1. 24 Oct, 2017 3 commits
    • Tinderbox User's avatar
      update copyright notice / whitespace · ea055a82
      Tinderbox User authored
      ea055a82
    • Mark Andrews's avatar
      add missing semicolon · 79e78994
      Mark Andrews authored
      79e78994
    • Evan Hunt's avatar
      [master] deprecate HMAC in dnssec-keygen, MD5 in rndc-confgen · 21761bfe
      Evan Hunt authored
      4785.	[func]		The hmac-md5 algorithm is no longer recommended for
      			use with RNDC keys. For compatibility reasons, it
      			it is still the default algorithm in rndc-confgen,
      			but this will be changed to hmac-sha256 in a future
      			release. [RT #42272]
      
      4784.	[func]		The use of dnssec-keygen to generate HMAC keys is
      			deprecated in favor of tsig-keygen.  dnssec-keygen
      			will print a warning when used for this purpose.
      			All HMAC algorithms will be removed from
      			dnssec-keygen in a future release. [RT #42272]
      21761bfe
  2. 18 Aug, 2016 1 commit
  3. 27 Jun, 2016 1 commit
  4. 09 Jan, 2014 2 commits
  5. 14 Mar, 2013 1 commit
    • Evan Hunt's avatar
      [master] algorithm flexibility for rndc · 4eb99892
      Evan Hunt authored
      3525.	[func]		Support for additional signing algorithms in rndc:
      			hmac-sha1, -sha224, -sha256, -sha384, and -sha512.
      			The -A option to rndc-confgen can be used to
      			select the algorithm for the generated key.
      			(The default is still hmac-md5; this may
      			change in a future release.) [RT #20363]
      4eb99892
  6. 04 Mar, 2013 2 commits
  7. 12 Mar, 2011 1 commit
  8. 11 Mar, 2011 1 commit
  9. 29 Sep, 2009 1 commit
  10. 15 Jun, 2009 1 commit
  11. 11 Jun, 2009 1 commit
  12. 10 Jun, 2009 1 commit
    • Evan Hunt's avatar
      2609. [func] Simplify the configuration of dynamic zones: · 351b6253
      Evan Hunt authored
      			- add ddns-confgen command to generate
      			  configuration text for named.conf
      			- add zone option "ddns-autoconf yes;", which
      			  causes named to generate a TSIG session key
      			  and allow updates to the zone using that key
      			- add '-l' (localhost) option to nsupdate, which
      			  causes nsupdate to connect to a locally-running
      			  named process using the session key generated
      			  by named
      			[RT #19284]
      351b6253
  13. 15 Oct, 2008 2 commits
  14. 18 Jun, 2007 1 commit
  15. 21 May, 2007 2 commits
  16. 29 Apr, 2005 1 commit
  17. 27 Apr, 2005 1 commit
  18. 28 Sep, 2004 1 commit
  19. 05 Mar, 2004 1 commit
  20. 17 Oct, 2003 1 commit
  21. 03 Mar, 2003 1 commit
  22. 30 Nov, 2001 1 commit
  23. 29 Nov, 2001 1 commit
  24. 28 Nov, 2001 1 commit
  25. 27 Nov, 2001 1 commit
  26. 06 Sep, 2001 1 commit
  27. 05 Sep, 2001 1 commit
    • Brian Wellington's avatar
      [RT #1709] · ed29aefe
      Brian Wellington authored
      Change isc_entropy_usebestsource() to have saner semantics:
       - If an invalid file is specified, an error will be returned instead of the
         keyboard being used.
       - If no file is specified but a random device is present, the keyboard will
         be used if there is an error opening the random device.
       - ISC_ENTROPY_KEYBOARDYES indicates that the keyboard should be the
         only device used.  Otherwise, passing '-r keyboard' is meaningless
         on a machine with a random device, since the keyboard will not be used.
      
      Change the callers in the dnssec tools and rndc-confgen to check for the
      special file "keyboard" and call isc_entropy_usebestsource() with the right set
      of parameters.
      ed29aefe
  28. 27 Aug, 2001 1 commit
  29. 08 Aug, 2001 2 commits
  30. 03 Aug, 2001 4 commits