1. 14 Feb, 2020 1 commit
  2. 13 Feb, 2020 2 commits
    • Evan Hunt's avatar
      apply the modified style · e851ed0b
      Evan Hunt authored
      e851ed0b
    • Ondřej Surý's avatar
      Use clang-tidy to add curly braces around one-line statements · 056e133c
      Ondřej Surý authored
      The command used to reformat the files in this commit was:
      
      ./util/run-clang-tidy \
      	-clang-tidy-binary clang-tidy-11
      	-clang-apply-replacements-binary clang-apply-replacements-11 \
      	-checks=-*,readability-braces-around-statements \
      	-j 9 \
      	-fix \
      	-format \
      	-style=file \
      	-quiet
      clang-format -i --style=format $(git ls-files '*.c' '*.h')
      uncrustify -c .uncrustify.cfg --replace --no-backup $(git ls-files '*.c' '*.h')
      clang-format -i --style=format $(git ls-files '*.c' '*.h')
      056e133c
  3. 12 Feb, 2020 1 commit
  4. 03 Dec, 2019 1 commit
    • Ondřej Surý's avatar
      Refactor the dns_name API to use ISC_THREAD_LOCAL · 1a66aabd
      Ondřej Surý authored
      Previously, the dns_name API used isc_thread_key API for TLS, which is
      fairly complicated and requires initialization of memory contexts, etc.
      This part of code was refactored to use a ISC_THREAD_LOCAL pointer which
      greatly simplifies the whole code related to storing TLS variables.
      1a66aabd
  5. 03 Oct, 2019 1 commit
    • Mark Andrews's avatar
      silence clang warning by using local variable. · 1b27ab86
      Mark Andrews authored
      'isc_commandline_index' is a global variable so it can theoretically
      change result between if expressions.  Save 'argv[isc_commandline_index]'
      to local variable 'arg1' and use 'arg1 == NULL' in if expressions
      instead of 'argc < isc_commandline_index + 1'.  This allows clang
      to correctly determine what code is reachable.
      1b27ab86
  6. 01 Oct, 2019 2 commits
  7. 12 Sep, 2019 2 commits
  8. 09 Aug, 2019 1 commit
  9. 09 May, 2019 2 commits
  10. 08 Mar, 2019 2 commits
  11. 06 Feb, 2019 1 commit
    • Tony Finch's avatar
      cleanup: revamp the dnssec-dsfromkey man page and help output · 6ca8e130
      Tony Finch authored
      * Alphabetize the option lists in the man page and help text
      
      * Make the synopses more consistent between the man page and help
        text, in particular the number of different modes
      
      * Group mutually exclusive options in the man page synopses, and order
        options so that it is more clear which are available in every mode
      
      * Expand the DESCRIPTION to provide an overview of the output modes
        and input modes
      
      * Improve cross-references between options
      
      * Leave RFC citations to the SEE ALSO section, and clarify which RFC
        specifies what
      
      * Clarify list of digest algorithms in dnssec-dsfromkey and dnssec-cds
        man pages
      6ca8e130
  12. 06 Dec, 2018 1 commit
    • Matthijs Mekking's avatar
      Remove one more GOST reference · 7ef858f5
      Matthijs Mekking authored
      We can remove this, because it is used in `strtodsdigest` but that
      already no longer covers the algorithm name "GOST".
      
      There is one more GOST reference in `bin/python/isc/checkds.py.in`
      but that is used for presentation format and probably should stay.
      
      (cherry picked from commit 57d44fbc)
      7ef858f5
  13. 28 Aug, 2018 1 commit
  14. 08 Aug, 2018 2 commits
  15. 19 Jul, 2018 1 commit
  16. 22 May, 2018 1 commit
    • Ondřej Surý's avatar
      address win32 build issues · 7ee8a7e6
      Ondřej Surý authored
      - Replace external -DOPENSSL/-DPKCS11CRYPTO with properly AC_DEFINEd
        HAVE_OPENSSL/HAVE_PKCS11
      - Don't enforce the crypto provider from platform.h, just from dst_api.c
        and configure scripts
      7ee8a7e6
  17. 16 May, 2018 1 commit
    • Ondřej Surý's avatar
      Replace all random functions with isc_random, isc_random_buf and isc_random_uniform API. · 3a4f820d
      Ondřej Surý authored
      The three functions has been modeled after the arc4random family of
      functions, and they will always return random bytes.
      
