macro.h to user-util.h 2015-10-27 13:25:57 +01:00
switch-root.h use the switch_root function in shutdown 2014-08-28 15:25:15 +02:00
sysctl-util.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
sysctl-util.h sysctl: move property handling to shared/ 2015-03-11 10:37:45 +01:00
test-tables.h test: use assert_se() when testing tables so that we get a useful error when something fails 2014-10-28 18:07:23 +01:00
udev-util.h udevd: make udev_ctrl_connection global 2015-05-12 00:43:45 +02:00
uid-range.c util-lib: split out user/group/uid/gid calls into user-util.[ch] 2015-10-26 01:24:38 +01:00
uid-range.h Add missing includes in header files 2015-02-12 20:44:32 +01:00
utmp-wtmp.c util-lib: split out allocation calls into alloc-util.[ch] 2015-10-27 13:45:53 +01:00
utmp-wtmp.h core: optionally create LOGIN_PROCESS or USER_PROCESS utmp entries 2015-08-24 22:46:45 +02:00
watchdog.c tree-wide: sort includes 2015-11-16 22:09:36 +01:00
watchdog.h