| /openbsd/usr.sbin/nsd/ |
| H A D | nsec3.c | 29 if(!a->nsec3) return (b->nsec3?-1:0); in cmp_hash_tree()
31 if(!a->nsec3->hash_wc) return (b->nsec3->hash_wc?-1:0); in cmp_hash_tree()
43 if(!a->nsec3) return (b->nsec3?-1:0); in cmp_wchash_tree()
45 if(!a->nsec3->hash_wc) return (b->nsec3->hash_wc?-1:0); in cmp_wchash_tree()
57 if(!a->nsec3) return (b->nsec3?-1:0); in cmp_dshash_tree()
336 if(domain->nsec3 && domain->nsec3->nsec3_node.key) { in nsec3_chain_find_prev()
685 d.nsec3 = &n; in process_first()
754 ((domain_type*)(p->key))->nsec3->nsec3_cover = nsec3; in process_range()
785 ((domain_type*)(p->key))->nsec3->nsec3_cover = nsec3; in process_range()
815 assert(domain->nsec3 && domain->nsec3->nsec3_node.key); in process_prehash_domain()
[all …]
|
| H A D | namedb.c | 48 result->nsec3 = NULL; in allocate_domain_info()
67 if(result->nsec3) in allocate_domain_nsec3()
76 result->nsec3->hash_wc = NULL; in allocate_domain_nsec3()
155 if(domain->nsec3 in domain_is_prehash()
156 && (domain->nsec3->prehash_prev || domain->nsec3->prehash_next)) in domain_is_prehash()
203 domain->nsec3->prehash_next->nsec3->prehash_prev = in prehash_del()
206 domain->nsec3->prehash_prev->nsec3->prehash_next = in prehash_del()
230 if(domain->nsec3) { in do_deldomain()
242 if(domain->nsec3->ds_parent_hash && domain->nsec3->ds_parent_hash->node.key) in do_deldomain()
247 domain->nsec3->hash_wc, in do_deldomain()
[all …]
|
| H A D | difffile.c | 472 rr->owner->nsec3->nsec3_node.key && in nsec3_delete_rr_trigger()
484 &rr->owner->nsec3->nsec3_node); in nsec3_delete_rr_trigger()
512 domain->nsec3->hash_wc && in nsec3_rrsets_changed_remove_prehash()
516 domain->nsec3->nsec3_cover = NULL; in nsec3_rrsets_changed_remove_prehash()
518 domain->nsec3->nsec3_is_exact = 0; in nsec3_rrsets_changed_remove_prehash()
521 &domain->nsec3->hash_wc->hash.node); in nsec3_rrsets_changed_remove_prehash()
523 &domain->nsec3->hash_wc->wc.node); in nsec3_rrsets_changed_remove_prehash()
526 domain->nsec3->ds_parent_hash && in nsec3_rrsets_changed_remove_prehash()
546 if((!domain->nsec3 || !domain->nsec3->hash_wc in nsec3_rrsets_changed_add_prehash()
553 if((!domain->nsec3 || !domain->nsec3->ds_parent_hash in nsec3_rrsets_changed_add_prehash()
[all …]
|
| H A D | Makefile.in | 79 ….o configparser.o dname.o dns.o edns.o iterated_hash.o lookup3.o namedb.o nsec3.o options.o packet…
436 …$(srcdir)/udb.h $(srcdir)/zonec.h $(srcdir)/nsec3.h $(srcdir)/difffile.h $(srcdir)/nsd.h $(srcdir)…
443 …db.h $(srcdir)/xfrd-disk.h $(srcdir)/packet.h $(srcdir)/rdata.h $(srcdir)/nsec3.h $(srcdir)/nsd.h …
468 …locator.h $(srcdir)/util.h $(srcdir)/dns.h $(srcdir)/radtree.h $(srcdir)/rbtree.h $(srcdir)/nsec3.h
487 nsec3.o: $(srcdir)/nsec3.c config.h $(srcdir)/nsec3.h $(srcdir)/iterated_hash.h \
501 …)/edns.h $(srcdir)/bitset.h $(srcdir)/tsig.h $(srcdir)/axfr.h $(srcdir)/options.h $(srcdir)/nsec3.h
519 …$(srcdir)/xfrd-disk.h $(srcdir)/difffile.h $(srcdir)/udb.h $(srcdir)/nsec3.h $(srcdir)/ipc.h $(src…
559 zparser.h $(srcdir)/options.h $(srcdir)/nsec3.h
601 …)/buffer.h $(srcdir)/util.h $(srcdir)/dns.h $(srcdir)/radtree.h $(srcdir)/nsec3.h $(srcdir)/udb.h \
