Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | [2518] Untabify code | Mukund Sivaraman | 2014-01-17 | 1 | -14/+14 |
| | |||||
* | [2518] Introduce isc::dns::Exception and organize all DNS exceptions under it | Mukund Sivaraman | 2014-01-17 | 1 | -1/+1 |
| | |||||
* | [1357] The unsigned message is accepted | Michal 'vorner' Vaner | 2012-09-07 | 1 | -4/+14 |
| | | | | | The problem for now is that the next signed message is not. But it's definitely a progress. | ||||
* | [1357] Internal TSIGContext::update method | Michal 'vorner' Vaner | 2012-09-07 | 1 | -2/+20 |
| | | | | | To be used in the case when there's a message without TSIG in the middle of signed stream. Also used in tests for now. | ||||
* | [1357] Implement TSIGContext::lastHadSignature | Michal 'vorner' Vaner | 2012-09-06 | 1 | -1/+17 |
| | |||||
* | [trac910] clarified an internal method name with some more comments as | JINMEI Tatuya | 2011-07-15 | 1 | -4/+6 |
| | | | | suggested in review. | ||||
* | [trac910] added a new method getTSIGLength() to TSIGContext, which will be | JINMEI Tatuya | 2011-07-08 | 1 | -0/+39 |
| | | | | necessary for TC bit support. | ||||
* | [trac910] pre-work refactoring: precreate an HMAC in the TSIGContextImpl | JINMEI Tatuya | 2011-07-08 | 1 | -16/+46 |
| | | | | | constructor (if possible) so that the expected size of resulting TSIG RR can be calculated immediately before signing. | ||||
* | [trac893] use local OutputBuffers in digestXXX() helper methods rather than | JINMEI Tatuya | 2011-05-11 | 1 | -38/+39 |
| | | | | | reusing a single buffer created in sign()/verify(), according to the review discussion. | ||||
* | [trac893] make (more) sure previous_digest_.size() fits the 16-bit range. | JINMEI Tatuya | 2011-05-09 | 1 | -1/+7 |
| | | | | | | it should have been the case, but this change makes it clearer and more explicit by using more appropriate type and adding an explicit assert() in some places so that people reading the code don't have to worry about it. | ||||
* | [trac893] overall document updates | JINMEI Tatuya | 2011-05-06 | 1 | -13/+35 |
| | |||||
* | [trac893] revised the policy on unexpected TSIG TTL: we now reject it. | JINMEI Tatuya | 2011-05-06 | 1 | -5/+2 |
| | | | | also updated tests and doxygen/code comments accordingly. | ||||
* | [trac893] temporary change for short signatures: modify cryptolink to reject | JINMEI Tatuya | 2011-05-06 | 1 | -0/+1 |
| | | | | | | | the case of output_len != sig_len. Until we implement RFC4635 truncation consideration won't work correctly (and could dangerously accept very short sigs). Since the truncation support is not so urgent, it would be better to defer to it a seprate later task. | ||||
* | [trac893] implemented major logic of TSIG verify | JINMEI Tatuya | 2011-05-06 | 1 | -73/+269 |
| | |||||
* | [trac893] added another constructor for TSIGContext: from key params and ↵ | JINMEI Tatuya | 2011-05-04 | 1 | -1/+24 |
| | | | | keyring. | ||||
* | [trac871] Merge branch 'master' into trac871 | JINMEI Tatuya | 2011-04-29 | 1 | -1/+7 |
|\ | | | | | | | | | Conflicts: src/lib/dns/tsig.cc | ||||
| * | [master] forgot to apply one last suggestion in #812: renaming a method. | JINMEI Tatuya | 2011-04-29 | 1 | -1/+1 |
| | | |||||
| * | [trac812] added some comments about int64 to uint48 conversion as suggested ↵ | JINMEI Tatuya | 2011-04-28 | 1 | -0/+6 |
| | | | | | | | | in review. | ||||
* | | [trac812next] unified "fake time" hook in lib/util/time_utilities. | JINMEI Tatuya | 2011-04-28 | 1 | -24/+2 |
| | | | | | | | | | | not directly related to the main purpose of this branch, but this is a deferred cleanup from the initial step of this task. | ||||
* | | [trac812next] implemented TSIG signing main part: add TSIGRecord::toWire() ↵ | JINMEI Tatuya | 2011-04-28 | 1 | -1/+3 |
| | | | | | | | | | | | | and have the Message class use it with a TSIGContext. (There are some other small cleanups in this commit) | ||||
* | | [trac812next] created separate tsigrecord.* files as TSIGRecord is quite | JINMEI Tatuya | 2011-04-27 | 1 | -5/+0 |
|/ | | | | likely to be getting bigger. | ||||
* | [trac812] ensure TSIGContext::sign() provides strong exception guarantee | JINMEI Tatuya | 2011-04-27 | 1 | -38/+13 |
| | | | | | added new test for that. with some other cleanups. | ||||
* | [trac812] reject NULL or len=0 data | JINMEI Tatuya | 2011-04-27 | 1 | -0/+4 |
| | |||||
* | [trac812] some cleanups | JINMEI Tatuya | 2011-04-27 | 1 | -5/+5 |
| | |||||
* | [trac812] main code for TSIG signing. | JINMEI Tatuya | 2011-04-26 | 1 | -0/+247 |
| | |||||
* | Initial implementation of TSIGKey and TSIGKeyRing, including detailed tests, ↵ | JINMEI Tatuya | 2010-10-19 | 1 | -33/+0 |
| | | | | | | documentation, and python binding. git-svn-id: svn://bind10.isc.org/svn/bind10/branches/trac381@3278 e5f2f494-b856-4b98-b285-d166d9295462 | ||||
* | cleanup: use relative path to header files from "src/lib", i.e., ↵ | JINMEI Tatuya | 2010-04-13 | 1 | -1/+1 |
| | | | | | | s/"name.h"/<dns/name.h", etc. also removed unnecessary header files to be included. git-svn-id: svn://bind10.isc.org/svn/bind10/trunk@1705 e5f2f494-b856-4b98-b285-d166d9295462 | ||||
* | Restructure trunk again. | Jeremy C. Reed | 2010-03-05 | 1 | -0/+33 |
This is based on ideas done in experiments/jreed-layout, but I manually did this again. Moved around directory structures. A single python subdirectory under src/lib for single "isc" module. No "cpp" directories. No pyshared or includes symlink trees. I tested running the c++ tests and python tests. I tested running run_bind10.sh from source tree (with nothing installed). I tested running bind10 from installed (after moving source). git-svn-id: svn://bind10.isc.org/svn/bind10/trunk@1120 e5f2f494-b856-4b98-b285-d166d9295462 |