155 Commits

Author SHA1 Message Date
Miek Gieben
2d2b4f5e64 tweaks to give more power to unbound package 2012-07-01 20:58:54 +02:00
Miek Gieben
e6fca0be3f Actually copy the RR for DNSSEC validation.
This is needed because we need to fiddle with the TTL and sometimes
even need to lowercase the rdata. We dont want this to propagate
to the original RRs
2012-06-20 19:16:54 +02:00
Miek Gieben
f48dba4ad1 Add Copy to all RRs 2012-06-20 11:56:25 +02:00
Miek Gieben
0cfe2d6a43 Make copy private 2012-05-12 20:06:52 +02:00
Miek Gieben
614aa87ab2 Add a copy function for RRHeader - use this when validating 2012-05-11 15:03:49 +02:00
Miek Gieben
3611c4d458 fmt 2012-05-05 17:37:48 +02:00
Miek Gieben
1948cd2a90 Use go vetted struct tags
They had the form: "domain-name", now they are key value pairs (key is
always dns: `dns:"domain-name"`
2012-04-29 21:55:29 +02:00
Miek Gieben
70fac2eec3 add the nsec3 alias too 2012-04-19 14:39:50 +02:00
Miek Gieben
3aba338dc5 better docs 2012-04-19 13:32:50 +02:00
Miek Gieben
3ef88ef28d Use uppercase M 2012-04-18 12:57:38 +02:00
Miek Gieben
4810b60cda Make it build 2012-04-18 12:55:48 +02:00
Miek Gieben
ca067eb038 calculate the value of dsas T 2012-04-18 12:55:08 +02:00
Miek Gieben
01258c0d97 Finish DSA support -- completely untested 2012-04-18 12:48:54 +02:00
Miek Gieben
96a9b0d7d1 Signing with dsa 2012-04-18 11:57:32 +02:00
Miek Gieben
7c9a376659 More DSA stuff: generation/signing/verifying 2012-04-17 11:58:06 +02:00
Miek Gieben
4536259037 1/2 support for DSA 2012-04-17 11:39:58 +02:00
Miek Gieben
70efdaabea keytag calc. for RSAMD5 keys 2012-04-17 10:55:02 +02:00
Miek Gieben
daf51db85d add indirect alg type 2012-04-16 09:09:32 +02:00
Miek Gieben
cf627feaa8 remove debugging.Validation code works, but isnt validating 2012-04-15 21:43:52 +02:00
Miek Gieben
e6b2ec8d72 Add ecdsa verification 2012-04-15 21:37:00 +02:00
Miek Gieben
b58c604e17 Add symmetry to the reading of public/private keys
Add a NewPrivateKey that works on strings and calls ReadPrivateKey
that works on io.Readers.
2012-04-15 20:50:53 +02:00
Miek Gieben
3e11306260 some debugging 2012-04-12 15:39:54 +02:00
Miek Gieben
134b557647 Start with validating Curve algos 2012-04-11 16:20:29 +02:00
Miek Gieben
1e1559423d Fix EC signing 2012-04-11 16:09:40 +02:00
Miek Gieben
b1099c10b8 More stuff for ecdsa. Need to find good abstraction 2012-04-11 15:42:33 +02:00
Miek Gieben
edf4b3d11b Test signing with ecdsa 2012-04-11 15:13:17 +02:00
Miek Gieben
35bfb48fac fix the mnemonic for ecdsa* 2012-04-11 14:37:51 +02:00
Miek Gieben
a55014ff8a elliptic curve stuff 2012-04-11 14:32:44 +02:00
Miek Gieben
1083e5542e add comment 2012-04-06 20:12:00 +02:00
Miek Gieben
33a58c8cb7 make it compile 2012-03-19 20:00:40 +01:00
Miek Gieben
f38cd6abe0 better errors 2012-03-18 22:44:42 +01:00
Miek Gieben
9f14f2d5ab Documentation updates 2012-03-08 20:47:45 +01:00
Miek Gieben
1744a80850 add a TsigStatus to the client as well
Bring server and client side more inline
with each other. For a client we also
use TsigStatus() to retrieve the tsig info.
2012-03-04 14:47:20 +01:00
Miek Gieben
dc16392734 Newly allocated names 2012-03-02 15:28:22 +01:00
Miek Gieben
104d875a75 Flag large RSA exponents as an error 2012-02-29 21:11:45 +01:00
Miek Gieben
c32c13ba25 dnssec-bis-16 updates fix 2012-02-28 20:09:00 +01:00
Miek Gieben
d7a7e6e112 Lowercase/uppercase mahem in DNSSEC 2012-02-28 19:25:09 +01:00
Miek Gieben
ea57a49d94 Allow mnemonic algorithm numbers in DS (and DS-like) records 2012-02-27 19:17:58 +01:00
Miek Gieben
ef2e12b0dd Validation fixes, still not perfect, but much nicer 2012-02-25 22:04:29 +01:00
Miek Gieben
89c05b4f74 gofmt 2012-02-23 19:37:08 +01:00
Miek Gieben
c6042c4ce8 Work on copy of the header when validating 2012-02-23 12:46:39 +01:00
Miek Gieben
d0a45c667e Downcase these domains 2012-02-23 10:47:50 +01:00
Miek Gieben
99ea36cd42 Check the protocol value of the key 2012-02-16 23:34:09 +01:00
Miek Gieben
2cb265697e Documentation
Need to think about the non-existing root-label and the label
functions.
2012-02-12 11:34:28 +01:00
Peter van Dijk
448596bccb fix typo 2012-02-10 09:19:23 +01:00
Peter van Dijk
c05615b783 fix RRSIG wildcard checking 2012-02-10 09:19:00 +01:00
Miek Gieben
ed61734c89 Optimize the RR reading further
remove len(strings) from the code. 16% increase
in speed. Getting about 35K RR/s
2012-01-30 21:26:29 +01:00
Miek Gieben
bfc928973f Remove/fix some todo 2012-01-29 00:34:59 +01:00
Miek Gieben
19f8d266b5 Remove the RRset type - only add obvious stuff 2012-01-28 01:14:07 +01:00
Miek Gieben
6d5fd7f975 Some more tweaks into verifying nsec3 messages 2012-01-22 16:12:10 +01:00