summaryrefslogtreecommitdiffstats
path: root/src/lib/dns/tsig.cc (follow)
Commit message (Collapse)AuthorAgeFilesLines
* [2518] Untabify codeMukund Sivaraman2014-01-171-14/+14
|
* [2518] Introduce isc::dns::Exception and organize all DNS exceptions under itMukund Sivaraman2014-01-171-1/+1
|
* [1357] The unsigned message is acceptedMichal 'vorner' Vaner2012-09-071-4/+14
| | | | | The problem for now is that the next signed message is not. But it's definitely a progress.
* [1357] Internal TSIGContext::update methodMichal 'vorner' Vaner2012-09-071-2/+20
| | | | | To be used in the case when there's a message without TSIG in the middle of signed stream. Also used in tests for now.
* [1357] Implement TSIGContext::lastHadSignatureMichal 'vorner' Vaner2012-09-061-1/+17
|
* [trac910] clarified an internal method name with some more comments asJINMEI Tatuya2011-07-151-4/+6
| | | | suggested in review.
* [trac910] added a new method getTSIGLength() to TSIGContext, which will beJINMEI Tatuya2011-07-081-0/+39
| | | | necessary for TC bit support.
* [trac910] pre-work refactoring: precreate an HMAC in the TSIGContextImplJINMEI Tatuya2011-07-081-16/+46
| | | | | constructor (if possible) so that the expected size of resulting TSIG RR can be calculated immediately before signing.
* [trac893] use local OutputBuffers in digestXXX() helper methods rather thanJINMEI Tatuya2011-05-111-38/+39
| | | | | reusing a single buffer created in sign()/verify(), according to the review discussion.
* [trac893] make (more) sure previous_digest_.size() fits the 16-bit range.JINMEI Tatuya2011-05-091-1/+7
| | | | | | it should have been the case, but this change makes it clearer and more explicit by using more appropriate type and adding an explicit assert() in some places so that people reading the code don't have to worry about it.
* [trac893] overall document updatesJINMEI Tatuya2011-05-061-13/+35
|
* [trac893] revised the policy on unexpected TSIG TTL: we now reject it.JINMEI Tatuya2011-05-061-5/+2
| | | | also updated tests and doxygen/code comments accordingly.
* [trac893] temporary change for short signatures: modify cryptolink to rejectJINMEI Tatuya2011-05-061-0/+1
| | | | | | | the case of output_len != sig_len. Until we implement RFC4635 truncation consideration won't work correctly (and could dangerously accept very short sigs). Since the truncation support is not so urgent, it would be better to defer to it a seprate later task.
* [trac893] implemented major logic of TSIG verifyJINMEI Tatuya2011-05-061-73/+269
|
* [trac893] added another constructor for TSIGContext: from key params and ↵JINMEI Tatuya2011-05-041-1/+24
| | | | keyring.
* [trac871] Merge branch 'master' into trac871JINMEI Tatuya2011-04-291-1/+7
|\ | | | | | | | | Conflicts: src/lib/dns/tsig.cc
| * [master] forgot to apply one last suggestion in #812: renaming a method.JINMEI Tatuya2011-04-291-1/+1
| |
| * [trac812] added some comments about int64 to uint48 conversion as suggested ↵JINMEI Tatuya2011-04-281-0/+6
| | | | | | | | in review.
* | [trac812next] unified "fake time" hook in lib/util/time_utilities.JINMEI Tatuya2011-04-281-24/+2
| | | | | | | | | | not directly related to the main purpose of this branch, but this is a deferred cleanup from the initial step of this task.
* | [trac812next] implemented TSIG signing main part: add TSIGRecord::toWire() ↵JINMEI Tatuya2011-04-281-1/+3
| | | | | | | | | | | | and have the Message class use it with a TSIGContext. (There are some other small cleanups in this commit)
* | [trac812next] created separate tsigrecord.* files as TSIGRecord is quiteJINMEI Tatuya2011-04-271-5/+0
|/ | | | likely to be getting bigger.
* [trac812] ensure TSIGContext::sign() provides strong exception guaranteeJINMEI Tatuya2011-04-271-38/+13
| | | | | added new test for that. with some other cleanups.
* [trac812] reject NULL or len=0 dataJINMEI Tatuya2011-04-271-0/+4
|
* [trac812] some cleanupsJINMEI Tatuya2011-04-271-5/+5
|
* [trac812] main code for TSIG signing.JINMEI Tatuya2011-04-261-0/+247
|
* Initial implementation of TSIGKey and TSIGKeyRing, including detailed tests, ↵JINMEI Tatuya2010-10-191-33/+0
| | | | | | documentation, and python binding. git-svn-id: svn://bind10.isc.org/svn/bind10/branches/trac381@3278 e5f2f494-b856-4b98-b285-d166d9295462
* cleanup: use relative path to header files from "src/lib", i.e., ↵JINMEI Tatuya2010-04-131-1/+1
| | | | | | s/"name.h"/<dns/name.h", etc. also removed unnecessary header files to be included. git-svn-id: svn://bind10.isc.org/svn/bind10/trunk@1705 e5f2f494-b856-4b98-b285-d166d9295462
* Restructure trunk again.Jeremy C. Reed2010-03-051-0/+33
This is based on ideas done in experiments/jreed-layout, but I manually did this again. Moved around directory structures. A single python subdirectory under src/lib for single "isc" module. No "cpp" directories. No pyshared or includes symlink trees. I tested running the c++ tests and python tests. I tested running run_bind10.sh from source tree (with nothing installed). I tested running bind10 from installed (after moving source). git-svn-id: svn://bind10.isc.org/svn/bind10/trunk@1120 e5f2f494-b856-4b98-b285-d166d9295462