      The isc_random family of functions internally use these CSPRNG (if available):
      
      1. getrandom() libc call (might be available on Linux and Solaris)
      2. SYS_getrandom syscall (might be available on Linux, detected at runtime)
      3. arc4random(), arc4random_buf() and arc4random_uniform() (available on BSDs and Mac OS X)
      4. crypto library function:
      4a. RAND_bytes in case OpenSSL
      4b. pkcs_C_GenerateRandom() in case PKCS#11 library
      3a4f820d
  18. 09 Apr, 2018 1 commit
    • Michał Kępień's avatar
      Use dns_fixedname_initname() where possible · 4df4a8e7
      Michał Kępień authored
      Replace dns_fixedname_init() calls followed by dns_fixedname_name()
      calls with calls to dns_fixedname_initname() where it is possible
      without affecting current behavior and/or performance.
      
      This patch was mostly prepared using Coccinelle and the following
      semantic patch:
      
          @@
          expression fixedname, name;
          @@
          -	dns_fixedname_init(&fixedname);
          	...
          -	name = dns_fixedname_name(&fixedname);
          +	name = dns_fixedname_initname(&fixedname);
      
      The resulting set of changes was then manually reviewed to exclude false
      positives and apply minor tweaks.
      
      It is likely that more occurrences of this pattern can be refactored in
      an identical way.  This commit only takes care of the low-hanging fruit.
      4df4a8e7
  19. 06 Apr, 2018 2 commits
  20. 04 Apr, 2018 1 commit
  21. 23 Feb, 2018 1 commit
  22. 05 Oct, 2017 1 commit
    • Evan Hunt's avatar
      [master] dnssec-cds · ba37674d
      Evan Hunt authored
      4757.   [func]          New "dnssec-cds" command creates a new parent DS
                              RRset based on CDS or CDNSKEY RRsets found in
                              a child zone, and generates either a dsset file
                              or stream of nsupdate commands to update the
                              parent. Thanks to Tony Finch. [RT #46090]
      ba37674d
  23. 13 Sep, 2017 1 commit
  24. 28 Jul, 2017 2 commits
  25. 27 Jun, 2016 1 commit
  26. 27 May, 2015 1 commit
  27. 06 Feb, 2015 1 commit
  28. 20 Jan, 2015 2 commits
  29. 16 Jun, 2014 1 commit
    • Mukund Sivaraman's avatar
      [10686] Add version printing option to various BIND utilites · 42782931
      Mukund Sivaraman authored
      Squashed commit of the following:
      
      commit 95effe9b2582a7eb878ccb8cb9ef51dfc5bbfde7
      Author: Evan Hunt <each@isc.org>
      Date:   Tue Jun 10 16:52:45 2014 -0700
      
          [rt10686] move version() to dnssectool.c
      
      commit df205b541d1572ea5306a5f671af8b54b9c5c770
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:38:31 2014 +0530
      
          Rearrange order of cases
      
      commit cfd30893f2540bf9d607e1fd37545ea7b441e0d0
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:38:08 2014 +0530
      
          Add version printer to dnssec-verify
      
      commit a625ea338c74ab5e21634033ef87f170ba37fdbe
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:32:19 2014 +0530
      
          Add version printer to dnssec-signzone
      
      commit d91e1c0f0697b3304ffa46fccc66af65591040d9
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:26:01 2014 +0530
      
          Add version printer to dnssec-settime
      
      commit 46fc8775da3e13725c31d13e090b406d69b8694f
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:25:48 2014 +0530
      
          Fix docbook
      
      commit 8123d2efbd84cdfcbc70403aa9bb27b96921bab2
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:20:17 2014 +0530
      
          Add version printer to dnssec-revoke
      
      commit d0916420317d3e8c69cf1b37d2209ea2d072b913
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:17:54 2014 +0530
      
          Add version printer to dnssec-keygen
      
      commit 93b0bd5ebc043298dc7d8f446ea543cb40eaecf8
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:14:11 2014 +0530
      
          Add version printer to dnssec-keyfromlabel
      
      commit 07001bcd9ae2d7b09dd9e243b0ab35307290d05d
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:13:39 2014 +0530
      
          Update usage help output, docbook
      
      commit 85cdd702f41c96fbc767fc689d1ed97fe1f3a926
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:07:18 2014 +0530
      
          Add version printer to dnssec-importkey
      
      commit 9274fc61e38205aad561edf445940b4e73d788dc
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 21:01:53 2014 +0530
      
          Add version printer to dnssec-dsfromkey
      
      commit bf4605ea2d7282e751fd73489627cc8a99f45a90
      Author: Mukund Sivaraman <muks@isc.org>
      Date:   Tue Jun 10 20:49:22 2014 +0530
      
          Add -V to nsupdate usage output
      42782931
  30. 13 Mar, 2014 1 commit
    • Evan Hunt's avatar
      [master] better error output when initializing pkcs11 · acbb301e
      Evan Hunt authored
      3786.	[func]		Provide more detailed error codes when using
      			native PKCS#11. "pkcs11-tokens" now fails robustly
      			rather than asserting when run against an HSM with
      			an incomplete PCKS#11 API implementation. [RT #35479]
      acbb301e
  31. 16 Jan, 2014 1 commit