632 …$(srcdir)/util.h $(srcdir)/nsec3.h $(srcdir)/options.h $(srcdir)/packet.h $(srcdir)/dname.h $(srcd…
|
| H A D | namedb.h | 108 struct nsec3_domain_data* nsec3; member
|
| H A D | query.c | 1233 match->nsec3 = wildcard_child->nsec3; in answer_authoritative()
|
| H A D | configure.ac | 1123 AC_ARG_ENABLE(nsec3, AS_HELP_STRING([--disable-nsec3],[Disable NSEC3 support])) optenable
|
| H A D | configure | 1463 --disable-nsec3 Disable NSEC3 support
|
| /openbsd/sbin/unwind/libunbound/validator/ |
| H A D | val_nsec3.c | 520 if(nsec3_get_algo(h1->nsec3, h1->rr) != in nsec3_hash_cmp()
521 nsec3_get_algo(h2->nsec3, h2->rr)) { in nsec3_hash_cmp()
522 if(nsec3_get_algo(h1->nsec3, h1->rr) < in nsec3_hash_cmp()
523 nsec3_get_algo(h2->nsec3, h2->rr)) in nsec3_hash_cmp()
527 if(nsec3_get_iter(h1->nsec3, h1->rr) != in nsec3_hash_cmp()
528 nsec3_get_iter(h2->nsec3, h2->rr)) { in nsec3_hash_cmp()
529 if(nsec3_get_iter(h1->nsec3, h1->rr) < in nsec3_hash_cmp()
530 nsec3_get_iter(h2->nsec3, h2->rr)) in nsec3_hash_cmp()
598 int algo = nsec3_get_algo(c->nsec3, c->rr); in nsec3_calc_hash()
665 looki.nsec3 = nsec3; in nsec3_hash_name()
[all …]
|
| H A D | val_nsec3.h | 263 struct ub_packed_rrset_key* nsec3; member
318 struct sldns_buffer* buf, struct ub_packed_rrset_key* nsec3, int rr,
|
| /openbsd/usr.sbin/unbound/validator/ |
| H A D | val_nsec3.c | 520 if(nsec3_get_algo(h1->nsec3, h1->rr) != in nsec3_hash_cmp()
521 nsec3_get_algo(h2->nsec3, h2->rr)) { in nsec3_hash_cmp()
522 if(nsec3_get_algo(h1->nsec3, h1->rr) < in nsec3_hash_cmp()
523 nsec3_get_algo(h2->nsec3, h2->rr)) in nsec3_hash_cmp()
527 if(nsec3_get_iter(h1->nsec3, h1->rr) != in nsec3_hash_cmp()
528 nsec3_get_iter(h2->nsec3, h2->rr)) { in nsec3_hash_cmp()
529 if(nsec3_get_iter(h1->nsec3, h1->rr) < in nsec3_hash_cmp()
530 nsec3_get_iter(h2->nsec3, h2->rr)) in nsec3_hash_cmp()
598 int algo = nsec3_get_algo(c->nsec3, c->rr); in nsec3_calc_hash()
665 looki.nsec3 = nsec3; in nsec3_hash_name()
[all …]
|
| H A D | val_nsec3.h | 263 struct ub_packed_rrset_key* nsec3; member
318 struct sldns_buffer* buf, struct ub_packed_rrset_key* nsec3, int rr,
|
| /openbsd/usr.sbin/unbound/testcode/ |
| H A D | unitverify.c | 428 struct ub_packed_rrset_key* answer, *nsec3; in nsec3_hash_test_entry() local
440 nsec3 = find_rrset_type(rep, LDNS_RR_TYPE_NSEC3); in nsec3_hash_test_entry()
444 unit_assert(nsec3 && answer && qname); in nsec3_hash_test_entry()
446 ret = nsec3_hash_name(ct, region, buf, nsec3, 0, qname, in nsec3_hash_test_entry()
|
| /openbsd/usr.sbin/nsd/doc/ |
| H A D | ChangeLog | 1465 - Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones.
1779 - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
2683 - faster nsec3 updates.
2685 - remove leak of nsec3.
3218 - Unit test nsec3 salt change and fix for sanity check of nsec3 chain.
3733 nsec3 records.
3844 - Minor tweak to nsec3.c, more elegant handling of malformed nsec3
3858 - improved nsec3.h comments.
4536 - nsec3 code will warn at prehash time for missing exact nsec3
4817 - nsec3 review fixes.
[all …]
|
| H A D | RELNOTES | 710 - Fix that nsec3 precompile deletion happens before the RRs of
767 - Fix nsec3 hash of parent and child co-hosted nsec3 enabled zones.
768 - Fix to use same condition for nsec3 hash allocation and free.
792 in the selectively allocated precompiled nsec3 hashes.
818 - Save memory by selectively allocate precompiled nsec3 hashes,
843 - Fix potential null pointer in nsec3 adjustment tree.
910 - Add robustness against unallocated data in nsec3 trees.
936 - Fix nsec3 missing for nsec3 signed parent and child for DS at zonecut.
1304 - faster nsec3 updates.
1306 - remove leak of nsec3.
[all …]
|
| H A D | README | 233 --disable-nsec3
236 also non-nsec3 zones, use about 20% more memory.
|
| /openbsd/sbin/unwind/libunbound/services/ |
| H A D | authzone.c | 3039 struct auth_rrset* nsec3; in az_nsec3_insert() local
3041 nsec3 = az_domain_rrset(node, LDNS_RR_TYPE_NSEC3); in az_nsec3_insert()
3042 if(!nsec3) return 1; /* if no nsec3 RR, skip it */ in az_nsec3_insert()
3043 if(!msg_add_rrset_ns(z, region, msg, node, nsec3)) return 0; in az_nsec3_insert()
7825 int i, count = (int)nsec3->data->count; in nsec3_of_param_has_type()
7828 pk.entry.data = nsec3->data; in nsec3_of_param_has_type()
7888 struct auth_rrset* nsec3; in zonemd_check_dnssec_absence() local
7904 nsec3 = az_domain_rrset(match, LDNS_RR_TYPE_NSEC3); in zonemd_check_dnssec_absence()
7905 if(!nsec3) { in zonemd_check_dnssec_absence()
7911 nsec3, why_bogus, sigalg, reasonbuf, reasonlen)) { in zonemd_check_dnssec_absence()
[all …]
|
| /openbsd/usr.sbin/unbound/services/ |
| H A D | authzone.c | 3039 struct auth_rrset* nsec3; in az_nsec3_insert() local
3041 nsec3 = az_domain_rrset(node, LDNS_RR_TYPE_NSEC3); in az_nsec3_insert()
3042 if(!nsec3) return 1; /* if no nsec3 RR, skip it */ in az_nsec3_insert()
3043 if(!msg_add_rrset_ns(z, region, msg, node, nsec3)) return 0; in az_nsec3_insert()
7825 int i, count = (int)nsec3->data->count; in nsec3_of_param_has_type()
7828 pk.entry.data = nsec3->data; in nsec3_of_param_has_type()
7888 struct auth_rrset* nsec3; in zonemd_check_dnssec_absence() local
7904 nsec3 = az_domain_rrset(match, LDNS_RR_TYPE_NSEC3); in zonemd_check_dnssec_absence()
7905 if(!nsec3) { in zonemd_check_dnssec_absence()
7911 nsec3, why_bogus, sigalg, reasonbuf, reasonlen)) { in zonemd_check_dnssec_absence()
[all …]
|
| /openbsd/sbin/unwind/libunbound/util/ |
| H A D | configlexer.lex | 421 val-nsec3-keysize-iterations{COLON} {
|
| /openbsd/usr.sbin/unbound/util/ |
| H A D | configlexer.lex | 421 val-nsec3-keysize-iterations{COLON} {
|
| /openbsd/usr.sbin/unbound/doc/ |
| H A D | Changelog | 3567 match nsec3 records.
3570 - Fix for auth zone nsec3 ent fix for wildcard nodata.
3991 - make sure nsec3 comparison salt is initialized.
5517 this means nsec3 with optout is insufficient.
9816 - fixed memleak at exit for nsec3 negative cached zones.
10522 - updated testdata for nsec3 new algorithm numbers (6, 7).
11130 delegation, for abuse of child zone apex nsec3.
11139 - multiple nsec3 parameters in message test.
11140 - too high nsec3 iterations becomes insecure test.
11178 - validator nsec3 nameerror test.
[all …]
|
| H A D | example.conf.in | 755 # val-nsec3-keysize-iterations: "1024 150 2048 150 4096 150"
|
| /openbsd/usr.sbin/unbound/ |
| H A D | configure.ac | 1074 …ha1, AS_HELP_STRING([--disable-sha1],[Disable SHA1 RRSIG support, does not disable nsec3 support]))
|
| H A D | configure | 1613 --disable-sha1 Disable SHA1 RRSIG support, does not disable nsec3
|